last executing test programs: 38.633642269s ago: executing program 2 (id=2910): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000500)='./file0\x00', 0x800, &(0x7f0000000040)=ANY=[], 0x1, 0x17f, &(0x7f0000000380)="$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") listxattr(&(0x7f0000000580)='./file0\x00', 0x0, 0xff45) 38.380504384s ago: executing program 2 (id=2914): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001880)={0x53, 0xffffffffffffffff, 0x0, 0xf7, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0xff, 0x10016, 0x3, 0x0}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r3, 0x0, 0xffffffdb) 36.271188327s ago: executing program 2 (id=2926): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(0xffffffffffffffff, 0x2def, 0x0, 0x0, 0x0, 0x0) 36.13183454s ago: executing program 2 (id=2928): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(0x0, r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x4}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 35.770580466s ago: executing program 2 (id=2932): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 35.50735995s ago: executing program 2 (id=2933): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="71756965742c636f6465706167653d69736f383835392d31352c706172743d3078303030303030300000000000000000662c00a20000000700000000ede9debf530c3cc4d04b548919aca0c2937d4da1fc31dc42fc2e3e", @ANYBLOB="23341129bfb4fcc388a80c49b4f4d96254cb9356759776b03b581050240d2d9a5cf3440e76c886f1e5c860656a3648101223fc288fc5274f0e609cfed0fc738d84eb544791dd1cb959421db9fbcb634df876aa2133fd62e245fb6b1ead07ca04772d78564af8f42015e5be557ab3bd60824768691005cbd3d295402693d934226595deeba1ff748b7dde9c617749aa38096ef667700a6b3668cb7296b024fbcf9f74e50bf0f834159f51737baac184f94dd13a9793b76946208f290637d8def94e5f56f1181da3eed500440f", @ANYRES8, @ANYRES16, @ANYRES16], 0x11, 0x2d2, &(0x7f0000000bc0)="$eJzs3U1rE1scx/HfmaRteht6pw+XC3fZa0E3UutG3KRIXoS4ELWJUAwVbQV1YxVXIrp371vwLQhuFN+Arlz5AiIII+fMZJJJJzMxNDMNfj9gmMycM+d/Mg/n/AfsCMAf60rzy9uL3+w/I1VUkV5cljxJNakq6R/9W3uwf7h32Gm3MvbTDRxbyyisaY4V2t1vp9WtKaoR8e23quqD6zAdQRDsfJV0UHYgKJW7+lN40kJ0dbrttcIjy/Z0wnpHJxzHrDFddfVQy2XHAQAoVzT+e9E4X4/m754nbUbD/qkc/yfVLTuAqQsytw6M/y7LCow9vn+7Tf18z6VwdrvXyxLHaXlu6Pu8wjMrMcE0eVmli8VbvL3XaZ/fvdtpeXqmRmSg2Lr7bIWnbk9OtBspuWmGMfpu0meUS64Pc7YP2yPiX5uwxYmZD+aTuW58vVErnv9VA2MPkztS/tCRCuPfGr1H10vfllJ022g0Gl6iyIpr5L+ohUhOL2vpGYl6Z9SKkg8I/Lw4Xa3VoVph7y7k1FoLa+0sJmpt976NqLWeaMv2Jj6bR7c3beaVuWo29F3v1ByY/3s2vk1lXpn9q8ZshkOB+8XD/synN1d1+/SPjRxHulZProl/xYVRof/IvqdhyJOMbS91S5e0fPDo8Z1Kp9O+bxdupizcq8dr5p5LqWVKWPDUX6Oj/qYFhQ8ij9XqDUpFhnruRHdo7x+5he1VVkgHT82ZUMZC82OxJ1IZCwXdo1Cq/kHPLfq+kIBQNDfvCvO/gXxly0327IefMU/PnZBFewzsHDvOgGqJ+qtu6a/fyuCWRmdw4+Zc/5+VzsSrfgY5LfpRnLMhyJr6Waapz7rB838AAAAAAAAAAAAAAAAAAIBZU8R/Jyi7jwAAAAAAAAAAAAAAAAAAAAAAzLr4/b/qvf9X473/d/gvf1fCN7ycyPt/X++L9/8C0/crAAD//zZmik0=") move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000540), 0x10000, 0x0) 20.098497268s ago: executing program 32 (id=2933): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="71756965742c636f6465706167653d69736f383835392d31352c706172743d3078303030303030300000000000000000662c00a20000000700000000ede9debf530c3cc4d04b548919aca0c2937d4da1fc31dc42fc2e3e", @ANYBLOB="23341129bfb4fcc388a80c49b4f4d96254cb9356759776b03b581050240d2d9a5cf3440e76c886f1e5c860656a3648101223fc288fc5274f0e609cfed0fc738d84eb544791dd1cb959421db9fbcb634df876aa2133fd62e245fb6b1ead07ca04772d78564af8f42015e5be557ab3bd60824768691005cbd3d295402693d934226595deeba1ff748b7dde9c617749aa38096ef667700a6b3668cb7296b024fbcf9f74e50bf0f834159f51737baac184f94dd13a9793b76946208f290637d8def94e5f56f1181da3eed500440f", @ANYRES8, @ANYRES16, @ANYRES16], 0x11, 0x2d2, &(0x7f0000000bc0)="$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") move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000540), 0x10000, 0x0) 7.969697493s ago: executing program 3 (id=3058): setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x500, 0x0, 0x54, 0xa, 0x21}, 0x9c) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[], 0xffdd) 3.122682071s ago: executing program 0 (id=3067): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000008c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010029bd7000ffdbdf250100000007000700e0000001080002000500000008000800001e01010c0001"], 0x38}, 0x1, 0x0, 0x0, 0x40010}, 0x80) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x48) r6 = socket(0x2c, 0x3, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@delchain={0xb8, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffff}, {0x0, 0xffe0}, {0xfff1, 0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x88, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0xb}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x401}, @TCA_FLOW_EMATCHES={0x4}, @TCA_FLOW_PERTURB={0x8, 0xc, 0xfff}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0xd, 0xf}}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0xa}, @TCA_FLOW_EMATCHES={0x58, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x54, 0x2, 0x0, 0x1, [@TCF_EM_META={0x3c, 0x1, 0x0, 0x0, {{0x4, 0x4, 0x1}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x0, 0x1}, {0x73e, 0x5, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8}, {0x8, 0x8, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x48a, 0x3, 0x1}, {0x1, 0x80, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0xf, 0x9}, {0x800, 0xd, 0x1}}}]}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x0, 0x7, 0xfc}, {{0x1, 0x1, 0x1, 0x1}, {0x3}}}}]}]}]}}]}, 0xb8}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r7, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r6}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r5, &(0x7f0000000140), &(0x7f0000000080)=@udp=r6}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r5, &(0x7f0000000540)}, 0x20) sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1d930000", @ANYRES16=r4, @ANYBLOB="01002cbd7000fddbdf25090000000800010001000000080003", @ANYRESDEC=r3, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000005a554f7cf994ce39e4991000010000000000d70600000300000a20000000000a03000000000000000000070000000900e10073797a300000000078000000090a0104000000000000000007000000f7000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d3400128010000180090001006c61737400000000670001800a00010071756f7461000000100002800c000140000000000000000b0800034000000110140000001000010000000000000000000a84000a"], 0xc0}, 0x1, 0x0, 0x0, 0xc041}, 0x2005c081) r10 = socket$kcm(0x2, 0xa, 0x2) r11 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r11, 0x8983, &(0x7f0000000040)={0x0, 'syzkaller1\x00'}) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r12, &(0x7f0000001ac0)={0x0, 0x7f00, &(0x7f0000000080)={&(0x7f0000000300)={0x3c, r13, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r14}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c1937}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x3c}}, 0x20000000) write$tun(r2, &(0x7f0000000e00)=ANY=[@ANYBLOB="000088f80180c2000001aaaaaaaaaaaa88a8a00081"], 0x72) ioctl$sock_TIOCINQ(r10, 0x541b, &(0x7f0000000080)) 3.086156131s ago: executing program 3 (id=3068): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x492492492492846, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = timerfd_create(0x0, 0x0) readv(r3, &(0x7f0000000000)=[{&(0x7f0000001640)=""/4107, 0x100b}], 0x1) syz_clone3(&(0x7f00000004c0)={0x80000, 0x0, 0x0, &(0x7f0000000300)=0x0, {0x15}, &(0x7f0000000340)=""/88, 0x58, &(0x7f00000003c0)=""/172, &(0x7f0000000480)=[0xffffffffffffffff, 0x0, 0x0], 0x3}, 0x58) r5 = socket(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00'}) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x40440c0) syz_open_procfs$namespace(r4, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(r5, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x8, 0x800000, 0x2, 0x5, 0xff, 0x7, 0x0, 0x0, 0x5, 0x2}}, 0x50) r7 = memfd_create(&(0x7f0000000540)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xe3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x6) read(r6, &(0x7f0000002680)=""/4096, 0x1000) mmap(&(0x7f0000684000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r7, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) unshare(0x20020480) getpid() setns(0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0xfffff) connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) 2.964655023s ago: executing program 4 (id=3069): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000000)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) socket(0x1e, 0x4, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x0) 2.931671164s ago: executing program 1 (id=3070): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x800, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0x1, 0xc}, {0xfff3, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x80000000}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44045}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000084) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.596576749s ago: executing program 4 (id=3071): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x4}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.53674746s ago: executing program 1 (id=3072): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r2}, 0x10) syz_emit_ethernet(0xd81, &(0x7f00000022c0)=ANY=[], 0x0) syz_emit_ethernet(0x6a, 0x0, 0x0) 2.51720673s ago: executing program 0 (id=3073): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x1, 0x0, 0xb2, 0xe9, 0x8, 0x7f}}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0x11}, {0xffe6, 0xb}, {0x5, 0xb}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x58, 0x2, 0x3}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4000000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.263197704s ago: executing program 4 (id=3074): sendmsg$inet6(0xffffffffffffffff, 0x0, 0x4048043) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000c50000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)={0x30, r2, 0x1, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}]}, 0x30}}, 0x0) 2.103807317s ago: executing program 1 (id=3075): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r0, 0x27, 0xa, 0x0, &(0x7f0000000040)="f8ad48cc02cb29dcc800", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mount(&(0x7f0000000140)=@sg0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='cgroup\x00', 0x2208004, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1, 0x1, 0x4800000, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x1000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000030000001811", @ANYBLOB="0000000000000000b7080000200000007b8af8ff00000000bf2bd6216a64ea90d1020000f8ffffffd203000008000000b70400000200476e40d7a0d2670a0000950000045eecdd00a40ee667becf40fbcba6c34d7db21ea1d113b6c9d6039cc3be8eac4c9c6e5b42f4685668add7f8b6b0fca9aad08940f05e4fe1c02365f898c4c09feaa88c950dc669c4b988a2cae1b74be91ee44f5175c5dc71aaac0902d8ec96df"], &(0x7f00000008c0)='syzkaller\x00', 0x9, 0xff8, &(0x7f0000001e00)=""/4088}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60242, 0x0) ioctl$TUNSETQUEUE(r4, 0x400454d9, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x44, 0x0, 0x4, 0xb47, 0x8000000000000009, 0x1, 0x5, 0x3}, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x1801}) openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x2d0bc1, 0x0) 2.050237508s ago: executing program 4 (id=3076): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb7e, &(0x7f0000000c40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x650ce4b086bd440f) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000440)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.985205089s ago: executing program 3 (id=3077): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7f, 0x0, 0x5, 0x1, 0xc}, 0xb, 0x0, 0x8, 0x5, 0x5f82, 0x2, 0x9, 0xd, 0x8, 0x1, {0xffff1c72, 0x3, 0x1000, 0x101, 0x0, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.487942137s ago: executing program 0 (id=3078): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x60902, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0xb, 0xffff}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0x800, 0x0, 0x4}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 1.27031931s ago: executing program 1 (id=3079): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f00000002c0)={0x2, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000000000000a00000000000000ff02000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000590000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000003"], 0x210) listen(0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$sock_SIOCBRDELBR(r1, 0x89a3, &(0x7f0000000200)='bridge0\x00') connect$tipc(r0, &(0x7f0000003100)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x1}, 0xe) sendmmsg$inet(r0, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000002c0)="91199893b794f675ec88239fef317c764ee3a8ecbdc2a8c32d46f77944d1de9f924d05d3566b8eb8f5750393c669559d05543efa2927ef0d2b10e3d4f8541f34e1c7c8ca2d1e811f67f3dc50fdd469af72a49e684e28a364f5da124dff2b55a5536aa670b82da70bf0f19cd420371848ddc41d65649fde307c1971599f2fec84845e32bb2b6ebda099de12e8b64842024389524a1c5a97608000d1030d99e2a6e23a0bc8", 0xa4}, {&(0x7f0000000380)="11a68683394e1541cc444dff7adf30f079408cb066a6f8f4d33c4f11850de78c586d1a2ccff92e8e83fb82e447d9b88de42182e9e8c97415f41ef8a504215a2b2fdb1404c9659fdb988d0f527c3675cf2b", 0x51}, {&(0x7f0000000400)="875ad17d55c11f1ea6ec6cd17661afc73209e32142961e4660591bf3ca40d05a507ac0b0e71f7ed4c63f52a003cc8102f20dc6e33b5dc6de64ac815cf87867507cc072f0cb762aa5deb8731a699d3c7c69f85266ba51eb244f20129de491adaeb0c2d2eb13c1f215ddff92b05148f0ad513018b14798e45e55ecb916d4dd89f2df7e33c470998f325bf453f929d86196", 0x90}, {&(0x7f00000004c0)="1273dd9951adeaefffe3c4957c86dbff8693adf2202b620b3aec000cf330bb7249", 0x21}, {&(0x7f0000000500)="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", 0xba7}], 0x5}}], 0x300, 0x0) 960.038265ms ago: executing program 3 (id=3080): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x800, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0x1, 0xc}, {0xfff3, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x80000000}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44045}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000084) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 675.76205ms ago: executing program 4 (id=3081): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="36306f02", @ANYRESOCT, @ANYRESHEX=r0], 0x104}, 0x1, 0x0, 0x0, 0x20048441}, 0x40100) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r2 = signalfd4(r1, &(0x7f0000000140)={[0x6]}, 0x8, 0x80000) inotify_add_watch(r2, &(0x7f0000000200)='./file0\x00', 0x200) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000180)={0x50, 0x0, r3, {0x7, 0x29, 0x0, 0xffffffff85000014, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x50) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x4b) open(&(0x7f00000000c0)='.\x00', 0x0, 0x40) syz_fuse_handle_req(r1, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f00000067c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b00", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="780000000000000002000000000000040000000000000000000000000000000004"], 0x0, 0x0, 0x0, 0x0}) getdents(r4, &(0x7f0000000700)=""/90, 0x5a) chdir(&(0x7f0000000540)='./cgroup\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) open_by_handle_at(r5, &(0x7f0000000040)=@reiserfs_2={0x8, 0xfe, {0xb}}, 0x100bf) r6 = syz_open_dev$vbi(&(0x7f00000002c0), 0x1, 0x2) r7 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$sock_buf(r7, 0x1, 0x1c, 0x0, &(0x7f00000001c0)) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22102, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) r10 = eventfd(0xff7ffff7) ioctl$KVM_IRQFD(r9, 0x4020ae76, &(0x7f0000000500)={r10, 0x3, 0x2, r10}) ioctl$KVM_IRQFD(r9, 0x4020ae76, &(0x7f0000000000)={r10, 0x7, 0x2, r10}) ioctl$VIDIOC_TRY_FMT(r6, 0xc0d05640, &(0x7f00000005c0)={0x8, @win={{0x1, 0x112f4713, 0x0, 0x4}, 0x1, 0x0, 0x0, 0xfffffffb, 0x0, 0x7}}) 615.585181ms ago: executing program 3 (id=3082): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000000)="240000001a005ffe13f9f407000901000000", 0x12) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)=ANY=[@ANYBLOB="0a00000016000000b30000007f00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES64, @ANYBLOB="0000000000000000000000000020000000000000000000000000000047a18a4c91087c"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000260300000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000380)=0x38800000, 0x4) sendmmsg(r1, &(0x7f0000001c00), 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0xfffffd66, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r6, @ANYBLOB="010029bd70211f006a39953fc55bbc00fbdb07f2d669ba0386f04044c8dde2aaf2f1ed4fefb188459841988901f9293d409c773023f3f8171ebd7ab343f8e6a6b6f093ad"], 0x18}, 0x1, 0x0, 0x0, 0x4c011}, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(r0) 608.513831ms ago: executing program 0 (id=3083): r0 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0xfffffffffffffe27, &(0x7f0000000580)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, 0x0, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r2, 0x89e3, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000040)={0xf0f024}) r4 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x7, {0x8000, 0x1000, 0x4, 0x86c}}) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000100)={0x2, @vbi={0x9, 0x7, 0x7ffffffd, 0x4f565559, [0x1000, 0x1000007], [0x9, 0xffb], 0x108}}) 528.332782ms ago: executing program 1 (id=3084): syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000a80)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) 303.907046ms ago: executing program 0 (id=3085): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x3830021, 0x0, 0xfd, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000ddc0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x24, 0x0, 0x41046100, 0xffff, 0x0, 0xf7, 0x0, 0x0, 0x0, 0x1}}, 0x50) 303.639406ms ago: executing program 3 (id=3086): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = epoll_create1(0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x141000, 