last executing test programs: 28.778176298s ago: executing program 4 (id=3374): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) creat(&(0x7f0000000000)='./bus\x00', 0x0) fsopen(&(0x7f0000000040)='afs\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) socket(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000074020440fd07010099090000000109021b0001000000000904000001c5b3e3000905", @ANYRES8=r0, @ANYRES32=r0], 0x0) 26.603119397s ago: executing program 4 (id=3389): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffe39) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x3ffffffffffffda, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000280)=0x3) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x2e0, 0xd0, 0x2e0, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0) 25.777592378s ago: executing program 5 (id=3394): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f00000001c0)={[{@discard}, {@block_validity}, {@resuid}, {@noblock_validity}, {@minixdf}, {@errors_remount}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000000600)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, 0x0, 0x15) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file1\x00', 0x2000010, &(0x7f0000000f40)={[{@uid}, {@uid_ignore}, {@utf8}, {@anchor={'anchor', 0x3d, 0x1}}, {}, {@shortad}, {@gid}, {@umask}, {@gid_ignore}, {@noadinicb}, {@undelete}, {}, {@lastblock={'lastblock', 0x3d, 0x1}}, {@uid_ignore}, {@nostrict}]}, 0x1, 0xc43, &(0x7f0000000200)="$eJzs3U9sHNd9B/DfGy7Fpd1WTOwoThoXm7ZIZcVy9S+mYhXuqqbZBpBlIRRzC8CVSKkLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBcgoYzOxbcUWRFi2KFCV/Pjb13Z19b/a9easZiuCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxB+8ev7EybSDgrV9aAwAsC8ujn31xKmdXP8BgMfG5Z3++x8AAAAAAAAAAAAAAHhYUhTxVKSYu7iWJqrnHfUL7f6bt8ZHRreuNpiqmn1V+fKrfvLU6TNfenH4bDcvtGc+pP6D9tl4fezy+cYrszfm5qcWFqYmG+Mz7auzk1M73sNu6292rDoAjRtv3Jy8dm2hceqF03e8fGvog4EnjwydG37u+LPdsuMjo6NjG0XqveV3e/eF7WZ4HIoijkeK57/309SKiCJ2fyzq+zv2mw1WnThWdWJ8ZLTqyHS7NbNYvnipeyCKiEZPpWb3GG09FlHr39c+bK8ZsVQ2v2zwsbJ7Y3Ot+daV6anGpdb8YnuxPTtzKXVaW/anEUWcTRHLEbE6cPfu+qOIWqT4zuG1dCUi+rrH4YvVxODt21HsYR93oGxnoz9iuXgExuwAG4giXosUP3v3aFzN55nqXPOFiNfK/EHE22W+HJHKD8aZiPe3+BzxaKpFEX9Zjv+5tTRZnQ+655ULX2t8ZebabE/Z7nnlI14f7jpTPKTrw+Cm3B8H/NxUjyJa1Rl/Ld3/NzsAAAAAAAAAAAAAAAAAPGiDUcRnIsWr//En1bziqOalHz43/IdDv9o7Z/yZe+ynLPtCRCwVO5uTeyhPDLyULqX0kOcSf5zVo4g/zfP/vvWwGwMAAAAAAAAAAAAAAAAAAPCxVsRPIsVL7x1Ny9G7pnh75npjMCI6q8J21/7trpm+vr6+3kidbOacyLmUcznnSs7VnFHk+jmbOSdyLuVczrmSczVn9OX6OZs5J3Iu5VzOuZJzNWfUcv2czZwTOZdyLudcybmaMw7I2r0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI+TIor4RaT49jfWUqSIaEZMRCdXBh526wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA0kAq4vuRovFHzdvbahGRqv87jpZ/nInmoTI/Gc3hMl+O5vmcrSprzW89hPazO/2piB9HioH6O7cHPI9/f+fZ7Y9BvP3NjWefrXWyr/vi0AcDTx45fG549Dee2e5x2qoBxy60Z27eaoyPjI6O9Wyu5Xf/ZM+2ofy+xYPpOhGx8OZbb7Smp6fm7/9B+RHYRfVH6EGqfVx66kH1IGoHohkPp+/3cLhvf85Q7KXy+v9+pPjd9/6ze8HvXP/r8SudZxvD/PM/27j+v7R5Rzu8/tc218vX//KavtX1/6mebS/l70b6axH1xRtz/Uci6gtvvnW8faN1fer61MyZEye+PDz85dMn+g9F1K+1p6d6Hj2QwwUAAAAAAAAAAAAAAACwf1IRvx8pWj9eS42IuFXN1xo6N/zc8Wf7oq+ab3XHvO3Xxy6fb7wye2NufmphYWqyMT7Tvjo7ObXTt6tX073GR0b3pDP3NLjH7R+svzI79+Z8+/ofL275+hP181cWFudbV7d+OQajiGj2bjlWNXh8ZLRq9HS7NVNVvbTlZPqPrj8V8V+R4uqZRvp83pbn/2+e4X/H/P+lzTvao/n/n+jZVr5nSkX8PFL8zl89E5+v2vlE3HXMcrm/ixTHzn4ul4tDZbluGzr3FejMDCzL/l+k+Kdf3Fm2Ox/yqY2yJ3d8YB8R5fgfjhTf/4vvxm/mbXfe/2Hr8X9i847ud/zXP3z8n+7Z9sQd9yvYddfJ4388Urz81DvxW3nbh93/o3vvjaO58O37c+zR3/9P9Wwbyu/72w+m6wAAAAAAAAAAAI+0/lTE30eKH47W0ot5205+/29y84726Pe/Pt2zbfLBrFd0zwe7PqgAAAAAcED0pyJ+EimuL75zew71nfO/e+Z//t7G/M+RtOnV6ud8v1bdN+BB/vyv11B+34nddxsAAAAAAAAAAAAAAAAAAAAOlJSKeDGvpz5Rzeef3HY99ZVI8er/PJ/LpSNlue468EPVn/WLszPHz09Pz15tLbauTE81xuZaV6fKuk9HirW//VyuW1Trq3fXm++s8b6xFvt8pBj9h27Zzlrs3bXJn94oe7Is+4lI8d//eGfZ7jrWn9ooe6os+zeR4uv/snXZIxtlT5dlvxspfvT1RrfsE2XZ7v1RP71R9oWrs8UejAoAAAAAAAAAAAAAAAAAAAAfN/2piD+PFP97Y/n2XP68/n9/z9PK29/sWe9/k1vVOv9D1fr/2z2+n/X/q/sKLG33rgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8HhKUcRbkWLu4lpaGSifd9QvtGdu3hofGd262mCqavZV5cuv+slTp8986cXhs9388PoP2mfi9bHL5xuvzN6Ym59aWJiabIzPtK/OTk7teA+7rb/ZseoANG68cXPy2rWFxqkXTt/x8q2hDwaePDJ0bvi54892y46PjI6O9ZSp9d/3u98lbbP9UBTx15Hi+e/9NP1wIKKI3R+Le3x29tpg1YljVSfGR0arjky3WzOL5YuXugeiiGj0VGp2j9E+jMWuNCOWyuaXDT5Wdm9srjXfujI91bjUml9sL7ZnZy6lTmvL/jSiiLMpYjkiVgfu3l1/FPFGpPjO4bX0rwMRfd3j8MWLY189cWr7dhR72McdKNvZ6I9YLj7qmK2vr6/vXzsPuoEo4p8jxc/ePRr/NhBRi85XfCHitTJ/EPF2dMY7lR+MMxHvb/E54tFUiyL+vxz/c2vp3YHyfNA9r1z4WuMrM9dme8p2zyuP/PVhPx3w60k9ivhRdcZfS//u7zUAAAAAAAAAAAAAAADAAVLEr0eKl947mqr5wbfnFLdnrjcut65Md6b1def+dedMr6+vrzdSJ5s5J3Iu5VzOuZJzNWcUuX7OZpn19fWJ/Hwp53LOlZyrOaMv18/ZzDmRcynncs6VnKs5o5br52zmnMi5lHM550rO1ZxxQObuAQAAAAAAAAAAAAAAAAAAj5ei+i/Ft7+xltYHOutLT0QnV6wH+tj7ZQAAAP//5dj8GA==") syz_mount_image$udf(&(0x7f00000002c0), &(0x7f0000000080)='./file0\x00', 0x4006, &(0x7f0000002440)=ANY=[], 0xff, 0xc0c, &(0x7f0000001500)="$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") add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x57, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x0, 0x0) mount(0x0, &(0x7f0000004580)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') creat(&(0x7f0000000100)='./bus\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0) r2 = open(&(0x7f00000004c0)='./bus\x00', 0x143042, 0x0) ftruncate(r2, 0x2008002) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r3, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}]}, 0x38}}, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="530000000700004600995e509ca397af"], 0x53) 25.777348559s ago: executing program 0 (id=3395): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000300)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='bic\x00', 0x4) sendto$inet(r0, &(0x7f0000000340)='\b', 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 24.751800687s ago: executing program 0 (id=3397): r0 = epoll_create1(0x0) unshare(0x8000000) mq_open(&(0x7f0000000040)='${$\x00', 0x840, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 24.385742954s ago: executing program 4 (id=3399): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0200000004000000080000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001900)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xd, 0x1f}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x50}}, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000a00", @ANYRES32=r5, @ANYBLOB="08000500", @ANYRES32=r5, @ANYBLOB="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"], 0x4c}, 0x1, 0xba01}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$key(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x2, 0x7, 0xc, 0x7, 0x2, 0x0, 0x70bd27, 0x25dfdbff}, 0x10}}, 0x2400c010) syz_usb_connect(0x2, 0x0, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000000400000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000009c0)='kfree\x00', r7}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 24.252120724s ago: executing program 2 (id=3400): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 24.055388079s ago: executing program 5 (id=3401): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) syz_clone(0x1025000, &(0x7f0000000340), 0x0, &(0x7f0000000080), 0x0, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) 23.930458783s ago: executing program 3 (id=3402): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0420eb00000000000100090000007fe708000000bdc8a0930136388520a54a95a0a1094ada47f103d4dda5db7d9eddd63c0d1832120bb29b66c45420de69818b4a042d06"]) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="3081a3", 0x1001, r1) 23.679415037s ago: executing program 2 (id=3404): r0 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002200)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7}, 0x50) 23.576637614s ago: executing program 0 (id=3405): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="00220f0000000b574e69392bf85edacab3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) read$hiddev(r1, 0x0, 0x0) 23.394506516s ago: executing program 3 (id=3406): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed7f0000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001b0000000c00018008000100", @ANYRES32=r4], 0x20}}, 0x0) 23.175448166s ago: executing program 2 (id=3407): r0 = socket$inet6(0xa, 0x6, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) 22.928836227s ago: executing program 3 (id=3408): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000500)={0x0, @in6={{0xa, 0x4e21, 0xfffffffc, @empty, 0xc8}}, 0x6, 0xd904}, 0x90) 22.791170092s ago: executing program 2 (id=3409): r0 = open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f8) sched_setscheduler(0x0, 0x5, &(0x7f0000000100)) sendfile(r0, r0, 0x0, 0x100000000) 22.651618444s ago: executing program 5 (id=3410): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00)\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syslog(0x4, 0x0, 0x0) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000180)={0x0, 0xfffffffe, 0x1, 0x3fc}, &(0x7f0000000380)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) epoll_create(0x80000000) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x6e, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@tipc=@name={0x1e, 0x2, 0x2, {{0x43, 0x1}, 0x1}}, 0x80, &(0x7f0000000a00), 0x0, &(0x7f0000000a80)=[{0x58, 0x115, 0x2, "5bbc620ea463175112d8b2388d620b5a9d25654ddda671143b90ae6a95baa231c5e62009c6060f0487f9cce8cfe16f7922b1a386776dd75555472d183a2668e09615c93e9b28"}, {0x10, 0xff, 0x3ff00}], 0x68}, 0x0, 0x40000, 0x1, {0x0, r5}}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) futex(0x0, 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, &(0x7f0000048000), 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(0xffffffffffffffff, 0x3) r6 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r6, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r7 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg(r7, &(0x7f0000001500), 0x588, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000000), &(0x7f0000048000), 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x16}]}) mincore(&(0x7f0000f0c000/0x3000)=nil, 0x0, &(0x7f0000afaf0a)=""/246) 22.458774959s ago: executing program 3 (id=3412): r0 = io_uring_setup(0x2e34, &(0x7f0000000180)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r4, r3, 0x7, 0x0, 0x0, @void, @value}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) write$binfmt_elf32(r5, &(0x7f00000014c0)=ANY=[], 0x46b) sendmmsg$inet(r5, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="ed", 0x1}, {&(0x7f0000000200)="b5", 0x1}, {&(0x7f0000000340)='.', 0x1}, {&(0x7f0000000140)='U', 0x1}, {&(0x7f0000000180)}], 0x5}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000580)="f1", 0x1}, {&(0x7f0000000c80)='a', 0x1}, {&(0x7f0000000b40)='M', 0x1}, {&(0x7f0000000d80)='o', 0x1}, {&(0x7f0000000e80)='\b', 0x1}], 0x5}, 0x70040000}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="bb", 0x1}, {&(0x7f00000007c0)="a1", 0x1}, {&(0x7f0000000800)='s', 0x1}, {&(0x7f00000009c0)='\\', 0x1}], 0x4}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000440)="88", 0x1}, {&(0x7f0000000840)="e5", 0x1}, {&(0x7f0000001040)="96", 0x1}], 0x3}}], 0x4, 0x4048841) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r4, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r2}, 0x20) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 22.13889487s ago: executing program 3 (id=3413): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f00000001c0)={[{@discard}, {@block_validity}, {@resuid}, {@noblock_validity}, {@minixdf}, {@errors_remount}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000000600)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, 0x0, 0x15) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file1\x00', 0x2000010, &(0x7f0000000f40)={[{@uid}, {@uid_ignore}, {@utf8}, {@anchor={'anchor', 0x3d, 0x1}}, {}, {@shortad}, {@gid}, {@umask}, {@gid_ignore}, {@noadinicb}, {@undelete}, {}, {@lastblock={'lastblock', 0x3d, 0x1}}, {@uid_ignore}, {@nostrict}]}, 0x1, 0xc43, &(0x7f0000000200)="$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") syz_mount_image$udf(&(0x7f00000002c0), &(0x7f0000000080)='./file0\x00', 0x4006, &(0x7f0000002440)=ANY=[], 0xff, 0xc0c, &(0x7f0000001500)="$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") add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x57, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x0, 0x0) mount(0x0, &(0x7f0000004580)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') creat(&(0x7f0000000100)='./bus\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0) r2 = open(&(0x7f00000004c0)='./bus\x00', 0x143042, 0x0) ftruncate(r2, 0x2008002) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r3, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}]}, 0x38}}, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="530000000700004600995e509ca397af"], 0x53) 22.114835928s ago: executing program 2 (id=3414): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x2814000, &(0x7f0000000480)={[{@user_xattr}, {@init_itable_val={'init_itable', 0x3d, 0x20000003}}, {@dioread_lock}, {@max_batch_time={'max_batch_time', 0x3d, 0x4000000}}, {@block_validity}, {@i_version}, {}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xc4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x20}}, {@dioread_nolock}, {@discard}, {@block_validity}, {@user_xattr}, {@grpid}]}, 0x1, 0x558, &(0x7f0000001b00)="$eJzs3d9rW1UcAPDvTdP91nUwhopIYQ9O5tKt9ccEH+aj6HCg7zO0d2U0XUaTjrUO3B7ciy8yBBEH4qvou4/Df8C/YqCDIaPogy+V29602Zo0XZYtXfP5wE3Pufem535z8j2cm5twAxhYo9lDIeLliPgmiTjYtK0Y+cbR1f2WHlybzJYklpc//TuJJF/X2D/J/+7PKy9FxO9fRRwvbGy3trA4U65U0rm8PlafvTxWW1g8cXG2PJ1Op5fGJyZOvz0x/t677/Qs1jfO/fv9J3c+PP310aXvfr136FYSZ+JAvq05jidwvbkyGqP5azIcZx7Z8VQPGttOkn4fAF0ZyvN8OLIx4GAM5VkP7HxfRsQyMKAS+Q8DqjEPaJzb9+g8+Llx/4PVE6CN8RdXPxuJPSvnRvuWkofOjLLz3ZEetJ+18dtft29lS/TucwiAjq7fiIiTxeLG8S/Jx7/undzCPo+2YfyDZ+dONv95s9X8p7A2/4kW85/9LXK3G53zv3CvB820lc3/3m85/127aDUylNdeWJnz7V577osRcSyGd1+4WEk3u55zeunucrttzfO/bMnab8wF8+O4V9z98HOmyvVyd9FudP9GxCst57/JWv8nLfo/ez3ObbGNI+nt19pt6xz/07X8U8TrLft//YpWsvn1ybGs/0+uPrZs45+bR/5o136/48/6f9/m8Y8kzddra4/fxo97/kvbbev2/b8r+WylvCtfd7Vcr8+ditiVfLxx/fj6cxv1xv5Z/MeObj7+tXr/742Iz9dqNzaN/+bhX17tPv6nK4t/6rH6//ELdz/64od27W+t/99aKR3L12xl/NvqAT7JawcAAAAAAADbTSEiDkRSKK2VC4VSafX7HYdjX6FSrdWPX6jOX5qKld/KjsRwoXGl++BqPWl8/2GkqT7+SH0iIg5FxLdDe1fqpclqZarfwQMAAAAAAAAAAAAAAAAAAMA2sb/N7/8zfw417v4A7FjFvf0+AqBfOt7yvxd3egK2pY75D+xY8h8Gl/yHwSX/YXDJfxhc8h8Gl/yHwSX/AQAAAAAAAAAAAAAAAAAAAAAAAAAAoKfOnT2bLctLD65NZvWpKwvzM9UrJ6bS2kxpdn6yNFmdu1yarlanK2lpsjrb6f9VqtXLp8Zj/upYPa3Vx2oLi+dnq/OX6ucvzpan0/Pp8DOJCgAAAAAAAAAAAAAAAAAAAJ4vtYXFmXKlks4pKHRVKG6Pw1DoQeHnWF/T75EJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANb9HwAA//9Vczc6") r0 = syz_open_procfs(0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x14bb42, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x1217880, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) sendfile(r1, r0, 0x0, 0x80000000) 21.706249939s ago: executing program 4 (id=3415): socket(0x1e, 0x1, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x58}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r6, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d8000000400cc000800054001000000140004"], 0x58}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000cc0)={'wlan0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r8, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="2508007a0000000000000700000008000300", @ANYRES32=r7, @ANYBLOB="1400060064756d6d7930000000000000000000001400040076657468315f746f5f626f016400000005005300010000000800050004"], 0x54}}, 0x0) listen(r1, 0x0) r9 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r9, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r10 = dup3(r0, r0, 0x80000) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES32, @ANYRESOCT=r10], 0x0) r11 = accept(r1, 0x0, 0x0) sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[], 0xfffffdef}}, 0x200040c0) close_range(r0, 0xffffffffffffffff, 0x0) 21.273922653s ago: executing program 2 (id=3416): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x24}}, 0x0) 17.764233202s ago: executing program 5 (id=3417): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000200)={0x2, 'lo\x00'}, 0x18) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000000)={'lo\x00'}) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000000)={0x2, 'ip6gretap0\x00'}, 0x18) 16.48852089s ago: executing program 0 (id=3418): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="3081a3", 0x1001, r1) 15.336305685s ago: executing program 4 (id=3419): r0 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002200)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7}, 0x50) 15.105757131s ago: executing program 3 (id=3420): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed7f0000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001b0000000c00018008000100", @ANYRES32=r4], 0x20}}, 0x0) 14.453422656s ago: executing program 0 (id=3422): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) syz_clone(0x1025000, &(0x7f0000000340), 0x0, &(0x7f0000000080), 0x0, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) 13.421122264s ago: executing program 4 (id=3423): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x1a0e4, 0x18300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4000044) 11.348006162s ago: executing program 5 (id=3424): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000500)={0x0, @in6={{0xa, 0x4e21, 0xfffffffc, @empty, 0xc8}}, 0x6, 0xd904}, 0x90) 10.172838398s ago: executing program 0 (id=3426): sendmsg(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001439) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x2000000b) ppoll(&(0x7f0000000180)=[{r2}], 0x1, 0x0, 0x0, 0x0) close(r1) 9.867819724s ago: executing program 5 (id=3427): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0200000004000000080000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001900)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xd, 0x1f}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x50}}, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000a00", @ANYRES32=r5, @ANYBLOB="08000500", @ANYRES32=r5, @ANYBLOB="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"], 0x4c}, 0x1, 0xba01}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$key(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x2, 0x7, 0xc, 0x7, 0x2, 0x0, 0x70bd27, 0x25dfdbff}, 0x10}}, 0x2400c010) syz_usb_connect(0x2, 0x0, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000000400000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000009c0)='kfree\x00', r7}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 6.561387371s ago: executing program 1 (id=3428): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 6.119506511s ago: executing program 1 (id=3429): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00)\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syslog(0x4, 0x0, 0x0) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000180)={0x0, 0xfffffffe, 0x1, 0x3fc}, &(0x7f0000000380)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) epoll_create(0x80000000) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x6e, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@tipc=@name={0x1e, 0x2, 0x2, {{0x43, 0x1}, 0x1}}, 0x80, &(0x7f0000000a00), 0x0, &(0x7f0000000a80)=[{0x58, 0x115, 0x2, "5bbc620ea463175112d8b2388d620b5a9d25654ddda671143b90ae6a95baa231c5e62009c6060f0487f9cce8cfe16f7922b1a386776dd75555472d183a2668e09615c93e9b28"}, {0x10, 0xff, 0x3ff00}], 0x68}, 0x0, 0x40000, 0x1, {0x0, r5}}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) futex(0x0, 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, &(0x7f0000048000), 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(0xffffffffffffffff, 0x3) r6 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r6, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r7 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg(r7, &(0x7f0000001500), 0x588, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000000), &(0x7f0000048000), 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x16}]}) mincore(&(0x7f0000f0c000/0x3000)=nil, 0x0, &(0x7f0000afaf0a)=""/246) 5.070758256s ago: executing program 1 (id=3430): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="00220f0000000b574e69392bf85edacab3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) read$hiddev(r1, 0x0, 0x0) 2.51822946s ago: executing program 1 (id=3433): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffe39) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x3ffffffffffffda, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000280)=0x3) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x2e0, 0xd0, 0x2e0, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0) 285.86674ms ago: executing program 1 (id=3434): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="3081a3", 0x1001, r1) 0s ago: executing program 1 (id=3436): unshare(0x60600) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x6, @remote}, 0x10) kernel console output (not intermixed with test programs): 376696][T16000] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2973'. [ 1015.406987][ T5577] usb 4-1: device descriptor read/64, error -71 [ 1015.527937][ T5577] usb usb4-port1: attempt power cycle [ 1015.565980][T10022] usbhid 2-1:0.0: can't add hid device: -71 [ 1015.587722][T10022] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1015.611180][T10022] usb 2-1: USB disconnect, device number 8 [ 1015.937055][ T5577] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1015.985191][ T5577] usb 4-1: device descriptor read/8, error -71 [ 1016.236931][ T5577] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1016.284641][ T5577] usb 4-1: device descriptor read/8, error -71 [ 1016.398077][ T5577] usb usb4-port1: unable to enumerate USB device [ 1016.440477][T16031] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2986'. [ 1016.859124][T16039] sp0: Synchronizing with TNC [ 1016.865131][T16047] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2993'. [ 1017.225526][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 1017.225549][ T29] audit: type=1326 audit(1727172830.913:2003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16055 comm="syz.1.2998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc7297def9 code=0x7ffc0000 [ 1017.302724][ T29] audit: type=1326 audit(1727172830.913:2004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16055 comm="syz.1.2998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc7297def9 code=0x7ffc0000 [ 1017.319094][T16045] libceph: resolve '0.0' (ret=-3): failed [ 1017.391311][ T29] audit: type=1326 audit(1727172830.953:2005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16055 comm="syz.1.2998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7efc7297def9 code=0x7ffc0000 [ 1017.511384][ T29] audit: type=1326 audit(1727172830.953:2006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16055 comm="syz.1.2998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc7297def9 code=0x7ffc0000 [ 1017.543516][ T29] audit: type=1326 audit(1727172830.973:2007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16055 comm="syz.1.2998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc7297def9 code=0x7ffc0000 [ 1017.577953][ T29] audit: type=1326 audit(1727172830.983:2008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16055 comm="syz.1.2998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7efc7297def9 code=0x7ffc0000 [ 1017.578011][ T29] audit: type=1326 audit(1727172831.043:2009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16055 comm="syz.1.2998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc7297def9 code=0x7ffc0000 [ 1017.578058][ T29] audit: type=1326 audit(1727172831.043:2010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16055 comm="syz.1.2998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc7297def9 code=0x7ffc0000 [ 1017.845138][T16073] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3003'. [ 1017.986445][T16079] netlink: 'syz.4.3005': attribute type 11 has an invalid length. [ 1018.029756][T16079] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3005'. [ 1018.180200][T16086] loop1: detected capacity change from 0 to 512 [ 1018.192488][T16086] EXT4-fs: Ignoring removed bh option [ 1018.198633][T16086] EXT4-fs: Ignoring removed mblk_io_submit option [ 1018.207053][T16086] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1018.218549][T16086] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 1018.227655][T16086] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1018.235317][T16086] Quota error (device loop1): do_check_range: Getting dqdh_next_free 196613 out of range 0-5 [ 1018.254497][T16086] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 1018.267357][T16086] EXT4-fs error (device loop1): ext4_acquire_dquot:6879: comm syz.1.3008: Failed to acquire dquot type 1 [ 1018.288953][T16086] EXT4-fs (loop1): Remounting filesystem read-only [ 1018.295853][T16086] EXT4-fs (loop1): 1 orphan inode deleted [ 1018.313763][T16086] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1018.316219][T16089] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3009'. [ 1018.877717][T16114] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3019'. [ 1018.956798][ T5695] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1019.116531][ T5695] usb 3-1: Using ep0 maxpacket: 16 [ 1019.142271][ T5695] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1019.153968][T14971] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1019.163413][ T5695] usb 3-1: config 0 has no interfaces? [ 1019.181896][ T5695] usb 3-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 1019.195112][T16122] netlink: 172 bytes leftover after parsing attributes in process `syz.3.3023'. [ 1019.205515][ T5695] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1019.221999][ T5695] usb 3-1: Product: syz [ 1019.228905][ T5695] usb 3-1: Manufacturer: syz [ 1019.234188][ T5695] usb 3-1: SerialNumber: syz [ 1019.260430][ T5695] usb 3-1: config 0 descriptor?? [ 1019.496152][ T5695] usb 3-1: USB disconnect, device number 8 [ 1019.971216][T16147] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3032'. [ 1020.111024][T16154] loop3: detected capacity change from 0 to 512 [ 1020.118477][T16154] EXT4-fs: Ignoring removed bh option [ 1020.124021][T16154] EXT4-fs: Ignoring removed mblk_io_submit option [ 1020.140841][T16154] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1020.153611][T16154] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 1020.169806][T16154] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1020.204451][T16154] EXT4-fs error (device loop3): ext4_acquire_dquot:6879: comm syz.3.3036: Failed to acquire dquot type 1 [ 1020.239350][T16154] EXT4-fs (loop3): Remounting filesystem read-only [ 1020.255068][T16154] EXT4-fs (loop3): 1 orphan inode deleted [ 1020.283744][T16154] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1020.516684][ T5229] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1020.527105][ T5229] Bluetooth: hci4: Injecting HCI hardware error event [ 1020.536438][ T8386] Bluetooth: hci4: hardware error 0x00 [ 1021.070052][T16180] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3047'. [ 1021.207813][T14849] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1021.666168][ T25] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 1021.847978][ T25] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1021.897832][ T25] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1021.916909][ T25] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 1021.953453][ T25] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1021.973226][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1022.009978][T16190] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1022.019795][ T25] hub 4-1:1.0: bad descriptor, ignoring hub [ 1022.025743][ T25] hub 4-1:1.0: probe with driver hub failed with error -5 [ 1022.058886][ T25] cdc_wdm 4-1:1.0: skipping garbage [ 1022.064268][ T25] cdc_wdm 4-1:1.0: skipping garbage [ 1022.080511][ T25] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1022.108559][ T25] cdc_wdm 4-1:1.0: Unknown control protocol [ 1022.256732][ T29] kauditd_printk_skb: 69 callbacks suppressed [ 1022.256755][ T29] audit: type=1326 audit(1727172835.953:2078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16202 comm="syz.4.3057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f081597def9 code=0x7ffc0000 [ 1022.259865][ T29] audit: type=1326 audit(1727172835.953:2079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16202 comm="syz.4.3057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f081597def9 code=0x7ffc0000 [ 1022.384574][T11160] usb 4-1: USB disconnect, device number 10 [ 1022.756119][T11160] usb 4-1: new low-speed USB device number 11 using dummy_hcd [ 1022.836097][ T8386] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1022.947864][T11160] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1022.959004][T11160] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1022.968220][T11160] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 1023.005330][T11160] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1023.051706][T11160] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1023.098092][T16190] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1023.126339][T11160] hub 4-1:1.0: bad descriptor, ignoring hub [ 1023.157743][T11160] hub 4-1:1.0: probe with driver hub failed with error -5 [ 1023.190054][T11160] cdc_wdm 4-1:1.0: skipping garbage [ 1023.202995][T11160] cdc_wdm 4-1:1.0: skipping garbage [ 1023.216959][T11160] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1023.223213][T11160] cdc_wdm 4-1:1.0: Unknown control protocol [ 1023.308318][ T29] audit: type=1326 audit(1727172836.984:2080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16221 comm="syz.0.3065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05c8f7def9 code=0x7ffc0000 [ 1023.331869][ T29] audit: type=1326 audit(1727172836.984:2081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16221 comm="syz.0.3065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05c8f7def9 code=0x7ffc0000 [ 1023.356146][ T29] audit: type=1326 audit(1727172837.034:2082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16221 comm="syz.0.3065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=139 compat=0 ip=0x7f05c8f7def9 code=0x7ffc0000 [ 1023.379646][ T29] audit: type=1326 audit(1727172837.034:2083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16221 comm="syz.0.3065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05c8f7def9 code=0x7ffc0000 [ 1023.415983][ T29] audit: type=1326 audit(1727172837.034:2084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16221 comm="syz.0.3065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05c8f7def9 code=0x7ffc0000 [ 1023.416224][T10022] usb 4-1: USB disconnect, device number 11 [ 1023.439409][ T29] audit: type=1326 audit(1727172837.104:2085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16221 comm="syz.0.3065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f05c8f7def9 code=0x7ffc0000 [ 1023.468106][ T29] audit: type=1326 audit(1727172837.104:2086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16221 comm="syz.0.3065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05c8f7def9 code=0x7ffc0000 [ 1023.491896][ T29] audit: type=1326 audit(1727172837.104:2087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16221 comm="syz.0.3065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f05c8f7def9 code=0x7ffc0000 [ 1024.488257][T16181] coredump: 78(syz.2.3044): interrupted: fatal signal pending [ 1024.516002][T16181] coredump: 78(syz.2.3044): written to core: VMAs: 37, size 97550336; core: 36308122 bytes, pos 50290688 [ 1025.126175][T16270] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3086'. [ 1025.193809][T16270] geneve0: entered allmulticast mode [ 1026.030975][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1026.672568][T16307] netlink: 'syz.5.3104': attribute type 29 has an invalid length. [ 1026.695773][T16307] netlink: 'syz.5.3104': attribute type 29 has an invalid length. [ 1027.245756][T11160] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1027.365946][ T25] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1027.645763][T11160] usb 2-1: Using ep0 maxpacket: 8 [ 1027.672093][T11160] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1027.825672][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 1027.916908][T11160] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1027.926502][T11160] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1027.934539][T11160] usb 2-1: Product: syz [ 1027.939498][T11160] usb 2-1: Manufacturer: syz [ 1027.944132][T11160] usb 2-1: SerialNumber: syz [ 1027.952846][T11160] usb 2-1: config 0 descriptor?? [ 1027.965516][ T25] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1027.999864][ T25] usb 3-1: config 0 has no interfaces? [ 1028.012059][T11160] streamzap 2-1:0.0: streamzap_probe: endpoint doesn't match input device 0203 [ 1028.145535][ T25] usb 3-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 1028.155030][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1028.163256][ T25] usb 3-1: Product: syz [ 1028.167537][ T25] usb 3-1: Manufacturer: syz [ 1028.172166][ T25] usb 3-1: SerialNumber: syz [ 1028.186024][ T25] usb 3-1: config 0 descriptor?? [ 1028.400792][ T5789] usb 3-1: USB disconnect, device number 9 [ 1028.725085][ T25] usb 2-1: USB disconnect, device number 9 [ 1029.400511][T16362] loop2: detected capacity change from 0 to 1024 [ 1029.474575][T16362] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1031.757214][T15311] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 1031.777189][T15311] EXT4-fs (loop2): Remounting filesystem read-only [ 1031.934418][T16406] netlink: 'syz.1.3141': attribute type 9 has an invalid length. [ 1032.079101][T16406] netlink: 399 bytes leftover after parsing attributes in process `syz.1.3141'. [ 1033.521171][T16422] coredump: 512(syz.0.3146): written to core: VMAs: 35, size 97419264; core: 71767082 bytes, pos 97427456 [ 1034.351655][T15311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1034.544296][T14524] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1034.772805][T16438] loop4: detected capacity change from 0 to 512 [ 1034.971749][T16438] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 1035.021264][T16438] UDF-fs: Scanning with blocksize 512 failed [ 1035.079931][T16438] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 1035.134673][T16438] UDF-fs: Scanning with blocksize 1024 failed [ 1035.178335][T14524] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1035.215003][T16438] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 1035.318144][T16438] UDF-fs: Scanning with blocksize 2048 failed [ 1035.336920][T16438] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 1035.478253][T16438] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1035.590948][T14524] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1035.635814][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 1035.635837][ T29] audit: type=1800 audit(1727172849.335:2128): pid=16438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3157" name="bus" dev="loop4" ino=42 res=0 errno=0 [ 1035.718161][ T5229] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1035.736709][ T5229] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1035.747059][T16454] bridge0: port 3(vlan3) entered blocking state [ 1035.754098][ T5229] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1035.764889][T16454] bridge0: port 3(vlan3) entered disabled state [ 1035.784014][ T5229] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1035.793434][ T5229] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1035.801793][ T5229] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1035.809795][T16454] vlan3: entered allmulticast mode [ 1035.865351][T16454] vlan3: left allmulticast mode [ 1035.949206][T16472] PKCS7: Unknown OID: [5] 0.0 [ 1036.002687][T16316] coredump: 494(syz.0.3105): written to core: VMAs: 37, size 97550336; core: 71775386 bytes, pos 97558528 [ 1036.014628][T16472] PKCS7: Only support pkcs7_signedData type [ 1036.091849][T14524] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1036.424620][ T5572] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1036.441533][T14524] bridge_slave_1: left allmulticast mode [ 1036.458048][T14524] bridge_slave_1: left promiscuous mode [ 1036.478989][T14524] bridge0: port 2(bridge_slave_1) entered disabled state [ 1036.517326][T14524] bridge_slave_0: left allmulticast mode [ 1036.543557][T14524] bridge_slave_0: left promiscuous mode [ 1036.564132][T14524] bridge0: port 1(bridge_slave_0) entered disabled state [ 1036.614624][ T5572] usb 4-1: Using ep0 maxpacket: 8 [ 1036.622531][ T5572] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1036.643764][ T5572] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1036.663522][ T5572] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1036.696603][ T5572] usb 4-1: Product: syz [ 1036.711029][ T5572] usb 4-1: Manufacturer: syz [ 1036.727291][ T5572] usb 4-1: SerialNumber: syz [ 1036.748216][ T5572] usb 4-1: config 0 descriptor?? [ 1036.781283][ T5572] streamzap 4-1:0.0: streamzap_probe: endpoint doesn't match input device 0203 [ 1037.555904][T10022] usb 4-1: USB disconnect, device number 12 [ 1037.674608][T16491] loop3: detected capacity change from 0 to 1024 [ 1037.682143][T16491] EXT4-fs: Ignoring removed i_version option [ 