last executing test programs: 2m17.000015656s ago: executing program 4 (id=2002): socket$nl_route(0x10, 0x3, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x1000}, 0x20) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) bind$xdp(0xffffffffffffffff, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) ioctl$PPPIOCGIDLE(0xffffffffffffffff, 0x8010743f, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00000010000107f6ffffff000000000a0000"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r4) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="020300030b00000000000000000000000100090000000000030006006c0000000200000000000000000000000000000002000100000000000000060b00000050030005000000000002"], 0x58}, 0x1, 0x7}, 0x0) 2m15.499777701s ago: executing program 4 (id=2011): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0xf, 0xff7f, 0xf03d, 0x2, 0x7fff, 0x3}}, {0x4}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000010) sendmmsg$inet(r0, 0x0, 0x0, 0x0) 2m15.441941984s ago: executing program 4 (id=2013): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe2$9p(&(0x7f00000003c0), 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 2m15.441517983s ago: executing program 4 (id=2014): syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f0000000240)={[{@nogrpid}, {@min_batch_time}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nobarrier}, {@nodiscard}, {@test_dummy_encryption}]}, 0x3, 0x45c, &(0x7f0000000580)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f0000020240)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000d40)='./file6\x00') chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x130) 2m15.366914541s ago: executing program 4 (id=2018): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004081) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000100)=0x0) syz_open_procfs(r1, &(0x7f0000000180)='smaps_rollup\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c0009800800014000000005600000000c0a010300000000000000000700fffe0900020073797a31000000000900010073797a300000000034000380300000802c000180250001002130404c6bfef3a31e2587ebd76200eb3ea056f39e3ab8a93c358099bf8cf3007d00000014000000110001"], 0xf0}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 2m14.859062357s ago: executing program 4 (id=2020): prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x80000027) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000400850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a5000000050000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x0, &(0x7f0000000000), 0x0, 0x248, &(0x7f0000000940)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='mnt/encrypted_dir\x00', 0x0) add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f0000000340)="0000000000000002ff69fe00000000020000001800000002000200861fa72e5b01504104bfeacdd5a9007d16", 0x2c, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x120) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@metacopy_on}], [], 0x2c}) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0xa0, &(0x7f0000000700)=ANY=[], 0x1, 0x0, 0x0) 2m14.842580722s ago: executing program 32 (id=2020): prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x80000027) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000400850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a5000000050000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x0, &(0x7f0000000000), 0x0, 0x248, &(0x7f0000000940)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='mnt/encrypted_dir\x00', 0x0) add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f0000000340)="0000000000000002ff69fe00000000020000001800000002000200861fa72e5b01504104bfeacdd5a9007d16", 0x2c, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x120) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@metacopy_on}], [], 0x2c}) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0xa0, &(0x7f0000000700)=ANY=[], 0x1, 0x0, 0x0) 10.999167138s ago: executing program 5 (id=2513): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000001000c10701000000000000000a"], 0x7b}}, 0x8000) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000240), 0x3af4701e) sendfile(r2, r0, 0x0, 0x10000a007) 10.808571109s ago: executing program 5 (id=2517): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000200)='./file0\x00', 0x3800813, &(0x7f0000000280)=ANY=[], 0x5, 0xa62, &(0x7f0000000680)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) clock_gettime(0x2, &(0x7f0000000300)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 8.214143492s ago: executing program 1 (id=2524): recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c00028008000100010000001400070000000000000000050000000000000001"], 0x74}}, 0x24005000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {0xffff, 0xffff}, {0xfff3, 0x6}}}, 0x24}}, 0x8040) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 7.566027758s ago: executing program 1 (id=2526): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000780)=[{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="6f46c908341889a11ea3992276d5ab9e10824f9fcfb7f6d042618c6866e3801459b03d38ea918910602c461a2efae322fa6119ac242a51d6da28c74d466e336b26c77454129b8f149137cbe49f4f0d25a1887a2a71ab45b6bed147c61d2108915369d90861af6441ec422495a54e33cf5d51bc8ec63fe185fd507269b9f35a5154d5ecd6c83c25782fcc150c9b8ad83c365059f0f127", 0x96}], 0x1, 0x0, 0x0, 0x84}], 0x1, 0x4040000) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x138}, 0x1, 0x0, 0x0, 0x40010}, 0x4008090) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x44080) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) 7.527523832s ago: executing program 1 (id=2528): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000349000/0x1000)=nil, 0x1000, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 6.537471926s ago: executing program 5 (id=2533): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, 0x0, 0x880) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000001c0)={@dev={0xfe, 0x80, '\x00', 0x2a}, 0x91ee, 0x1, 0x1, 0x0, 0x2, 0x80}, &(0x7f00000002c0)=0x20) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, 0x0, 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e681cdb9e581a38ebb0ddd5f307e56", r6}) 5.609038835s ago: executing program 5 (id=2539): openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x3, 0x0, &(0x7f00000002c0)='\\ S', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) r0 = syz_io_uring_setup(0x54d, &(0x7f0000000040)={0x0, 0x735a, 0x100, 0x805, 0x350}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x5}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x1, 0x2007, @fd, 0xffffffffffffff7f, 0x0, 0x0, 0x4, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 5.519193882s ago: executing program 1 (id=2542): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, 0x0, 0x880) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000001c0)={@dev={0xfe, 0x80, '\x00', 0x2a}, 0x91ee, 0x1, 0x1, 0x0, 0x2, 0x80}, &(0x7f00000002c0)=0x20) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, 0x0, 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25"}) 5.518811587s ago: executing program 5 (id=2543): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000349000/0x1000)=nil, 0x1000, &(0x7f0000000040)='.\x00') mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 4.579700541s ago: executing program 1 (id=2547): socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000000002}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000340)={0x38}) 4.088208521s ago: executing program 0 (id=2548): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket(0x10, 0x3, 0x0) syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file1\x00', 0x0, &(0x7f00000001c0)={[{@swalloc}]}, 0x1, 0x9764, &(0x7f00000097c0)="$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") setxattr$trusted_overlay_upper(0x0, &(0x7f0000000280), 0x0, 0x90f, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r5 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r5, &(0x7f0000000240)=""/112, 0x349b7f55) 3.782544268s ago: executing program 2 (id=2551): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe2$9p(&(0x7f00000003c0), 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0x9, @mcast1, 0x8}, r2, 0x8001}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 3.761151463s ago: executing program 2 (id=2552): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) 3.451800226s ago: executing program 1 (id=2553): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000349000/0x1000)=nil, 0x1000, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 2.762196877s ago: executing program 0 (id=2554): openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 2.761377803s ago: executing program 3 (id=2555): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000"], 0x44}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={r1, 0x7, 0x104, 0xfffffffe}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.638487322s ago: executing program 3 (id=2556): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0xc00000}}, 0xb8}}, 0x0) 2.327202454s ago: executing program 2 (id=2557): socket$nl_generic(0x10, 0x3, 0x10) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) preadv(r0, &(0x7f0000000080)=[{0x0}], 0x1, 0x18, 0x2) syz_open_dev$video(0x0, 0x8, 0x20202) syz_open_dev$audion(&(0x7f0000000040), 0x1ff, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x80000000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x1cf) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) dup(r1) r2 = syz_io_uring_setup(0x4260, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[], 0x118) io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x8000, 0x44, 0x18}, 0x18) 1.695025868s ago: executing program 3 (id=2558): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x6, 0x22, 0x3, 0x50000}]}) syz_clone3(&(0x7f0000000080)={0x21800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x2) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x3) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000400)=0x7) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000200)=0xa) 1.680467174s ago: executing program 2 (id=2559): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="5000000002060500000000010000000000000000050005000a000000050004000000000005000100070000000900020073797a310000000016000300686173683a6e65742c706f72742c6e6574"], 0x50}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.624220142s ago: executing program 2 (id=2560): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x2, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x5}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0xff, 0x7, 0x7fffffff, 0x7, 0x7, 0xcaba}}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x9}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000804) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.558001709s ago: executing program 2 (id=2561): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, &(0x7f00000003c0)=ANY=[@ANYRES32=r0, @ANYRES64=r0, @ANYRES32=r0, @ANYRES16=r0], 0x0, 0x100000, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbfffffff}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4000000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="91685102d300000013000010888e", 0xe, 0x0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x2e, &(0x7f0000000a00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@cb_func={0x18, 0x5, 0x4, 0x0, 0x8}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x370c}}, @exit, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fff}}, @map_idx={0x18, 0x3, 0x5, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x51}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='GPL\x00', 0x9, 0x5d, &(0x7f00000008c0)=""/93, 0x41000, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000340)=[{0x5, 0x2, 0x1, 0x7}, {0x3, 0x1, 0xc, 0x5}, {0x2, 0x2, 0x9, 0xc}]}, 0x94) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) syz_clone(0x50202180, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x10000, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_i', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0, @ANYBLOB]) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) 1.5411876s ago: executing program 0 (id=2562): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 1.390751906s ago: executing program 0 (id=2563): openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 789.612657ms ago: executing program 3 (id=2564): bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={r0, 0x7, 0x104, 0xfffffffe}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 624.360893ms ago: executing program 3 (id=2565): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000d00)}], 0x2, 0x0, 0x0, 0x10040000}, 0x0) 450.695808ms ago: executing program 3 (id=2566): setrlimit(0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000180)) write$dsp(r2, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) 359.609019ms ago: executing program 0 (id=2567): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f0000000a00)={0x10, 0x1405, 0x4, 0x70bd29, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x8010}, 0x10) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) 322.717869ms ago: executing program 0 (id=2568): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000000)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000f40)="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", 0x390}, {&(0x7f0000000300)="439e9c06fc666cabc8569d63a866b31ff3ceda1e28f23f455e96a02001fc3fb089ed9e52", 0x24}], 0x2}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001300)="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", 0x3a1}], 0x1}}], 0x2, 0x4048884) 0s ago: executing program 5 (id=2569): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, 0x0, 0x880) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e681cdb9e581a38ebb0ddd5f307e56", r7, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r8, 0xc0383e04, &(0x7f0000000040)={""/32, 0x0, 0x0, 0x2, 0x0, &(0x7f0000019300)=[{}, {}]}) kernel console output (not intermixed with test programs): IPVS: using max 55 ests per chain, 132000 per kthread [ 153.632089][ T6583] Bluetooth: hci3: command 0x0406 tx timeout [ 153.632177][ T6583] Bluetooth: hci4: command 0x0406 tx timeout [ 153.632236][ T6583] Bluetooth: hci2: command 0x0406 tx timeout [ 153.632302][ T6583] Bluetooth: hci1: command 0x0406 tx timeout [ 153.637081][ T6584] Bluetooth: hci0: command 0x0406 tx timeout [ 153.970668][ T6586] block nbd2: Receive control failed (result -32) [ 153.979481][ T8820] nbd2: detected capacity change from 0 to 127 [ 153.983928][ T8827] netlink: 64 bytes leftover after parsing attributes in process `syz.2.592'. [ 154.011439][ T6561] block nbd2: Dead connection, failed to find a fallback [ 154.013631][ T6561] block nbd2: shutting down sockets [ 154.015005][ T6561] blk_print_req_error: 138 callbacks suppressed [ 154.015024][ T6561] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 154.015048][ T6561] buffer_io_error: 138 callbacks suppressed [ 154.015055][ T6561] Buffer I/O error on dev nbd2, logical block 0, async page read [ 154.015124][ T6561] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 154.015140][ T6561] Buffer I/O error on dev nbd2, logical block 1, async page read [ 154.015181][ T6561] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 154.015196][ T6561] Buffer I/O error on dev nbd2, logical block 2, async page read [ 154.015225][ T6561] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 154.015234][ T6561] Buffer I/O error on dev nbd2, logical block 3, async page read [ 154.015260][ T6561] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 154.015268][ T6561] Buffer I/O error on dev nbd2, logical block 0, async page read [ 154.015284][ T6561] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 154.015291][ T6561] Buffer I/O error on dev nbd2, logical block 1, async page read [ 154.015307][ T6561] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 154.015314][ T6561] Buffer I/O error on dev nbd2, logical block 2, async page read [ 154.015328][ T6561] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 154.015335][ T6561] Buffer I/O error on dev nbd2, logical block 3, async page read [ 154.015351][ T6561] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 154.015358][ T6561] Buffer I/O error on dev nbd2, logical block 0, async page read [ 154.015372][ T6561] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 154.015379][ T6561] Buffer I/O error on dev nbd2, logical block 1, async page read [ 154.015625][ T6561] ldm_validate_partition_table(): Disk read failed. [ 154.015797][ T6561] Dev nbd2: unable to read RDB block 0 [ 154.016018][ T6561] nbd2: unable to read partition table [ 154.090208][ T6561] ldm_validate_partition_table(): Disk read failed. [ 154.090407][ T6561] Dev nbd2: unable to read RDB block 0 [ 154.090609][ T6561] nbd2: unable to read partition table [ 154.109032][ T8842] netlink: 1028 bytes leftover after parsing attributes in process `syz.3.600'. [ 158.252802][ T8898] netlink: 1028 bytes leftover after parsing attributes in process `syz.0.612'. [ 162.185542][ T8952] binder: 8951:8952 tried to acquire reference to desc 0, got 1 instead [ 162.190206][ T8952] binder: 8951:8952 got reply transaction with no transaction stack [ 162.191686][ T8952] binder_debug: 2 callbacks suppressed [ 162.192591][ T8952] binder: 8951:8952 transaction reply to 0:0 failed 63/29201/-71, code 0 size 0-0 line 3135 [ 162.194586][ T8952] binder: release 8951:8952 transaction 62 out, still active [ 162.196060][ T8952] binder: undelivered TRANSACTION_COMPLETE [ 163.112635][ T7037] binder: undelivered TRANSACTION_ERROR: 29201 [ 163.113776][ T7037] binder: send failed reply for transaction 62, target dead [ 164.346041][ T8989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.350395][ T8989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.455137][ T8997] tipc: Enabling of bearer rejected, failed to enable media [ 165.220720][ T9023] ======================================================= [ 165.220720][ T9023] WARNING: The mand mount option has been deprecated and [ 165.220720][ T9023] and is ignored by this kernel. Remove the mand [ 165.220720][ T9023] option from the mount to silence this warning. [ 165.220720][ T9023] ======================================================= [ 166.253184][ T9052] tipc: Enabling of bearer rejected, failed to enable media [ 168.174994][ T9078] binder: 9077:9078 tried to acquire reference to desc 0, got 1 instead [ 168.175416][ T9078] binder: 9077:9078 got transaction with invalid data ptr [ 168.175834][ T9078] binder: 9077:9078 transaction async to 9077:0 failed 68/29201/-14, code 0 size 0-24 line 3492 [ 168.707931][ T10] binder: undelivered TRANSACTION_ERROR: 29201 [ 173.400597][ T9109] tipc: Enabling of bearer rejected, failed to enable media [ 173.534893][ T9124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.535092][ T9124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.248923][ T9126] workqueue: Failed to create a rescuer kthread for wq "xfs-inodegc/nullb0": -EINTR [ 174.299720][ T9138] netlink: 124 bytes leftover after parsing attributes in process `syz.2.663'. [ 174.370048][ T9140] syz.2.664 uses obsolete (PF_INET,SOCK_PACKET) [ 176.639553][ T57] block nbd1: Possible stuck request 0000000023c35df9: control (read@0,1024B). Runtime 30 seconds [ 176.640035][ T57] block nbd1: Possible stuck request 00000000a92a6a49: control (read@1024,1024B). Runtime 30 seconds [ 176.640048][ T57] block nbd1: Possible stuck request 0000000050992986: control (read@2048,1024B). Runtime 30 seconds [ 176.640057][ T57] block nbd1: Possible stuck request 00000000ce8310c2: control (read@3072,1024B). Runtime 30 seconds [ 176.665969][ T9165] loop3: detected capacity change from 0 to 2048 [ 176.668952][ T9165] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 176.676348][ T9164] tipc: Enabled bearer , priority 0 [ 176.686100][ T9164] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 176.687528][ T9164] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 176.690672][ T9164] tipc: Resetting bearer [ 176.784555][ T9167] syzkaller0: entered promiscuous mode [ 176.784599][ T9167] syzkaller0: entered allmulticast mode [ 176.888564][ T9171] netlink: 8 bytes leftover after parsing attributes in process `syz.2.674'. [ 177.126890][ T9177] tipc: Enabled bearer , priority 0 [ 177.129477][ T9177] syzkaller0: entered promiscuous mode [ 177.130686][ T9177] syzkaller0: entered allmulticast mode [ 177.138852][ T9177] tipc: Resetting bearer [ 177.140358][ T9176] tipc: Resetting bearer [ 177.192970][ T9176] tipc: Disabling bearer [ 178.317988][ T9199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.320117][ T9199] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.691710][ T6865] tipc: Node number set to 1446978082 [ 178.832919][ T9214] loop4: detected capacity change from 0 to 2048 [ 178.839491][ T9214] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 180.276873][ T9234] loop4: detected capacity change from 0 to 8 [ 180.296028][ T9234] SQUASHFS error: zlib decompression failed, data probably corrupt [ 180.300927][ T9234] SQUASHFS error: Failed to read block 0x9b: -5 [ 180.301037][ T9234] SQUASHFS error: Unable to read metadata cache entry [99] [ 180.301048][ T9234] SQUASHFS error: Unable to read inode 0x127 [ 180.625836][ T9239] netlink: 4 bytes leftover after parsing attributes in process `syz.0.692'. [ 180.996201][ T9244] netlink: 8 bytes leftover after parsing attributes in process `syz.4.693'. [ 181.377409][ T9243] workqueue: Failed to create a rescuer kthread for wq "xfs-inodegc/nullb0": -EINTR [ 182.462829][ T9270] syzkaller0: entered promiscuous mode [ 182.465650][ T9270] syzkaller0: entered allmulticast mode [ 182.571436][ T9276] netlink: 276 bytes leftover after parsing attributes in process `syz.3.702'. [ 182.589797][ T9276] netlink: 276 bytes leftover after parsing attributes in process `syz.3.702'. [ 182.614946][ T9280] netlink: 276 bytes leftover after parsing attributes in process `syz.0.704'. [ 183.249463][ T9287] netlink: 8 bytes leftover after parsing attributes in process `syz.0.706'. [ 183.570768][ T9297] netlink: 64 bytes leftover after parsing attributes in process `syz.1.707'. [ 183.615245][ T9298] loop3: detected capacity change from 0 to 1764 [ 183.790986][ T9307] hub 6-0:1.0: USB hub found [ 183.791243][ T9307] hub 6-0:1.0: 8 ports detected [ 184.817279][ T9308] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/nullb0": -EINTR [ 185.027502][ T9328] nbd3: detected capacity change from 0 to 127 [ 185.031791][ T9333] netlink: 'syz.1.718': attribute type 6 has an invalid length. [ 185.033634][ T9333] netlink: 64 bytes leftover after parsing attributes in process `syz.1.718'. [ 185.039432][ T6164] block nbd3: Receive control failed (result -104) [ 185.126759][ T9340] netlink: 8 bytes leftover after parsing attributes in process `syz.4.719'. [ 185.700741][ T9356] loop3: detected capacity change from 0 to 1764 [ 185.763323][ T6686] IPVS: starting estimator thread 0... [ 185.778515][ T9365] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 185.806145][ T9367] netlink: 4 bytes leftover after parsing attributes in process `syz.1.727'. [ 185.813013][ T9367] team1: entered promiscuous mode [ 185.813342][ T9367] team1: entered allmulticast mode [ 185.857551][ T9361] IPVS: using max 70 ests per chain, 168000 per kthread [ 185.880810][ T9371] hub 6-0:1.0: USB hub found [ 185.881000][ T9371] hub 6-0:1.0: 8 ports detected [ 185.897985][ T9360] nbd4: detected capacity change from 0 to 127 [ 185.899563][ T9368] netlink: 64 bytes leftover after parsing attributes in process `syz.0.725'. [ 185.903685][ T9368] nbd: socks must be embedded in a SOCK_ITEM attr [ 185.947697][ T6164] block nbd4: Receive control failed (result -104) [ 186.504367][ T9387] netlink: 8 bytes leftover after parsing attributes in process `syz.0.734'. [ 186.504418][ T9387] netlink: 20 bytes leftover after parsing attributes in process `syz.0.734'. [ 186.510416][ T9387] geneve2: entered promiscuous mode [ 186.510451][ T9387] geneve2: entered allmulticast mode [ 186.518432][ T5830] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.518666][ T5830] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.518712][ T5830] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.518743][ T5830] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.014608][ T9399] netlink: 4 bytes leftover after parsing attributes in process `syz.1.737'. [ 187.020199][ T9399] team2: entered promiscuous mode [ 187.020232][ T9399] team2: entered allmulticast mode [ 187.148254][ T7037] IPVS: starting estimator thread 0... [ 187.160248][ T9415] netlink: 8 bytes leftover after parsing attributes in process `syz.0.743'. [ 187.160288][ T9415] netlink: 20 bytes leftover after parsing attributes in process `syz.0.743'. [ 187.237445][ T9413] IPVS: using max 49 ests per chain, 117600 per kthread [ 187.277563][ T9412] nbd5: detected capacity change from 0 to 127 [ 187.286957][ T9422] netlink: 'syz.3.741': attribute type 6 has an invalid length. [ 187.286994][ T9422] netlink: 64 bytes leftover after parsing attributes in process `syz.3.741'. [ 187.288657][ T6164] block nbd5: Receive control failed (result -32) [ 187.302597][ T6564] block nbd5: Dead connection, failed to find a fallback [ 187.302634][ T6564] block nbd5: shutting down sockets [ 187.305674][ T6564] blk_print_req_error: 138 callbacks suppressed [ 187.305714][ T6564] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 187.305733][ T6564] buffer_io_error: 138 callbacks suppressed [ 187.305739][ T6564] Buffer I/O error on dev nbd5, logical block 0, async page read [ 187.305780][ T6564] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 187.305791][ T6564] Buffer I/O error on dev nbd5, logical block 1, async page read [ 187.305816][ T6564] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 187.305825][ T6564] Buffer I/O error on dev nbd5, logical block 2, async page read [ 187.305843][ T6564] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 187.305851][ T6564] Buffer I/O error on dev nbd5, logical block 3, async page read [ 187.305889][ T6564] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 187.305898][ T6564] Buffer I/O error on dev nbd5, logical block 0, async page read [ 187.305917][ T6564] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 187.305925][ T6564] Buffer I/O error on dev nbd5, logical block 1, async page read [ 187.305942][ T6564] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 187.305949][ T6564] Buffer I/O error on dev nbd5, logical block 2, async page read [ 187.305970][ T6564] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 187.305978][ T6564] Buffer I/O error on dev nbd5, logical block 3, async page read [ 187.305999][ T6564] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 187.306006][ T6564] Buffer I/O error on dev nbd5, logical block 0, async page read [ 187.306022][ T6564] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 187.306029][ T6564] Buffer I/O error on dev nbd5, logical block 1, async page read [ 187.306277][ T6564] ldm_validate_partition_table(): Disk read failed. [ 187.306448][ T6564] Dev nbd5: unable to read RDB block 0 [ 187.306652][ T6564] nbd5: unable to read partition table [ 187.336442][ T9424] syzkaller0: entered promiscuous mode [ 187.336456][ T9424] syzkaller0: entered allmulticast mode [ 187.343542][ T6564] ldm_validate_partition_table(): Disk read failed. [ 187.343742][ T6564] Dev nbd5: unable to read RDB block 0 [ 187.343932][ T6564] nbd5: unable to read partition table [ 187.388342][ T2466] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.389472][ T2466] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.592561][ T9431] loop4: detected capacity change from 0 to 1764 [ 187.595005][ T9429] loop3: detected capacity change from 0 to 8 [ 187.596079][ T9429] SQUASHFS error: zlib decompression failed, data probably corrupt [ 187.596109][ T9429] SQUASHFS error: Failed to read block 0x9b: -5 [ 187.596122][ T9429] SQUASHFS error: Unable to read metadata cache entry [99] [ 187.596134][ T9429] SQUASHFS error: Unable to read inode 0x127 [ 187.798821][ T9436] hub 6-0:1.0: USB hub found [ 187.799033][ T9436] hub 6-0:1.0: 8 ports detected [ 188.154102][ T41] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.155747][ T41] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.157518][ T41] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.157577][ T41] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.289913][ T9458] netlink: 208 bytes leftover after parsing attributes in process `syz.1.758'. [ 189.294701][ T9458] netlink: 208 bytes leftover after parsing attributes in process `syz.1.758'. [ 189.505403][ T9466] loop3: detected capacity change from 0 to 1024 [ 189.543354][ T9466] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.706660][ T6571] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.719267][ T9477] tipc: Enabled bearer , priority 0 [ 189.725456][ T9477] tipc: Resetting bearer [ 189.748400][ T9476] tipc: Disabling bearer [ 191.385401][ T9497] __nla_validate_parse: 1 callbacks suppressed [ 191.385637][ T9497] netlink: 32 bytes leftover after parsing attributes in process `syz.4.772'. [ 191.391713][ T9502] loop8: detected capacity change from 0 to 7 [ 191.395186][ T9502] Dev loop8: unable to read RDB block 7 [ 191.396412][ T9502] loop8: unable to read partition table [ 191.397787][ T9502] loop8: partition table beyond EOD, truncated [ 191.399428][ T9502] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 191.900076][ T9525] loop4: detected capacity change from 0 to 128 [ 191.906235][ T9525] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 192.869045][ T9536] netlink: 32 bytes leftover after parsing attributes in process `syz.3.786'. [ 192.968509][ T9540] netlink: 64 bytes leftover after parsing attributes in process `syz.1.787'. [ 193.082841][ T6581] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 193.445399][ T9564] hub 6-0:1.0: USB hub found [ 193.445546][ T9564] hub 6-0:1.0: 8 ports detected [ 193.519414][ T9570] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.898237][ T9579] netlink: 52 bytes leftover after parsing attributes in process `syz.4.799'. [ 193.935233][ T9570] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.052718][ T9570] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.048758][ T9586] netlink: 208 bytes leftover after parsing attributes in process `syz.1.802'. [ 195.092294][ T9570] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.105752][ T9592] netlink: 8 bytes leftover after parsing attributes in process `syz.1.804'. [ 195.114272][ T9590] netlink: 20 bytes leftover after parsing attributes in process `syz.4.803'. [ 195.226050][ T9598] syzkaller0: entered promiscuous mode [ 195.226091][ T9598] syzkaller0: entered allmulticast mode [ 195.640141][ T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.643225][ T13] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.648024][ T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.654730][ T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.267881][ T9618] netlink: 4 bytes leftover after parsing attributes in process `syz.2.812'. [ 196.295893][ T9616] hub 6-0:1.0: USB hub found [ 196.296055][ T9616] hub 6-0:1.0: 8 ports detected [ 196.311336][ T9622] netlink: 208 bytes leftover after parsing attributes in process `syz.2.814'. [ 196.802290][ T9630] netlink: 8 bytes leftover after parsing attributes in process `syz.3.817'. [ 197.051027][ T9637] loop4: detected capacity change from 0 to 1024 [ 197.113358][ T9637] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.144936][ T6581] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.237659][ T9642] loop4: detected capacity change from 0 to 32768 [ 197.238153][ T9642] BTRFS warning: excessive commit interval 2147483712, use with care [ 197.239659][ T9642] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.821 (9642) [ 197.243939][ T9642] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 197.243996][ T9642] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm [ 197.353251][ T2450] BTRFS warning (device loop4): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 197.353328][ T9642] BTRFS error (device loop4): failed to load root extent [ 197.353357][ T9642] BTRFS warning (device loop4): try to load backup roots slot 1 [ 197.353466][ T2450] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 197.353488][ T9642] BTRFS warning (device loop4): couldn't read tree root [ 197.353498][ T9642] BTRFS warning (device loop4): try to load backup roots slot 2 [ 197.353588][ T2450] BTRFS error (device loop4): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 197.353609][ T9642] BTRFS warning (device loop4): couldn't read tree root [ 197.353620][ T9642] BTRFS warning (device loop4): try to load backup roots slot 3 [ 197.386019][ T9642] BTRFS info (device loop4): checking UUID tree [ 197.386256][ T9642] BTRFS info (device loop4): enabling ssd optimizations [ 197.386267][ T9642] BTRFS info (device loop4): using spread ssd allocation scheme [ 197.386274][ T9642] BTRFS info (device loop4): turning on async discard [ 197.386279][ T9642] BTRFS info (device loop4): enabling free space tree [ 197.386285][ T9642] BTRFS info (device loop4): enabling auto defrag [ 197.386290][ T9642] BTRFS info (device loop4): trying to use backup root at mount time [ 197.386297][ T9642] BTRFS info (device loop4): use zlib compression, level 3 [ 197.710374][ T9680] netlink: 8 bytes leftover after parsing attributes in process `syz.2.828'. [ 197.892311][ T6581] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 197.929645][ T9683] hub 6-0:1.0: USB hub found [ 197.929782][ T9683] hub 6-0:1.0: 8 ports detected [ 197.989029][ T9685] netlink: 8 bytes leftover after parsing attributes in process `syz.4.830'. [ 198.545110][ T9693] loop4: detected capacity change from 0 to 32768 [ 198.545508][ T9693] BTRFS warning: excessive commit interval 2147483712, use with care [ 198.546513][ T9693] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.834 (9693) [ 198.554579][ T9693] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 198.554635][ T9693] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm [ 198.597509][ T12] Bluetooth: hci5: Frame reassembly failed (-84) [ 198.640345][ T41] BTRFS warning (device loop4): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 198.668603][ T9693] BTRFS error (device loop4): failed to load root extent [ 198.668661][ T9693] BTRFS warning (device loop4): try to load backup roots slot 1 [ 198.671408][ T7532] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 198.673667][ T9693] BTRFS warning (device loop4): couldn't read tree root [ 198.673700][ T9693] BTRFS warning (device loop4): try to load backup roots slot 2 [ 198.676360][ T2450] BTRFS error (device loop4): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 198.678300][ T9693] BTRFS warning (device loop4): couldn't read tree root [ 198.679141][ T9693] BTRFS warning (device loop4): try to load backup roots slot 3 [ 198.693554][ T9693] BTRFS info (device loop4): checking UUID tree [ 198.694737][ T9693] BTRFS info (device loop4): enabling ssd optimizations [ 198.694753][ T9693] BTRFS info (device loop4): using spread ssd allocation scheme [ 198.694762][ T9693] BTRFS info (device loop4): turning on async discard [ 198.694770][ T9693] BTRFS info (device loop4): enabling free space tree [ 198.694778][ T9693] BTRFS info (device loop4): enabling auto defrag [ 198.694784][ T9693] BTRFS info (device loop4): trying to use backup root at mount time [ 198.694791][ T9693] BTRFS info (device loop4): use zlib compression, level 3 [ 198.794554][ T9723] netlink: 8 bytes leftover after parsing attributes in process `syz.1.839'. [ 198.903353][ T9729] netlink: 'syz.1.840': attribute type 6 has an invalid length. [ 198.904819][ T9729] netlink: 64 bytes leftover after parsing attributes in process `syz.1.840'. [ 199.342083][ T6581] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 199.591774][ T9745] loop4: detected capacity change from 0 to 32768 [ 199.592227][ T9745] BTRFS warning: excessive commit interval 2147483712, use with care [ 199.595140][ T9745] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.847 (9745) [ 199.599454][ T9745] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 199.599494][ T9745] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm [ 199.611500][ T9746] hub 6-0:1.0: USB hub found [ 199.611655][ T9746] hub 6-0:1.0: 8 ports detected [ 199.750617][ T7532] BTRFS warning (device loop4): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 199.753499][ T9745] BTRFS error (device loop4): failed to load root extent [ 199.753543][ T9745] BTRFS warning (device loop4): try to load backup roots slot 1 [ 199.754861][ T407] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 199.755646][ T9745] BTRFS warning (device loop4): couldn't read tree root [ 199.755660][ T9745] BTRFS warning (device loop4): try to load backup roots slot 2 [ 199.758003][ T2450] BTRFS error (device loop4): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 199.758116][ T9745] BTRFS warning (device loop4): couldn't read tree root [ 199.758141][ T9745] BTRFS warning (device loop4): try to load backup roots slot 3 [ 199.769870][ T9745] BTRFS info (device loop4): checking UUID tree [ 199.771190][ T9745] BTRFS info (device loop4): enabling ssd optimizations [ 199.771215][ T9745] BTRFS info (device loop4): using spread ssd allocation scheme [ 199.771228][ T9745] BTRFS info (device loop4): turning on async discard [ 199.771237][ T9745] BTRFS info (device loop4): enabling free space tree [ 199.771243][ T9745] BTRFS info (device loop4): enabling auto defrag [ 199.771250][ T9745] BTRFS info (device loop4): trying to use backup root at mount time [ 199.771257][ T9745] BTRFS info (device loop4): use zlib compression, level 3 [ 200.061651][ T6581] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 200.131088][ T7037] IPVS: starting estimator thread 0... [ 200.132438][ T9776] netlink: 64 bytes leftover after parsing attributes in process `syz.4.851'. [ 200.227447][ T9777] IPVS: using max 68 ests per chain, 163200 per kthread [ 200.267188][ T9781] loop4: detected capacity change from 0 to 32768 [ 200.267802][ T9781] BTRFS warning: excessive commit interval 2147483712, use with care [ 200.270309][ T9781] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.853 (9781) [ 200.281707][ T9781] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 200.281767][ T9781] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm [ 200.292556][ T7532] BTRFS warning (device loop4): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 200.293300][ T9781] BTRFS error (device loop4): failed to load root extent [ 200.293317][ T9781] BTRFS warning (device loop4): try to load backup roots slot 1 [ 200.297627][ T5512] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 200.300920][ T9781] BTRFS warning (device loop4): couldn't read tree root [ 200.300990][ T9781] BTRFS warning (device loop4): try to load backup roots slot 2 [ 200.302329][ T407] BTRFS error (device loop4): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 200.302411][ T9781] BTRFS warning (device loop4): couldn't read tree root [ 200.302433][ T9781] BTRFS warning (device loop4): try to load backup roots slot 3 [ 200.316114][ T9781] BTRFS info (device loop4): checking UUID tree [ 200.318459][ T9781] BTRFS info (device loop4): enabling ssd optimizations [ 200.318500][ T9781] BTRFS info (device loop4): using spread ssd allocation scheme [ 200.318516][ T9781] BTRFS info (device loop4): turning on async discard [ 200.318526][ T9781] BTRFS info (device loop4): enabling free space tree [ 200.318536][ T9781] BTRFS info (device loop4): enabling auto defrag [ 200.318546][ T9781] BTRFS info (device loop4): trying to use backup root at mount time [ 200.318556][ T9781] BTRFS info (device loop4): use zlib compression, level 3 [ 200.780885][ T6578] Bluetooth: hci5: command 0x1003 tx timeout [ 200.780923][ T6164] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 200.809088][ T9814] netlink: 276 bytes leftover after parsing attributes in process `syz.2.858'. [ 200.889506][ T9826] netlink: 64 bytes leftover after parsing attributes in process `syz.0.863'. [ 202.082349][ T6581] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 202.523852][ T2450] Bluetooth: hci5: Frame reassembly failed (-84) [ 202.525754][ T2450] Bluetooth: hci5: Frame reassembly failed (-84) [ 202.538187][ T9859] netlink: 276 bytes leftover after parsing attributes in process `syz.0.874'. [ 202.587094][ T9861] netlink: 124 bytes leftover after parsing attributes in process `syz.0.875'. [ 202.587132][ T9861] nbd: couldn't find a device at index -16777216 [ 203.259995][ T9877] process 'syz.3.882' launched '/dev/fd/4' with NULL argv: empty string added [ 204.597593][ T6164] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 204.619962][ T9895] netlink: 276 bytes leftover after parsing attributes in process `syz.1.887'. [ 206.623507][ T9932] netlink: 276 bytes leftover after parsing attributes in process `syz.1.900'. [ 206.726227][ T7532] Bluetooth: hci5: Frame reassembly failed (-84) [ 206.727687][ T7532] Bluetooth: hci5: Frame reassembly failed (-84) [ 206.729053][ T7532] Bluetooth: hci5: Frame reassembly failed (-84) [ 206.730197][ T7532] Bluetooth: hci5: Frame reassembly failed (-84) [ 206.731600][ T7532] Bluetooth: hci5: Frame reassembly failed (-84) [ 207.371493][ T57] block nbd1: Possible stuck request 0000000023c35df9: control (read@0,1024B). Runtime 60 seconds [ 207.373796][ T57] block nbd1: Possible stuck request 00000000a92a6a49: control (read@1024,1024B). Runtime 60 seconds [ 207.373819][ T57] block nbd1: Possible stuck request 0000000050992986: control (read@2048,1024B). Runtime 60 seconds [ 207.373830][ T57] block nbd1: Possible stuck request 00000000ce8310c2: control (read@3072,1024B). Runtime 60 seconds [ 207.426004][ T9946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.429096][ T9946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.324064][ T9967] hub 6-0:1.0: USB hub found [ 208.324312][ T9967] hub 6-0:1.0: 8 ports detected [ 208.748516][ T6164] Bluetooth: hci5: command 0x1003 tx timeout [ 208.749102][ T6578] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 209.275909][ T9974] Illegal XDP return value 4294967294 on prog (id 24) dev syz_tun, expect packet loss! [ 209.617194][ T9997] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 211.544481][ T2450] Bluetooth: hci5: Frame reassembly failed (-84) [ 211.610573][T10020] hub 6-0:1.0: USB hub found [ 211.611614][T10020] hub 6-0:1.0: 8 ports detected [ 212.334494][T10033] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 213.618564][ T6578] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 213.707639][ T6164] Bluetooth: hci5: command 0x1003 tx timeout [ 213.755071][T10052] tipc: Enabling of bearer rejected, already enabled [ 215.241528][T10074] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 216.335246][T10085] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 216.400850][ T109] block nbd4: Possible stuck request 00000000249a1060: control (read@0,1024B). Runtime 30 seconds [ 216.400888][ T109] block nbd4: Possible stuck request 00000000411ffd3f: control (read@1024,1024B). Runtime 30 seconds [ 216.400906][ T109] block nbd4: Possible stuck request 000000005963ff00: control (read@2048,1024B). Runtime 