0xa2) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000200)={0xa000000a}) finit_module(r1, 0x0, 0x3) 257.561636ms ago: executing program 1 (id=3087): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r0, 0x27, 0xa, 0x0, &(0x7f0000000040)="f8ad48cc02cb29dcc800", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mount(&(0x7f0000000140)=@sg0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='cgroup\x00', 0x2208004, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1, 0x1, 0x4800000, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x1000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000030000001811", @ANYBLOB="0000000000000000b7080000200000007b8af8ff00000000bf2bd6216a64ea90d1020000f8ffffffd203000008000000b70400000200476e40d7a0d2670a0000950000045eecdd00a40ee667becf40fbcba6c34d7db21ea1d113b6c9d6039cc3be8eac4c9c6e5b42f4685668add7f8b6b0fca9aad08940f05e4fe1c02365f898c4c09feaa88c950dc669c4b988a2cae1b74be91ee44f5175c5dc71aaac0902d8ec96df"], &(0x7f00000008c0)='syzkaller\x00', 0x9, 0xff8, &(0x7f0000001e00)=""/4088}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60242, 0x0) ioctl$TUNSETQUEUE(r4, 0x400454d9, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x44, 0x0, 0x4, 0xb47, 0x8000000000000009, 0x1, 0x5, 0x3}, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x1801}) openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x2d0bc1, 0x0) 68.879379ms ago: executing program 4 (id=3088): r0 = socket$inet6(0xa, 0x80002, 0x0) setreuid(0x0, 0xee01) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00) 0s ago: executing program 0 (id=3089): rt_sigtimedwait(&(0x7f0000000000)={[0xb0b]}, 0x0, &(0x7f0000000200)={0x0, 0x3938700}, 0x8) kernel console output (not intermixed with test programs): 561] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 549.320518][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 549.443164][ T8611] usb 2-1: Using ep0 maxpacket: 8 [ 549.459033][ T8611] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 549.479952][ T8611] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.494469][ T8611] usb 2-1: config 0 descriptor?? [ 549.508173][T12561] veth0_vlan: entered promiscuous mode [ 549.536901][T12561] veth1_vlan: entered promiscuous mode [ 549.547091][T12655] netlink: 212 bytes leftover after parsing attributes in process `syz.0.2451'. [ 549.666626][T12561] veth0_macvtap: entered promiscuous mode [ 549.717414][T12561] veth1_macvtap: entered promiscuous mode [ 549.777144][T12561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 549.788951][T12561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.818324][T12561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 549.830048][ T54] block nbd20: Possible stuck request ffff888059ae0000: control (read@0,1024B). Runtime 90 seconds [ 549.832279][T12561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.842313][ T54] block nbd20: Possible stuck request ffff888059ae0200: control (read@1024,1024B). Runtime 90 seconds [ 549.863825][ T54] block nbd20: Possible stuck request ffff888059ae0400: control (read@2048,1024B). Runtime 90 seconds [ 549.875416][ T54] block nbd20: Possible stuck request ffff888059ae0600: control (read@3072,1024B). Runtime 90 seconds [ 549.889192][T12561] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 549.901384][T12561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 549.912822][T12561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.924085][T12561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 549.935968][T12561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.948343][T12561] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 549.970753][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 550.009484][T12665] tun0: tun_chr_ioctl cmd 2147767520 [ 550.113699][T12561] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.155598][T12561] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.187498][T12561] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.220710][T12561] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.617572][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 550.637198][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 550.659697][T12667] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2454'. [ 550.738010][ T8611] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 550.754239][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 550.765099][ T8611] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 550.777181][T12669] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2454'. [ 550.788365][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 550.812291][ T8611] asix: probe of 2-1:0.0 failed with error -71 [ 550.831880][ T8611] usb 2-1: USB disconnect, device number 19 [ 550.841431][T12334] Bluetooth: hci2: command tx timeout [ 550.994065][T12671] syzkaller0: entered promiscuous mode [ 550.999622][T12671] syzkaller0: entered allmulticast mode [ 551.083660][ T95] block nbd24: Possible stuck request ffff888053770000: control (read@0,4096B). Runtime 60 seconds [ 551.696781][ T8624] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 551.728404][ T95] block nbd5: Possible stuck request ffff8880221d8000: control (read@0,1024B). Runtime 210 seconds [ 551.741446][ T95] block nbd5: Possible stuck request ffff8880221d8200: control (read@1024,1024B). Runtime 210 seconds [ 551.825057][ T95] block nbd5: Possible stuck request ffff8880221d8400: control (read@2048,1024B). Runtime 210 seconds [ 551.837753][ T95] block nbd5: Possible stuck request ffff8880221d8600: control (read@3072,1024B). Runtime 210 seconds [ 551.922500][ T8624] usb 4-1: Using ep0 maxpacket: 32 [ 551.930662][ T8624] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 551.944529][ T8624] usb 4-1: New USB device found, idVendor=1630, idProduct=0042, bcdDevice=5b.13 [ 551.954360][ T8624] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.962504][ T8624] usb 4-1: Product: syz [ 551.966708][ T8624] usb 4-1: Manufacturer: syz [ 551.972220][ T8624] usb 4-1: SerialNumber: syz [ 551.979708][ T8624] usb 4-1: config 0 descriptor?? [ 552.006091][ T8624] rndis_wlan 4-1:0.0: skipping garbage [ 552.022447][ T8624] rndis_wlan: probe of 4-1:0.0 failed with error -22 [ 552.029793][ T8624] rndis_host 4-1:0.0: skipping garbage [ 552.050696][ C1] net_ratelimit: 5 callbacks suppressed [ 552.050714][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 552.075750][ T8624] rndis_host: probe of 4-1:0.0 failed with error -22 [ 552.287584][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 552.362706][ T95] block nbd25: Possible stuck request ffff888024498000: control (read@0,4096B). Runtime 60 seconds [ 552.445980][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 552.920838][T12334] Bluetooth: hci2: command tx timeout [ 553.087175][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 553.321182][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 553.480476][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 554.126263][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 554.360427][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 554.503420][T12691] tipc: Enabling of bearer rejected, already enabled [ 554.520519][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 554.964756][T12700] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2463'. [ 555.056247][ T6216] usb 4-1: USB disconnect, device number 11 [ 555.158439][T12705] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2463'. [ 555.167853][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 555.406536][T12710] loop0: detected capacity change from 0 to 2048 [ 555.454481][T12705] team0: Port device team_slave_0 removed [ 555.549457][T12714] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 555.602844][T12713] netlink: 'syz.3.2467': attribute type 10 has an invalid length. [ 555.633998][T12710] NILFS error (device loop0): nilfs_lookup: deleted inode referenced: 12 [ 555.703555][T12710] Remounting filesystem read-only [ 555.719264][T12713] team0: Port device dummy0 added [ 555.759069][T12715] netlink: 'syz.3.2467': attribute type 10 has an invalid length. [ 556.919636][T12715] team0: Port device dummy0 removed [ 556.966981][T12715] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 557.222733][T12731] nbd34: detected capacity change from 0 to 127 [ 557.225570][T12334] block nbd34: Receive control failed (result -32) [ 557.240486][ C1] net_ratelimit: 5 callbacks suppressed [ 557.240504][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 557.302453][T12724] tipc: Enabling of bearer rejected, already enabled [ 557.482282][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 557.557311][T12744] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2476'. [ 557.573870][T12744] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2476'. [ 557.606293][T12744] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2476'. [ 557.640491][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 557.648717][T12740] loop1: detected capacity change from 0 to 2048 [ 557.663523][T12744] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2476'. [ 557.725562][T12740] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 557.866184][T12754] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2479'. [ 557.878870][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 558.079352][T12758] netlink: 'syz.2.2481': attribute type 10 has an invalid length. [ 558.145501][T12758] team0: Port device dummy0 added [ 558.159264][T12761] netlink: 'syz.2.2481': attribute type 10 has an invalid length. [ 558.221495][T12761] team0: Port device dummy0 removed [ 558.248262][T12761] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 558.280463][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 558.520412][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 558.595721][T12763] nbd: must specify a size in bytes for the device [ 558.680503][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 558.691414][T12770] lo speed is unknown, defaulting to 1000 [ 559.042994][T12781] tipc: Enabled bearer , priority 0 [ 559.081305][T12781] tipc: Resetting bearer [ 559.141906][T12783] loop3: detected capacity change from 0 to 64 [ 559.184576][T12780] tipc: Disabling bearer [ 559.320481][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 559.487683][T12791] loop1: detected capacity change from 0 to 1024 [ 559.505080][T12787] tipc: Started in network mode [ 559.510062][T12787] tipc: Node identity fadc4d3e79d5, cluster identity 4711 [ 559.516583][T12791] EXT4-fs: Ignoring removed i_version option [ 559.533280][T12787] tipc: Enabled bearer , priority 0 [ 559.554930][T12791] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 559.563259][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 559.608480][T12791] EXT4-fs (loop1): orphan cleanup on readonly fs [ 559.657810][T12791] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 559.672979][T12791] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 559.682746][T12791] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.2493: Failed to acquire dquot type 0 [ 559.708986][T12787] syzkaller0: entered promiscuous mode [ 559.718674][T12787] syzkaller0: entered allmulticast mode [ 559.720515][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 559.725571][T12791] EXT4-fs (loop1): 1 truncate cleaned up [ 559.739378][T12791] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 559.788684][T12794] netlink: 'syz.0.2485': attribute type 6 has an invalid length. [ 559.814411][T12787] tipc: Resetting bearer [ 559.833577][T12786] tipc: Resetting bearer [ 559.903138][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 559.916361][T12786] tipc: Disabling bearer [ 560.324245][T12805] loop3: detected capacity change from 0 to 64 [ 560.361301][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 560.978307][T12812] nbd: must specify a size in bytes for the device [ 561.071571][T12811] bpf: Bad value for 'mode' [ 561.339500][T12821] lo speed is unknown, defaulting to 1000 [ 561.346872][T12821] lo speed is unknown, defaulting to 1000 [ 561.354649][T12822] tipc: Enabling of bearer rejected, failed to enable media [ 561.368074][T12821] lo speed is unknown, defaulting to 1000 [ 561.381866][T12821] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 561.414679][T12811] syz.2.2499 (12811) used greatest stack depth: 17960 bytes left [ 561.424927][T12807] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 561.438108][T12821] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 561.442182][T12807] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 561.510997][T12807] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 561.528941][T12807] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 561.554644][T12807] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 561.575129][T12807] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 561.583975][T12807] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 561.594833][T12807] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 561.613828][T12807] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 561.623809][T12807] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 561.632123][T12823] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2501'. [ 561.653994][T12807] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 561.685724][T12821] lo speed is unknown, defaulting to 1000 [ 561.741528][T12821] lo speed is unknown, defaulting to 1000 [ 561.758074][T12821] lo speed is unknown, defaulting to 1000 [ 561.779121][T12821] lo speed is unknown, defaulting to 1000 [ 561.822616][T12821] lo speed is unknown, defaulting to 1000 [ 561.830062][T12821] lo speed is unknown, defaulting to 1000 [ 561.872693][T12821] lo speed is unknown, defaulting to 1000 [ 561.987259][T12838] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2502'. [ 562.069697][T12838] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 562.289300][T12838] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 562.440490][ C1] net_ratelimit: 5 callbacks suppressed [ 562.440510][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 562.526186][T12852] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2506'. [ 562.545182][T12853] loop2: detected capacity change from 0 to 164 [ 562.607753][ T54] block nbd15: Possible stuck request ffff888022948000: control (read@0,1024B). Runtime 150 seconds [ 562.621851][ T54] block nbd15: Possible stuck request ffff888022948200: control (read@1024,1024B). Runtime 150 seconds [ 562.635102][ T54] block nbd15: Possible stuck request ffff888022948400: control (read@2048,1024B). Runtime 150 seconds [ 562.647796][ T54] block nbd15: Possible stuck request ffff888022948600: control (read@3072,1024B). Runtime 150 seconds [ 562.678214][T12853] rock: directory entry would overflow storage [ 562.685088][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 562.705743][T12853] rock: sig=0x4f50, size=4, remaining=3 [ 562.717859][T12853] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 562.840489][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 563.078823][T12866] loop1: detected capacity change from 0 to 4096 [ 563.086075][T12334] Bluetooth: hci1: command 0x0406 tx timeout [ 563.103333][T12868] tipc: Enabled bearer , priority 0 [ 563.117207][T12866] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 563.128303][T12868] tipc: Resetting bearer [ 563.177472][T12867] tipc: Disabling bearer [ 563.236615][T12866] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 563.255589][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.307813][T12866] ntfs3: loop1: Failed to initialize $Extend/$ObjId. [ 563.399237][T12866] ntfs3: loop1: ino=5, "/" directory corrupted [ 563.490477][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 563.561050][T12334] Bluetooth: hci4: command 0x0c1a tx timeout [ 563.641087][T12334] Bluetooth: hci2: command 0x0c1a tx timeout [ 563.641929][ T5787] Bluetooth: hci0: command 0x0c1a tx timeout [ 563.669451][T12872] tmpfs: Cannot change global quota limit on remount [ 563.720631][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 563.882128][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 564.157833][ T95] block nbd7: Possible stuck request ffff8880222a0000: control (read@0,4096B). Runtime 210 seconds [ 564.286128][T12874] loop2: detected capacity change from 0 to 4096 [ 564.302855][T12874] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 564.496595][T12874] ntfs3: loop2: ino=1e, "file1" ntfs3_write_inode failed, -22. [ 564.521853][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 564.760417][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 564.920478][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 565.162469][ T5787] Bluetooth: hci1: command 0x0406 tx timeout [ 565.570488][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 565.656959][ T5787] Bluetooth: hci4: command 0x0c1a tx timeout [ 565.722561][ T5787] Bluetooth: hci0: command 0x0c1a tx timeout [ 565.722579][T12334] Bluetooth: hci2: command 0x0c1a tx timeout [ 565.821670][T12897] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2524'. [ 565.886008][T12902] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2524'. [ 565.976820][T12904] tipc: Enabled bearer , priority 0 [ 565.994574][T12904] tipc: Resetting bearer [ 566.056624][T12903] tipc: Disabling bearer [ 566.155490][T12907] netlink: 'syz.0.2528': attribute type 10 has an invalid length. [ 566.205961][T12907] team0: Port device dummy0 added [ 566.237041][T12909] netlink: 'syz.0.2528': attribute type 10 has an invalid length. [ 566.304758][T12909] team0: Port device dummy0 removed [ 566.326342][T12909] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 566.443658][ T54] block nbd22: Possible stuck request ffff888056360000: control (read@0,4096B). Runtime 90 seconds [ 566.443772][ T95] block nbd27: Possible stuck request ffff888054648000: control (read@0,4096B). Runtime 60 seconds [ 567.004075][T12935] tipc: Enabling of bearer rejected, failed to enable media [ 567.650545][ C1] net_ratelimit: 5 callbacks suppressed [ 567.650563][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 567.722418][T12334] Bluetooth: hci4: command 0x0c1a tx timeout [ 567.802160][ T5787] Bluetooth: hci2: command 0x0c1a tx timeout [ 567.808321][T12334] Bluetooth: hci0: command 0x0c1a tx timeout [ 567.880504][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 568.040496][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 568.059776][T12951] netlink: 'syz.1.2541': attribute type 10 has an invalid length. [ 568.113274][T12951] bond0: (slave dummy0): Releasing backup interface [ 568.129715][T12951] team0: Port device dummy0 added [ 568.158819][T12954] netlink: 'syz.1.2541': attribute type 10 has an invalid length. [ 568.217410][T12954] team0: Port device dummy0 removed [ 568.237294][T12954] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 568.471737][T12965] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2546'. [ 568.483702][T12965] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2546'. [ 568.604591][T12970] tipc: Enabling of bearer rejected, failed to enable media [ 568.680476][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 568.920534][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 569.080474][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 569.217227][T12993] netlink: 'syz.2.2554': attribute type 10 has an invalid length. [ 569.313033][T12992] nbd35: detected capacity change from 0 to 127 [ 569.423338][T12334] block nbd35: Receive control failed (result -32) [ 569.449592][T13001] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2556'. [ 569.474831][T13001] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2556'. [ 569.638882][T13007] tipc: Enabling of bearer rejected, failed to enable media [ 569.720474][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 569.960605][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 569.962217][T13019] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2562'. [ 570.120493][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 570.291611][ T95] block nbd8: Possible stuck request ffff8880222e0000: control (read@0,1024B). Runtime 210 seconds [ 570.303589][ T95] block nbd8: Possible stuck request ffff8880222e0200: control (read@1024,1024B). Runtime 210 seconds [ 570.316568][ T95] block nbd8: Possible stuck request ffff8880222e0400: control (read@2048,1024B). Runtime 210 seconds [ 570.328775][ T95] block nbd8: Possible stuck request ffff8880222e0600: control (read@3072,1024B). Runtime 210 seconds [ 570.393249][T13024] netlink: 'syz.3.2564': attribute type 10 has an invalid length. [ 570.628486][ T5787] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 570.642018][ T5787] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 570.653496][ T5787] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 570.698178][ T5787] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 570.714827][T13035] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2567'. [ 570.737408][ T5787] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 570.749587][ T5787] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 570.761112][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 570.858086][T13035] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2567'. [ 570.909957][T13029] lo speed is unknown, defaulting to 1000 [ 571.124263][T13041] nbd36: detected capacity change from 0 to 127 [ 571.158669][T13029] lo speed is unknown, defaulting to 1000 [ 571.241377][ T5787] block nbd36: Receive control failed (result -32) [ 571.466158][T13029] chnl_net:caif_netlink_parms(): no params data found [ 571.671357][T13056] syzkaller0: entered promiscuous mode [ 571.681081][T13056] syzkaller0: entered allmulticast mode [ 571.741890][T13064] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2575'. [ 571.753280][T13064] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2575'. [ 571.843463][T13059] Bluetooth: MGMT ver 1.22 [ 571.906269][T13066] tipc: Enabled bearer , priority 10 [ 571.913714][T13064] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2575'. [ 572.284324][ T8624] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 572.487116][ T8624] usb 1-1: Using ep0 maxpacket: 32 [ 572.495835][ T8624] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 572.523515][ T8624] usb 1-1: New USB device found, idVendor=1630, idProduct=0042, bcdDevice=5b.13 [ 572.533633][ T8624] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.542038][ T8624] usb 1-1: Product: syz [ 572.546352][ T8624] usb 1-1: Manufacturer: syz [ 572.552074][ T8624] usb 1-1: SerialNumber: syz [ 572.576780][ T8624] usb 1-1: config 0 descriptor?? [ 572.604375][ T8624] rndis_wlan 1-1:0.0: skipping garbage [ 572.625523][ T8624] rndis_wlan: probe of 1-1:0.0 failed with error -22 [ 572.633571][ T8624] rndis_host 1-1:0.0: skipping garbage [ 572.639320][ T8624] rndis_host: probe of 1-1:0.0 failed with error -22 [ 572.841391][ C1] net_ratelimit: 5 callbacks suppressed [ 572.841412][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 572.845902][ T95] block nbd28: Possible stuck request ffff888025200000: control (read@0,4096B). Runtime 60 seconds [ 572.848961][ T5787] Bluetooth: hci3: command tx timeout [ 573.023906][ T5867] tipc: Node number set to 2198424894 [ 573.089535][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 573.240514][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 573.882188][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 574.121209][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 574.280494][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 574.925985][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 574.934562][ T5787] Bluetooth: hci3: command tx timeout [ 575.149352][T13029] bridge0: port 1(bridge_slave_0) entered blocking state [ 575.160518][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 575.169690][T13029] bridge0: port 1(bridge_slave_0) entered disabled state [ 575.182974][T13029] bridge_slave_0: entered allmulticast mode [ 575.196267][T13029] bridge_slave_0: entered promiscuous mode [ 575.211389][T13029] bridge0: port 2(bridge_slave_1) entered blocking state [ 575.240124][T13029] bridge0: port 2(bridge_slave_1) entered disabled state [ 575.266214][T13029] bridge_slave_1: entered allmulticast mode [ 575.291892][T13029] bridge_slave_1: entered promiscuous mode [ 575.320509][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 575.452794][ T8380] usb 1-1: USB disconnect, device number 9 [ 575.484839][T13029] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 575.710700][T13029] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 575.960466][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 576.021040][T13084] __nla_validate_parse: 1 callbacks suppressed [ 576.021058][T13084] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2579'. [ 576.138055][T13084] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2579'. [ 576.180999][T13029] team0: Port device team_slave_0 added [ 576.234569][T13029] team0: Port device team_slave_1 added [ 576.343762][T13029] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 576.357271][T13029] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 576.386616][T13029] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 576.402939][T13087] tipc: Enabling of bearer rejected, failed to enable media [ 576.416206][T13029] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 576.424187][T13029] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 576.453249][T13029] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 576.470205][T13091] netlink: 'syz.3.2582': attribute type 10 has an invalid length. [ 576.634736][T13094] nbd37: detected capacity change from 0 to 127 [ 576.666900][T13029] hsr_slave_0: entered promiscuous mode [ 576.694447][T13029] hsr_slave_1: entered promiscuous mode [ 576.724263][T13029] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 576.733686][T13029] Cannot create hsr debugfs directory [ 576.786011][ T5787] block nbd37: Receive control failed (result -32) [ 577.001253][ T5787] Bluetooth: hci3: command tx timeout [ 577.286459][T13120] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2588'. [ 577.299496][T13120] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2588'. [ 577.323749][ T54] block nbd9: Possible stuck request ffff888022340000: control (read@0,4096B). Runtime 210 seconds [ 577.424282][T13124] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2590'. [ 577.570980][ T8624] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 577.598786][T13128] tipc: Enabling of bearer rejected, failed to enable media [ 577.752013][ T8624] usb 1-1: Using ep0 maxpacket: 32 [ 577.772195][ T8624] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 577.813978][ T8624] usb 1-1: New USB device found, idVendor=1630, idProduct=0042, bcdDevice=5b.13 [ 577.845459][ T8624] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.894138][ T8624] usb 1-1: Product: syz [ 577.898430][ T8624] usb 1-1: Manufacturer: syz [ 577.921186][ T8624] usb 1-1: SerialNumber: syz [ 577.934163][ T8624] usb 1-1: config 0 descriptor?? [ 577.949087][T13029] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 577.964566][ T8624] rndis_wlan 1-1:0.0: skipping garbage [ 577.973111][ T8624] rndis_wlan: probe of 1-1:0.0 failed with error -22 [ 577.981045][ T8624] rndis_host 1-1:0.0: skipping garbage [ 577.986845][ T8624] rndis_host: probe of 1-1:0.0 failed with error -22 [ 578.005791][T13029] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 578.034676][T13029] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 578.041636][ C1] net_ratelimit: 5 callbacks suppressed [ 578.041652][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 578.067829][T13029] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 578.280694][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 578.360047][T13029] 8021q: adding VLAN 0 to HW filter on device bond0 [ 578.440502][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 578.450081][T13029] 8021q: adding VLAN 0 to HW filter on device team0 [ 578.498286][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 578.505537][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 578.562986][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 578.570205][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 578.603299][ T95] block nbd11: Possible stuck request ffff888022858000: control (read@0,4096B). Runtime 180 seconds [ 578.695682][T13156] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2597'. [ 578.734756][T13156] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2597'. [ 578.787145][T13156] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2597'. [ 578.811956][T13156] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2597'. [ 579.077865][T13164] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2599'. [ 579.090489][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 579.098333][ T5787] Bluetooth: hci3: command tx timeout [ 579.263554][T13170] tipc: Enabled bearer , priority 0 [ 579.293031][T13170] syzkaller0: entered promiscuous mode [ 579.313772][T13170] syzkaller0: entered allmulticast mode [ 579.320564][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 579.419139][T13170] tipc: Resetting bearer [ 579.476346][T13168] tipc: Resetting bearer [ 579.482341][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 579.577162][T13168] tipc: Disabling bearer [ 579.618739][T13175] tipc: Enabling of bearer rejected, failed to enable media [ 579.705287][T13029] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 579.896377][ T54] block nbd20: Possible stuck request ffff888059ae0000: control (read@0,1024B). Runtime 120 seconds [ 579.909283][ T54] block nbd20: Possible stuck request ffff888059ae0200: control (read@1024,1024B). Runtime 120 seconds [ 579.921170][ T54] block nbd20: Possible stuck request ffff888059ae0400: control (read@2048,1024B). Runtime 120 seconds [ 579.932983][ T54] block nbd20: Possible stuck request ffff888059ae0600: control (read@3072,1024B). Runtime 120 seconds [ 580.039698][T13029] veth0_vlan: entered promiscuous mode [ 580.087078][T13029] veth1_vlan: entered promiscuous mode [ 580.120594][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 580.216058][T13029] veth0_macvtap: entered promiscuous mode [ 580.261043][T13029] veth1_macvtap: entered promiscuous mode [ 580.309267][T13029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 580.337087][T13029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.360592][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 580.383355][T13029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 580.420003][T13029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.447605][T13029] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 580.479279][T13029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 580.491564][T13029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.503030][T13029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 580.517458][T13029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.527920][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 580.601984][T13029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 580.638107][T13029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.673596][T13029] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 580.727611][T13029] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.762267][T13029] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.797199][T13029] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.818753][T13029] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.991219][ T8624] usb 1-1: USB disconnect, device number 10 [ 581.095144][ T185] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 581.131497][ T185] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 581.161155][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 581.163475][ T95] block nbd24: Possible stuck request ffff888053770000: control (read@0,4096B). Runtime 90 seconds [ 581.192092][T13199] __nla_validate_parse: 4 callbacks suppressed [ 581.192109][T13199] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2609'. [ 581.270236][ T8377] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 581.302208][ T8377] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 581.337955][T13201] tipc: Enabled bearer , priority 0 [ 581.356448][T13201] syzkaller0: entered promiscuous mode [ 581.364108][T13201] syzkaller0: entered allmulticast mode [ 581.502777][T13201] tipc: Resetting bearer [ 581.513127][T13205] tipc: Enabling of bearer rejected, failed to enable media [ 581.559344][T13200] tipc: Resetting bearer [ 581.668256][T13200] tipc: Disabling bearer [ 581.806128][ T95] block nbd5: Possible stuck request ffff8880221d8000: control (read@0,1024B). Runtime 240 seconds [ 581.834945][ T95] block nbd5: Possible stuck request ffff8880221d8200: control (read@1024,1024B). Runtime 240 seconds [ 581.861634][ T95] block nbd5: Possible stuck request ffff8880221d8400: control (read@2048,1024B). Runtime 240 seconds [ 581.874673][ T95] block nbd5: Possible stuck request ffff8880221d8600: control (read@3072,1024B). Runtime 240 seconds [ 582.299695][T13234] netlink: 'syz.3.2617': attribute type 10 has an invalid length. [ 582.332790][T13235] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2618'. [ 582.461581][ T95] block nbd25: Possible stuck request ffff888024498000: control (read@0,4096B). Runtime 90 seconds [ 582.733366][T13253] syzkaller0: entered promiscuous mode [ 582.738931][T13253] syzkaller0: entered allmulticast mode [ 582.775096][T13250] nbd38: detected capacity change from 0 to 127 [ 582.837285][T13259] tipc: Enabling of bearer rejected, failed to enable media [ 582.868305][ T5787] block nbd38: Receive control failed (result -32) [ 583.240494][ C1] net_ratelimit: 5 callbacks suppressed [ 583.240512][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 583.444659][T13279] netlink: 'syz.1.2631': attribute type 10 has an invalid length. [ 583.480402][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 583.495672][T13279] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 583.640466][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 583.674996][T13286] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2634'. [ 583.773669][T13288] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2634'. [ 583.811371][T13288] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 583.819357][T13288] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 583.846168][T13288] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 583.871717][T13288] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 584.082417][T13298] tipc: Enabling of bearer rejected, failed to enable media [ 584.280485][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 584.520600][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 584.680562][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 585.099019][T13332] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2651'. [ 585.112460][T13332] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2651'. [ 585.320464][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 585.517320][T13344] tipc: Enabling of bearer rejected, failed to enable media [ 585.560423][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 585.720460][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 585.975464][T13362] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2662'. [ 586.008213][T13362] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2662'. [ 586.354450][T13372] loop3: detected capacity change from 0 to 4096 [ 586.370486][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 586.401679][T13372] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 586.946354][T13386] tipc: Enabling of bearer rejected, failed to enable media [ 587.037777][T13391] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2675'. [ 587.065694][T13391] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2675'. [ 587.329651][T13399] tipc: Enabled bearer , priority 0 [ 587.363560][T13399] syzkaller0: entered promiscuous mode [ 587.378168][T13399] syzkaller0: entered allmulticast mode [ 587.455404][T13398] tipc: Resetting bearer [ 587.539830][T13398] tipc: Disabling bearer [ 587.592489][T13406] loop2: detected capacity change from 0 to 4096 [ 