1037.747635][T16491] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1037.782489][ T29] audit: type=1326 audit(1727172851.475:2129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16495 comm="syz.4.3178" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f081597def9 code=0x0 [ 1037.875388][ T5229] Bluetooth: hci2: command tx timeout [ 1038.417654][T14524] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1038.455733][T14524] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1038.483849][T14524] bond0 (unregistering): Released all slaves [ 1038.693300][T16376] coredump: 506(syz.0.3126): written to core: VMAs: 37, size 97550336; core: 71775386 bytes, pos 97558528 [ 1039.173369][T14849] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1039.438229][T16525] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1039.514356][ T29] audit: type=1326 audit(1727172853.105:2130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16517 comm="syz.5.3185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe17eb7def9 code=0x7ffc0000 [ 1039.969610][ T29] audit: type=1326 audit(1727172853.115:2131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16517 comm="syz.5.3185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe17eb7def9 code=0x7ffc0000 [ 1040.015581][ T5229] Bluetooth: hci2: command tx timeout [ 1040.133874][ T29] audit: type=1326 audit(1727172853.115:2132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16517 comm="syz.5.3185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe17eb7c890 code=0x7ffc0000 [ 1040.159610][ T29] audit: type=1326 audit(1727172853.115:2133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16517 comm="syz.5.3185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fe17eb7f727 code=0x7ffc0000 [ 1040.202720][ T29] audit: type=1326 audit(1727172853.115:2134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16517 comm="syz.5.3185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe17eb7def9 code=0x7ffc0000 [ 1040.275671][ T29] audit: type=1326 audit(1727172853.115:2135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16517 comm="syz.5.3185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fe17eb7f727 code=0x7ffc0000 [ 1040.332340][ T29] audit: type=1326 audit(1727172853.115:2136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16517 comm="syz.5.3185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe17eb7cb8a code=0x7ffc0000 [ 1040.336457][T16465] chnl_net:caif_netlink_parms(): no params data found [ 1040.412646][ T29] audit: type=1326 audit(1727172853.115:2137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16517 comm="syz.5.3185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe17eb7def9 code=0x7ffc0000 [ 1040.559406][T14524] hsr_slave_0: left promiscuous mode [ 1040.568165][T14524] hsr_slave_1: left promiscuous mode [ 1040.614223][T14524] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1040.621909][T14524] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1040.654921][T14524] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1040.689948][T14524] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1040.778899][T14524] veth1_macvtap: left promiscuous mode [ 1040.804313][T14524] veth0_macvtap: left promiscuous mode [ 1040.814571][T14524] veth1_vlan: left promiscuous mode [ 1040.819935][T14524] veth0_vlan: left promiscuous mode [ 1040.943029][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 1040.943054][ T29] audit: type=1326 audit(1727172854.636:2151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16554 comm="syz.5.3200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe17eb7def9 code=0x7ffc0000 [ 1041.007799][ T8386] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1041.021181][ T8386] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1041.031788][ T8386] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1041.043666][ T8386] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1041.051731][ T8386] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1041.059805][ T8386] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1041.102300][ T29] audit: type=1326 audit(1727172854.636:2152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16554 comm="syz.5.3200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe17eb7def9 code=0x7ffc0000 [ 1041.152613][ T29] audit: type=1326 audit(1727172854.696:2153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16554 comm="syz.5.3200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=139 compat=0 ip=0x7fe17eb7def9 code=0x7ffc0000 [ 1041.222760][ T29] audit: type=1326 audit(1727172854.696:2154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16554 comm="syz.5.3200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe17eb7def9 code=0x7ffc0000 [ 1041.311234][ T29] audit: type=1326 audit(1727172854.696:2155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16554 comm="syz.5.3200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe17eb7def9 code=0x7ffc0000 [ 1041.335398][ T29] audit: type=1326 audit(1727172854.706:2156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16556 comm="syz.4.3201" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f081597def9 code=0x0 [ 1041.389888][ T29] audit: type=1326 audit(1727172854.736:2157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16554 comm="syz.5.3200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fe17eb7def9 code=0x7ffc0000 [ 1041.413705][ T29] audit: type=1326 audit(1727172854.736:2158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16554 comm="syz.5.3200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe17eb7def9 code=0x7ffc0000 [ 1041.436765][ T29] audit: type=1326 audit(1727172854.736:2159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16554 comm="syz.5.3200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe17eb7def9 code=0x7ffc0000 [ 1041.459633][ T29] audit: type=1326 audit(1727172854.736:2160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16554 comm="syz.5.3200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe17eb7def9 code=0x7ffc0000 [ 1042.072926][T16570] loop4: detected capacity change from 0 to 512 [ 1042.101133][T16570] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 1042.109366][T16570] UDF-fs: Scanning with blocksize 512 failed [ 1042.122220][T16570] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 1042.129864][T16570] UDF-fs: Scanning with blocksize 1024 failed [ 1042.138454][ T8386] Bluetooth: hci2: command tx timeout [ 1042.264563][T16570] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 1042.272178][T16570] UDF-fs: Scanning with blocksize 2048 failed [ 1042.285760][T16570] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 1042.318831][T16570] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1042.840495][T14524] team0 (unregistering): Port device team_slave_1 removed [ 1042.889746][T14524] team0 (unregistering): Port device team_slave_0 removed [ 1043.162455][ T8386] Bluetooth: hci5: command tx timeout [ 1043.529974][T16549] tipc: Started in network mode [ 1043.536964][T16549] tipc: Node identity f7, cluster identity 4711 [ 1043.543260][T16549] tipc: Node number set to 247 [ 1043.787092][T16579] loop1: detected capacity change from 0 to 1024 [ 1043.804800][T16579] EXT4-fs: Ignoring removed i_version option [ 1043.858745][T16579] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1043.952900][T16465] bridge0: port 1(bridge_slave_0) entered blocking state [ 1043.980476][T16465] bridge0: port 1(bridge_slave_0) entered disabled state [ 1043.994875][T16465] bridge_slave_0: entered allmulticast mode [ 1044.008850][T16465] bridge_slave_0: entered promiscuous mode [ 1044.067691][T16465] bridge0: port 2(bridge_slave_1) entered blocking state [ 1044.100247][T16465] bridge0: port 2(bridge_slave_1) entered disabled state [ 1044.113791][T16465] bridge_slave_1: entered allmulticast mode [ 1044.121424][T16465] bridge_slave_1: entered promiscuous mode [ 1044.203607][ T8386] Bluetooth: hci2: command tx timeout [ 1044.262081][T16465] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1044.336623][T16465] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1044.489743][ T25] IPVS: starting estimator thread 0... [ 1044.538349][T16558] chnl_net:caif_netlink_parms(): no params data found [ 1044.561379][T16465] team0: Port device team_slave_0 added [ 1044.569016][T16607] tipc: Started in network mode [ 1044.574886][T16607] tipc: Node identity f7, cluster identity 4711 [ 1044.581275][T16607] tipc: Node number set to 247 [ 1044.593601][T16605] IPVS: using max 17 ests per chain, 40800 per kthread [ 1044.645989][T14971] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1044.691489][T14524] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1044.897982][T16465] team0: Port device team_slave_1 added [ 1044.904909][T16613] netlink: 'syz.4.3218': attribute type 11 has an invalid length. [ 1044.971409][T16615] netlink: 'syz.4.3218': attribute type 11 has an invalid length. [ 1044.985302][T14524] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1045.058269][T16465] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1045.082940][T16465] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1045.145088][T16465] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1045.166751][T16465] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1045.174728][T16465] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1045.201094][T16465] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1045.233706][ T5229] Bluetooth: hci5: command tx timeout [ 1045.242361][T14524] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1045.256173][ T5229] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1045.266692][ T5229] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1045.286588][ T5229] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1045.293641][ T25] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1045.307784][ T5229] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1045.316983][ T5229] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1045.332500][ T5229] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1045.380278][T14524] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1045.394592][T16558] bridge0: port 1(bridge_slave_0) entered blocking state [ 1045.407477][T16558] bridge0: port 1(bridge_slave_0) entered disabled state [ 1045.415656][T16558] bridge_slave_0: entered allmulticast mode [ 1045.422619][T16558] bridge_slave_0: entered promiscuous mode [ 1045.431849][T16558] bridge0: port 2(bridge_slave_1) entered blocking state [ 1045.439326][T16558] bridge0: port 2(bridge_slave_1) entered disabled state [ 1045.447257][T16558] bridge_slave_1: entered allmulticast mode [ 1045.455404][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1045.463155][T16558] bridge_slave_1: entered promiscuous mode [ 1045.467398][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1045.503486][ T25] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1045.516701][ T25] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1045.526356][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1045.536624][ T25] usb 5-1: config 0 descriptor?? [ 1045.542335][T16613] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1045.574750][T16465] hsr_slave_0: entered promiscuous mode [ 1045.590495][T16465] hsr_slave_1: entered promiscuous mode [ 1045.597751][T16465] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1045.605523][T16465] Cannot create hsr debugfs directory [ 1045.618763][T16558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1045.654259][T16558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1045.737123][T16558] team0: Port device team_slave_0 added [ 1045.790351][T16558] team0: Port device team_slave_1 added [ 1045.900822][T14524] bridge_slave_1: left allmulticast mode [ 1045.907061][T14524] bridge_slave_1: left promiscuous mode [ 1045.912888][T14524] bridge0: port 2(bridge_slave_1) entered disabled state [ 1045.935865][T14524] bridge_slave_0: left allmulticast mode [ 1045.941651][T14524] bridge_slave_0: left promiscuous mode [ 1045.948863][T14524] bridge0: port 1(bridge_slave_0) entered disabled state [ 1045.970928][ T25] usbhid 5-1:0.0: can't add hid device: -71 [ 1045.977178][ T25] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1045.990524][ T25] usb 5-1: USB disconnect, device number 5 [ 1046.610904][T14524] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1046.626438][T14524] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1046.648363][T14524] bond0 (unregistering): Released all slaves [ 1046.676399][T16558] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1046.696121][T16558] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1046.764686][T16558] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1046.841392][T16634] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3224'. [ 1046.854512][T16639] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1046.863056][T16639] batadv_slave_0: entered promiscuous mode [ 1046.972755][T16558] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1046.989361][T16558] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1047.031602][T16558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1047.075990][T16645] sp0: Synchronizing with TNC [ 1047.320623][ T8386] Bluetooth: hci5: command tx timeout [ 1047.396444][ T8386] Bluetooth: hci4: command tx timeout [ 1047.955024][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 1047.955043][ T29] audit: type=1326 audit(1727172861.566:2199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16651 comm="syz.5.3230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe17eb7def9 code=0x7ffc0000 [ 1047.991054][ T29] audit: type=1326 audit(1727172861.686:2200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16651 comm="syz.5.3230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=139 compat=0 ip=0x7fe17eb7def9 code=0x7ffc0000 [ 1047.994184][T16645] libceph: resolve '0.0' (ret=-3): failed [ 1048.016838][ T29] audit: type=1326 audit(1727172861.686:2201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16651 comm="syz.5.3230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe17eb7def9 code=0x7ffc0000 [ 1048.088753][ T29] audit: type=1326 audit(1727172861.686:2202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16651 comm="syz.5.3230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe17eb7def9 code=0x7ffc0000 [ 1048.112847][ T29] audit: type=1326 audit(1727172861.716:2203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16651 comm="syz.5.3230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe17eb7def9 code=0x7ffc0000 [ 1048.160390][ T29] audit: type=1326 audit(1727172861.716:2204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16651 comm="syz.5.3230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe17eb7def9 code=0x7ffc0000 [ 1048.197393][T14524] hsr_slave_0: left promiscuous mode [ 1048.222566][ T29] audit: type=1326 audit(1727172861.716:2205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16651 comm="syz.5.3230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fe17eb7def9 code=0x7ffc0000 [ 1048.246522][T14524] hsr_slave_1: left promiscuous mode [ 1048.266206][T14524] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1048.280763][T14524] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1048.291130][T14524] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1048.305914][T14524] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1048.309183][ T29] audit: type=1326 audit(1727172861.716:2206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16651 comm="syz.5.3230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe17eb7def9 code=0x7ffc0000 [ 1048.343526][ T29] audit: type=1326 audit(1727172861.716:2207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16651 comm="syz.5.3230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe17eb7def9 code=0x7ffc0000 [ 1048.375758][ T29] audit: type=1326 audit(1727172861.716:2208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16651 comm="syz.5.3230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe17eb7def9 code=0x7ffc0000 [ 1048.408613][T14524] veth1_macvtap: left promiscuous mode [ 1048.414576][T14524] veth0_macvtap: left promiscuous mode [ 1048.420265][T14524] veth1_vlan: left promiscuous mode [ 1048.425875][T14524] veth0_vlan: left promiscuous mode [ 1049.128430][T14524] team0 (unregistering): Port device team_slave_1 removed [ 1049.192371][T14524] team0 (unregistering): Port device team_slave_0 removed [ 1049.394851][ T8386] Bluetooth: hci5: command tx timeout [ 1049.483120][ T8386] Bluetooth: hci4: command tx timeout [ 1049.666803][T16558] hsr_slave_0: entered promiscuous mode [ 1049.683735][T16558] hsr_slave_1: entered promiscuous mode [ 1049.725162][T16621] chnl_net:caif_netlink_parms(): no params data found [ 1050.000258][T16676] netlink: 'syz.4.3237': attribute type 11 has an invalid length. [ 1050.074741][T16678] netlink: 'syz.4.3237': attribute type 11 has an invalid length. [ 1050.372999][T11160] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1050.420816][T16621] bridge0: port 1(bridge_slave_0) entered blocking state [ 1050.440020][T16621] bridge0: port 1(bridge_slave_0) entered disabled state [ 1050.458032][T16621] bridge_slave_0: entered allmulticast mode [ 1050.469704][T16621] bridge_slave_0: entered promiscuous mode [ 1050.518915][T16621] bridge0: port 2(bridge_slave_1) entered blocking state [ 1050.537065][T16621] bridge0: port 2(bridge_slave_1) entered disabled state [ 1050.550793][T16621] bridge_slave_1: entered allmulticast mode [ 1050.561146][T16621] bridge_slave_1: entered promiscuous mode [ 1050.574426][T11160] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1050.611928][T11160] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1050.655307][T11160] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1050.714894][T11160] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1050.733532][T11160] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1050.747964][T11160] usb 5-1: config 0 descriptor?? [ 1050.756993][T16676] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1050.788234][T16621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1050.863804][T16465] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1050.888356][T16621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1050.925088][T16465] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1050.987180][T14524] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1051.273289][T11160] usbhid 5-1:0.0: can't add hid device: -71 [ 1051.346826][T16465] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1051.600664][T11160] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1051.663676][ T8386] Bluetooth: hci4: command tx timeout [ 1051.865461][T11160] usb 