30 seconds [ 216.400918][ T109] block nbd4: Possible stuck request 000000003e3e6600: control (read@3072,1024B). Runtime 30 seconds [ 216.410794][ T57] block nbd3: Possible stuck request 00000000f54990f3: control (read@0,1024B). Runtime 30 seconds [ 216.410841][ T57] block nbd3: Possible stuck request 0000000041fd4bda: control (read@1024,1024B). Runtime 30 seconds [ 216.410860][ T57] block nbd3: Possible stuck request 0000000007c53fd5: control (read@2048,1024B). Runtime 30 seconds [ 216.410878][ T57] block nbd3: Possible stuck request 00000000b6e8b915: control (read@3072,1024B). Runtime 30 seconds [ 216.543376][T10094] tipc: Enabled bearer , priority 0 [ 216.552291][T10092] tipc: Disabling bearer [ 216.959292][ T5512] Bluetooth: hci5: Frame reassembly failed (-84) [ 216.959569][ T5512] Bluetooth: hci5: Frame reassembly failed (-84) [ 216.960084][ T5512] Bluetooth: hci5: Frame reassembly failed (-84) [ 216.998151][T10106] netlink: 292 bytes leftover after parsing attributes in process `syz.1.959'. [ 217.054837][T10110] netlink: 4 bytes leftover after parsing attributes in process `syz.3.958'. [ 218.817070][T10151] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 218.996177][ T6164] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 219.993636][T10172] netlink: 4 bytes leftover after parsing attributes in process `syz.2.983'. [ 219.996102][T10173] netlink: 64 bytes leftover after parsing attributes in process `syz.4.982'. [ 220.010697][T10172] team1: entered promiscuous mode [ 220.011584][T10172] team1: entered allmulticast mode [ 220.629041][T10179] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 220.648430][T10186] ptrace attach of "./syz-executor exec"[6571] was attempted by " [ 220.712371][T10188] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 221.134892][T10191] netlink: 4 bytes leftover after parsing attributes in process `syz.4.987'. [ 221.146192][T10191] team1: entered promiscuous mode [ 221.146217][T10191] team1: entered allmulticast mode [ 221.451513][T10208] netlink: 116 bytes leftover after parsing attributes in process `syz.0.995'. [ 221.503106][T10218] netlink: 132 bytes leftover after parsing attributes in process `syz.3.999'. [ 221.503141][T10218] nbd: must specify a device to reconfigure [ 222.271483][T10235] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1004'. [ 222.277118][T10235] team3: entered promiscuous mode [ 222.279260][T10235] team3: entered allmulticast mode [ 222.650645][T10247] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1009'. [ 222.671668][T10249] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1010'. [ 222.673483][T10249] nbd: must specify a device to reconfigure [ 223.500719][T10278] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1020'. [ 223.500835][T10278] nbd: socks must be embedded in a SOCK_ITEM attr [ 223.577982][T10284] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1023'. [ 223.578012][T10284] nbd: must specify a device to reconfigure [ 223.840852][T10298] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1029'. [ 224.214931][T10312] netlink: 124 bytes leftover after parsing attributes in process `syz.4.1035'. [ 224.214970][T10312] nbd: must specify a device to reconfigure [ 224.223542][T10314] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1036'. [ 224.225416][T10314] nbd: socks must be embedded in a SOCK_ITEM attr [ 224.482059][T10324] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1040'. [ 225.091442][T10346] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1048'. [ 225.093143][T10346] nbd: must specify a device to reconfigure [ 225.094866][T10348] nbd: socks must be embedded in a SOCK_ITEM attr [ 225.253079][T10366] loop8: detected capacity change from 0 to 7 [ 225.254085][T10366] Dev loop8: unable to read RDB block 7 [ 225.254104][T10366] loop8: unable to read partition table [ 225.254163][T10366] loop8: partition table beyond EOD, truncated [ 225.254622][T10366] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 225.463452][T10390] loop4: detected capacity change from 0 to 1024 [ 225.489893][T10395] loop8: detected capacity change from 0 to 7 [ 225.494012][T10391] syzkaller0: entered promiscuous mode [ 225.498177][T10395] Dev loop8: unable to read RDB block 7 [ 225.499486][T10391] syzkaller0: entered allmulticast mode [ 225.500527][T10395] loop8: unable to read partition table [ 225.501605][T10395] loop8: partition table beyond EOD, truncated [ 225.503196][T10395] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 225.516694][T10390] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.549435][T10397] team1: entered promiscuous mode [ 225.549471][T10397] team1: entered allmulticast mode [ 225.569456][ T6581] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.482355][T10430] loop8: detected capacity change from 0 to 8 [ 226.485330][T10430] Dev loop8: unable to read RDB block 8 [ 226.487473][T10430] loop8: unable to read partition table [ 226.487887][T10430] loop8: partition table beyond EOD, truncated [ 226.490072][T10430] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 226.529289][T10435] tipc: Enabling of bearer rejected, failed to enable media [ 226.662576][T10457] loop4: detected capacity change from 0 to 1024 [ 226.674765][T10457] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.686033][T10454] syzkaller0: entered promiscuous mode [ 226.686079][T10454] syzkaller0: entered allmulticast mode [ 226.703838][ T6581] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.748999][T10477] loop4: detected capacity change from 0 to 128 [ 227.774035][T10477] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 227.893456][T10480] __nla_validate_parse: 20 callbacks suppressed [ 227.893516][T10480] netlink: 292 bytes leftover after parsing attributes in process `syz.0.1101'. [ 227.896905][T10480] netlink: 292 bytes leftover after parsing attributes in process `syz.0.1101'. [ 227.993191][T10486] tipc: Enabling of bearer rejected, failed to enable media [ 228.060474][T10494] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1104'. [ 228.500571][T10510] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1111'. [ 228.578327][T10510] team2: entered promiscuous mode [ 228.578355][T10510] team2: entered allmulticast mode [ 228.827871][T10511] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 228.835156][T10516] netlink: 292 bytes leftover after parsing attributes in process `syz.2.1112'. [ 228.836455][T10516] netlink: 292 bytes leftover after parsing attributes in process `syz.2.1112'. [ 228.912361][T10522] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1115'. [ 228.928498][T10524] tipc: Enabling of bearer rejected, already enabled [ 229.021204][T10534] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1120'. [ 229.029971][ T6581] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 229.059459][T10538] netlink: 284 bytes leftover after parsing attributes in process `syz.0.1123'. [ 229.060085][T10538] netlink: 284 bytes leftover after parsing attributes in process `syz.0.1123'. [ 229.864147][T10546] syzkaller0: entered promiscuous mode [ 229.865275][T10546] syzkaller0: entered allmulticast mode [ 229.903363][T10556] team4: entered promiscuous mode [ 229.903399][T10556] team4: entered allmulticast mode [ 229.906355][T10554] tipc: Enabling of bearer rejected, failed to enable media [ 231.222744][T10591] loop8: detected capacity change from 0 to 8 [ 231.224759][T10591] Dev loop8: unable to read RDB block 8 [ 231.226181][T10591] loop8: unable to read partition table [ 231.226299][T10591] loop8: partition table beyond EOD, truncated [ 231.229985][T10591] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 232.531242][T10618] hub 6-0:1.0: USB hub found [ 232.531566][T10618] hub 6-0:1.0: 8 ports detected [ 233.994678][T10645] __nla_validate_parse: 4 callbacks suppressed [ 233.994924][T10645] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1155'. [ 234.788590][T10671] hub 6-0:1.0: USB hub found [ 234.790015][T10671] hub 6-0:1.0: 8 ports detected [ 235.362012][T10677] tipc: Enabling of bearer rejected, failed to enable media [ 235.364177][T10677] syzkaller0: entered promiscuous mode [ 235.638627][T10677] syzkaller0: entered allmulticast mode [ 236.164105][T10688] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1170'. [ 236.236661][T10694] netlink: 300 bytes leftover after parsing attributes in process `syz.0.1173'. [ 237.272671][T10716] binder: 10714:10716 ioctl 4018620d 0 returned -22 [ 237.273050][T10716] binder: 10714:10716 got transaction to invalid handle, 1 [ 237.273077][T10716] binder: 10714:10716 cannot find target node [ 237.273094][T10716] binder: 10714:10716 transaction call to 0:0 failed 75/29201/-22, code 0 size 0-0 line 3232 [ 237.273820][T10716] binder: 10714:10716 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 237.273835][T10716] binder: 10716 RLIMIT_NICE not set [ 237.356987][T10719] binder: 10714:10719 got reply transaction with no transaction stack [ 237.357031][T10719] binder: 10714:10719 transaction reply to 0:0 failed 76/29201/-71, code 0 size 0-0 line 3135 [ 237.717188][T10731] hub 6-0:1.0: USB hub found [ 237.717701][T10731] hub 6-0:1.0: 8 ports detected [ 237.966618][ T57] block nbd1: Possible stuck request 0000000023c35df9: control (read@0,1024B). Runtime 90 seconds [ 237.966775][ T57] block nbd1: Possible stuck request 00000000a92a6a49: control (read@1024,1024B). Runtime 90 seconds [ 237.966786][ T57] block nbd1: Possible stuck request 0000000050992986: control (read@2048,1024B). Runtime 90 seconds [ 237.966795][ T57] block nbd1: Possible stuck request 00000000ce8310c2: control (read@3072,1024B). Runtime 90 seconds [ 238.238117][T10733] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1185'. [ 238.253020][ T10] binder: undelivered TRANSACTION_ERROR: 29201 [ 238.254172][ T10] binder: undelivered TRANSACTION_ERROR: 29201 [ 238.286675][T10737] loop4: detected capacity change from 0 to 128 [ 238.291154][T10739] netlink: 300 bytes leftover after parsing attributes in process `syz.2.1186'. [ 238.342303][T10737] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 238.528951][T10745] fuse: Bad value for 'fd' [ 239.820272][T10776] netlink: 300 bytes leftover after parsing attributes in process `syz.2.1200'. [ 240.055816][T10781] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1201'. [ 240.102644][ T6581] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 240.141178][T10785] fuse: Bad value for 'fd' [ 240.730531][T10802] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1208'. [ 240.732240][T10802] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1208'. [ 240.736416][T10802] geneve3: entered promiscuous mode [ 240.738159][T10802] geneve3: entered allmulticast mode [ 240.741410][ T5830] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.743231][ T5830] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.744773][ T5830] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.744805][ T5830] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.640423][T10820] fuse: Bad value for 'fd' [ 241.978576][T10827] tipc: Enabled bearer , priority 0 [ 241.994230][T10826] tipc: Disabling bearer [ 242.031374][T10831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.031602][T10831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.001585][T10853] binder: 10852:10853 tried to acquire reference to desc 0, got 1 instead [ 243.003886][T10853] binder: 10852:10853 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 243.003912][T10853] binder: 10853 RLIMIT_NICE not set [ 243.258302][T10855] binder: 10852:10855 got reply transaction with no transaction stack [ 243.259729][T10855] binder: 10852:10855 transaction reply to 0:0 failed 81/29201/-71, code 0 size 0-0 line 3135 [ 243.600945][T10860] loop4: detected capacity change from 0 to 128 [ 243.748385][T10860] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 243.855486][ T10] binder: undelivered TRANSACTION_ERROR: 29201 [ 243.899750][T10869] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1231'. [ 243.955776][T10873] loop8: detected capacity change from 0 to 8 [ 243.959519][T10873] Dev loop8: unable to read RDB block 8 [ 243.961138][T10873] loop8: unable to read partition table [ 243.962509][T10873] loop8: partition table beyond EOD, truncated [ 243.964595][T10873] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 244.034727][T10877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.037103][T10877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.137250][T10885] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1236'. [ 245.391557][ T6581] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 245.425916][T10905] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1242'. [ 245.440959][T10907] loop8: detected capacity change from 0 to 8 [ 245.443087][T10907] Dev loop8: unable to read RDB block 8 [ 245.443129][T10907] loop8: unable to read partition table [ 245.443193][T10907] loop8: partition table beyond EOD, truncated [ 245.443202][T10907] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 245.484497][T10910] loop9: detected capacity change from 0 to 7 [ 245.487260][T10910] loop9: [POWERTEC] p1 [ 245.490883][T10910] loop9: p1 size 262144 extends beyond EOD, truncated [ 245.562989][ T6564] udevd[6564]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 245.601550][T10918] loop4: detected capacity change from 0 to 128 [ 245.614193][T10918] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 245.624406][T10920] syzkaller0: entered promiscuous mode [ 245.624447][T10920] syzkaller0: entered allmulticast mode [ 245.761246][T10929] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1253'. [ 246.038461][T10939] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1256'. [ 246.050621][T10941] loop8: detected capacity change from 0 to 8 [ 246.052578][T10941] Dev loop8: unable to read RDB block 8 [ 246.052594][T10941] loop8: unable to read partition table [ 246.052651][T10941] loop8: partition table beyond EOD, truncated [ 246.052659][T10941] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 246.451854][ T6581] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 246.489671][T10953] syzkaller0: entered promiscuous mode [ 246.489705][T10953] syzkaller0: entered allmulticast mode [ 246.536517][T10960] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1265'. [ 246.536554][T10960] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1265'. [ 246.538697][T10958] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1264'. [ 246.540052][T10960] geneve2: entered promiscuous mode [ 246.540063][T10960] geneve2: entered allmulticast mode [ 246.613248][T10967] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1269'. [ 246.615022][T10968] netlink: 292 bytes leftover after parsing attributes in process `syz.1.1268'. [ 246.616098][T10968] netlink: 292 bytes leftover after parsing attributes in process `syz.1.1268'. [ 246.908762][ T109] block nbd4: Possible stuck request 00000000249a1060: control (read@0,1024B). Runtime 60 seconds [ 246.910844][ T109] block nbd4: Possible stuck request 00000000411ffd3f: control (read@1024,1024B). Runtime 60 seconds [ 246.910888][ T109] block nbd4: Possible stuck request 000000005963ff00: control (read@2048,1024B). Runtime 60 seconds [ 246.910931][ T109] block nbd4: Possible stuck request 000000003e3e6600: control (read@3072,1024B). Runtime 60 seconds [ 246.988841][ T57] block nbd3: Possible stuck request 00000000f54990f3: control (read@0,1024B). Runtime 60 seconds [ 246.988968][ T57] block nbd3: Possible stuck request 0000000041fd4bda: control (read@1024,1024B). Runtime 60 seconds [ 246.988985][ T57] block nbd3: Possible stuck request 0000000007c53fd5: control (read@2048,1024B). Runtime 60 seconds [ 246.988995][ T57] block nbd3: Possible stuck request 00000000b6e8b915: control (read@3072,1024B). Runtime 60 seconds [ 247.561144][T10995] geneve2: entered promiscuous mode [ 247.561185][T10995] geneve2: entered allmulticast mode [ 247.564250][ T5830] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.565600][ T5830] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.567000][ T5830] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.568896][ T5830] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.684334][T11001] syzkaller0: entered promiscuous mode [ 247.684387][T11001] syzkaller0: entered allmulticast mode [ 248.389219][T11017] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 248.827997][ T2466] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.828052][ T2466] ieee802154 phy1 wpan1: encryption failed: -22 [ 250.156466][T11059] __nla_validate_parse: 7 callbacks suppressed [ 250.156666][T11059] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1303'. [ 250.476956][T11049] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 250.476985][T11049] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 250.579782][T11049] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 250.579810][T11049] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 250.630742][T11049] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 250.630773][T11049] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 250.728117][T11049] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 250.728147][T11049] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 250.801601][T11049] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 250.801828][T11049] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 252.342875][T11103] hub 6-0:1.0: USB hub found [ 252.343269][T11103] hub 6-0:1.0: 8 ports detected [ 252.999027][T11108] netlink: 292 bytes leftover after parsing attributes in process `syz.4.1317'. [ 253.350378][T11115] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1321'. [ 253.648489][ T6686] hid-generic FFFF:0008:0003.0002: item fetching failed at offset 0/1 [ 253.666080][ T6686] hid-generic FFFF:0008:0003.0002: probe with driver hid-generic failed with error -22 [ 256.058789][T11175] netlink: 308 bytes leftover after parsing attributes in process `syz.2.1339'. [ 256.059577][T11175] netlink: 308 bytes leftover after parsing attributes in process `syz.2.1339'. [ 257.416433][T11209] netlink: 308 bytes leftover after parsing attributes in process `syz.4.1350'. [ 257.419267][T11209] netlink: 308 bytes leftover after parsing attributes in process `syz.4.1350'. [ 258.137563][T11225] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 258.143836][ T6210] udevd[6210]: worker [6752] /devices/virtual/block/nbd1 is taking a long time [ 258.143864][ T6210] udevd[6210]: worker [6561] /devices/virtual/block/nbd3 is taking a long time [ 258.143885][ T6210] udevd[6210]: worker [6563] /devices/virtual/block/nbd4 is taking a long time [ 258.713674][T11240] netlink: 308 bytes leftover after parsing attributes in process `syz.0.1362'. [ 258.716324][T11240] netlink: 308 bytes leftover after parsing attributes in process `syz.0.1362'. [ 259.614941][T11258] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 260.322359][T11274] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 260.619308][T11281] netlink: 308 bytes leftover after parsing attributes in process `syz.3.1374'. [ 260.621928][T11281] netlink: 308 bytes leftover after parsing attributes in process `syz.3.1374'. [ 261.522321][T11314] tipc: Enabled bearer , priority 0 [ 261.526229][T11314] tipc: Resetting bearer [ 261.531526][T11313] tipc: Disabling bearer [ 261.548982][T11318] netlink: 308 bytes leftover after parsing attributes in process `syz.2.1386'. [ 261.551879][T11318] netlink: 308 bytes leftover after parsing attributes in process `syz.2.1386'. [ 262.341505][T11340] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 263.427547][T11360] tipc: Enabling of bearer rejected, already enabled [ 264.441508][T11378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.441682][T11378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.443876][T11377] netlink: 208 bytes leftover after parsing attributes in process `syz.3.1403'. [ 264.444587][T11377] netlink: 208 bytes leftover after parsing attributes in process `syz.3.1403'. [ 265.402259][T11399] tipc: Enabled bearer , priority 0 [ 265.405281][T11399] tipc: Resetting bearer [ 265.444714][T11396] tipc: Disabling bearer [ 266.129060][T11410] netlink: 208 bytes leftover after parsing attributes in process `syz.4.1414'. [ 266.131759][T11410] netlink: 208 bytes leftover after parsing attributes in process `syz.4.1414'. [ 267.611420][T11429] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 268.159388][ T57] block nbd1: Possible stuck request 0000000023c35df9: control (read@0,1024B). Runtime 120 seconds [ 268.159437][ T57] block nbd1: Possible stuck request 00000000a92a6a49: control (read@1024,1024B). Runtime 120 seconds [ 268.159454][ T57] block nbd1: Possible stuck request 0000000050992986: control (read@2048,1024B). Runtime 120 seconds [ 268.159466][ T57] block nbd1: Possible stuck request 00000000ce8310c2: control (read@3072,1024B). Runtime 120 seconds [ 268.490697][T11457] syzkaller0: entered promiscuous mode [ 268.490725][T11457] syzkaller0: entered allmulticast mode [ 268.562027][T11464] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1429'. [ 269.258837][T11477] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1434'. [ 270.497718][T11485] hub 6-0:1.0: USB hub found [ 270.497851][T11485] hub 6-0:1.0: 8 ports detected [ 273.014178][T11517] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1445'. [ 273.034588][T11518] bond1: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 273.037891][T11518] bond1 (unregistering): Released all slaves [ 274.822649][T11558] hub 6-0:1.0: USB hub found [ 274.823011][T11558] hub 6-0:1.0: 8 ports detected [ 275.810537][T11562] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1457'. [ 