587.604616][T13406] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 587.914097][T13417] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2685'. [ 588.373828][T13430] tipc: Enabled bearer , priority 0 [ 588.393928][T13430] syzkaller0: entered promiscuous mode [ 588.399708][T13430] syzkaller0: entered allmulticast mode [ 588.440515][ C1] net_ratelimit: 5 callbacks suppressed [ 588.440535][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 588.472185][T13429] tipc: Resetting bearer [ 588.547159][T13429] tipc: Disabling bearer [ 588.680553][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 588.841200][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 588.955114][T13435] tipc: Enabled bearer , priority 0 [ 589.079431][T13435] syzkaller0: entered promiscuous mode [ 589.087043][T13435] syzkaller0: entered allmulticast mode [ 589.300018][T13440] loop0: detected capacity change from 0 to 4096 [ 589.325292][T13440] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 589.481190][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 589.725026][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 589.880484][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 590.530496][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 590.761724][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 590.926984][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 591.570497][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 591.866327][T13435] tipc: Resetting bearer [ 591.874860][T13443] netlink: 'syz.3.2695': attribute type 10 has an invalid length. [ 591.892054][T13446] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2696'. [ 592.078911][T13446] hsr_slave_1 (unregistering): left promiscuous mode [ 592.102922][T13434] tipc: Resetting bearer [ 592.140226][T13434] tipc: Disabling bearer [ 592.332547][T13453] syzkaller0: entered promiscuous mode [ 592.339503][T13453] syzkaller0: entered allmulticast mode [ 592.382821][T13457] tipc: Enabled bearer , priority 0 [ 592.525688][T13457] syzkaller0: entered promiscuous mode [ 592.533820][T13457] syzkaller0: entered allmulticast mode [ 592.708049][ T54] block nbd15: Possible stuck request ffff888022948000: control (read@0,1024B). Runtime 180 seconds [ 592.719962][ T54] block nbd15: Possible stuck request ffff888022948200: control (read@1024,1024B). Runtime 180 seconds [ 592.742615][ T54] block nbd15: Possible stuck request ffff888022948400: control (read@2048,1024B). Runtime 180 seconds [ 592.754749][ T54] block nbd15: Possible stuck request ffff888022948600: control (read@3072,1024B). Runtime 180 seconds [ 593.411220][ T8625] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 593.637546][ T8625] usb 2-1: Using ep0 maxpacket: 8 [ 593.642862][ C1] net_ratelimit: 5 callbacks suppressed [ 593.642883][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 593.681505][ T8625] usb 2-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 593.691525][ T8625] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.699567][ T8625] usb 2-1: Product: syz [ 593.704498][ T8625] usb 2-1: Manufacturer: syz [ 593.709139][ T8625] usb 2-1: SerialNumber: syz [ 593.737626][ T8625] usb 2-1: config 0 descriptor?? [ 593.749093][ T8625] gspca_main: sq930x-2.14.0 probing 2770:930c [ 593.888347][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 594.040998][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 594.603285][ T95] block nbd7: Possible stuck request ffff8880222a0000: control (read@0,4096B). Runtime 240 seconds [ 594.690579][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 594.923769][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 595.083633][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 595.083764][ T8625] gspca_sq930x: reg_w 0105 0c00 failed -71 [ 595.351021][ T8625] gspca_sq930x: Sensor ov9630 not yet treated [ 595.362932][ T8625] sq930x: probe of 2-1:0.0 failed with error -22 [ 595.383780][ T8625] usb 2-1: USB disconnect, device number 20 [ 595.390155][T13456] tipc: Resetting bearer [ 595.458895][T13456] tipc: Disabling bearer [ 595.681877][T13475] netlink: 'syz.3.2706': attribute type 10 has an invalid length. [ 595.720477][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 595.747566][T13473] lo speed is unknown, defaulting to 1000 [ 595.857773][T13481] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2708'. [ 595.952165][T13483] tipc: Enabled bearer , priority 0 [ 595.960424][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 596.120494][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 596.193091][T13483] syzkaller0: entered promiscuous mode [ 596.221557][T13483] syzkaller0: entered allmulticast mode [ 596.521661][ T95] block nbd27: Possible stuck request ffff888054648000: control (read@0,4096B). Runtime 90 seconds [ 596.539568][ T54] block nbd22: Possible stuck request ffff888056360000: control (read@0,4096B). Runtime 120 seconds [ 596.761032][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 596.992584][T13507] binder: 13505:13507 ioctl 40046205 0 returned -22 [ 598.844419][ C1] net_ratelimit: 5 callbacks suppressed [ 598.844436][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 599.081568][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 599.240700][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 599.786519][T13499] tipc: Resetting bearer [ 599.795415][T13498] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2712'. [ 599.805986][T13498] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2712'. [ 599.821656][T13482] tipc: Resetting bearer [ 599.849752][T13482] tipc: Disabling bearer [ 599.860106][T13473] lo speed is unknown, defaulting to 1000 [ 599.860163][T13484] netlink: 'syz.0.2705': attribute type 6 has an invalid length. [ 599.874722][T13516] netlink: 'syz.1.2717': attribute type 10 has an invalid length. [ 599.882833][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 599.911076][T13498] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2712'. [ 599.920028][T13498] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2712'. [ 600.120401][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 600.208180][T13524] tipc: Enabled bearer , priority 0 [ 600.280118][T13524] tipc: Resetting bearer [ 600.280747][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 600.317667][T13522] tipc: Disabling bearer [ 600.363508][ T95] block nbd8: Possible stuck request ffff8880222e0000: control (read@0,1024B). Runtime 240 seconds [ 600.375382][ T95] block nbd8: Possible stuck request ffff8880222e0200: control (read@1024,1024B). Runtime 240 seconds [ 600.388247][ T95] block nbd8: Possible stuck request ffff8880222e0400: control (read@2048,1024B). Runtime 240 seconds [ 600.401108][ T95] block nbd8: Possible stuck request ffff8880222e0600: control (read@3072,1024B). Runtime 240 seconds [ 600.482064][T13528] nbd39: detected capacity change from 0 to 127 [ 600.655490][T13535] tipc: Enabling of bearer rejected, already enabled [ 600.675820][ T5787] block nbd39: Receive control failed (result -32) [ 600.873149][T13541] loop1: detected capacity change from 0 to 1024 [ 600.881213][T13541] EXT4-fs: inline encryption not supported [ 600.887402][T13539] netlink: 'syz.3.2726': attribute type 10 has an invalid length. [ 600.905265][T13541] EXT4-fs: Ignoring removed i_version option [ 600.920880][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 600.944537][T13541] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 601.026955][T13541] EXT4-fs error (device loop1): ext4_map_blocks:608: inode #3: block 2: comm syz.1.2725: lblock 2 mapped to illegal pblock 2 (length 1) [ 601.048835][T13541] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 601.058154][T13541] EXT4-fs error (device loop1): ext4_map_blocks:608: inode #3: block 48: comm syz.1.2725: lblock 0 mapped to illegal pblock 48 (length 1) [ 601.059786][T13545] tipc: Enabled bearer , priority 0 [ 601.073653][T13541] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 601.073785][T13541] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.2725: Failed to acquire dquot type 0 [ 601.105298][T13541] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5902: Corrupt filesystem [ 601.119742][T13541] EXT4-fs error (device loop1): ext4_evict_inode:252: inode #11: comm syz.1.2725: mark_inode_dirty error [ 601.120176][T13547] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2728'. [ 601.144433][T13547] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2728'. [ 601.154997][T13547] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2728'. [ 601.160656][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 601.165044][T13547] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2728'. [ 601.184071][T13541] EXT4-fs warning (device loop1): ext4_evict_inode:255: couldn't mark inode dirty (err -117) [ 601.211882][T13541] EXT4-fs (loop1): 1 orphan inode deleted [ 601.232446][ T48] EXT4-fs error (device loop1): ext4_map_blocks:608: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 601.247891][T13541] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 601.269244][ T48] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 601.279135][ T48] EXT4-fs error (device loop1): ext4_release_dquot:6974: comm kworker/u4:3: Failed to release dquot type 0 [ 601.321199][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 601.354255][T13541] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 601.388549][T13541] EXT4-fs error (device loop1): __ext4_get_inode_loc:4483: comm syz.1.2725: Invalid inode table block 1 in block_group 0 [ 601.418465][T13545] syzkaller0: entered promiscuous mode [ 601.425679][T13545] syzkaller0: entered allmulticast mode [ 601.432957][T13541] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5902: Corrupt filesystem [ 601.448303][T13541] EXT4-fs error (device loop1): ext4_quota_off:7222: inode #3: comm syz.1.2725: mark_inode_dirty error [ 601.870075][T13558] loop1: detected capacity change from 0 to 4096 [ 601.886201][T13558] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 601.960448][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 602.929536][ T95] block nbd28: Possible stuck request ffff888025200000: control (read@0,4096B). Runtime 90 seconds [ 604.043224][ C1] net_ratelimit: 5 callbacks suppressed [ 604.043246][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 604.280430][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 604.359914][T13552] tipc: Resetting bearer [ 604.385187][T13544] tipc: Resetting bearer [ 604.416064][T13544] tipc: Disabling bearer [ 604.427447][T13561] netlink: 'syz.1.2732': attribute type 4 has an invalid length. [ 604.440568][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 604.468781][T13562] netlink: 'syz.1.2732': attribute type 4 has an invalid length. [ 604.798340][T13568] syzkaller0: entered promiscuous mode [ 604.842346][T13568] syzkaller0: entered allmulticast mode [ 604.868212][T13572] tipc: Enabling of bearer rejected, already enabled [ 605.033882][T13574] netlink: 'syz.1.2736': attribute type 10 has an invalid length. [ 605.080478][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 605.320616][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 605.390208][T13582] loop2: detected capacity change from 0 to 4096 [ 605.436374][T13582] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 605.481285][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 605.502715][T13588] tipc: Started in network mode [ 605.512186][T13588] tipc: Node identity , cluster identity 4711 [ 605.531067][T13588] tipc: Failed to obtain node identity [ 605.537731][T13588] tipc: Enabling of bearer rejected, failed to enable media [ 605.674125][T13593] syzkaller0: entered promiscuous mode [ 605.679701][T13593] syzkaller0: entered allmulticast mode [ 606.130484][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 606.360392][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 606.520600][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 607.161380][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 607.409035][ T54] block nbd9: Possible stuck request ffff888022340000: control (read@0,4096B). Runtime 240 seconds [ 608.645739][T13594] lo speed is unknown, defaulting to 1000 [ 608.668820][T13600] netlink: 'syz.2.2746': attribute type 10 has an invalid length. [ 608.683705][ T95] block nbd11: Possible stuck request ffff888022858000: control (read@0,4096B). Runtime 210 seconds [ 608.716520][ T5156] udevd[5156]: worker [10196] /devices/virtual/block/nbd24 is taking a long time [ 608.782343][ T5156] udevd[5156]: worker [11027] /devices/virtual/block/nbd22 is taking a long time [ 608.820466][ T5156] udevd[5156]: worker [5790] /devices/virtual/block/nbd8 timeout; kill it [ 608.839063][ T5156] udevd[5156]: seq 12044 '/devices/virtual/block/nbd8' killed [ 608.858023][T13602] netlink: 'syz.0.2745': attribute type 6 has an invalid length. [ 608.870993][ T5156] udevd[5156]: worker [9968] /devices/virtual/block/nbd15 timeout; kill it [ 608.891427][ T5156] udevd[5156]: seq 12497 '/devices/virtual/block/nbd15' killed [ 608.921052][ T5156] udevd[5156]: worker [5798] /devices/virtual/block/nbd7 timeout; kill it [ 608.929780][ T5156] udevd[5156]: seq 11994 '/devices/virtual/block/nbd7' killed [ 608.958511][ T5156] udevd[5156]: worker [5797] /devices/virtual/block/nbd9 timeout; kill it [ 608.989325][ T5156] udevd[5156]: seq 12105 '/devices/virtual/block/nbd9' killed [ 609.012803][T13610] syzkaller0: entered promiscuous mode [ 609.038208][T13610] syzkaller0: entered allmulticast mode [ 609.114057][T13607] tipc: Enabling of bearer rejected, already enabled [ 609.227057][T13614] loop1: detected capacity change from 0 to 128 [ 609.236130][T13614] hpfs: bad mount options. [ 609.241134][ C1] net_ratelimit: 5 callbacks suppressed [ 609.241151][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 609.268186][T13594] lo speed is unknown, defaulting to 1000 [ 609.480629][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 609.640559][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 609.834226][T13625] loop1: detected capacity change from 0 to 4096 [ 609.866270][T13625] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 609.881337][ T8624] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 609.968058][ T54] block nbd20: Possible stuck request ffff888059ae0000: control (read@0,1024B). Runtime 150 seconds [ 609.979776][ T54] block nbd20: Possible stuck request ffff888059ae0200: control (read@1024,1024B). Runtime 150 seconds [ 609.994613][ T54] block nbd20: Possible stuck request ffff888059ae0400: control (read@2048,1024B). Runtime 150 seconds [ 610.006472][ T54] block nbd20: Possible stuck request ffff888059ae0600: control (read@3072,1024B). Runtime 150 seconds [ 610.100929][ T8624] usb 4-1: Using ep0 maxpacket: 16 [ 610.119543][ T8624] usb 4-1: unable to get BOS descriptor or descriptor too short [ 610.189835][ T8624] usb 4-1: config 6 has an invalid interface number: 202 but max is 0 [ 610.198789][ T8624] usb 4-1: config 6 has an invalid interface descriptor of length 2, skipping [ 610.208438][ T8624] usb 4-1: config 6 has no interface number 0 [ 610.215296][ T8624] usb 4-1: config 6 interface 202 altsetting 244 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 610.229074][ T8624] usb 4-1: config 6 interface 202 has no altsetting 0 [ 610.243395][ T8624] usb 4-1: New USB device found, idVendor=05da, idProduct=0099, bcdDevice=d4.1f [ 610.271114][ T8624] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.279207][ T8624] usb 4-1: Product: syz [ 610.283589][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 610.318341][ T8624] usb 4-1: Manufacturer: syz [ 610.328832][ T8624] usb 4-1: SerialNumber: syz [ 610.406541][T13631] netlink: 'syz.2.2757': attribute type 10 has an invalid length. [ 610.412339][T13630] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 610.520385][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 610.565726][ T8624] microtek usb (rev 0.4.3): expecting 3 got 1 endpoints! Bailing out. [ 610.618809][ T8624] usb 4-1: USB disconnect, device number 12 [ 610.680550][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 610.736750][T13633] syzkaller0: entered promiscuous mode [ 610.751791][T13633] syzkaller0: entered allmulticast mode [ 610.763355][T13636] loop1: detected capacity change from 0 to 256 [ 610.930092][T13636] syz.1.2759: attempt to access beyond end of device [ 610.930092][T13636] loop1: rw=2049, sector=256, nr_sectors = 100 limit=256 [ 610.956934][T13640] syzkaller0: entered promiscuous mode [ 610.965519][T13640] syzkaller0: entered allmulticast mode [ 611.246716][ T95] block nbd24: Possible stuck request ffff888053770000: control (read@0,4096B). Runtime 120 seconds [ 611.330466][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 611.567323][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 611.720504][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 611.889953][ T95] block nbd5: Possible stuck request ffff8880221d8000: control (read@0,1024B). Runtime 270 seconds [ 611.902104][ T95] block nbd5: Possible stuck request ffff8880221d8200: control (read@1024,1024B). Runtime 270 seconds [ 611.915238][ T95] block nbd5: Possible stuck request ffff8880221d8400: control (read@2048,1024B). Runtime 270 seconds [ 611.927541][ T95] block nbd5: Possible stuck request ffff8880221d8600: control (read@3072,1024B). Runtime 270 seconds [ 612.368004][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 612.543406][ T95] block nbd25: Possible stuck request ffff888024498000: control (read@0,4096B). Runtime 120 seconds [ 613.836718][T13642] tipc: Started in network mode [ 613.845497][T13642] tipc: Node identity ac1414aa, cluster identity 4711 [ 613.860933][T13642] tipc: Enabled bearer , priority 10 [ 614.023246][T13654] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2765'. [ 614.191703][T13658] nbd40: detected capacity change from 0 to 127 [ 614.317486][T13657] loop3: detected capacity change from 0 to 4096 [ 614.364188][T13657] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 614.381613][ T5787] block nbd40: Receive control failed (result -32) [ 614.443040][ C1] net_ratelimit: 5 callbacks suppressed [ 614.443054][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 