5-1: USB disconnect, device number 6 [ 1051.906728][T14524] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1052.006954][T16465] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1052.060091][T14524] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1052.080514][T16621] team0: Port device team_slave_0 added [ 1052.109517][T16621] team0: Port device team_slave_1 added [ 1052.160785][T14524] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1052.181849][T16621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1052.190420][T16621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1052.219715][T16621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1052.235260][T16621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1052.242458][T16621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1052.275001][T16621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1052.358245][T16621] hsr_slave_0: entered promiscuous mode [ 1052.365694][T16621] hsr_slave_1: entered promiscuous mode [ 1052.372148][T16621] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1052.380139][T16621] Cannot create hsr debugfs directory [ 1052.551006][T14524] bridge_slave_1: left allmulticast mode [ 1052.557614][T14524] bridge_slave_1: left promiscuous mode [ 1052.563544][T14524] bridge0: port 2(bridge_slave_1) entered disabled state [ 1052.575581][T14524] bridge_slave_0: left allmulticast mode [ 1052.581285][T14524] bridge_slave_0: left promiscuous mode [ 1052.587561][T14524] bridge0: port 1(bridge_slave_0) entered disabled state [ 1052.702852][ T5572] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1052.853222][ T5572] usb 5-1: Using ep0 maxpacket: 16 [ 1052.868645][ T5572] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1052.882389][ T5572] usb 5-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 1052.893751][ T5572] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1052.901780][ T5572] usb 5-1: Product: syz [ 1052.906706][ T5572] usb 5-1: Manufacturer: syz [ 1052.911333][ T5572] usb 5-1: SerialNumber: syz [ 1052.921113][ T5572] usb 5-1: config 0 descriptor?? [ 1052.929803][ T5572] usb 5-1: Found UVC 0.00 device syz (046d:0721) [ 1052.936942][ T5572] usb 5-1: No valid video chain found. [ 1053.135208][ T5572] usb 5-1: USB disconnect, device number 7 [ 1053.183053][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 1053.183070][ T29] audit: type=1326 audit(1727172866.877:2211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16699 comm="syz.0.3247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05c8f7def9 code=0x7ffc0000 [ 1053.224348][ T29] audit: type=1326 audit(1727172866.877:2212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16699 comm="syz.0.3247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05c8f7def9 code=0x7ffc0000 [ 1053.255662][ T29] audit: type=1326 audit(1727172866.917:2213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16699 comm="syz.0.3247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=139 compat=0 ip=0x7f05c8f7def9 code=0x7ffc0000 [ 1053.280325][ T29] audit: type=1326 audit(1727172866.917:2214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16699 comm="syz.0.3247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05c8f7def9 code=0x7ffc0000 [ 1053.303168][ T29] audit: type=1326 audit(1727172866.917:2215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16699 comm="syz.0.3247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05c8f7def9 code=0x7ffc0000 [ 1053.326884][ T29] audit: type=1326 audit(1727172866.917:2216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16699 comm="syz.0.3247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f05c8f7def9 code=0x7ffc0000 [ 1053.351212][ T29] audit: type=1326 audit(1727172866.917:2217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16699 comm="syz.0.3247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05c8f7def9 code=0x7ffc0000 [ 1053.374603][ T29] audit: type=1326 audit(1727172866.917:2218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16699 comm="syz.0.3247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05c8f7def9 code=0x7ffc0000 [ 1053.409652][T14524] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1053.410501][ T29] audit: type=1326 audit(1727172866.917:2219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16699 comm="syz.0.3247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f05c8f7def9 code=0x7ffc0000 [ 1053.442154][ T29] audit: type=1326 audit(1727172866.917:2220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16699 comm="syz.0.3247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05c8f7def9 code=0x7ffc0000 [ 1053.469350][T14524] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1053.488102][T14524] bond0 (unregistering): Released all slaves [ 1053.545928][T16465] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1053.587560][T16558] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1053.615843][T16558] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1053.646359][T16465] 8021q: adding VLAN 0 to HW filter on device team0 [ 1053.674502][T14524] tipc: Left network mode [ 1053.691655][T16558] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1053.734506][T16558] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1053.760870][T14551] bridge0: port 1(bridge_slave_0) entered blocking state [ 1053.768096][T14551] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1053.792674][ T8386] Bluetooth: hci4: command tx timeout [ 1053.875954][ T1260] ieee802154 phy0 wpan0: encryption failed: -22 [ 1053.892687][ T1260] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.107681][T16465] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1054.118229][T16465] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1054.155532][T14551] bridge0: port 2(bridge_slave_1) entered blocking state [ 1054.162738][T14551] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1067.093548][T16558] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1067.177563][T16558] 8021q: adding VLAN 0 to HW filter on device team0 [ 1067.222238][T14551] bridge0: port 1(bridge_slave_0) entered blocking state [ 1067.229356][T14551] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1067.290496][ T5229] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1067.304288][ T5229] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1067.442906][ T5229] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1067.472221][ T5229] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1067.508537][ T5229] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1067.524041][ T5229] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1067.621221][ T5229] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1067.662006][ T5229] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1067.670802][ T5229] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1067.679220][ T5229] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1067.687000][ T5229] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1067.695087][ T5229] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1067.949546][T16465] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1067.968217][T14513] bridge0: port 2(bridge_slave_1) entered blocking state [ 1067.972795][ T5229] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1067.975343][T14513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1067.986021][ T5229] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1068.001485][ T5229] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1068.024033][ T5229] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1068.091753][ T5229] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 1068.106665][ T5229] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1068.305464][T14524] hsr_slave_0: left promiscuous mode [ 1068.318064][T14524] hsr_slave_1: left promiscuous mode [ 1068.330523][T14524] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1068.339261][T14524] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1068.347541][T14524] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1068.356164][T14524] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1068.376419][T14524] veth1_macvtap: left promiscuous mode [ 1068.382168][T14524] veth0_macvtap: left promiscuous mode [ 1068.387731][T14524] veth1_vlan: left promiscuous mode [ 1068.393414][T14524] veth0_vlan: left promiscuous mode [ 1069.062274][T14524] team0 (unregistering): Port device team_slave_1 removed [ 1069.115303][T14524] team0 (unregistering): Port device team_slave_0 removed [ 1069.563588][ T8386] Bluetooth: hci7: command tx timeout [ 1069.696087][T16465] veth0_vlan: entered promiscuous mode [ 1069.820904][ T8386] Bluetooth: hci6: command tx timeout [ 1069.821075][T16465] veth1_vlan: entered promiscuous mode [ 1070.094995][T16621] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1070.120194][T16725] chnl_net:caif_netlink_parms(): no params data found [ 1070.145761][T16621] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1070.180311][T16621] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1070.190952][ T8386] Bluetooth: hci8: command tx timeout [ 1070.198119][T16621] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1070.209513][T16465] veth0_macvtap: entered promiscuous mode [ 1070.313340][T16465] veth1_macvtap: entered promiscuous mode [ 1070.356961][T16722] chnl_net:caif_netlink_parms(): no params data found [ 1070.382287][T16558] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1070.525788][T14524] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1070.563276][T16725] bridge0: port 1(bridge_slave_0) entered blocking state [ 1070.571499][T16725] bridge0: port 1(bridge_slave_0) entered disabled state [ 1070.578741][T16725] bridge_slave_0: entered allmulticast mode [ 1070.588658][T16725] bridge_slave_0: entered promiscuous mode [ 1070.614136][T16465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1070.625104][T16465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1070.635145][T16465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1070.646074][T16465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1070.657627][T16465] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1070.699944][T14524] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1070.718889][T16725] bridge0: port 2(bridge_slave_1) entered blocking state [ 1070.726638][T16725] bridge0: port 2(bridge_slave_1) entered disabled state [ 1070.735373][T16725] bridge_slave_1: entered allmulticast mode [ 1070.742638][T16725] bridge_slave_1: entered promiscuous mode [ 1070.795007][T16727] chnl_net:caif_netlink_parms(): no params data found [ 1070.841699][T14524] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1070.864327][T16725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1070.900138][T16465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1070.911200][T16465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1070.922744][T16465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1070.933453][T16465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1070.945875][T16465] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1070.969729][T16725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1071.004333][T14524] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1071.018006][T16722] bridge0: port 1(bridge_slave_0) entered blocking state [ 1071.028774][T16722] bridge0: port 1(bridge_slave_0) entered disabled state [ 1071.040669][T16722] bridge_slave_0: entered allmulticast mode [ 1071.047674][T16722] bridge_slave_0: entered promiscuous mode [ 1071.058802][T16722] bridge0: port 2(bridge_slave_1) entered blocking state [ 1071.066083][T16722] bridge0: port 2(bridge_slave_1) entered disabled state [ 1071.074404][T16722] bridge_slave_1: entered allmulticast mode [ 1071.082378][T16722] bridge_slave_1: entered promiscuous mode [ 1071.091491][T16465] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1071.100214][T16465] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1071.110292][T16465] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1071.119765][T16465] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1071.214903][T16725] team0: Port device team_slave_0 added [ 1071.223441][T16725] team0: Port device team_slave_1 added [ 1071.256019][T16722] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1071.318793][T16722] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1071.369691][T16727] bridge0: port 1(bridge_slave_0) entered blocking state [ 1071.379504][T16727] bridge0: port 1(bridge_slave_0) entered disabled state [ 1071.388108][T16727] bridge_slave_0: entered allmulticast mode [ 1071.395664][T16727] bridge_slave_0: entered promiscuous mode [ 1071.411610][T16725] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1071.418598][T16725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1071.444925][T16725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1071.488976][T16727] bridge0: port 2(bridge_slave_1) entered blocking state [ 1071.496429][T16727] bridge0: port 2(bridge_slave_1) entered disabled state [ 1071.504214][T16727] bridge_slave_1: entered allmulticast mode [ 1071.512710][T16727] bridge_slave_1: entered promiscuous mode [ 1071.520773][T16725] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1071.527754][T16725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1071.554250][T16725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1071.579200][T16722] team0: Port device team_slave_0 added [ 1071.587594][T16722] team0: Port device team_slave_1 added [ 1071.630517][ T8386] Bluetooth: hci7: command tx timeout [ 1071.665108][T16722] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1071.673681][T16722] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1071.700670][T16722] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1071.723320][T14524] bridge_slave_1: left allmulticast mode [ 1071.729012][T14524] bridge_slave_1: left promiscuous mode [ 1071.740731][T14524] bridge0: port 2(bridge_slave_1) entered disabled state [ 1071.750095][T14524] bridge_slave_0: left allmulticast mode [ 1071.756919][T14524] bridge_slave_0: left promiscuous mode [ 1071.762920][T14524] bridge0: port 1(bridge_slave_0) entered disabled state [ 1071.887189][ T8386] Bluetooth: hci6: command tx timeout [ 1072.259815][T14524] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1072.275328][T14524] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1072.284830][ T8386] Bluetooth: hci8: command tx timeout [ 1072.293954][T14524] bond0 (unregistering): Released all slaves [ 1072.323959][T16727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1072.350156][T16722] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1072.357424][T16722] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1072.387789][T16722] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1072.399239][T14524] tipc: Left network mode [ 1072.468884][T16725] hsr_slave_0: entered promiscuous mode [ 1072.476263][T16725] hsr_slave_1: entered promiscuous mode [ 1072.482929][T16725] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1072.491556][T16725] Cannot create hsr debugfs directory [ 1072.499601][T16727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1072.523621][T16558] veth0_vlan: entered promiscuous mode [ 1072.607152][T16727] team0: Port device team_slave_0 added [ 1072.634602][T16722] hsr_slave_0: entered promiscuous mode [ 1072.642075][T16722] hsr_slave_1: entered promiscuous mode [ 1072.648125][T16722] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1072.656033][T16722] Cannot create hsr debugfs directory [ 1072.705165][T16727] team0: Port device team_slave_1 added [ 1072.744803][T16558] veth1_vlan: entered promiscuous mode [ 1072.852377][T14536] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1072.861035][T16727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1072.868016][T16727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1072.870672][T14536] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1072.906118][T16727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1072.920444][T16727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1072.927403][T16727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1072.953680][T16727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1073.034739][T14524] hsr_slave_0: left promiscuous mode [ 1073.041823][T14524] hsr_slave_1: left promiscuous mode [ 1073.047944][T14524] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1073.055601][T14524] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1073.067791][T14524] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1073.075511][T14524] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1073.096458][T14524] veth1_macvtap: left promiscuous mode [ 1073.102231][T14524] veth0_macvtap: left promiscuous mode [ 1073.108068][T14524] veth1_vlan: left promiscuous mode [ 1073.113497][T14524] veth0_vlan: left promiscuous mode [ 1073.712468][T14524] team0 (unregistering): Port device team_slave_1 removed [ 1073.720388][ T8386] Bluetooth: hci7: command tx timeout [ 1073.785692][T14524] team0 (unregistering): Port device team_slave_0 removed [ 1073.953730][ T8386] Bluetooth: hci6: command tx timeout [ 1074.277683][T16621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1074.352438][ T8386] Bluetooth: hci8: command tx timeout [ 1074.372897][T14510] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1074.393438][T14510] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1074.394369][T16727] hsr_slave_0: entered promiscuous mode [ 1074.407732][T16727] hsr_slave_1: entered promiscuous mode [ 1074.414150][T16727] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1074.421912][T16727] Cannot create hsr debugfs directory [ 1074.501194][T16621] 8021q: adding VLAN 0 to HW filter on device team0 [ 1074.615748][T16725] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1074.732977][T16725] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1074.733283][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 1074.733315][ T29] audit: type=1326 audit(1727172888.440:2228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16755 comm="syz.2.3257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fccf7def9 code=0x7ffc0000 [ 1074.775801][ T29] audit: type=1326 audit(1727172888.480:2229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16755 comm="syz.2.3257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=139 compat=0 ip=0x7f2fccf7def9 code=0x7ffc0000 [ 1074.781603][T16558] veth0_macvtap: entered promiscuous mode [ 1074.806053][ T29] audit: type=1326 audit(1727172888.480:2230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16755 comm="syz.2.3257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fccf7def9 code=0x7ffc0000 [ 