614.680507][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 614.738267][T13667] lo speed is unknown, defaulting to 1000 [ 614.840624][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 614.902063][T13672] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2769'. [ 614.952085][T13672] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2769'. [ 614.991172][ T8624] tipc: Node number set to 2886997162 [ 615.051481][T13677] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2771'. [ 615.083503][T13677] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2771'. [ 615.363195][T13684] tipc: Enabling of bearer rejected, already enabled [ 615.480444][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 615.489022][T13667] lo speed is unknown, defaulting to 1000 [ 615.671655][T13691] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2777'. [ 615.720941][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 615.880562][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 615.985126][T13697] nbd41: detected capacity change from 0 to 127 [ 616.165302][ T5787] block nbd41: Receive control failed (result -32) [ 616.241109][ T8624] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 616.282866][T13667] netlink: 'syz.1.2768': attribute type 6 has an invalid length. [ 616.464108][ T8624] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 616.480948][ T8624] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.517852][ T8624] usb 3-1: config 0 descriptor?? [ 616.523138][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 616.554334][ T8624] cp210x 3-1:0.0: cp210x converter detected [ 616.619110][T13709] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2782'. [ 616.657757][T13709] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2782'. [ 616.760456][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 616.920467][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 617.176698][ T8624] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 617.197918][ T8624] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 617.222678][T13724] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2789'. [ 617.242279][ T8624] usb 3-1: cp210x converter now attached to ttyUSB0 [ 617.255712][ T8624] usb 3-1: USB disconnect, device number 11 [ 617.274706][T13723] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2788'. [ 617.285803][ T8624] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 617.305282][ T8624] cp210x 3-1:0.0: device disconnected [ 617.426189][T13726] tipc: Enabling of bearer rejected, already enabled [ 617.560557][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 618.114441][T13745] loop1: detected capacity change from 0 to 4096 [ 618.134618][T13745] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 618.216245][T13749] loop0: detected capacity change from 0 to 256 [ 618.242423][T13749] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 618.362167][T13749] FAT-fs (loop0): Directory bread(block 64) failed [ 618.368950][T13749] FAT-fs (loop0): Directory bread(block 65) failed [ 618.377391][T13749] FAT-fs (loop0): Directory bread(block 66) failed [ 618.392163][T13749] FAT-fs (loop0): Directory bread(block 67) failed [ 618.404747][T13750] syzkaller0: entered promiscuous mode [ 618.412206][T13749] FAT-fs (loop0): Directory bread(block 68) failed [ 618.419194][T13749] FAT-fs (loop0): Directory bread(block 69) failed [ 618.427363][T13750] syzkaller0: entered allmulticast mode [ 618.434560][T13749] FAT-fs (loop0): Directory bread(block 70) failed [ 618.447049][T13749] FAT-fs (loop0): Directory bread(block 71) failed [ 618.447105][T13753] loop1: detected capacity change from 0 to 8 [ 618.455123][T13749] FAT-fs (loop0): Directory bread(block 72) failed [ 618.469826][T13749] FAT-fs (loop0): Directory bread(block 73) failed [ 618.517585][T13753] SQUASHFS error: Failed to read block 0xdfa: -5 [ 618.533207][T13753] SQUASHFS error: Unable to read metadata cache entry [dfa] [ 618.554504][T13753] SQUASHFS error: Failed to read block 0x4e8: -5 [ 618.593383][T13753] SQUASHFS error: Failed to read block 0xed04f1: -5 [ 618.601395][T13753] SQUASHFS error: Failed to read block 0x4de: -5 [ 618.626362][T13753] SQUASHFS error: Failed to read block 0x4de: -5 [ 618.641320][T13753] SQUASHFS error: Failed to read block 0x4de: -5 [ 618.671438][T13753] SQUASHFS error: Failed to read block 0x4de: -5 [ 618.678153][T13753] SQUASHFS error: Failed to read block 0x4de: -5 [ 618.701534][T13753] SQUASHFS error: Failed to read block 0x4de: -5 [ 618.712375][T13753] SQUASHFS error: Failed to read block 0x4e8: -5 [ 618.727995][ T27] audit: type=1800 audit(1753592731.308:3): pid=13753 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2801" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 619.640458][ C1] net_ratelimit: 5 callbacks suppressed [ 619.640478][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 619.885681][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 620.040499][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 620.690467][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 620.927363][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 621.082921][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 621.725541][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 621.961095][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 622.107240][T13775] syzkaller0: entered promiscuous mode [ 622.114601][T13775] syzkaller0: entered allmulticast mode [ 622.120498][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 622.309496][T13779] __nla_validate_parse: 6 callbacks suppressed [ 622.309513][T13779] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2808'. [ 622.352714][T13779] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2808'. [ 622.526093][T13789] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2811'. [ 622.552970][T13789] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2811'. [ 622.567443][T13791] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2812'. [ 622.598692][T13789] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2811'. [ 622.619467][T13789] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2811'. [ 622.760814][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 622.802124][ T54] block nbd15: Possible stuck request ffff888022948000: control (read@0,1024B). Runtime 210 seconds [ 622.821002][ T54] block nbd15: Possible stuck request ffff888022948200: control (read@1024,1024B). Runtime 210 seconds [ 622.833224][ T54] block nbd15: Possible stuck request ffff888022948400: control (read@2048,1024B). Runtime 210 seconds [ 622.833645][T13796] nbd42: detected capacity change from 0 to 127 [ 622.848976][ T54] block nbd15: Possible stuck request ffff888022948600: control (read@3072,1024B). Runtime 210 seconds [ 622.937590][ T5787] block nbd42: Receive control failed (result -32) [ 623.010405][ T8624] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 623.185409][ T95] blk_print_req_error: 122 callbacks suppressed [ 623.185428][ T95] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 623.204076][ T95] Buffer I/O error on dev nbd1, logical block 0, async page read [ 623.231160][ T54] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 623.242793][ T54] Buffer I/O error on dev nbd1, logical block 1, async page read [ 623.253812][ T54] Buffer I/O error on dev nbd1, logical block 2, async page read [ 623.262319][ T54] Buffer I/O error on dev nbd1, logical block 3, async page read [ 623.271169][ T54] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 623.280397][ T54] Buffer I/O error on dev nbd1, logical block 0, async page read [ 623.288184][ T54] Buffer I/O error on dev nbd1, logical block 1, async page read [ 623.296727][ T54] Buffer I/O error on dev nbd1, logical block 2, async page read [ 623.305261][ T54] Buffer I/O error on dev nbd1, logical block 3, async page read [ 623.314128][ T54] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 623.324024][ T54] Buffer I/O error on dev nbd1, logical block 0, async page read [ 623.332035][ T54] Buffer I/O error on dev nbd1, logical block 1, async page read [ 623.340158][ T54] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 623.349670][ T54] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 623.359966][ T54] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 623.370136][ T8624] usb 1-1: Using ep0 maxpacket: 32 [ 623.372147][ T95] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 623.386362][ T8624] usb 1-1: config 1 has an invalid interface number: 65 but max is 3 [ 623.394649][ T95] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 623.394949][ T95] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 623.395024][T13812] ldm_validate_partition_table(): Disk read failed. [ 623.403423][T13815] syzkaller0: entered promiscuous mode [ 623.421132][ T8624] usb 1-1: config 1 has an invalid interface number: 70 but max is 3 [ 623.421159][ T8624] usb 1-1: config 1 has an invalid interface number: 245 but max is 3 [ 623.421179][ T8624] usb 1-1: config 1 has 5 interfaces, different from the descriptor's value: 4 [ 623.421200][ T8624] usb 1-1: config 1 has no interface number 0 [ 623.421217][ T8624] usb 1-1: config 1 has no interface number 2 [ 623.421233][ T8624] usb 1-1: config 1 has no interface number 4 [ 623.421323][ T8624] usb 1-1: config 1 interface 3 altsetting 200 has an invalid endpoint with address 0x0, skipping [ 623.421346][ T8624] usb 1-1: too many endpoints for config 1 interface 65 altsetting 28: 191, using maximum allowed: 30 [ 623.421383][ T8624] usb 1-1: config 1 interface 65 altsetting 28 has 0 endpoint descriptors, different from the interface descriptor's value: 191 [ 623.421412][ T8624] usb 1-1: config 1 interface 3 has no altsetting 0 [ 623.421430][ T8624] usb 1-1: config 1 interface 65 has no altsetting 0 [ 623.421448][ T8624] usb 1-1: config 1 interface 70 has no altsetting 0 [ 623.421467][ T8624] usb 1-1: config 1 interface 245 has no altsetting 0 [ 623.554126][T13815] syzkaller0: entered allmulticast mode [ 623.561346][T13812] Dev nbd1: unable to read RDB block 0 [ 623.572698][ T8624] usb 1-1: New USB device found, idVendor=05c6, idProduct=9009, bcdDevice=c5.66 [ 623.582868][T13812] nbd1: unable to read partition table [ 623.588827][ T8624] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.601519][T13814] ldm_validate_partition_table(): Disk read failed. [ 623.608310][ T8624] usb 1-1: Product: syz [ 623.613535][ T8624] usb 1-1: Manufacturer: syz [ 623.618176][ T8624] usb 1-1: SerialNumber: syz [ 623.634646][T13814] Dev nbd1: unable to read RDB block 0 [ 623.656061][T13814] nbd1: unable to read partition table [ 623.688599][T13818] ldm_validate_partition_table(): Disk read failed. [ 623.698202][T13818] Dev nbd1: unable to read RDB block 0 [ 623.706785][T13818] nbd1: unable to read partition table [ 623.923006][ T8624] usb 1-1: unknown number of interfaces: 5 [ 623.958655][ T8624] usb 1-1: USB disconnect, device number 11 [ 624.109750][T13829] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2826'. [ 624.131681][T13829] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2826'. [ 624.148830][T13829] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2826'. [ 624.161040][ T6216] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 624.361431][ T6216] usb 2-1: Using ep0 maxpacket: 32 [ 624.372593][ T6216] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 624.392047][ T6216] usb 2-1: config 0 has no interface number 0 [ 624.398266][ T6216] usb 2-1: config 0 interface 12 has no altsetting 0 [ 624.416825][ T6216] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 624.441211][ T6216] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.468570][ T6216] usb 2-1: Product: syz [ 624.476698][ T6216] usb 2-1: Manufacturer: syz [ 624.494602][ T6216] usb 2-1: SerialNumber: syz [ 624.506466][ T6216] usb 2-1: config 0 descriptor?? [ 624.561117][ T8624] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 624.605460][T13843] syzkaller0: entered promiscuous mode [ 624.612967][T13843] syzkaller0: entered allmulticast mode [ 624.696036][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.705282][ T95] block nbd7: Possible stuck request ffff8880222a0000: control (read@0,4096B). Runtime 270 seconds [ 624.765183][ T8624] usb 4-1: Using ep0 maxpacket: 8 [ 624.776964][ T8624] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 624.799182][ T8624] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 624.819605][ T8624] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 624.841039][ C1] net_ratelimit: 5 callbacks suppressed [ 624.841058][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 624.867653][ T8624] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 624.899091][ T8624] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 624.909498][ T8624] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.034767][T13849] loop0: detected capacity change from 0 to 2048 [ 625.080498][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 625.091265][T13849] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 625.156686][ T6216] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 625.191456][ T8624] usb 4-1: GET_CAPABILITIES returned 0 [ 625.200603][ T6216] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 625.207964][ T6216] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 625.215680][ T8624] usbtmc 4-1:16.0: can't read capabilities [ 625.240545][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 625.255916][ T6216] f81534: probe of 2-1:0.12 failed with error -71 [ 625.269284][ T6216] usb 2-1: USB disconnect, device number 21 [ 625.278626][T12332] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 625.389144][ T8625] usb 4-1: USB disconnect, device number 13 [ 625.575119][T13865] netlink: 'syz.2.2842': attribute type 10 has an invalid length. [ 625.688917][T13866] nbd43: detected capacity change from 0 to 127 [ 625.745969][ T5787] block nbd43: Receive control failed (result -32) [ 625.880496][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 626.072319][T13879] loop0: detected capacity change from 0 to 4096 [ 626.120607][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 626.201267][T13885] loop2: detected capacity change from 0 to 512 [ 626.229458][T13883] loop1: detected capacity change from 0 to 4096 [ 626.269626][T13883] ntfs3: loop1: ino=3, Correct links count -> 2. [ 626.280456][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 626.504718][T13891] netlink: 'syz.0.2852': attribute type 10 has an invalid length. [ 626.521752][T13885] EXT4-fs (loop2): Test dummy encryption mode enabled [ 626.559374][T13885] EXT4-fs (loop2): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 626.606448][ T54] block nbd22: Possible stuck request ffff888056360000: control (read@0,4096B). Runtime 150 seconds [ 626.606516][ T95] block nbd27: Possible stuck request ffff888054648000: control (read@0,4096B). Runtime 120 seconds [ 626.732975][T13898] EXT4-fs error (device loop2): ext4_add_entry:2486: inode #2: comm syz.2.2850: Directory hole found for htree leaf block 0 [ 626.785789][T13898] EXT4-fs (loop2): Remounting filesystem read-only [ 626.920468][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 626.928386][T12462] EXT4-fs (loop2): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 627.003237][T13905] nbd44: detected capacity change from 0 to 127 [ 627.137772][ T5787] block nbd44: Receive control failed (result -32) [ 627.160436][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 627.320459][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 627.961446][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 628.183793][T13925] loop0: detected capacity change from 0 to 128 [ 628.214128][T13925] EXT4-fs: Ignoring removed nobh option [ 628.249679][T13927] netlink: 'syz.1.2865': attribute type 10 has an invalid length. [ 628.318901][T13925] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 628.334473][T13925] ext4 filesystem being mounted at /112/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 628.549321][T13936] __nla_validate_parse: 1 callbacks suppressed [ 628.549339][T13936] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2868'. [ 628.570106][T13936] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2868'. [ 628.617138][T12332] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 628.902690][T13944] nbd45: detected capacity change from 0 to 127 [ 629.068865][ T5787] block nbd45: Receive control failed (result -32) [ 629.176568][T13954] loop2: detected capacity change from 0 to 64 [ 629.266282][T13956] loop3: detected capacity change from 0 to 1024 [ 629.374619][T13956] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 629.429952][T13956] ext4 filesystem being mounted at /121/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 629.566056][T13956] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 629.786729][T13956] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 630.058793][ C1] net_ratelimit: 5 callbacks suppressed [ 630.058812][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 630.130083][T13956] EXT4-fs (loop3): This should not happen!! Data will be lost [ 630.130083][T13956] [ 630.192688][T13956] EXT4-fs (loop3): Total free blocks count 0 [ 630.204012][T13970] usb usb8: usbfs: process 13970 (syz.2.2877) did not claim interface 0 before use [ 630.221184][T13956] EXT4-fs (loop3): Free/Dirty block details [ 630.264072][T13956] EXT4-fs (loop3): free_blocks=4293918720 [ 630.280561][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 630.308294][T13956] EXT4-fs (loop3): dirty_blocks=16 [ 630.324964][T13956] EXT4-fs (loop3): Block reservation details [ 630.332103][T13956] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 630.377966][T13972] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2879'. [ 630.389270][T13972] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2879'. [ 630.440519][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 630.454035][ T95] block nbd8: Possible stuck request ffff8880222e0000: control (read@0,1024B). Runtime 270 seconds [ 630.466075][ T95] block nbd8: Possible stuck request ffff8880222e0200: control (read@1024,1024B). Runtime 270 seconds [ 630.478588][ T95] block nbd8: Possible stuck request ffff8880222e0400: control (read@2048,1024B). Runtime 270 seconds [ 630.491846][ T95] block nbd8: Possible stuck request ffff8880222e0600: control (read@3072,1024B). Runtime 270 seconds [ 630.510175][ T41] EXT4-fs error (device loop3): ext4_map_blocks:718: inode #15: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 3) [ 630.533015][ T41] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 3 with error 117 [ 630.832529][T13980] syzkaller0: entered promiscuous mode [ 630.838083][T13980] syzkaller0: entered allmulticast mode [ 631.080502][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 631.320379][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 631.480527][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 632.130557][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 632.360547][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 632.520649][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 633.009635][ T95] block nbd28: Possible stuck request ffff888025200000: control (read@0,4096B). Runtime 120 seconds [ 633.161129][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 634.819366][T14001] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2890'. [ 634.832415][T14003] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2890'. [ 635.073934][T14012] syz_tun: entered allmulticast mode [ 635.082733][T14007] bpf: Bad value for 'mode' [ 635.106851][T14012] dvmrp8: entered allmulticast mode [ 635.125889][T14009] syz_tun: left allmulticast mode [ 635.240573][ C1] net_ratelimit: 5 callbacks suppressed [ 635.240590][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 635.480570][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 635.640790][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 635.784465][T14006] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 635.794805][T14006] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 635.814191][T14006] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 635.821323][T14006] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 635.834280][T14006] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 636.091075][T14031] netlink: 'syz.0.2898': attribute type 10 has an invalid length. [ 636.140989][ T8624] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 636.246554][T14039] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2901'. [ 636.280592][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 636.307148][T14039] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2901'. [ 636.339660][ T8624] usb 2-1: Using ep0 maxpacket: 8 [ 636.349065][T14042] loop2: detected capacity change from 0 to 64 [ 636.372321][ T8624] usb 2-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 636.382087][ T8624] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.390132][ T8624] usb 2-1: Product: syz [ 636.396023][ T8624] usb 2-1: Manufacturer: syz [ 636.403820][ T8624] usb 2-1: SerialNumber: syz [ 636.412297][ T8624] usb 2-1: config 0 descriptor?? [ 636.432018][ T8624] gspca_main: sq930x-2.14.0 probing 2770:930c [ 636.499627][T14045] loop0: detected capacity change from 0 to 512 [ 636.520622][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 636.547003][T14045] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.2903: iget: bad extended attribute block 1 [ 636.563258][T14045] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.2903: couldn't read orphan inode 15 (err -117) [ 636.581149][T14045] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 636.632244][T14045] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 636.680460][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 636.695316][T12332] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 636.812959][T14054] tipc: Enabled bearer , priority 0 [ 636.822451][T14054] syzkaller0: entered promiscuous mode [ 636.827979][T14054] syzkaller0: entered allmulticast mode [ 636.923351][T14054] tipc: Resetting bearer [ 636.954767][T14053] tipc: Resetting bearer [ 636.989287][T14053] tipc: Disabling bearer [ 636.999170][T14057] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 637.017237][T14058] netlink: 'syz.2.2909': attribute type 10 has an invalid length. [ 637.082003][ T5787] Bluetooth: hci4: command 0x0c1a tx timeout [ 637.149869][T14060] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2912'. [ 637.163270][T14060] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2912'. [ 637.231615][T14063] loop2: detected capacity change from 0 to 8 [ 637.257589][T14066] loop0: detected capacity change from 0 to 64 [ 637.265696][ T8624] gspca_sq930x: ucbus_write failed -71 [ 637.320456][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 637.482440][ T54] block nbd9: Possible stuck request ffff888022340000: control (read@0,4096B). Runtime 270 seconds [ 637.497168][T14068] nbd46: detected capacity change from 0 to 127 [ 637.518170][ T5787] block nbd46: Receive control failed (result -32) [ 637.531105][ T8624] gspca_sq930x: Sensor ov9630 not yet treated [ 637.540556][ T8624] sq930x: probe of 2-1:0.0 failed with error -22 [ 637.560404][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 637.576211][ T8624] usb 2-1: USB disconnect, device number 22 [ 637.720451][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 637.801381][ T5867] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 637.809293][ T5787] Bluetooth: hci2: command 0x0c1a tx timeout [ 637.881695][ T5787] Bluetooth: hci3: command 0x0c1a tx timeout [ 637.978961][T14083] netlink: 'syz.1.2918': attribute type 10 has an invalid length. [ 637.990240][T14083] bond0: (slave dummy0): Releasing backup interface [ 638.011765][ T5867] usb 1-1: Using ep0 maxpacket: 32 [ 638.019624][ T5867] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 638.032677][ T5867] usb 1-1: config 0 has no interface number 0 [ 638.044123][ T5867] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 638.047136][T14083] team0: Port device dummy0 added [ 638.054910][ T5867] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.068494][ T5867] usb 1-1: Product: syz [ 638.073692][ T5867] usb 1-1: Manufacturer: syz [ 638.078327][ T5867] usb 1-1: SerialNumber: syz [ 638.091777][ T5867] usb 1-1: config 0 descriptor?? [ 638.106455][ T5867] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 638.320063][ T5867] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 638.345791][ T5867] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 638.417344][T14091] loop1: detected capacity change from 0 to 512 [ 638.485019][T14091] EXT4-fs (loop1): orphan cleanup on readonly fs [ 638.541983][T14091] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.2920: bg 0: block 248: padding at end of block bitmap is not set [ 638.581459][T14094] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2921'. [ 638.601698][T14091] Quota error (device loop1): write_blk: dquota write failed [ 638.609425][T14091] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 638.630776][T14094] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2921'. [ 638.661005][T14091] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.2920: Failed to acquire dquot type 1 [ 638.703984][T14091] EXT4-fs (loop1): 1 truncate cleaned up [ 638.753865][T14091] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 638.781691][ T95] block nbd11: Possible stuck request ffff888022858000: control (read@0,4096B). Runtime 240 seconds [ 638.825680][T14090] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 638.934901][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 638.935004][T14090] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 638.945874][ T5867] usb 1-1: USB disconnect, device number 12 [ 638.995692][ T5867] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 639.019920][ T5867] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 639.031706][T14091] Quota error (device loop1): do_check_range: Getting block 1536 out of range 0-5 [ 639.058627][T14100] loop3: detected capacity change from 0 to 64 [ 639.069662][ T5867] quatech2 1-1:0.51: device disconnected [ 639.116714][T13029] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 639.602926][T14106] nbd47: detected capacity change from 0 to 127 [ 639.612226][ T8624] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 639.666932][ T5787] block nbd47: Receive control failed (result -32) [ 639.677611][T14113] syzkaller0: entered promiscuous mode [ 639.690390][T14113] syzkaller0: entered allmulticast mode [ 639.833157][ T8624] usb 2-1: Using ep0 maxpacket: 8 [ 639.847162][ T8624] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 639.857608][T14119] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2930'. [ 639.858931][T14119] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2930'. [ 639.903519][ T8624] usb 2-1: config 0 has no interfaces? [ 639.909092][ T8624] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 639.934255][ T8624] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.962117][ T5787] Bluetooth: hci3: command 0x0c1a tx timeout [ 639.993735][ T8624] usb 2-1: config 0 descriptor?? [ 640.055405][T14121] loop3: detected capacity change from 0 to 512 [ 640.064187][ T54] block nbd20: Possible stuck request ffff888059ae0000: control (read@0,1024B). Runtime 180 seconds [ 640.075965][ T54] block nbd20: Possible stuck request ffff888059ae0200: control (read@1024,1024B). Runtime 180 seconds [ 640.088118][ T54] block nbd20: Possible stuck request ffff888059ae0400: control (read@2048,1024B). Runtime 180 seconds [ 640.100128][ T54] block nbd20: Possible stuck request ffff888059ae0600: control (read@3072,1024B). Runtime 180 seconds [ 640.114873][T14121] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.2931: iget: bad extended attribute block 1 [ 640.157146][T14121] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.2931: couldn't read orphan inode 15 (err -117) [ 640.212674][T14121] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 640.302902][T14121] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 640.395270][T12561] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 640.440548][ C1] net_ratelimit: 6 callbacks suppressed [ 640.440568][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 640.680603][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 640.840462][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 641.192910][T14141] nbd48: detected capacity change from 0 to 127 [ 641.212763][ T5787] block nbd48: Receive control failed (result -32) [ 641.223254][ T787] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 641.288291][T14144] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2939'. [ 641.300085][T14144] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2939'. [ 641.331361][ T95] block nbd24: Possible stuck request ffff888053770000: control (read@0,4096B). Runtime 150 seconds [ 641.442587][ T787] usb 4-1: Using ep0 maxpacket: 16 [ 641.447255][T14148] syzkaller0: entered promiscuous mode [ 641.458708][ T787] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 641.460355][T14148] syzkaller0: entered allmulticast mode [ 641.470070][ T787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.484586][ T787] usb 4-1: Product: syz [ 641.488804][ T787] usb 4-1: Manufacturer: syz [ 641.490515][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 641.495713][ T787] usb 4-1: SerialNumber: syz [ 641.509412][ T787] usb 4-1: config 0 descriptor?? [ 641.526948][ T787] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 641.539507][ T787] usb 4-1: Detected FT-X [ 641.722218][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 641.749622][ T787] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 641.880733][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 641.963118][ T95] block nbd5: Possible stuck request ffff8880221d8000: control (read@0,1024B). Runtime 300 seconds [ 641.975795][ T95] block nbd5: Possible stuck request ffff8880221d8200: control (read@1024,1024B). Runtime 300 seconds [ 641.988942][ T95] block nbd5: Possible stuck request ffff8880221d8400: control (read@2048,1024B). Runtime 300 seconds [ 642.002355][ T95] block nbd5: Possible stuck request ffff8880221d8600: control (read@3072,1024B). Runtime 300 seconds [ 642.041788][ T5787] Bluetooth: hci3: command 0x0c1a tx timeout [ 642.169281][ T787] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 642.179173][ T787] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 642.192480][ T787] usb 4-1: USB disconnect, device number 14 [ 642.205020][ T787] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 642.216327][ T787] ftdi_sio 4-1:0.0: device disconnected [ 642.309337][T14157] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2945'. [ 642.319712][ T8624] usb 2-1: USB disconnect, device number 23 [ 642.455055][T14159] lo speed is unknown, defaulting to 1000 [ 642.521007][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 642.621580][ T95] block nbd25: Possible stuck request ffff888024498000: control (read@0,4096B). Runtime 150 seconds [ 642.760625][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 642.802731][T14166] nbd49: detected capacity change from 0 to 127 [ 642.804195][T14159] lo speed is unknown, defaulting to 1000 [ 642.893530][ T5787] block nbd49: Receive control failed (result -32) [ 642.920744][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 642.940021][T14171] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2949'. [ 642.997373][T14171] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2949'. [ 643.046196][T14162] netlink: 'syz.1.2946': attribute type 6 has an invalid length. [ 643.070982][ T27] audit: type=1326 audit(1753592755.648:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14173 comm="syz.0.2950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc29d78e9a9 code=0x7ffc0000 [ 643.140568][ T27] audit: type=1326 audit(1753592755.668:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14173 comm="syz.0.2950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc29d78e9a9 code=0x7ffc0000 [ 643.236258][ T27] audit: type=1326 audit(1753592755.668:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14173 comm="syz.0.2950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc29d78e9a9 code=0x7ffc0000 [ 643.284871][T14177] syzkaller0: entered promiscuous mode [ 643.299916][T14177] syzkaller0: entered allmulticast mode [ 643.321578][ T27] audit: type=1326 audit(1753592755.668:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14173 comm="syz.0.2950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc29d78e9a9 code=0x7ffc0000 [ 643.376244][ T27] audit: type=1326 audit(1753592755.668:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14173 comm="syz.0.2950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc29d78e9a9 code=0x7ffc0000 [ 643.417627][ T27] audit: type=1326 audit(1753592755.668:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14173 comm="syz.0.2950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc29d78e9a9 code=0x7ffc0000 [ 643.460645][ T27] audit: type=1326 audit(1753592755.668:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14173 comm="syz.0.2950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7fc29d78e9a9 code=0x7ffc0000 [ 643.560445][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 644.427296][T14200] nbd50: detected capacity change from 0 to 127 [ 644.563075][ T5787] block nbd50: Receive control failed (result -32) [ 644.726617][T14205] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2960'. [ 644.753874][T14205] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2960'. [ 645.077587][T14209] lo speed is unknown, defaulting to 1000 [ 645.314933][T14214] loop1: detected capacity change from 0 to 2048 [ 645.376998][T14214] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 645.401399][T14214] NILFS (loop1): mounting unchecked fs [ 645.456951][T14214] NILFS (loop1): recovery complete [ 645.471192][T14215] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 645.640467][ C1] net_ratelimit: 6 callbacks suppressed [ 645.640487][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 645.880375][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 645.881886][T14209] lo speed is unknown, defaulting to 1000 [ 645.999203][T14222] netlink: 'syz.0.2962': attribute type 6 has an invalid length. [ 646.040491][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 646.352510][T14228] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2969'. [ 646.373778][T14226] syzkaller0: entered promiscuous mode [ 646.379473][T14226] syzkaller0: entered allmulticast mode [ 646.406281][T14228] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2969'. [ 646.680432][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 646.921110][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 647.081104][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 647.183693][T14244] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2976'. [ 647.197534][T14244] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2976'. [ 647.448412][T14249] loop1: detected capacity change from 0 to 2048 [ 647.472754][T14248] loop3: detected capacity change from 0 to 1024 [ 647.501136][T14248] EXT4-fs: Ignoring removed nobh option [ 647.507202][T14248] EXT4-fs: Ignoring removed bh option [ 647.529868][T14248] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 647.548954][T14249] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 647.570131][T14251] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2979'. [ 647.607722][T14248] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 647.633266][T14251] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2979'. [ 647.650103][ T27] kauditd_printk_skb: 11 callbacks suppressed [ 647.650148][ T27] audit: type=1800 audit(1753592760.228:22): pid=14248 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2978" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 647.720742][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 647.743054][T12561] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 647.873139][T14257] syzkaller0: entered promiscuous mode [ 647.892694][T14257] syzkaller0: entered