1074.833605][ T29] audit: type=1326 audit(1727172888.480:2231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16755 comm="syz.2.3257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fccf7def9 code=0x7ffc0000 [ 1074.896006][ T29] audit: type=1326 audit(1727172888.480:2232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16755 comm="syz.2.3257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f2fccf7def9 code=0x7ffc0000 [ 1074.916730][T14524] IPVS: stop unused estimator thread 0... [ 1074.919703][ T29] audit: type=1326 audit(1727172888.480:2233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16755 comm="syz.2.3257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fccf7def9 code=0x7ffc0000 [ 1074.947661][ T29] audit: type=1326 audit(1727172888.480:2234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16755 comm="syz.2.3257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fccf7def9 code=0x7ffc0000 [ 1074.971510][ T29] audit: type=1326 audit(1727172888.480:2235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16755 comm="syz.2.3257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f2fccf7def9 code=0x7ffc0000 [ 1074.975132][T14513] bridge0: port 1(bridge_slave_0) entered blocking state [ 1074.994597][ T29] audit: type=1326 audit(1727172888.480:2236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16755 comm="syz.2.3257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fccf7def9 code=0x7ffc0000 [ 1075.000936][T14513] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1075.024252][ T29] audit: type=1326 audit(1727172888.480:2237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16755 comm="syz.2.3257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2fccf7def9 code=0x7ffc0000 [ 1075.045229][T14513] bridge0: port 2(bridge_slave_1) entered blocking state [ 1075.060297][T14513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1075.108847][T16725] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1075.140258][T16558] veth1_macvtap: entered promiscuous mode [ 1075.284919][T16725] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1075.343505][T16558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1075.357981][T16558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1075.371102][T16558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1075.382638][T16558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1075.398891][T16558] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1075.433458][T16558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1075.457750][T16558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1075.478424][T16558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1075.499728][T16558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1075.522015][T16558] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1075.571646][T16558] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1075.589917][T16558] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1075.598733][T16558] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1075.608856][T16558] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1075.679265][T16767] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3260'. [ 1075.697287][T16767] geneve0: entered allmulticast mode [ 1075.791450][ T8386] Bluetooth: hci7: command tx timeout [ 1075.812084][T16621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1075.970474][T14524] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1075.978332][T14524] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1076.007904][T16621] veth0_vlan: entered promiscuous mode [ 1076.023956][T16621] veth1_vlan: entered promiscuous mode [ 1076.029927][ T8386] Bluetooth: hci6: command tx timeout [ 1076.047156][T16621] veth0_macvtap: entered promiscuous mode [ 1076.056726][T16621] veth1_macvtap: entered promiscuous mode [ 1076.119004][T16621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1076.130757][T16621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1076.142985][T16621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1076.153660][T16621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1076.163979][T16621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1076.175436][T16621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1076.186862][T16621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1076.207287][T16621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1076.226431][T16621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1076.236773][T16621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1076.247720][T16621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1076.258709][T16621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1076.269243][T16621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1076.281311][T16621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1076.309989][T16621] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1076.319446][T16621] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1076.328942][T14551] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1076.341552][T16621] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1076.344636][T14551] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1076.350704][T16621] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1076.430403][ T8386] Bluetooth: hci8: command tx timeout [ 1076.661049][T16722] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1076.681558][T16722] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1076.707369][T14510] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1076.713080][T16722] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1076.725909][T14510] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1076.804058][T16722] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1076.852722][T14551] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1076.868999][T14551] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1076.967002][ T5695] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1077.130712][ T5695] usb 3-1: Using ep0 maxpacket: 8 [ 1077.141640][T16722] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1077.160528][ T5695] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1077.186259][ T5695] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1077.208953][ T5695] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1077.229659][ T5695] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1077.241706][T16727] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1077.261324][ T5695] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1077.273876][T16727] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1077.286012][ T5695] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1077.297441][T16727] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1077.330888][T16722] 8021q: adding VLAN 0 to HW filter on device team0 [ 1077.358948][T16727] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1077.478625][T14551] bridge0: port 1(bridge_slave_0) entered blocking state [ 1077.486040][T14551] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1077.524135][ T5695] usb 3-1: GET_CAPABILITIES returned 0 [ 1077.542593][ T5695] usbtmc 3-1:16.0: can't read capabilities [ 1077.563733][T14528] bridge0: port 2(bridge_slave_1) entered blocking state [ 1077.570961][T14528] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1077.631578][T16725] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1077.653582][T16725] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1077.664562][T16725] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1077.679037][T16725] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1077.738577][ T5695] usb 3-1: USB disconnect, device number 10 [ 1077.919362][T16727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1078.022599][T16727] 8021q: adding VLAN 0 to HW filter on device team0 [ 1078.066958][T16725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1078.101360][T14551] bridge0: port 1(bridge_slave_0) entered blocking state [ 1078.108695][T14551] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1078.137156][T14551] bridge0: port 2(bridge_slave_1) entered blocking state [ 1078.144341][T14551] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1078.206394][T16725] 8021q: adding VLAN 0 to HW filter on device team0 [ 1078.278033][T14527] bridge0: port 1(bridge_slave_0) entered blocking state [ 1078.285246][T14527] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1078.312155][T14527] bridge0: port 2(bridge_slave_1) entered blocking state [ 1078.319314][T14527] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1078.396457][T16722] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1078.535621][T16725] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1078.747429][T16835] bridge0: port 3(vlan2) entered blocking state [ 1078.805344][T16835] bridge0: port 3(vlan2) entered disabled state [ 1078.870070][T16835] vlan2: entered allmulticast mode [ 1078.920593][T16835] vlan2: left allmulticast mode [ 1079.083933][T16727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1079.315871][T16722] veth0_vlan: entered promiscuous mode [ 1079.352435][T16725] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1079.365235][T16722] veth1_vlan: entered promiscuous mode [ 1079.505770][T16722] veth0_macvtap: entered promiscuous mode [ 1079.551380][T16722] veth1_macvtap: entered promiscuous mode [ 1079.576693][T16725] veth0_vlan: entered promiscuous mode [ 1079.650993][T16722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1079.687132][T16722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1079.715558][T16722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1079.749546][T16722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1079.769601][T16722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1079.799449][T16722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1079.819405][T16722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1079.839285][T16722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1079.851526][T16722] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1079.870661][T16725] veth1_vlan: entered promiscuous mode [ 1079.899730][T16722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1079.920647][T16722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1079.937152][T16722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1079.949030][T16722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1079.960148][T16722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1079.971196][T16722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1079.981340][T16722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1080.024504][T16722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1080.045571][T16722] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1080.084784][T16727] veth0_vlan: entered promiscuous mode [ 1080.101787][T16727] veth1_vlan: entered promiscuous mode [ 1080.130927][T16727] veth0_macvtap: entered promiscuous mode [ 1080.141927][T16727] veth1_macvtap: entered promiscuous mode [ 1080.161319][T16727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1080.172237][T16727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1080.182655][T16727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1080.193429][T16727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1080.204682][T16727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1080.215912][T16727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1080.225882][T16727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1080.236438][T16727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1080.246444][T16727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1080.256993][T16727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1080.271752][T16727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1080.320272][T16722] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1080.329044][T16722] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1080.357341][T16722] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1080.366327][T16722] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1080.454683][T16727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1080.465673][T16727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1080.492691][T16727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1080.504688][T16727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1080.515829][T16727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1080.528203][T16727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1080.538594][T16727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1080.549992][T16727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1080.561883][T16727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1080.573115][T16727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1080.585718][T16727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1080.623320][T16725] veth0_macvtap: entered promiscuous mode [ 1080.634160][T16725] veth1_macvtap: entered promiscuous mode [ 1080.723686][T16727] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1080.732786][T16727] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1080.741871][T16727] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1080.751989][T16727] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1080.903436][T16725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1080.939862][T16725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1080.989761][T16725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1081.041380][T16725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1081.051757][T16725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1081.062298][T16725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1081.081880][T16725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1081.093405][T16725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1081.103499][T16725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1081.115566][T16725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1081.125651][T16725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1081.136831][T16725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1081.180304][T16890] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1081.197006][ T29] kauditd_printk_skb: 53 callbacks suppressed [ 1081.197089][ T29] audit: type=1326 audit(1727172894.860:2291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16881 comm="syz.1.3293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa97497def9 code=0x7ffc0000 [ 1081.410239][T16725] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1081.508814][ T29] audit: type=1326 audit(1727172894.860:2292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16881 comm="syz.1.3293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa97497def9 code=0x7ffc0000 [ 1081.739839][T16725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1081.770114][ T29] audit: type=1326 audit(1727172894.860:2293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16881 comm="syz.1.3293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa97497c890 code=0x7ffc0000 [ 1081.798478][T16725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1081.839317][ T29] audit: type=1326 audit(1727172894.860:2294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16881 comm="syz.1.3293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fa97497f727 code=0x7ffc0000 [ 1081.851213][T16725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1081.862095][ T29] audit: type=1326 audit(1727172894.860:2295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16881 comm="syz.1.3293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa97497def9 code=0x7ffc0000 [ 1081.893022][T16725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1081.901530][ T29] audit: type=1326 audit(1727172894.860:2296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16881 comm="syz.1.3293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fa97497f727 code=0x7ffc0000 [ 1081.928192][ T29] audit: type=1326 audit(1727172894.860:2297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16881 comm="syz.1.3293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa97497cb8a code=0x7ffc0000 [ 1081.955997][ T29] audit: type=1326 audit(1727172894.860:2298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16881 comm="syz.1.3293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa97497def9 code=0x7ffc0000 [ 1082.019380][ T29] audit: type=1326 audit(1727172894.860:2299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16881 comm="syz.1.3293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa97497def9 code=0x7ffc0000 [ 1082.048403][T16894] loop1: detected capacity change from 0 to 2048 [ 1082.074861][T16725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1082.097202][ T29] audit: type=1326 audit(1727172894.870:2300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16881 comm="syz.1.3293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa97497def9 code=0x7ffc0000 [ 1082.121259][T16725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1082.148166][T16725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1082.157761][T16894] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1082.163528][T16725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1082.183010][T16725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1082.368006][T16725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1082.602602][T16725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1083.128997][T16725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1083.334315][T16725] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1083.636501][T16725] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1083.657539][T16725] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1083.668079][T16725] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1083.736401][T16725] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1083.786069][T14524] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1083.794519][T14524] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1083.904842][T14528] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1083.932225][T14528] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1083.979476][T14513] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1083.994692][T14513] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1694 with error 28 [ 1084.007616][T14513] EXT4-fs (loop1): This should not happen!! Data will be lost [ 1084.007616][T14513] [ 1084.018112][T14513] EXT4-fs (loop1): Total free blocks count 0 [ 1084.024875][T14513] EXT4-fs (loop1): Free/Dirty block details [ 1084.031331][T14513] EXT4-fs (loop1): free_blocks=2415919104 [ 1084.037122][T14513] EXT4-fs (loop1): dirty_blocks=1696 [ 1084.042871][T14513] EXT4-fs (loop1): Block reservation details [ 1084.049173][T14513] EXT4-fs (loop1): i_reserved_data_blocks=106 [ 1084.120655][T16621] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1084.194309][T14536] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1084.230611][T14536] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1084.255840][T14527] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1084.276982][T14527] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1084.335138][T16923] netlink: 'syz.3.3304': attribute type 11 has an invalid length. [ 1084.377291][T16923] netlink: 'syz.3.3304': attribute type 11 has an invalid length. [ 1084.422775][T14524] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1084.435403][T14524] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1084.481329][T14527] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1084.491397][T14527] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1084.550178][T16929] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3305'. [ 1084.649722][T16929] geneve0: entered allmulticast mode [ 1084.709385][ T5589] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1084.863855][ T5589] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1084.891176][ T5589] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1084.928301][ T5589] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1084.952323][ T5589] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1084.974519][ T5589] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1084.999476][ T5589] usb 4-1: config 0 descriptor?? [ 1085.018908][T16923] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1085.064695][T16944] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1085.091442][T16947] loop1: detected capacity change from 0 to 2048 [ 1085.137864][T16947] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1085.478005][ T5589] usbhid 4-1:0.0: can't add hid device: -71 [ 1085.484246][ T5589] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1085.497786][ T5589] usb 4-1: USB disconnect, device number 13 [ 1086.216273][T14527] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1086.249716][T14527] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 976 with error 28 [ 1086.264586][T14527] EXT4-fs (loop1): This should not happen!! Data will be lost [ 1086.264586][T14527] [ 1086.275827][T14527] EXT4-fs (loop1): Total free blocks count 0 [ 1086.283944][T14527] EXT4-fs (loop1): Free/Dirty block details [ 1086.290027][T14527] EXT4-fs (loop1): free_blocks=2415919104 [ 1086.295879][T14527] EXT4-fs (loop1): dirty_blocks=976 [ 1086.301509][T14527] EXT4-fs (loop1): Block reservation details [ 1086.307798][T14527] EXT4-fs (loop1): i_reserved_data_blocks=61 [ 1086.397039][T16621] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1086.575023][T16963] bridge0: port 3(vlan3) entered blocking state [ 1086.641240][T16963] bridge0: port 3(vlan3) entered disabled state [ 1086.684334][T16963] vlan3: entered allmulticast mode [ 1086.733229][ T29] kauditd_printk_skb: 64 callbacks suppressed [ 1086.733253][ T29] audit: type=1326 audit(1727172900.431:2365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16970 comm="syz.3.3318" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5133f7def9 code=0x0 [ 1086.843451][T16963] vlan3: left allmulticast mode [ 1087.059586][T16961] block device autoloading is deprecated and will be removed. [ 1087.072996][T16961] syz.0.3314: attempt to access beyond end of device [ 1087.072996][T16961] loop16: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1087.747990][T17003] loop3: detected capacity change from 0 to 2048 [ 1087.833770][T17003] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1087.898577][ T5589] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1087.919925][T17009] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1088.821866][T14536] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 502 with error 28 [ 1088.857432][ T5589] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1088.870523][ T5589] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1088.880531][ T5589] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1088.889742][ T5589] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1088.909172][T16996] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1088.921860][ T5589] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1088.936828][T14536] EXT4-fs (loop3): This should not happen!! Data will be lost [ 1088.936828][T14536] [ 1088.989103][T14536] EXT4-fs (loop3): Total free blocks count 0 [ 1089.043455][T14536] EXT4-fs (loop3): Free/Dirty block details [ 1089.053589][T14536] EXT4-fs (loop3): free_blocks=2415919104 [ 1089.088430][T14536] EXT4-fs (loop3): dirty_blocks=512 [ 1089.101603][T14536] EXT4-fs (loop3): Block reservation details [ 1089.121418][T17024] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3334'. [ 1089.138547][T14536] EXT4-fs (loop3): i_reserved_data_blocks=32 [ 1089.167357][T17024] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3334'. [ 1089.223347][T16558] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1089.282436][T17029] 9pnet_fd: Insufficient options for proto=fd [ 1089.306639][T11159] usb 2-1: USB disconnect, device number 10 [ 1090.943672][T17055] bridge0: port 3(vlan3) entered blocking state [ 1090.976084][T17055] bridge0: port 3(vlan3) entered disabled state [ 1091.003283][T17055] vlan3: entered allmulticast mode [ 1091.018551][ T5695] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1091.050180][T17055] vlan3: left allmulticast mode [ 1091.138110][T11159] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1091.168620][ T5695] usb 2-1: Using ep0 maxpacket: 32 [ 1091.231778][T17059] team0: Port device virt_wifi0 added [ 1091.260687][ T5695] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1091.304188][ T5695] usb 2-1: config 253 has an invalid interface number: 202 but max is 0 [ 1091.310662][T11159] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1091.340110][T11159] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1091.352557][ T5695] usb 2-1: config 253 has an invalid descriptor of length 197, skipping remainder of the config [ 1091.392049][T11159] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1091.418053][ T5695] usb 2-1: config 253 has no interface number 0 [ 1091.428363][T11159] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1091.446692][T11159] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1091.490678][ T5695] usb 2-1: config 253 interface 202 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1091.573318][ T5695] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 1091.623560][ T5695] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1091.685276][ T5695] usb 2-1: Product: syz [ 1091.693251][T11159] usb 3-1: 0:2 : does not exist [ 1091.715453][ T5695] usb 2-1: Manufacturer: syz [ 1091.721877][T11159] usb 3-1: USB disconnect, device number 11 [ 1091.742227][ T5695] usb 2-1: SerialNumber: syz [ 1092.065322][ T5695] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1092.090698][T14551] usb 2-1: Failed to submit usb control message: -71 [ 1092.097659][T14551] usb 2-1: unable to send the bmi data to the device: -71 [ 1092.214645][ T5695] usb 2-1: USB disconnect, device number 11 [ 1092.218713][T14551] usb 2-1: unable to get target info from device [ 1092.263735][T14551] usb 2-1: could not get target info (-71) [ 1092.301288][T14551] usb 2-1: could not probe fw (-71) [ 1092.338064][ T5589] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1092.477735][T17085] tipc: Started in network mode [ 1092.523580][T17085] tipc: Node identity f7, cluster identity 4711 [ 1092.544576][ T5589] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1092.569760][T17085] tipc: Node number set to 247 [ 1092.587458][ T5589] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1092.622723][ T5589] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1092.625702][T17086] netlink: 'syz.0.3354': attribute type 11 has an invalid length. [ 1092.668094][ T5589] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1092.735216][ T5589] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1092.763319][T16998] coredump: 62(syz.1.3323): written to core: VMAs: 37, size 97546240; core: 60028014 bytes, pos 97554432 [ 1092.765649][ T5589] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1092.817232][ T5589] usb 4-1: config 0 descriptor?? [ 1092.972867][ T29] audit: type=1326 audit(1727172906.652:2366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17096 comm="syz.2.3357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fccf7def9 code=0x7ffc0000 [ 1092.996810][ T29] audit: type=1326 audit(1727172906.652:2367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17096 comm="syz.2.3357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fccf7def9 code=0x7ffc0000 [ 1093.020742][ T29] audit: type=1326 audit(1727172906.672:2368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17096 comm="syz.2.3357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f2fccf7def9 code=0x7ffc0000 [ 1093.043544][ T29] audit: type=1326 audit(1727172906.672:2369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17096 comm="syz.2.3357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fccf7def9 code=0x7ffc0000 [ 1093.067020][ T29] audit: type=1326 audit(1727172906.672:2370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17096 comm="syz.2.3357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fccf7def9 code=0x7ffc0000 [ 1093.089840][ T29] audit: type=1326 audit(1727172906.672:2371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17096 comm="syz.2.3357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f2fccf7def9 code=0x7ffc0000 [ 1093.114652][ T29] audit: type=1326 audit(1727172906.672:2372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17096 comm="syz.2.3357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2fccf7df33 code=0x7ffc0000 [ 1093.137821][T17103] netlink: 'syz.4.3359': attribute type 11 has an invalid length. [ 1093.146211][ T29] audit: type=1326 audit(1727172906.672:2373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17096 comm="syz.2.3357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2fccf7df33 code=0x7ffc0000 [ 1093.180584][ T29] audit: type=1326 audit(1727172906.672:2374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17096 comm="syz.2.3357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fccf7def9 code=0x7ffc0000 [ 1093.203837][ T29] audit: type=1326 audit(1727172906.672:2375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17096 comm="syz.2.3357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fccf7def9 code=0x7ffc0000 [ 1093.205551][T17103] netlink: 'syz.4.3359': attribute type 11 has an invalid length. [ 1093.284079][ T5589] usbhid 4-1:0.0: can't add hid device: -71 [ 1093.291330][ T5589] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1093.533688][ T5589] usb 4-1: USB disconnect, device number 14 [ 1093.608312][ T5789] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1093.760004][ T5789] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1093.785110][ T5789] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1093.807923][ T5789] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1093.862333][ T5789] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1093.887567][ T5789] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1094.001552][ T5789] usb 5-1: config 0 descriptor?? [ 1094.018182][T17103] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1094.255151][ T5789] usbhid 5-1:0.0: can't add hid device: -71 [ 1094.263043][ T5789] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1094.276265][ T5789] usb 5-1: USB disconnect, device number 8 [ 1094.609732][T17127] tipc: Started in network mode [ 1094.625017][T17127] tipc: Node identity f7, cluster identity 4711 [ 1094.643329][T17127] tipc: Node number set to 247 [ 1094.808056][T17121] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3366'. [ 1095.513383][T17141] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3366'. [ 1095.918406][ T5589] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1096.021803][T17159] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3379'. [ 1096.047736][ T5695] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1096.058900][T17159] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1096.071186][ T5589] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1096.094492][ T5589] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 1096.117596][T17159] batadv_slave_0: entered promiscuous mode [ 1096.138138][ T5589] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 9.99 [ 1096.176412][ T5589] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1096.205746][ T5589] usb 5-1: config 0 descriptor?? [ 1096.239913][ T5695] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1096.259741][ T5589] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1096.273995][ T5695] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1096.315812][ T5695] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1096.356236][ T5695] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1096.399409][ T5695] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1096.424943][T17170] tipc: Started in network mode [ 1096.437825][ T5695] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1096.452508][T17170] tipc: Node identity f7, cluster identity 4711 [ 1096.481997][ T5695] usb 4-1: config 0 descriptor?? [ 1096.495555][T17170] tipc: Node number set to 247 [ 1096.574270][ T5589] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 1096.641903][ T5589] usb 5-1: USB disconnect, device number 9 [ 1096.939685][ T5695] usbhid 4-1:0.0: can't add hid device: -71 [ 1096.945884][ T5695] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1096.963360][T17177] netlink: 'syz.2.3387': attribute type 11 has an invalid length. [ 1096.994935][ T5695] usb 4-1: USB disconnect, device number 15 [ 1097.042261][T17177] netlink: 'syz.2.3387': attribute type 11 has an invalid length. [ 1098.180787][T17157] loop1: detected capacity change from 0 to 40427 [ 1098.229274][T17193] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1098.229344][ T29] kauditd_printk_skb: 70 callbacks suppressed [ 1098.229359][ T29] audit: type=1326 audit(1727172911.642:2446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17185 comm="syz.2.3391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fccf7def9 code=0x7ffc0000 [ 1098.268963][ T29] audit: type=1326 audit(1727172911.922:2447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17179 comm="syz.4.3389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f852317def9 code=0x7ffc0000 [ 1098.307266][T17157] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 1098.325424][T17157] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1098.334402][ T29] audit: type=1326 audit(1727172911.922:2448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17179 comm="syz.4.3389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f852317def9 code=0x7ffc0000 [ 1098.387298][T17157] F2FS-fs (loop1): invalid crc value [ 1098.393263][ T29] audit: type=1326 audit(1727172911.922:2449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17179 comm="syz.4.3389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f852317c890 code=0x7ffc0000 [ 1098.435842][ T29] audit: type=1326 audit(1727172911.922:2450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17179 comm="syz.4.3389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f852317f727 code=0x7ffc0000 [ 1098.483578][ T29] audit: type=1326 audit(1727172911.922:2451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17179 comm="syz.4.3389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f852317def9 code=0x7ffc0000 [ 1098.537538][ T29] audit: type=1326 audit(1727172911.922:2452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17179 comm="syz.4.3389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f852317f727 code=0x7ffc0000 [ 1098.560023][ C1] vkms_vblank_simulate: vblank timer overrun [ 1098.620805][T17157] F2FS-fs (loop1): Failed to start F2FS issue_checkpoint_thread (-4) [ 1098.627255][ T29] audit: type=1326 audit(1727172911.922:2453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17179 comm="syz.4.3389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f852317cb8a code=0x7ffc0000 [ 1098.661034][ T29] audit: type=1326 audit(1727172911.922:2454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17179 comm="syz.4.3389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f852317def9 code=0x7ffc0000 [ 1098.703981][ T29] audit: type=1326 audit(1727172911.922:2455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17179 comm="syz.4.3389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f852317def9 code=0x7ffc0000 [ 1098.726461][ C1] vkms_vblank_simulate: vblank timer overrun [ 1099.861933][T17210] bridge0: port 3(vlan2) entered blocking state [ 1099.928484][T17210] bridge0: port 3(vlan2) entered disabled state [ 1099.962525][T17210] vlan2: entered allmulticast mode [ 1100.015479][T17210] vlan2: left allmulticast mode [ 1100.087919][T17218] PKCS7: Unknown OID: [5] (bad) [ 1100.133369][T17218] PKCS7: Only support pkcs7_signedData type [ 1101.839561][T17252] loop3: detected capacity change from 0 to 1024 [ 1101.864448][T17254] loop2: detected capacity change from 0 to 1024 [ 1101.946563][T17252] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1101.960414][T17254] EXT4-fs: Ignoring removed i_version option [ 1102.041701][T17254] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1102.273360][T17260] netlink: 'syz.4.3415': attribute type 11 has an invalid length. [ 1102.386033][T17261] netlink: 'syz.4.3415': attribute type 11 has an invalid length. [ 1107.178223][T11159] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1109.247685][T16558] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 1110.256176][T16558] EXT4-fs (loop3): Remounting filesystem read-only [ 1111.645783][T17274] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 1114.422969][ T5229] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1114.437429][ T5229] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1114.446324][ T5229] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1114.455153][ T5229] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1114.463614][ T5229] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1114.471632][ T5229] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1115.312507][ T1260] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.319013][ T1260] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.056210][T17227] coredump: 49(syz.5.3401): written to core: VMAs: 38, size 97681408; core: 60036262 bytes, pos 97689600 [ 1116.505379][ T5229] Bluetooth: hci0: command tx timeout [ 1117.756890][ T29] kauditd_printk_skb: 78 callbacks suppressed [ 1117.756912][ T29] audit: type=1326 audit(1727172931.464:2534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17308 comm="syz.1.3429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa97497def9 code=0x7ffc0000 [ 1117.866512][ T29] audit: type=1326 audit(1727172931.494:2535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17308 comm="syz.1.3429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7fa97497def9 code=0x7ffc0000 [ 1117.964665][ T29] audit: type=1326 audit(1727172931.494:2536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17308 comm="syz.1.3429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa97497def9 code=0x7ffc0000 [ 1118.052226][ T29] audit: type=1326 audit(1727172931.504:2537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17308 comm="syz.1.3429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fa97497def9 code=0x7ffc0000 [ 1118.120903][ T29] audit: type=1326 audit(1727172931.504:2538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17308 comm="syz.1.3429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa97497df33 code=0x7ffc0000 [ 1118.198573][ T29] audit: type=1326 audit(1727172931.504:2539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17308 comm="syz.1.3429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa97497df33 code=0x7ffc0000 [ 1118.264841][ T29] audit: type=1326 audit(1727172931.504:2540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17308 comm="syz.1.3429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa97497def9 code=0x7ffc0000 [ 1118.334752][ T29] audit: type=1326 audit(1727172931.514:2541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17308 comm="syz.1.3429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa97497def9 code=0x7ffc0000 [ 1118.405188][ T29] audit: type=1326 audit(1727172931.514:2542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17308 comm="syz.1.3429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7fa97497def9 code=0x7ffc0000 [ 1118.478927][ T29] audit: type=1326 audit(1727172931.514:2543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17308 comm="syz.1.3429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa97497def9 code=0x7ffc0000 [ 1118.595133][ T5229] Bluetooth: hci0: command tx timeout [ 1119.034963][ T5589] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1119.203592][ T5589] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1119.236231][ T5589] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1119.271407][ T5589] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1119.303526][ T5589] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1119.343941][ T5589] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1119.374804][ T5589] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1119.496072][ T5589] usb 2-1: config 0 descriptor?? [ 1119.512028][ T8386] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1119.522180][ T8386] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1119.533697][ T8386] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1119.543631][ T8386] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1119.553783][ T8386] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1119.561138][ T8386] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1120.026203][ T5589] usbhid 2-1:0.0: can't add hid device: -71 [ 1120.032431][ T5589] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1120.053962][ T5589] usb 2-1: USB disconnect, device number 12 [ 1120.422778][T17281] coredump: 61(syz.0.3422): written to core: VMAs: 34, size 97419264; core: 60019654 bytes, pos 97427456 [ 1120.672520][ T8386] Bluetooth: hci0: command tx timeout [ 1121.635719][ T8386] Bluetooth: hci2: command tx timeout [ 1121.791873][ T5229] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1121.801011][ T5229] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1121.809805][ T5229] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1121.820720][ T5229] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1121.834759][ T5229] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1121.842666][ T5229] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1122.208932][T17322] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1122.752747][ T5229] Bluetooth: hci0: command tx timeout [ 1123.711432][ T5229] Bluetooth: hci2: command tx timeout [ 1123.864521][ T5229] Bluetooth: hci3: command tx timeout [ 1124.253734][ T8386] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1124.264772][ T8386] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1124.272935][ T8386] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1124.282029][ T8386] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1124.290668][ T8386] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1124.301388][ T8386] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1125.290511][ T5229] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1125.300653][ T5229] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1125.308700][ T5229] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1125.319127][ T5229] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1125.327178][ T5229] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 1125.334630][ T5229] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1125.784416][ T8386] Bluetooth: hci2: command tx timeout [ 1125.944229][ T8386] Bluetooth: hci3: command tx timeout [ 1126.344654][ T8386] Bluetooth: hci5: command tx timeout [ 1127.384118][ T8386] Bluetooth: hci9: command tx timeout [ 1127.864040][ T8386] Bluetooth: hci2: command tx timeout [ 1128.023902][ T8386] Bluetooth: hci3: command tx timeout [ 1128.424038][ T8386] Bluetooth: hci5: command tx timeout [ 1129.463928][ T8386] Bluetooth: hci9: command tx timeout [ 1130.104972][ T8386] Bluetooth: hci3: command tx timeout [ 1130.503762][ T8386] Bluetooth: hci5: command tx timeout [ 1131.543614][ T8386] Bluetooth: hci9: command tx timeout [ 1132.584434][ T8386] Bluetooth: hci5: command tx timeout [ 1133.623521][ T8386] Bluetooth: hci9: command tx timeout [ 1135.290100][ T5229] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1135.301894][ T5229] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1135.310128][ T5229] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1135.322880][ T5229] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1135.331410][ T5229] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 1135.339377][ T5229] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1137.383076][ T5229] Bluetooth: hci10: command tx timeout [ 1139.462724][ T5229] Bluetooth: hci10: command tx timeout [ 1141.543273][ T5229] Bluetooth: hci10: command tx timeout [ 1143.622231][ T5229] Bluetooth: hci10: command tx timeout [ 1168.586820][T17336] Bluetooth: hci4: command 0x0406 tx timeout [ 1176.744264][ T1260] ieee802154 phy0 wpan0: encryption failed: -22 [ 1176.750848][ T1260] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.009447][T17336] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1177.034179][T17336] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1177.066278][T17336] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1177.115863][T17336] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1177.157536][T17336] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 1177.176337][T17336] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1179.308610][T17336] Bluetooth: hci11: command tx timeout [ 1179.773649][ T5229] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1179.788241][ T5229] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1179.797758][ T5229] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1179.806024][ T5229] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1179.816146][ T5229] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 1179.824524][ T5229] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1181.378204][ T5229] Bluetooth: hci11: command tx timeout [ 1181.863277][ T5229] Bluetooth: hci12: command tx timeout [ 1182.322151][T17336] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1182.338076][T17336] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1182.346431][T17336] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1182.355437][T17336] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1182.363338][T17336] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 1182.376365][T17336] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1183.458051][ T5229] Bluetooth: hci11: command tx timeout [ 1183.938141][ T5229] Bluetooth: hci12: command tx timeout [ 1184.377831][T17336] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1184.387570][T17336] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1184.395914][T17336] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1184.404484][T17336] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1184.414118][T17336] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 1184.423951][T17336] Bluetooth: hci13: command tx timeout [ 1184.431393][T17349] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1185.478706][ T5229] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 1185.492015][ T5229] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 1185.499953][ T5229] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 1185.508249][ T5229] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 1185.517040][ T5229] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 1185.524534][ T5229] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 1185.538106][ T8386] Bluetooth: hci11: command tx timeout [ 1186.017568][ T5229] Bluetooth: hci12: command tx timeout [ 1186.497525][T17349] Bluetooth: hci13: command tx timeout [ 1186.505027][ T5229] Bluetooth: hci14: command tx timeout [ 1187.617725][ T5229] Bluetooth: hci15: command tx timeout [ 1188.098547][ T5229] Bluetooth: hci12: command tx timeout [ 1188.577219][T17349] Bluetooth: hci13: command tx timeout [ 1188.584350][ T5229] Bluetooth: hci14: command tx timeout [ 1189.153793][T16558] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1189.359526][T17295] bridge0: port 3(vlan3) entered blocking state [ 1189.365893][T17295] bridge0: port 3(vlan3) entered disabled state [ 1189.407226][T17295] vlan3: entered allmulticast mode [ 1189.487803][T17295] vlan3: left allmulticast mode [ 1189.697909][ T5229] Bluetooth: hci15: command tx timeout [ 1190.129517][T16465] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1190.657679][ T5229] Bluetooth: hci14: command tx timeout [ 1190.669374][ T5229] Bluetooth: hci13: command tx timeout [ 1191.280649][T14536] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1191.602408][T14536] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1191.776799][T17349] Bluetooth: hci15: command tx timeout [ 1191.821091][T14536] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1192.015798][T14536] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1192.182760][T14536] bridge_slave_1: left allmulticast mode [ 1192.196669][T14536] bridge_slave_1: left promiscuous mode [ 1192.204060][T14536] bridge0: port 2(bridge_slave_1) entered disabled state [ 1192.272859][T14536] bridge_slave_0: left allmulticast mode [ 1192.284997][T14536] bridge_slave_0: left promiscuous mode [ 1192.295825][T14536] bridge0: port 1(bridge_slave_0) entered disabled state [ 1192.747933][T17349] Bluetooth: hci14: command tx timeout [ 1193.763481][T14536] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1193.861332][T17349] Bluetooth: hci15: command tx timeout [ 1193.873110][T14536] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1193.908968][T14536] bond0 (unregistering): Released all slaves [ 1194.080048][T14536] tipc: Left network mode [ 1194.176788][T17349] Bluetooth: hci6: command 0x0406 tx timeout [ 1194.182919][T17349] Bluetooth: hci7: command 0x0406 tx timeout [ 1194.977800][ T5229] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1194.992113][ T5229] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1195.000387][ T5229] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1195.010180][ T5229] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1195.018710][ T5229] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1195.026023][ T5229] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1195.423238][T17355] chnl_net:caif_netlink_parms(): no params data found [ 1195.746932][T17355] bridge0: port 1(bridge_slave_0) entered blocking state [ 1195.754072][T17355] bridge0: port 1(bridge_slave_0) entered disabled state [ 1195.772792][T17355] bridge_slave_0: entered allmulticast mode [ 1195.790441][T17355] bridge_slave_0: entered promiscuous mode [ 1195.808918][T17355] bridge0: port 2(bridge_slave_1) entered blocking state [ 1195.816061][T17355] bridge0: port 2(bridge_slave_1) entered disabled state [ 1195.835010][T17355] bridge_slave_1: entered allmulticast mode [ 1195.845437][T17355] bridge_slave_1: entered promiscuous mode [ 1195.959457][T17355] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1195.992643][T17355] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1196.155130][T17355] team0: Port device team_slave_0 added [ 1196.178606][T17355] team0: Port device team_slave_1 added [ 1196.274180][T17355] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1196.285840][T17355] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1196.325885][T17355] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1196.353047][T17355] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1196.366695][T17355] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1196.405309][T17355] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1196.562465][T17355] hsr_slave_0: entered promiscuous mode [ 1196.596620][T17355] hsr_slave_1: entered promiscuous mode [ 1196.618546][T17355] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1196.635704][T17355] Cannot create hsr debugfs directory [ 1197.057259][ T8386] Bluetooth: hci0: command tx timeout [ 1199.136030][ T8386] Bluetooth: hci0: command tx timeout [ 1201.215814][ T8386] Bluetooth: hci0: command tx timeout [ 1203.296265][ T8386] Bluetooth: hci0: command tx timeout [ 1237.487187][ T5229] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1237.509017][ T5229] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1237.540965][ T5229] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1237.591243][ T5229] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1237.630284][ T5229] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1237.649776][ T5229] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1238.181934][ T1260] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.188294][ T1260] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.771669][ T5229] Bluetooth: hci2: command tx timeout [ 1239.839319][ T8386] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1239.849886][ T8386] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1239.858051][ T8386] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1239.866183][ T8386] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1239.874241][ T8386] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1239.881671][ T8386] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1241.851322][ T8386] Bluetooth: hci2: command tx timeout [ 1241.932729][ T8386] Bluetooth: hci3: command tx timeout [ 1242.965537][ T5229] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1242.975146][ T5229] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1242.983255][ T5229] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1242.995984][ T5229] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1243.003680][ T5229] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1243.011076][ T5229] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1243.931225][ T5229] Bluetooth: hci2: command tx timeout [ 1244.011981][ T5229] Bluetooth: hci3: command tx timeout [ 1245.054332][ T5229] Bluetooth: hci4: command tx timeout [ 1245.157479][ T8386] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1245.168175][ T8386] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1245.176114][ T8386] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1245.184081][ T8386] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1245.191732][ T8386] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1245.200449][ T8386] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1246.011597][ T5229] Bluetooth: hci2: command tx timeout [ 1246.090823][ T5229] Bluetooth: hci3: command tx timeout [ 1246.245998][ T8386] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1246.258816][ T8386] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1246.271563][ T8386] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1246.283064][ T8386] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1246.290884][ T8386] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 1246.298382][ T8386] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1247.130919][ T8386] Bluetooth: hci4: command tx timeout [ 1247.290836][ T8386] Bluetooth: hci5: command tx timeout [ 1248.170914][ T8386] Bluetooth: hci3: command tx timeout [ 1248.330537][ T8386] Bluetooth: hci8: command tx timeout [ 1249.214856][ T8386] Bluetooth: hci4: command tx timeout [ 1249.370445][ T8386] Bluetooth: hci5: command tx timeout [ 1250.410289][ T8386] Bluetooth: hci8: command tx timeout [ 1251.290397][ T8386] Bluetooth: hci4: command tx timeout [ 1251.450220][ T8386] Bluetooth: hci5: command tx timeout [ 1252.490067][ T8386] Bluetooth: hci8: command tx timeout [ 1253.530019][ T8386] Bluetooth: hci5: command tx timeout [ 1254.569787][ T8386] Bluetooth: hci8: command tx timeout [ 1255.924807][ T5229] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1255.934715][ T5229] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1255.945026][ T5229] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1255.954848][ T5229] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1255.962710][ T5229] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 1255.970550][ T5229] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1258.009463][ T5229] Bluetooth: hci9: command tx timeout [ 1260.091987][ T5229] Bluetooth: hci9: command tx timeout [ 1260.729157][ T5229] Bluetooth: hci10: command 0x0406 tx timeout [ 1262.168993][ T8386] Bluetooth: hci9: command tx timeout [ 1264.248819][ T8386] Bluetooth: hci9: command tx timeout [ 1271.467953][ T30] INFO: task syz.0.3426:17290 blocked for more than 143 seconds. [ 1271.475802][ T30] Not tainted 6.11.0-syzkaller-09959-gabf2050f51fd #0 [ 1271.484683][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1271.505401][ T30] task:syz.0.3426 state:D stack:27360 pid:17290 tgid:17287 