allmulticast mode [ 647.962803][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 648.120526][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 648.571291][T14276] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2989'. [ 648.751158][ T8624] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 648.760519][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 648.951303][ T8624] usb 1-1: Using ep0 maxpacket: 32 [ 648.962116][ T8624] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 649.100631][ T8624] usb 1-1: New USB device found, idVendor=1630, idProduct=0042, bcdDevice=5b.13 [ 649.200113][ T8624] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.307924][ T8624] usb 1-1: Product: syz [ 649.396393][ T8624] usb 1-1: Manufacturer: syz [ 649.531010][ T8624] usb 1-1: SerialNumber: syz [ 649.557495][ T8624] usb 1-1: config 0 descriptor?? [ 649.638418][T14286] syzkaller0: entered promiscuous mode [ 649.647840][ T8624] rndis_wlan 1-1:0.0: skipping garbage [ 649.657915][T14286] syzkaller0: entered allmulticast mode [ 649.669651][ T8624] rndis_wlan: probe of 1-1:0.0 failed with error -22 [ 649.712835][ T8624] rndis_host 1-1:0.0: skipping garbage [ 649.745463][ T8624] rndis_host: probe of 1-1:0.0 failed with error -22 [ 650.265751][T14296] netlink: 'syz.3.2996': attribute type 10 has an invalid length. [ 650.289219][T14296] bond0: (slave dummy0): Releasing backup interface [ 650.319320][T14296] team0: Port device dummy0 added [ 650.840511][ C1] net_ratelimit: 5 callbacks suppressed [ 650.840526][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 650.873710][T14307] nbd51: detected capacity change from 0 to 127 [ 651.080511][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 651.132221][ T5787] block nbd51: Receive control failed (result -32) [ 651.225425][T14312] syzkaller0: entered promiscuous mode [ 651.231992][T14312] syzkaller0: entered allmulticast mode [ 651.242444][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 651.880434][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 652.120387][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 652.285383][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 652.855691][ T54] block nbd15: Possible stuck request ffff888022948000: control (read@0,1024B). Runtime 240 seconds [ 652.867458][ T54] block nbd15: Possible stuck request ffff888022948200: control (read@1024,1024B). Runtime 240 seconds [ 652.878660][ T54] block nbd15: Possible stuck request ffff888022948400: control (read@2048,1024B). Runtime 240 seconds [ 652.911573][ T54] block nbd15: Possible stuck request ffff888022948600: control (read@3072,1024B). Runtime 240 seconds [ 652.922931][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 653.029287][ T787] usb 1-1: USB disconnect, device number 13 [ 653.160545][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 653.320546][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 653.968727][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 654.769978][ T95] block nbd7: Possible stuck request ffff8880222a0000: control (read@0,4096B). Runtime 300 seconds [ 655.732432][T14346] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3005'. [ 655.792990][T14346] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3005'. [ 656.040431][ C1] net_ratelimit: 5 callbacks suppressed [ 656.040449][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 656.280371][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 656.440539][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 657.080439][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 657.193271][ T95] block nbd27: Possible stuck request ffff888054648000: control (read@0,4096B). Runtime 150 seconds [ 657.193473][ T54] block nbd22: Possible stuck request ffff888056360000: control (read@0,4096B). Runtime 180 seconds [ 657.218100][T12334] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 657.247439][T12334] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 657.259349][T12334] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 657.271254][T12334] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 657.280234][T12334] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 657.288850][T12334] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 657.320617][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 657.401267][ T8625] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 657.480509][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 657.503400][T14375] syzkaller0: entered promiscuous mode [ 657.526919][T14375] syzkaller0: entered allmulticast mode [ 657.555486][T14366] lo speed is unknown, defaulting to 1000 [ 657.602702][ T8625] usb 4-1: Using ep0 maxpacket: 16 [ 657.612216][ T8625] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 657.653440][ T8625] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 657.672883][ T8625] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.687831][ T8625] usb 4-1: Product: syz [ 657.693023][ T8625] usb 4-1: Manufacturer: syz [ 657.697667][ T8625] usb 4-1: SerialNumber: syz [ 657.706113][ T8625] usb 4-1: config 0 descriptor?? [ 657.728319][ T8625] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 657.744865][ T8625] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 657.835753][T14366] lo speed is unknown, defaulting to 1000 [ 658.020141][T14381] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3017'. [ 658.101981][T14381] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3017'. [ 658.130454][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 658.298157][T14366] chnl_net:caif_netlink_parms(): no params data found [ 658.354969][ T8625] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 658.360434][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 658.477780][T14394] tipc: Enabled bearer , priority 0 [ 658.487217][T14366] bridge0: port 1(bridge_slave_0) entered blocking state [ 658.496627][T14366] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.508375][T14366] bridge_slave_0: entered allmulticast mode [ 658.517607][T14366] bridge_slave_0: entered promiscuous mode [ 658.523700][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 658.536121][T14394] syzkaller0: entered promiscuous mode [ 658.543179][T14394] syzkaller0: entered allmulticast mode [ 658.553007][T14366] bridge0: port 2(bridge_slave_1) entered blocking state [ 658.561705][T14366] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.569007][T14366] bridge_slave_1: entered allmulticast mode [ 658.578116][T14366] bridge_slave_1: entered promiscuous mode [ 658.627673][T14394] tipc: Resetting bearer [ 658.650125][T14366] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 658.663991][T14391] tipc: Resetting bearer [ 658.712606][T14391] tipc: Disabling bearer [ 658.727839][T14366] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 658.783531][T14366] team0: Port device team_slave_0 added [ 658.804645][T14366] team0: Port device team_slave_1 added [ 658.936666][T14366] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 658.953525][T14366] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 659.014212][ T8625] em28xx 4-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 659.016465][T14366] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 659.055435][ T8625] em28xx 4-1:0.0: board has no eeprom [ 659.072001][T14366] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 659.079018][T14366] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 659.108362][T14366] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 659.139776][T14402] loop0: detected capacity change from 0 to 128 [ 659.147056][ T8625] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 659.155811][ T8625] em28xx 4-1:0.0: dvb set to bulk mode. [ 659.161690][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 659.180217][ T8624] em28xx 4-1:0.0: Binding DVB extension [ 659.182170][T14403] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3022'. [ 659.219114][T14402] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 659.231138][T14403] team_slave_0: entered promiscuous mode [ 659.231261][T14403] team_slave_1: entered promiscuous mode [ 659.231401][T14403] dummy0: entered promiscuous mode [ 659.231836][T14403] macvtap1: entered promiscuous mode [ 659.231851][T14403] team0: entered promiscuous mode [ 659.232638][T14403] macvtap1: entered allmulticast mode [ 659.269561][T14402] ext4 filesystem being mounted at /163/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 659.289666][ T8625] usb 4-1: USB disconnect, device number 15 [ 659.296246][T14403] team0: entered allmulticast mode [ 659.303909][ T8625] em28xx 4-1:0.0: Disconnecting em28xx [ 659.306403][T14403] team_slave_0: entered allmulticast mode [ 659.318583][T14403] team_slave_1: entered allmulticast mode [ 659.326046][T14403] dummy0: entered allmulticast mode [ 659.332527][ T5787] Bluetooth: hci1: command tx timeout [ 659.341996][T14403] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 659.343821][ T8624] em28xx 4-1:0.0: Registering input extension [ 659.415172][T14366] hsr_slave_0: entered promiscuous mode [ 659.416490][ T8625] em28xx 4-1:0.0: Closing input extension [ 659.429158][T14366] hsr_slave_1: entered promiscuous mode [ 659.432810][T12332] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 659.451362][T14366] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 659.458986][T14366] Cannot create hsr debugfs directory [ 659.544000][ T8625] em28xx 4-1:0.0: Freeing device [ 659.873099][T14366] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 659.901343][T14366] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 659.929156][T14366] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 659.955390][T14412] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3026'. [ 659.993946][T14412] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3026'. [ 660.021164][T14366] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 660.619733][ T95] block nbd8: Possible stuck request ffff8880222e0000: control (read@0,1024B). Runtime 300 seconds [ 660.644048][ T95] block nbd8: Possible stuck request ffff8880222e0200: control (read@1024,1024B). Runtime 300 seconds [ 660.656512][ T95] block nbd8: Possible stuck request ffff8880222e0400: control (read@2048,1024B). Runtime 300 seconds [ 660.668640][ T95] block nbd8: Possible stuck request ffff8880222e0600: control (read@3072,1024B). Runtime 300 seconds [ 660.867789][T14366] 8021q: adding VLAN 0 to HW filter on device bond0 [ 660.911993][T14431] tipc: Enabled bearer , priority 0 [ 660.933063][T14427] syzkaller0: entered promiscuous mode [ 660.971038][T14427] syzkaller0: entered allmulticast mode [ 660.997009][T14366] 8021q: adding VLAN 0 to HW filter on device team0 [ 661.035505][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 661.042717][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 661.094441][T14427] tipc: Resetting bearer [ 661.104988][T14426] tipc: Resetting bearer [ 661.176276][T14426] tipc: Disabling bearer [ 661.209481][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 661.216773][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 661.240428][ C1] net_ratelimit: 5 callbacks suppressed [ 661.240448][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 661.400922][ T5787] Bluetooth: hci1: command tx timeout [ 661.480486][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 661.626122][T14366] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 661.640500][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 661.701053][ T8620] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 661.892005][ T8620] usb 2-1: Using ep0 maxpacket: 16 [ 661.912278][ T8620] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 661.963627][ T8620] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 661.979498][ T8620] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.995302][T14366] veth0_vlan: entered promiscuous mode [ 662.001435][ T8620] usb 2-1: Product: syz [ 662.010994][ T8620] usb 2-1: Manufacturer: syz [ 662.015678][ T8620] usb 2-1: SerialNumber: syz [ 662.029995][T14366] veth1_vlan: entered promiscuous mode [ 662.039859][ T8620] usb 2-1: config 0 descriptor?? [ 662.064868][ T8620] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 662.094674][ T8620] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 662.135016][T14455] loop0: detected capacity change from 0 to 512 [ 662.149858][T14366] veth0_macvtap: entered promiscuous mode [ 662.179421][T14366] veth1_macvtap: entered promiscuous mode [ 662.227534][T14366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 662.270952][T14366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.281279][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 662.320998][T14366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 662.340331][T14366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.365730][T14366] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 662.398358][T14366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 662.441036][T14366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.460904][T14366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 662.481001][T14366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.501875][T14366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 662.520416][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 662.530458][T14366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.544395][T14457] loop3: detected capacity change from 0 to 4096 [ 662.552703][T14366] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 662.562249][T14459] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3036'. [ 662.581170][T14457] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 662.584010][T14459] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3036'. [ 662.616563][T14366] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.636606][T14366] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.671129][T14366] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.680591][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 662.701078][T14366] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.723758][ T8620] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 662.767275][T14457] ntfs3: loop3: ino=1e, "file1" ntfs3_write_inode failed, -22. [ 662.786795][T14457] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 662.898859][ T11] ntfs3: loop3: ino=1e, ntfs3_write_inode failed, -22. [ 662.988733][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 663.000348][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 663.067568][ T3490] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 663.082721][ T95] block nbd28: Possible stuck request ffff888025200000: control (read@0,4096B). Runtime 150 seconds [ 663.101506][ T3490] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 663.330496][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 663.482374][ T5787] Bluetooth: hci1: command tx timeout [ 663.560592][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 663.720619][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 664.291682][ T8620] em28xx 2-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 664.305493][T14442] em28xx 2-1:0.0: reading from i2c device at 0x0 failed (error=-5) [ 664.316552][ T8620] em28xx 2-1:0.0: board has no eeprom [ 664.360844][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 664.372505][ T787] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 664.411260][ T8620] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 664.431416][T14479] nbd52: detected capacity change from 0 to 127 [ 664.437835][ T8620] em28xx 2-1:0.0: dvb set to bulk mode. [ 664.454076][T14468] em28xx 2-1:0.0: Binding DVB extension [ 664.466603][ T8620] usb 2-1: USB disconnect, device number 24 [ 664.477296][ T8620] em28xx 2-1:0.0: Disconnecting em28xx [ 664.541601][T14468] em28xx 2-1:0.0: Registering input extension [ 664.563635][ T8620] em28xx 2-1:0.0: Closing input extension [ 664.610201][ T8620] em28xx 2-1:0.0: Freeing device [ 664.612419][ T787] usb 5-1: Using ep0 maxpacket: 32 [ 664.638851][ T787] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 664.665218][ T5787] block nbd52: Receive control failed (result -32) [ 664.684593][T14485] kvm: kvm [14484]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc2) = 0x1 [ 664.703806][ T787] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 664.730257][ T787] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.739690][ T787] usb 5-1: Product: syz [ 664.749670][ T787] usb 5-1: Manufacturer: syz [ 664.756946][ T787] usb 5-1: SerialNumber: syz [ 664.781356][ T787] usb 5-1: config 0 descriptor?? [ 664.799009][ T787] usb 5-1: bad CDC descriptors [ 664.819603][ T787] usb 5-1: unsupported MDLM descriptors [ 665.043288][T14471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 665.085753][T14471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 665.148567][T14468] usb 5-1: USB disconnect, device number 2 [ 665.421117][ T8620] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 665.571116][ T5787] Bluetooth: hci1: command tx timeout [ 665.655403][ T8620] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 665.667864][ T8620] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 665.681818][ T8620] usb 2-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 665.694542][ T8620] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.726779][ T8620] usb 2-1: config 0 descriptor?? [ 666.317989][T14509] syzkaller0: entered promiscuous mode [ 666.324287][T14509] syzkaller0: entered allmulticast mode [ 666.441012][ C1] net_ratelimit: 5 callbacks suppressed [ 666.441030][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 666.453658][ T5867] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 666.483435][ T8620] razer 0003:1532:010E.0006: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.1-1/input0 [ 666.631843][ T5867] usb 4-1: Using ep0 maxpacket: 16 [ 666.657049][ T5867] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 666.675503][ T8620] usb 2-1: USB disconnect, device number 25 [ 666.680537][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 666.701553][ T5867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.709740][ T5867] usb 4-1: Product: syz [ 666.726182][ T5867] usb 4-1: Manufacturer: syz [ 666.741654][ T5867] usb 4-1: SerialNumber: syz [ 666.754128][ T5867] r8152-cfgselector 4-1: config 0 descriptor?? [ 666.840468][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 666.881628][ T787] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 666.994785][ T5867] r8152-cfgselector 4-1: Needed 1 retries to read version [ 667.011475][ T5867] r8152-cfgselector 4-1: Unknown version 0x0000 [ 667.022017][ T5867] r8152-cfgselector 4-1: bad CDC descriptors [ 667.073489][ T787] usb 5-1: Using ep0 maxpacket: 8 [ 667.086010][ T787] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 667.099518][ T787] usb 5-1: config 0 interface 0 has no altsetting 0 [ 667.109577][ T787] usb 5-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 667.119755][ T787] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.134374][ T787] usb 5-1: config 0 descriptor?? [ 667.205727][ T5867] r8152-cfgselector 4-1: Unknown version 0x0000 [ 667.218363][ T5867] r8152-cfgselector 4-1: USB disconnect, device number 16 [ 667.480530][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 667.508281][T14521] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3057'. [ 667.567704][ T54] block nbd9: Possible stuck request ffff888022340000: control (read@0,4096B). Runtime 300 seconds [ 667.579059][ T787] usbhid 5-1:0.0: can't add hid device: -71 [ 667.579173][ T787] usbhid: probe of 5-1:0.0 failed with error -71 [ 667.587424][ T787] usb 5-1: USB disconnect, device number 3 [ 667.720479][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 667.880518][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 668.229129][ T787] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 668.234707][T14523] syzkaller0: entered promiscuous mode [ 668.244091][T14523] syzkaller0: entered allmulticast mode [ 668.520506][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 668.522923][ T787] usb 2-1: Using ep0 maxpacket: 16 [ 668.636847][ T787] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 668.749356][ T787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.760361][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 668.801532][ T787] usb 2-1: Product: syz [ 668.808988][ T787] usb 2-1: Manufacturer: syz [ 668.842611][ T787] usb 2-1: SerialNumber: syz [ 668.868306][ T95] block nbd11: Possible stuck request ffff888022858000: control (read@0,4096B). Runtime 270 seconds [ 668.883086][ T787] usb 2-1: config 0 descriptor?? [ 668.892090][ T787] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 668.902062][ T787] usb 2-1: Detected FT-X [ 668.920469][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 669.109135][ T787] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 669.258513][ T8624] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 669.445654][ T8624] usb 5-1: Using ep0 maxpacket: 32 [ 669.465014][ T5787] Bluetooth: hci1: unknown advertising packet type: 0x70 [ 669.465166][ T5787] Bluetooth: hci1: Dropping invalid advertising data [ 669.468065][ T8624] usb 5-1: unable to get BOS descriptor or descriptor too short [ 669.474181][ T5787] Bluetooth: hci1: Malformed LE Event: 0x02 [ 669.501536][ T8624] usb 5-1: no configurations [ 669.506193][ T8624] usb 5-1: can't read configurations, error -22 [ 669.564778][ T787] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 669.570551][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 669.764733][ T8620] usb 2-1: USB disconnect, device number 26 [ 669.800979][ T8620] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 669.836065][ T8620] ftdi_sio 2-1:0.0: device disconnected [ 670.139158][ T54] block nbd20: Possible stuck request ffff888059ae0000: control (read@0,1024B). Runtime 210 seconds [ 670.160398][ T54] block nbd20: Possible stuck request ffff888059ae0200: control (read@1024,1024B). Runtime 210 seconds [ 670.173699][ T54] block nbd20: Possible stuck request ffff888059ae0400: control (read@2048,1024B). Runtime 210 seconds [ 670.187111][ T54] block nbd20: Possible stuck request ffff888059ae0600: control (read@3072,1024B). Runtime 210 seconds [ 670.448087][ T5787] Bluetooth: hci3: unexpected event for opcode 0x0411 [ 671.401934][ T95] block nbd24: Possible stuck request ffff888053770000: control (read@0,4096B). Runtime 180 seconds [ 671.645276][ C1] net_ratelimit: 5 callbacks suppressed [ 671.645297][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 671.880757][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 672.040670][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 672.060909][ T95] block nbd5: Possible stuck request ffff8880221d8000: control (read@0,1024B). Runtime 330 seconds [ 672.071977][ T95] block nbd5: Possible stuck request ffff8880221d8200: control (read@1024,1024B). Runtime 330 seconds [ 672.084496][ T95] block nbd5: Possible stuck request ffff8880221d8400: control (read@2048,1024B). Runtime 330 seconds [ 672.097142][ T95] block nbd5: Possible stuck request ffff8880221d8600: control (read@3072,1024B). Runtime 330 seconds [ 672.626435][T14540] tipc: Enabling of bearer rejected, failed to enable media [ 672.680590][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 672.684986][ T95] block nbd25: Possible stuck request ffff888024498000: control (read@0,4096B). Runtime 180 seconds [ 672.827896][T14564] nbd53: detected capacity change from 0 to 127 [ 672.911987][T14572] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3070'. [ 672.921429][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 672.957417][T14569] tipc: Started in network mode [ 672.989937][T14569] tipc: Node identity 4, cluster identity 4711 [ 673.007170][T14569] tipc: Node number set to 4 [ 673.058791][ T5787] block nbd53: Receive control failed (result -32) [ 673.080500][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 673.228021][T14576] syzkaller0: entered promiscuous mode [ 673.241765][T14576] syzkaller0: entered allmulticast mode [ 673.373363][T14579] tipc: Enabled bearer , priority 0 [ 673.393502][T14579] syzkaller0: entered promiscuous mode [ 673.399322][T14579] syzkaller0: entered allmulticast mode [ 673.483434][T14579] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3073'. [ 673.540143][T14579] tipc: Resetting bearer [ 673.570054][T14578] tipc: Resetting bearer [ 673.730496][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 673.752566][T14578] tipc: Disabling bearer [ 673.961198][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 674.120501][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 674.249689][T14592] tipc: Enabled bearer , priority 0 [ 674.271120][T14592] syzkaller0: entered promiscuous mode [ 674.280450][T14592] syzkaller0: entered allmulticast mode [ 674.383578][T14592] tipc: Resetting bearer [ 674.426173][T14591] tipc: Resetting bearer [ 674.479697][T14591] tipc: Disabling bearer [ 674.522367][T14590] loop4: detected capacity change from 0 to 4096 [ 674.524469][ T5787] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 674.538417][ T5787] Bluetooth: hci3: Injecting HCI hardware error event [ 674.551401][T12334] Bluetooth: hci3: hardware error 0x00 [ 674.588081][T14590] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 674.709504][T14590] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 674.760522][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 674.807950][T14590] fs-verity: sha256 using implementation "sha256-avx2" [ 674.828425][T14605] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3080'. [ 675.054210][T14366] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 675.988836][ T28] INFO: task udevd:5785 blocked for more than 143 seconds. [ 676.025354][ T28] Not tainted 6.6.100-syzkaller #0 [ 676.158477][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 676.191421][ T28] task:udevd state:D stack:23144 pid:5785 ppid:5156 flags:0x00004006 [ 676.231386][ T28] Call Trace: [ 676.256361][ T28] [ 676.259377][ T28] __schedule+0x14d2/0x44d0 [ 676.313728][ T28] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 676.319745][ T28] ? asan.module_dtor+0x20/0x20 [ 676.351969][ T28] ? mark_lock+0x94/0x320 [ 676.357186][ T28] ? lock_chain_count+0x20/0x20 [ 676.370674][ T28] ? _raw_spin_lock_irq+0xaf/0xe0 [ 676.379997][ T28] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 676.392005][ T28] schedule+0xbd/0x170 [ 676.396170][ T28] io_schedule+0x80/0xd0 [ 676.403957][ T28] folio_wait_bit_common+0x6eb/0xf70 [ 676.409340][ T28] ? folio_wait_bit+0x30/0x30 [ 676.414719][ T28] ? _compound_head+0x120/0x120 [ 676.419622][ T28] ? filemap_add_folio+0x192/0x3c0 [ 676.425523][ T28] ? __filemap_get_folio+0x70a/0xbc0 [ 676.433416][ T28] ? blkdev_writepage+0x30/0x30 [ 676.438307][ T28] do_read_cache_folio+0x1c0/0x7e0 [ 676.444673][ T28] ? blkdev_writepage+0x30/0x30 [ 676.449746][ T28] read_part_sector+0xd2/0x350 [ 676.455322][ T28] adfspart_check_POWERTEC+0x8d/0xf00 [ 676.461390][ T28] ? adfspart_check_ADFS+0x660/0x660 [ 676.466886][ T28] ? put_partition+0x350/0x350 [ 676.472516][ T28] ? alloc_pages+0x4dc/0x740 [ 676.477160][ T28] bdev_disk_changed+0x73a/0x1410 [ 676.482975][ T28] ? bdev_resize_partition+0xf0/0xf0 [ 676.488317][ T28] ? iput+0x347/0x920 [ 676.493081][ T28] blkdev_get_whole+0x30d/0x390 [ 676.497997][ T28] blkdev_get_by_dev+0x279/0x600 [ 676.504907][ T28] blkdev_open+0x152/0x360 [ 676.509382][ T28] ? blkdev_mmap+0x1b0/0x1b0 [ 676.514913][ T28] do_dentry_open+0x8c6/0x1500 [ 676.519735][ T28] path_openat+0x274b/0x3190 [ 676.527285][ T28] ? __kasan_slab_alloc+0x6c/0x80 [ 676.533068][ T28] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 676.539192][ T28] ? verify_lock_unused+0x140/0x140 [ 676.545271][ T28] ? do_filp_open+0x3d0/0x3d0 [ 676.550033][ T28] ? __virt_addr_valid+0x18c/0x540 [ 676.555799][ T28] do_filp_open+0x1c5/0x3d0 [ 676.561116][ T28] ? vfs_tmpfile+0x490/0x490 [ 676.565796][ T28] ? _raw_spin_unlock+0x28/0x40 [ 676.571295][ T28] ? alloc_fd+0x58f/0x630 [ 676.575858][ T28] do_sys_openat2+0x12c/0x1c0 [ 676.580937][ T28] ? do_sys_open+0xe0/0xe0 [ 676.585539][ T28] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 676.591623][ T28] ? lock_chain_count+0x20/0x20 [ 676.596655][ T28] __x64_sys_openat+0x139/0x160 [ 676.601726][T12334] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 676.601835][ T28] do_syscall_64+0x55/0xb0 [ 676.614629][ T28] ? clear_bhb_loop+0x40/0x90 [ 676.619358][ T28] ? clear_bhb_loop+0x40/0x90 [ 676.626626][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 676.633317][ T28] RIP: 0033:0x7f230aea7407 [ 676.637782][ T28] RSP: 002b:00007ffec47e6a10 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 676.646987][ T28] RAX: ffffffffffffffda RBX: 00007f230b5e3880 RCX: 00007f230aea7407 [ 676.655792][ T28] RDX: 00000000000a0800 RSI: 000055c24618d240 RDI: ffffffffffffff9c [ 676.664633][ T28] RBP: 000055c24618c910 R08: 0000000000000000 R09: 0000000000000000 [ 676.673464][ T28] R10: 0000000000000000 R11: 0000000000000202 R12: 000055c246373b10 [ 676.686992][ T28] R13: 000055c2461a4420 R14: 0000000000000000 R15: 000055c246373b10 [ 676.698770][ T28] [ 676.705703][ T28] [ 676.705703][ T28] Showing all locks held in the system: [ 676.714634][ T28] 1 lock held by khungtaskd/28: [ 676.719709][ T28] #0: ffffffff8cd2fba0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 676.731593][ T28] 2 locks held by getty/5547: [ 676.736326][ T28] #0: ffff88814d7d80a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 676.746869][ T28] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x425/0x1380 [ 676.757572][ T28] 1 lock held by udevd/5785: [ 676.762995][ T28] #0: ffff8880221294c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 676.773821][ T28] 1 lock held by udevd/5790: [ 676.778452][ T28] #0: ffff8880222284c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 676.789419][ T28] 1 lock held by udevd/5797: [ 676.794668][ T28] #0: ffff88802222d4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 676.805566][ T28] 1 lock held by udevd/5798: [ 676.812309][ T28] #0: ffff88802214b4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 676.823107][ T28] 1 lock held by udevd/6045: [ 676.827734][ T28] #0: ffff8880223074c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 676.838550][ T28] 1 lock held by udevd/9184: [ 676.843439][ C1] net_ratelimit: 5 callbacks suppressed [ 676.843454][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 676.857677][ T28] #0: ffff88802290f4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 676.868344][ T28] 1 lock held by udevd/9968: [ 676.873529][ T28] #0: ffff8880228db4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 676.884420][ T28] 1 lock held by udevd/10078: [ 676.889130][ T28] #0: ffff88802dea24c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 676.899467][ T28] 1 lock held by udevd/10196: [ 676.904206][ T28] #0: ffff88802f25b4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 676.915789][ T28] 1 lock held by udevd/10930: [ 676.921494][ T28] #0: ffff88807de314c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 676.932276][ T28] 1 lock held by udevd/11027: [ 676.936987][ T28] #0: ffff88805994d4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 676.947782][ T28] 1 lock held by udevd/11544: [ 676.953133][ T28] #0: ffff88805ca484c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 676.963984][ T28] 3 locks held by kworker/u4:6/14429: [ 676.969419][ T28] #0: ffff888017871538 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 676.981734][ T28] #1: ffffc900035efd00 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 676.994255][ T28] #2: ffffffff8cd35a40 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x4c/0x580 [ 677.006958][ T28] [ 677.009327][ T28] ============================================= [ 677.009327][ T28] [ 677.025547][ T28] NMI backtrace for cpu 1 [ 677.029925][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.6.100-syzkaller #0 [ 677.037832][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 677.047909][ T28] Call Trace: [ 677.051228][ T28] [ 677.054182][ T28] dump_stack_lvl+0x16c/0x230 [ 677.058882][ T28] ? show_regs_print_info+0x20/0x20 [ 677.064102][ T28] ? load_image+0x3b0/0x3b0 [ 677.068629][ T28] ? asm_sysvec_call_function_single+0x1a/0x20 [ 677.074818][ T28] nmi_cpu_backtrace+0x39b/0x3d0 [ 677.079777][ T28] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 677.080487][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 677.085940][ T28] ? load_image+0x3b0/0x3b0 [ 677.097326][ T28] ? load_image+0x3b0/0x3b0 [ 677.101869][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 677.107972][ T28] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 677.113984][ T28] watchdog+0xf41/0xf80 [ 677.118177][ T28] ? watchdog+0x1e1/0xf80 [ 677.122537][ T28] kthread+0x2fa/0x390 [ 677.126617][ T28] ? hungtask_pm_notify+0x90/0x90 [ 677.131678][ T28] ? kthread_blkcg+0xd0/0xd0 [ 677.136288][ T28] ret_from_fork+0x48/0x80 [ 677.140736][ T28] ? kthread_blkcg+0xd0/0xd0 [ 677.145435][ T28] ret_from_fork_asm+0x11/0x20 [ 677.150233][ T28] [ 677.154956][ T28] Sending NMI from CPU 1 to CPUs 0: [ 677.160226][ C0] NMI backtrace for cpu 0 [ 677.160245][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 6.6.100-syzkaller #0 [ 677.160263][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 677.160273][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 677.160304][ C0] Code: cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d e3 16 3b 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 66 0f 1f 00 55 41 57 41 56 [ 677.160319][ C0] RSP: 0018:ffffffff8ca07d80 EFLAGS: 000002c6 [ 677.160334][ C0] RAX: e481d8960bcba000 RBX: ffffffff81619a5b RCX: e481d8960bcba000 [ 677.160348][ C0] RDX: 0000000000000001 RSI: ffffffff8aaaba40 RDI: ffffffff8afc6700 [ 677.160362][ C0] RBP: ffffffff8ca07eb8 R08: ffff8880b8e36d4b R09: 1ffff110171c6da9 [ 677.160376][ C0] R10: dffffc0000000000 R11: ffffed10171c6daa R12: ffffffff8e4a7da8 [ 677.160390][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1952670 [ 677.160402][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 677.160418][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 677.160431][ C0] CR2: 000055c246700948 CR3: 0000000075c32000 CR4: 00000000003506f0 [ 677.160448][ C0] Call Trace: [ 677.160455][ C0] [ 677.160462][ C0] default_idle+0x13/0x20 [ 677.160490][ C0] default_idle_call+0x6c/0xa0 [ 677.160518][ C0] do_idle+0x1eb/0x510 [ 677.160541][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 677.160561][ C0] ? asm_sysvec_call_function_single+0x1a/0x20 [ 677.160597][ C0] cpu_startup_entry+0x43/0x60 [ 677.160616][ C0] rest_init+0x2e2/0x300 [ 677.160642][ C0] ? time_init+0x40/0x40 [ 677.160664][ C0] arch_call_rest_init+0xe/0x10 [ 677.160688][ C0] start_kernel+0x459/0x4e0 [ 677.160712][ C0] x86_64_start_reservations+0x2a/0x30 [ 677.160733][ C0] x86_64_start_kernel+0x60/0x60 [ 677.160753][ C0] secondary_startup_64_no_verify+0x179/0x17b [ 677.160784][ C0] [ 677.350550][ C0] vkms_vblank_simulate: vblank timer overrun [ 677.359007][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 677.369046][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 677.375956][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.6.100-syzkaller #0 [ 677.383879][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 677.393966][ T28] Call Trace: [ 677.397273][ T28] [ 677.400229][ T28] dump_stack_lvl+0x16c/0x230 [ 677.404955][ T28] ? show_regs_print_info+0x20/0x20 [ 677.410187][ T28] ? load_image+0x3b0/0x3b0 [ 677.414731][ T28] panic+0x2c0/0x710 [ 677.418657][ T28] ? schedule_preempt_disabled+0x20/0x20 [ 677.424308][ T28] ? bpf_jit_dump+0xd0/0xd0 [ 677.428830][ T28] ? __irq_work_queue_local+0x13a/0x3b0 [ 677.434407][ T28] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 677.440604][ T28] watchdog+0xf80/0xf80 [ 677.444795][ T28] ? watchdog+0x1e1/0xf80 [ 677.449139][ T28] kthread+0x2fa/0x390 [ 677.453220][ T28] ? hungtask_pm_notify+0x90/0x90 [ 677.458300][ T28] ? kthread_blkcg+0xd0/0xd0 [ 677.462907][ T28] ret_from_fork+0x48/0x80 [ 677.467409][ T28] ? kthread_blkcg+0xd0/0xd0 [ 677.472028][ T28] ret_from_fork_asm+0x11/0x20 [ 677.476841][ T28] [ 677.480222][ T28] Kernel Offset: disabled [ 677.484554][ T28] Rebooting in 86400 seconds..