ppid:16725 flags:0x00000004 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1271.527504][ T30] Call Trace: [ 1271.530975][ T30] [ 1271.534235][ T30] __schedule+0x1895/0x4b30 [ 1271.557850][ T30] ? __pfx___schedule+0x10/0x10 [ 1271.562796][ T30] ? __pfx_lock_release+0x10/0x10 [ 1271.582452][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 1271.658555][ T30] ? schedule+0x90/0x320 [ 1271.662900][ T30] schedule+0x14b/0x320 [ 1271.667103][ T30] schedule_preempt_disabled+0x13/0x30 [ 1271.772020][ T30] __mutex_lock+0x6a7/0xd70 [ 1271.776626][ T30] ? __mutex_lock+0x52a/0xd70 [ 1271.817992][ T30] ? ppp_ioctl+0x112/0x1cd0 [ 1271.822602][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1271.857858][ T30] ppp_ioctl+0x112/0x1cd0 [ 1271.863217][ T30] ? __pfx_ppp_ioctl+0x10/0x10 [ 1271.897958][ T30] ? __fget_files+0x3f3/0x470 [ 1271.902831][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1271.957824][ T30] ? __pfx_ppp_ioctl+0x10/0x10 [ 1271.962901][ T30] __se_sys_ioctl+0xfb/0x170 [ 1271.984116][ T30] do_syscall_64+0xf3/0x230 [ 1272.008105][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1272.014105][ T30] RIP: 0033:0x7f4a60d7def9 [ 1272.048728][ T30] RSP: 002b:00007f4a61c17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1272.057246][ T30] RAX: ffffffffffffffda RBX: 00007f4a60f36130 RCX: 00007f4a60d7def9 [ 1272.117985][ T30] RDX: 000000002000000b RSI: 000000004004743d RDI: 0000000000000005 [ 1272.126049][ T30] RBP: 00007f4a60df0b76 R08: 0000000000000000 R09: 0000000000000000 [ 1272.169302][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1272.177360][ T30] R13: 0000000000000000 R14: 00007f4a60f36130 R15: 00007fffe1f8b2c8 [ 1272.217795][ T30] [ 1272.220987][ T30] [ 1272.220987][ T30] Showing all locks held in the system: [ 1272.248366][ T30] 1 lock held by init/1: [ 1272.252693][ T30] 3 locks held by kworker/1:0/25: [ 1272.278277][ T30] #0: ffff88801ac78948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 1272.317908][ T30] #1: ffffc900001f7d00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 1272.347957][ T30] #2: ffffffff8fccdc48 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 1272.381505][ T30] 1 lock held by khungtaskd/30: [ 1272.386506][ T30] #0: ffffffff8e937ee0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 1272.419521][ T30] 2 locks held by getty/4985: [ 1272.424277][ T30] #0: ffff88802df970a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1272.437736][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 1272.457724][ T30] 6 locks held by kworker/0:19/5695: [ 1272.463037][ T30] 3 locks held by kworker/0:20/5789: [ 1272.481373][ T30] 3 locks held by kworker/u8:16/14510: [ 1272.486862][ T30] #0: ffff88802dc07948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 1272.527706][ T30] #1: ffffc90002f4fd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 1272.550884][ T30] #2: ffffffff8fccdc48 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 1272.567784][ T30] 3 locks held by kworker/u8:25/14524: [ 1272.573273][ T30] #0: ffff88801ac81148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 1272.598574][ T30] #1: ffffc900040b7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 1272.619020][ T30] #2: ffffffff8fccdc48 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 1272.637688][ T30] 2 locks held by kworker/u8:28/14527: [ 1272.643175][ T30] 3 locks held by kworker/u8:34/14536: [ 1272.657957][ T30] #0: ffff88801bae5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 1272.677691][ T30] #1: ffffc90003d67d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 1272.702008][ T30] #2: ffffffff8fcc1150 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 1272.717781][ T30] 3 locks held by kworker/u8:39/14541: [ 1272.723276][ T30] #0: ffff88801bf72948 ((wq_completion)cfg80211){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 1272.757293][ T30] #1: ffffc90003b67d00 ((work_completion)(&(&rdev->dfs_update_channels_wk)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 1272.775645][ T30] #2: ffffffff8fccdc48 (rtnl_mutex){+.+.}-{3:3}, at: cfg80211_dfs_channels_update_work+0xbf/0x610 [ 1272.797665][ T30] 1 lock held by syz.4.3423/17283: [ 1272.803540][ T30] #0: ffffffff8fccdc48 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 1272.827693][ T30] 1 lock held by syz.0.3426/17288: [ 1272.832829][ T30] #0: ffffffff8fccdc48 (rtnl_mutex){+.+.}-{3:3}, at: ppp_release+0x87/0x1f0 [ 1272.853536][ T30] 2 locks held by syz.0.3426/17289: [ 1272.862615][ T30] #0: ffffffff8f4b6e08 (ppp_mutex){+.+.}-{3:3}, at: ppp_ioctl+0x112/0x1cd0 [ 1272.877742][ T30] #1: ffffffff8fccdc48 (rtnl_mutex){+.+.}-{3:3}, at: ppp_ioctl+0x789/0x1cd0 [ 1272.897611][ T30] 1 lock held by syz.0.3426/17290: [ 1272.902744][ T30] #0: ffffffff8f4b6e08 (ppp_mutex){+.+.}-{3:3}, at: ppp_ioctl+0x112/0x1cd0 [ 1272.923393][ T30] 1 lock held by syz.5.3427/17295: [ 1272.934072][ T30] #0: ffffffff8fccdc48 (rtnl_mutex){+.+.}-{3:3}, at: netdev_run_todo+0x89e/0x1000 [ 1272.949054][ T30] 1 lock held by syz.1.3436/17327: [ 1272.954187][ T30] #0: ffffffff8fccdc48 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 1272.974436][ T30] 2 locks held by syz-executor/17334: [ 1272.984446][ T30] #0: ffffffff8fcc1150 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 1273.006513][ T30] #1: ffffffff8fccdc48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 1273.028172][ T30] 1 lock held by syz-executor/17338: [ 1273.033491][ T30] #0: ffffffff8fccdc48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 1273.055864][ T30] 1 lock held by syz-executor/17341: [ 1273.067189][ T30] #0: ffffffff8fccdc48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 1273.088151][ T30] 1 lock held by syz-executor/17344: [ 1273.094815][ T30] #0: ffffffff8fccdc48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 1273.116269][ T30] 1 lock held by syz-executor/17347: [ 1273.121707][ T30] #0: ffffffff8fccdc48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 1273.144040][ T30] 1 lock held by syz-executor/17351: [ 1273.153826][ T30] #0: ffffffff8fccdc48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 1273.168975][ T30] 8 locks held by syz-executor/17355: [ 1273.177656][ T30] #0: ffff8880329f0420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x224/0xc90 [ 1273.186644][ T30] #1: ffff888079705088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1ea/0x500 [ 1273.208990][ T30] #2: ffff8881447a4b48 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500 [ 1273.230946][ T30] #3: ffffffff8f56d3e8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 1273.248193][ T30] #4: ffff88804beb30e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 1273.267668][ T30] #5: ffff88804beb2250 (&devlink->lock_key#52){+.+.}-{3:3}, at: nsim_drv_remove+0x50/0x160 [ 1273.291558][ T30] #6: ffffffff8fccdc48 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x71/0x5c0 [ 1273.313026][ T30] #7: ffffffff8e7d1dd0 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0x5ea/0x1da0 [ 1273.336457][ T30] 1 lock held by syz-executor/17364: [ 1273.344093][ T30] #0: ffffffff8fccdc48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 1273.366152][ T30] 1 lock held by syz-executor/17367: [ 1273.379788][ T30] #0: ffffffff8fccdc48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 1273.402706][ T30] 1 lock held by syz-executor/17370: [ 1273.413780][ T30] #0: ffffffff8fccdc48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 1273.435649][ T30] 1 lock held by syz-executor/17373: [ 1273.441128][ T30] #0: ffffffff8fccdc48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 1273.466319][ T30] 1 lock held by syz-executor/17376: [ 1273.471886][ T30] #0: ffffffff8fccdc48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 1273.493533][ T30] 1 lock held by syz-executor/17379: [ 1273.506324][ T30] #0: ffffffff8fccdc48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 1273.521576][ T30] [ 1273.523937][ T30] ============================================= [ 1273.523937][ T30] [ 1273.552539][ T30] NMI backtrace for cpu 1 [ 1273.556936][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-09959-gabf2050f51fd #0 [ 1273.567121][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1273.577218][ T30] Call Trace: [ 1273.580520][ T30] [ 1273.583476][ T30] dump_stack_lvl+0x241/0x360 [ 1273.588203][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1273.593447][ T30] ? __pfx__printk+0x10/0x10 [ 1273.598107][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 1273.603085][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1273.608578][ T30] ? _printk+0xd5/0x120 [ 1273.612771][ T30] ? __pfx__printk+0x10/0x10 [ 1273.617399][ T30] ? __wake_up_klogd+0xcc/0x110 [ 1273.622288][ T30] ? __pfx__printk+0x10/0x10 [ 1273.626915][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1273.632575][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 1273.637642][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1273.643662][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 1273.649690][ T30] watchdog+0xff4/0x1040 [ 1273.653968][ T30] ? watchdog+0x1ea/0x1040 [ 1273.658424][ T30] ? __pfx_watchdog+0x10/0x10 [ 1273.663139][ T30] kthread+0x2f2/0x390 [ 1273.667235][ T30] ? __pfx_watchdog+0x10/0x10 [ 1273.671943][ T30] ? __pfx_kthread+0x10/0x10 [ 1273.676559][ T30] ret_from_fork+0x4d/0x80 [ 1273.681009][ T30] ? __pfx_kthread+0x10/0x10 [ 1273.685731][ T30] ret_from_fork_asm+0x1a/0x30 [ 1273.690569][ T30] [ 1273.694944][ T30] Sending NMI from CPU 1 to CPUs 0: [ 1273.700745][ C0] NMI backtrace for cpu 0 [ 1273.700761][ C0] CPU: 0 UID: 0 PID: 5695 Comm: kworker/0:19 Not tainted 6.11.0-syzkaller-09959-gabf2050f51fd #0 [ 1273.700788][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1273.700804][ C0] Workqueue: wg-crypt-wg0 wg_packet_tx_worker [ 1273.700844][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp8+0x2d/0x90 [ 1273.700880][ C0] Code: fa 4c 8b 04 24 65 48 8b 0c 25 c0 d7 03 00 65 8b 05 c0 1e 6f 7e 25 00 01 ff 00 74 10 3d 00 01 00 00 75 57 83 b9 1c 16 00 00 00 <74> 4e 8b 81 f8 15 00 00 83 f8 03 75 43 48 8b 91 00 16 00 00 44 8b [ 1273.700900][ C0] RSP: 0018:ffffc90000007418 EFLAGS: 00000246 [ 1273.700920][ C0] RAX: 0000000000000100 RBX: 0000000000000000 RCX: ffff88807bdb5a00 [ 1273.700937][ C0] RDX: ffff88807bdb5a00 RSI: 0000000000000000 RDI: 0000000000000000 [ 1273.700953][ C0] RBP: ffffc90000007520 R08: ffffffff898f63f1 R09: 1ffffffff2039495 [ 1273.700970][ C0] R10: dffffc0000000000 R11: fffffbfff2039496 R12: 1ffff92000000e88 [ 1273.700989][ C0] R13: ffff8880a3935500 R14: dffffc0000000000 R15: 1ffff11014726aa4 [ 1273.701011][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 1273.701031][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1273.701049][ C0] CR2: 000000001fffff80 CR3: 000000000e734000 CR4: 0000000000350ef0 [ 1273.701068][ C0] Call Trace: [ 1273.701076][ C0] [ 1273.701086][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 1273.701114][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 1273.701151][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1273.701178][ C0] ? nmi_handle+0x2a/0x5a0 [ 1273.701217][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1273.701250][ C0] ? nmi_handle+0x151/0x5a0 [ 1273.701273][ C0] ? nmi_handle+0x2a/0x5a0 [ 1273.701298][ C0] ? __sanitizer_cov_trace_const_cmp8+0x2d/0x90 [ 1273.701329][ C0] ? default_do_nmi+0x63/0x160 [ 1273.701358][ C0] ? exc_nmi+0x123/0x1f0 [ 1273.701384][ C0] ? end_repeat_nmi+0xf/0x53 [ 1273.701422][ C0] ? netif_rx_internal+0x281/0x630 [ 1273.701459][ C0] ? __sanitizer_cov_trace_const_cmp8+0x2d/0x90 [ 1273.701491][ C0] ? __sanitizer_cov_trace_const_cmp8+0x2d/0x90 [ 1273.701524][ C0] ? __sanitizer_cov_trace_const_cmp8+0x2d/0x90 [ 1273.701556][ C0] [ 1273.701564][ C0] [ 1273.701572][ C0] netif_rx_internal+0x281/0x630 [ 1273.701608][ C0] ? __pfx_netif_rx_internal+0x10/0x10 [ 1273.701642][ C0] ? __pfx_eth_type_trans+0x10/0x10 [ 1273.701671][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1273.701693][ C0] ? skb_scrub_packet+0x29f/0x440 [ 1273.701731][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1273.701752][ C0] ? rcu_is_watching+0x15/0xb0 [ 1273.701780][ C0] __netif_rx+0x78/0xc0 [ 1273.701804][ C0] veth_xmit+0x61d/0xae0 [ 1273.701832][ C0] ? veth_xmit+0x5a/0xae0 [ 1273.701863][ C0] dev_hard_start_xmit+0x27c/0x7e0 [ 1273.701896][ C0] __dev_queue_xmit+0x1b58/0x3e80 [ 1273.701919][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1273.701941][ C0] ? kasan_save_track+0x51/0x80 [ 1273.701969][ C0] ? do_softirq+0x11b/0x1e0 [ 1273.701999][ C0] ? process_scheduled_works+0xa65/0x1850 [ 1273.702031][ C0] ? ret_from_fork+0x4d/0x80 [ 1273.702065][ C0] ? __dev_queue_xmit+0x2da/0x3e80 [ 1273.702092][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1273.702127][ C0] ? __copy_skb_header+0x437/0x5b0 [ 1273.702152][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1273.702174][ C0] ? __asan_memcpy+0x40/0x70 [ 1273.702208][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1273.702235][ C0] ? __copy_skb_header+0x437/0x5b0 [ 1273.702262][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1273.702283][ C0] ? __skb_clone+0x454/0x6c0 [ 1273.702307][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1273.702329][ C0] ? hsr_addr_subst_dest+0x30a/0xac0 [ 1273.702360][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1273.702383][ C0] ? skb_clone+0x240/0x390 [ 1273.702410][ C0] hsr_forward_skb+0x17b4/0x2b60 [ 1273.702453][ C0] ? hsr_forward_skb+0xaf/0x2b60 [ 1273.702486][ C0] ? __pfx_hsr_forward_skb+0x10/0x10 [ 1273.702522][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1273.702543][ C0] ? __asan_memset+0x23/0x50 [ 1273.702576][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1273.702599][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1273.702626][ C0] send_hsr_supervision_frame+0x63b/0xcc0 [ 1273.702663][ C0] ? __pfx_send_hsr_supervision_frame+0x10/0x10 [ 1273.702693][ C0] hsr_announce+0x1fa/0x3a0 [ 1273.702721][ C0] ? hsr_announce+0xaa/0x3a0 [ 1273.702749][ C0] ? __pfx_hsr_announce+0x10/0x10 [ 1273.702777][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1273.702801][ C0] ? call_timer_fn+0xa8/0x650 [ 1273.702838][ C0] call_timer_fn+0x190/0x650 [ 1273.702872][ C0] ? call_timer_fn+0xc0/0x650 [ 1273.702903][ C0] ? __pfx_hsr_announce+0x10/0x10 [ 1273.702931][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 1273.702967][ C0] ? __pfx_hsr_announce+0x10/0x10 [ 1273.702995][ C0] ? __pfx_hsr_announce+0x10/0x10 [ 1273.703024][ C0] ? __pfx_hsr_announce+0x10/0x10 [ 1273.703050][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1273.703081][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1273.703103][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 1273.703135][ C0] ? __pfx_hsr_announce+0x10/0x10 [ 1273.703164][ C0] __run_timer_base+0x66a/0x8e0 [ 1273.703202][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 1273.703241][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1273.703281][ C0] run_timer_softirq+0xb7/0x170 [ 1273.703313][ C0] handle_softirqs+0x2c7/0x980 [ 1273.703347][ C0] ? do_softirq+0x11b/0x1e0 [ 1273.703379][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1273.703413][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1273.703438][ C0] do_softirq+0x11b/0x1e0 [ 1273.703467][ C0] [ 1273.703475][ C0] [ 1273.703485][ C0] ? __pfx_do_softirq+0x10/0x10 [ 1273.703515][ C0] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 1273.703549][ C0] ? mod_peer_timer+0x21/0x260 [ 1273.703582][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1273.703605][ C0] ? rcu_is_watching+0x15/0xb0 [ 1273.703631][ C0] __local_bh_enable_ip+0x1bb/0x200 [ 1273.703666][ C0] ? mod_peer_timer+0x21/0x260 [ 1273.703700][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1273.703734][ C0] ? mod_peer_timer+0x21/0x260 [ 1273.703770][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1273.703794][ C0] ? mod_peer_timer+0x212/0x260 [ 1273.703832][ C0] wg_packet_tx_worker+0x160/0x810 [ 1273.703875][ C0] ? process_scheduled_works+0x976/0x1850 [ 1273.703909][ C0] process_scheduled_works+0xa65/0x1850 [ 1273.703963][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1273.704004][ C0] ? assign_work+0x364/0x3d0 [ 1273.704041][ C0] worker_thread+0x870/0xd30 [ 1273.704079][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1273.704104][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1273.704126][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1273.704160][ C0] ? __kthread_parkme+0x169/0x1d0 [ 1273.704197][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1273.704235][ C0] kthread+0x2f2/0x390 [ 1273.704257][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1273.704288][ C0] ? __pfx_kthread+0x10/0x10 [ 1273.704311][ C0] ret_from_fork+0x4d/0x80 [ 1273.704343][ C0] ? __pfx_kthread+0x10/0x10 [ 1273.704365][ C0] ret_from_fork_asm+0x1a/0x30 [ 1273.704409][ C0] [ 1274.446218][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1274.453117][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-09959-gabf2050f51fd #0 [ 1274.463292][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1274.473364][ T30] Call Trace: [ 1274.476661][ T30] [ 1274.479607][ T30] dump_stack_lvl+0x241/0x360 [ 1274.484416][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1274.489655][ T30] ? __pfx__printk+0x10/0x10 [ 1274.494277][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1274.500299][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1274.505952][ T30] ? vscnprintf+0x5d/0x90 [ 1274.510314][ T30] panic+0x349/0x880 [ 1274.514246][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1274.519903][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1274.526086][ T30] ? __pfx_panic+0x10/0x10 [ 1274.530536][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 1274.535931][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1274.541584][ T30] ? __irq_work_queue_local+0x137/0x410 [ 1274.547160][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1274.552812][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 1274.558208][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1274.564395][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 1274.570576][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1274.576229][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 1274.582512][ T30] watchdog+0x1033/0x1040 [ 1274.586878][ T30] ? watchdog+0x1ea/0x1040 [ 1274.591336][ T30] ? __pfx_watchdog+0x10/0x10 [ 1274.596044][ T30] kthread+0x2f2/0x390 [ 1274.600443][ T30] ? __pfx_watchdog+0x10/0x10 [ 1274.605149][ T30] ? __pfx_kthread+0x10/0x10 [ 1274.609760][ T30] ret_from_fork+0x4d/0x80 [ 1274.614209][ T30] ? __pfx_kthread+0x10/0x10 [ 1274.618827][ T30] ret_from_fork_asm+0x1a/0x30 [ 1274.623641][ T30] [ 1274.626890][ T30] Kernel Offset: disabled [ 1274.631227][ T30] Rebooting in 86400 seconds..