276.994485][ T109] block nbd4: Possible stuck request 00000000249a1060: control (read@0,1024B). Runtime 90 seconds [ 276.998045][ T109] block nbd4: Possible stuck request 00000000411ffd3f: control (read@1024,1024B). Runtime 90 seconds [ 277.000249][ T109] block nbd4: Possible stuck request 000000005963ff00: control (read@2048,1024B). Runtime 90 seconds [ 277.002369][ T109] block nbd4: Possible stuck request 000000003e3e6600: control (read@3072,1024B). Runtime 90 seconds [ 277.638187][ T57] block nbd3: Possible stuck request 00000000f54990f3: control (read@0,1024B). Runtime 90 seconds [ 277.638302][ T57] block nbd3: Possible stuck request 0000000041fd4bda: control (read@1024,1024B). Runtime 90 seconds [ 277.638354][ T57] block nbd3: Possible stuck request 0000000007c53fd5: control (read@2048,1024B). Runtime 90 seconds [ 277.638396][ T57] block nbd3: Possible stuck request 00000000b6e8b915: control (read@3072,1024B). Runtime 90 seconds [ 278.563674][T11614] loop4: detected capacity change from 0 to 1024 [ 278.604465][T11614] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 278.631242][ T6581] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.355216][ T31] audit: type=1326 audit(278.780:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11620 comm="syz.2.1474" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff7eb75928 code=0x0 [ 279.358825][ T31] audit: type=1326 audit(279.100:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11622 comm="syz.4.1475" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a375928 code=0x0 [ 280.945233][T11677] netlink: 'syz.4.1494': attribute type 2 has an invalid length. [ 280.958548][T11677] !: entered promiscuous mode [ 280.966301][T11677] netlink: 'syz.4.1494': attribute type 2 has an invalid length. [ 281.018072][T11681] bond1: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 281.020798][T11681] bond1 (unregistering): Released all slaves [ 281.383043][T11703] mac80211_hwsim hwsim4 ..c: renamed from wlan1 [ 282.192449][T11719] loop4: detected capacity change from 0 to 1024 [ 282.220406][T11719] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 282.248469][ T6581] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.388227][T11733] geneve2: left promiscuous mode [ 282.388262][T11733] geneve2: left allmulticast mode [ 282.417799][T11733] geneve3: left promiscuous mode [ 282.417841][T11733] geneve3: left allmulticast mode [ 282.420968][ T407] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.423098][ T407] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.424517][ T407] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.425886][ T407] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.441442][T11733] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1516'. [ 282.441487][T11733] netlink: 'syz.0.1516': attribute type 5 has an invalid length. [ 282.441921][T11733] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1516'. [ 282.447305][T11733] geneve4: entered promiscuous mode [ 282.448631][T11733] geneve4: entered allmulticast mode [ 282.450298][ T407] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 50054 - 0 [ 282.451667][ T407] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 50054 - 0 [ 282.453015][ T407] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 50054 - 0 [ 282.454357][ T407] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 50054 - 0 [ 282.786091][T11742] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1519'. [ 283.751591][T11773] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 283.882874][T11776] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1530'. [ 284.535829][ T31] audit: type=1326 audit(284.500:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11793 comm="syz.2.1534" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff7eb75928 code=0x0 [ 286.546437][T11838] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1547'. [ 286.797565][ T31] audit: type=1326 audit(286.760:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11845 comm="syz.1.1550" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff94b75928 code=0x0 [ 287.411626][T11862] hub 6-0:1.0: USB hub found [ 287.423384][T11862] hub 6-0:1.0: 8 ports detected [ 289.581283][T11900] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1563'. [ 290.679710][T11929] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 291.661908][T11950] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1577'. [ 291.661939][T11950] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1577'. [ 292.212930][T11959] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1579'. [ 294.543064][T11987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.545822][T11987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.555222][T11987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.555436][T11987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.698939][T11987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.699131][T11987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.707218][T11987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.709152][T11987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.723760][T11987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.723932][T11987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.733095][T11987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.733289][T11987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.046202][T11987] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1585'. [ 295.159067][T11994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1588'. [ 295.160863][T11994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1588'. [ 295.162641][T11994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1588'. [ 296.734274][T12026] IPv6: NLM_F_CREATE should be specified when creating new route [ 296.968403][T12028] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1599'. [ 296.968437][T12028] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1599'. [ 298.569676][T12051] loop4: detected capacity change from 0 to 65536 [ 298.719863][T12051] XFS (loop4): Mounting V5 Filesystem 6653b971-41ab-480a-bd7b-5ff79b9409b5 [ 298.763848][ T57] block nbd1: Possible stuck request 0000000023c35df9: control (read@0,1024B). Runtime 150 seconds [ 298.765768][ T57] block nbd1: Possible stuck request 00000000a92a6a49: control (read@1024,1024B). Runtime 150 seconds [ 298.767755][ T57] block nbd1: Possible stuck request 0000000050992986: control (read@2048,1024B). Runtime 150 seconds [ 298.772518][ T57] block nbd1: Possible stuck request 00000000ce8310c2: control (read@3072,1024B). Runtime 150 seconds [ 298.813649][T12051] XFS (loop4): Ending clean mount [ 299.942362][ T6581] XFS (loop4): Unmounting Filesystem 6653b971-41ab-480a-bd7b-5ff79b9409b5 [ 299.952420][T12078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.952601][T12078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.954993][T12078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.955141][T12078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.958798][T12078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.958951][T12078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.966367][T12078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.966552][T12078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.990167][T12078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.990363][T12078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.995928][T12078] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1609'. [ 300.058360][T12081] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1609'. [ 300.144460][T12086] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1610'. [ 300.146282][T12086] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1610'. [ 305.537823][T12153] team0: Port device team_slave_0 removed [ 305.719052][T12164] loop4: detected capacity change from 0 to 1024 [ 305.736070][T12164] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 305.764384][ T6581] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.788731][T12171] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1638'. [ 305.790465][T12171] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1638'. [ 306.275093][T12188] IPv6: NLM_F_CREATE should be specified when creating new route [ 307.025478][T12208] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1649'. [ 307.025516][T12208] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1649'. [ 307.107992][ T109] block nbd4: Possible stuck request 00000000249a1060: control (read@0,1024B). Runtime 120 seconds [ 307.108101][ T109] block nbd4: Possible stuck request 00000000411ffd3f: control (read@1024,1024B). Runtime 120 seconds [ 307.110846][ T109] block nbd4: Possible stuck request 000000005963ff00: control (read@2048,1024B). Runtime 120 seconds [ 307.110920][ T109] block nbd4: Possible stuck request 000000003e3e6600: control (read@3072,1024B). Runtime 120 seconds [ 307.711026][ T57] block nbd3: Possible stuck request 00000000f54990f3: control (read@0,1024B). Runtime 120 seconds [ 307.711067][ T57] block nbd3: Possible stuck request 0000000041fd4bda: control (read@1024,1024B). Runtime 120 seconds [ 307.711078][ T57] block nbd3: Possible stuck request 0000000007c53fd5: control (read@2048,1024B). Runtime 120 seconds [ 307.711087][ T57] block nbd3: Possible stuck request 00000000b6e8b915: control (read@3072,1024B). Runtime 120 seconds [ 308.145540][T12241] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1663'. [ 308.147114][T12241] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1663'. [ 308.889188][T12268] loop4: detected capacity change from 0 to 1024 [ 308.910442][T12268] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 308.939975][ T6581] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.055990][T12279] syzkaller0: entered promiscuous mode [ 309.056022][T12279] syzkaller0: entered allmulticast mode [ 309.914975][T12302] loop4: detected capacity change from 0 to 1024 [ 309.939707][T12302] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 309.970952][ T6581] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.268694][ T2466] ieee802154 phy0 wpan0: encryption failed: -22 [ 310.268757][ T2466] ieee802154 phy1 wpan1: encryption failed: -22 [ 310.661036][T12330] IPv6: NLM_F_CREATE should be specified when creating new route [ 311.689743][T12352] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 312.804751][T12377] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1709'. [ 312.908371][T12385] netlink: 'syz.4.1713': attribute type 1 has an invalid length. [ 312.930900][T12385] gretap1: entered allmulticast mode [ 312.933487][T12385] bond1: (slave gretap1): making interface the new active one [ 312.933965][T12385] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 313.422676][T12381] overlayfs: failed to resolve './bus': -2 [ 313.947044][T12412] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1720'. [ 314.818987][T12427] IPv6: NLM_F_CREATE should be specified when creating new route [ 316.632037][T12453] loop4: detected capacity change from 0 to 1024 [ 316.858212][T12462] IPv6: NLM_F_CREATE should be specified when creating new route [ 317.652791][ T7361] hfsplus: b-tree write err: -5, ino 4 [ 317.736055][T12481] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1741'. [ 317.790063][T12484] loop4: detected capacity change from 0 to 1024 [ 318.190774][T12492] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1744'. [ 318.226940][T12496] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1746'. [ 319.193752][ T7361] hfsplus: b-tree write err: -5, ino 4 [ 319.212047][T12509] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1752'. [ 319.217232][T12526] loop4: detected capacity change from 0 to 1024 [ 319.226717][T12527] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1756'. [ 319.340832][T12533] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1758'. [ 320.718399][T12557] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1767'. [ 321.081437][ T7532] hfsplus: b-tree write err: -5, ino 4 [ 322.081380][T12579] syzkaller0: entered promiscuous mode [ 322.082361][T12579] syzkaller0: entered allmulticast mode [ 323.265218][T12596] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1779'. [ 325.235274][T12618] team1: left promiscuous mode [ 325.237958][T12618] team1: left allmulticast mode [ 325.238911][T12618] team2: left promiscuous mode [ 325.239766][T12618] team2: left allmulticast mode [ 325.240666][T12618] team3: left promiscuous mode [ 325.241480][T12618] team3: left allmulticast mode [ 325.242460][T12618] team4: left promiscuous mode [ 325.242473][T12618] team4: left allmulticast mode [ 325.497737][T12618] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1785'. [ 325.497784][T12618] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1785'. [ 325.525382][T12618] geneve2: entered promiscuous mode [ 325.526369][T12618] geneve2: entered allmulticast mode [ 325.610649][ T4350] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.612231][ T4350] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.613550][ T4350] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.614905][ T4350] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.932381][T12641] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1791'. [ 325.948936][T12644] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1789'. [ 325.948973][T12644] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1789'. [ 326.027942][T12638] geneve4: left promiscuous mode [ 326.029019][T12638] geneve4: left allmulticast mode [ 326.043467][ T13] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 50054 - 0 [ 326.045125][ T13] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 50054 - 0 [ 326.046936][ T13] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 50054 - 0 [ 326.049153][ T13] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 50054 - 0 [ 326.054865][T12644] geneve5: entered promiscuous mode [ 326.056129][T12644] geneve5: entered allmulticast mode [ 326.058178][ T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.059954][ T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.061541][ T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.063071][ T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.511674][T12680] syzkaller0: entered promiscuous mode [ 327.512832][T12680] syzkaller0: entered allmulticast mode [ 327.531190][T12678] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1802'. [ 327.901260][T12692] netlink: 'syz.4.1808': attribute type 1 has an invalid length. [ 327.905081][T12693] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1809'. [ 327.914895][T12692] 8021q: adding VLAN 0 to HW filter on device bond2 [ 327.977667][T12692] bond2: (slave gretap2): making interface the new active one [ 327.979390][T12692] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 329.076143][ T57] block nbd1: Possible stuck request 0000000023c35df9: control (read@0,1024B). Runtime 180 seconds [ 329.076189][ T57] block nbd1: Possible stuck request 00000000a92a6a49: control (read@1024,1024B). Runtime 180 seconds [ 329.076218][ T57] block nbd1: Possible stuck request 0000000050992986: control (read@2048,1024B). Runtime 180 seconds [ 329.076232][ T57] block nbd1: Possible stuck request 00000000ce8310c2: control (read@3072,1024B). Runtime 180 seconds [ 329.942095][T12732] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1820'. [ 330.111587][T12738] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1822'. [ 331.804556][T12768] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1831'. [ 332.779136][T12792] netlink: 'syz.3.1839': attribute type 1 has an invalid length. [ 333.036567][T12792] 8021q: adding VLAN 0 to HW filter on device bond1 [ 333.055007][T12796] bond1: (slave gretap1): making interface the new active one [ 333.056594][T12796] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 334.768734][T12802] overlayfs: missing 'lowerdir' [ 337.515395][ T109] block nbd4: Possible stuck request 00000000249a1060: control (read@0,1024B). Runtime 150 seconds [ 337.524978][ T109] block nbd4: Possible stuck request 00000000411ffd3f: control (read@1024,1024B). Runtime 150 seconds [ 337.526037][ T109] block nbd4: Possible stuck request 000000005963ff00: control (read@2048,1024B). Runtime 150 seconds [ 337.526054][ T109] block nbd4: Possible stuck request 000000003e3e6600: control (read@3072,1024B). Runtime 150 seconds [ 337.849535][T12874] autofs: Bad value for 'fd' [ 339.145717][ T57] block nbd3: Possible stuck request 00000000f54990f3: control (read@0,1024B). Runtime 150 seconds [ 339.148038][ T57] block nbd3: Possible stuck request 0000000041fd4bda: control (read@1024,1024B). Runtime 150 seconds [ 339.148108][ T57] block nbd3: Possible stuck request 0000000007c53fd5: control (read@2048,1024B). Runtime 150 seconds [ 339.148153][ T57] block nbd3: Possible stuck request 00000000b6e8b915: control (read@3072,1024B). Runtime 150 seconds [ 339.691539][T12891] netlink: 'syz.1.1867': attribute type 1 has an invalid length. [ 339.711741][T12891] 8021q: adding VLAN 0 to HW filter on device bond1 [ 339.736907][T12891] bond1: (slave gretap1): making interface the new active one [ 339.743094][T12891] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 340.708037][ T6210] udevd[6210]: worker [6752] /devices/virtual/block/nbd1 timeout; kill it [ 340.712205][ T6210] udevd[6210]: seq 14905 '/devices/virtual/block/nbd1' killed [ 342.742644][T12945] autofs: Unknown parameter '0x0000000000000000' [ 345.514357][T12968] tipc: Enabled bearer , priority 0 [ 345.572976][T12968] tipc: Resetting bearer [ 345.585684][T12967] tipc: Disabling bearer [ 348.544754][T13017] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1905'. [ 348.544929][T13017] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1905'. [ 348.590788][T13014] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1903'. [ 348.590842][T13014] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1903'. [ 348.716407][T13017] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1905'. [ 348.716450][T13017] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1905'. [ 348.720580][T13014] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1903'. [ 348.720635][T13014] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1903'. [ 348.968004][T13014] Process accounting resumed [ 348.968302][T13017] Process accounting resumed [ 349.692905][T13046] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1911'. [ 349.692997][T13046] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1911'. [ 350.472497][T13043] Process accounting resumed [ 352.508342][T13106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.508522][T13106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.510741][T13106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.510895][T13106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.568757][T13114] geneve5: left promiscuous mode [ 355.490801][T13135] __nla_validate_parse: 4 callbacks suppressed [ 355.490842][T13135] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1941'. [ 355.999309][T13150] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1944'. [ 355.999355][T13150] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1944'. [ 356.286194][T13150] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1944'. [ 356.286241][T13150] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1944'. [ 356.857705][T13150] Process accounting resumed [ 357.057297][T13164] Process accounting resumed [ 357.104694][T13177] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1955'. [ 357.599777][T13191] loop4: detected capacity change from 0 to 32768 [ 357.601551][T13191] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1961 (13191) [ 357.609206][T13191] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 357.609314][T13191] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 357.890428][T13191] BTRFS info (device loop4): enabling ssd optimizations [ 357.890468][T13191] BTRFS info (device loop4): turning on flush-on-commit [ 357.890478][T13191] BTRFS info (device loop4): turning on async discard [ 357.890488][T13191] BTRFS info (device loop4): enabling free space tree [ 357.890497][T13191] BTRFS info (device loop4): force zlib compression, level 3 [ 357.890505][T13191] BTRFS info (device loop4): max_inline set to 4096 [ 357.924419][T13186] Process accounting resumed [ 358.548675][T13227] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1967'. [ 358.791095][ T6581] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 359.197493][T13250] No such timeout policy "syz0" [ 359.295105][T13254] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1978'. [ 359.434559][T13262] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1979'. [ 359.837275][ T25] block nbd1: Possible stuck request 0000000023c35df9: control (read@0,1024B). Runtime 210 seconds [ 359.837509][ T25] block nbd1: Possible stuck request 00000000a92a6a49: control (read@1024,1024B). Runtime 210 seconds [ 359.837584][ T25] block nbd1: Possible stuck request 0000000050992986: control (read@2048,1024B). Runtime 210 seconds [ 359.837635][ T25] block nbd1: Possible stuck request 00000000ce8310c2: control (read@3072,1024B). Runtime 210 seconds [ 360.204064][T13293] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1990'. [ 361.070277][T13321] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2001'. [ 361.511620][T13332] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2002'. [ 362.644013][T13358] loop4: detected capacity change from 0 to 512 [ 362.646032][T13358] EXT4-fs (loop4): Test dummy encryption mode enabled [ 362.656201][T13358] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 362.658631][T13358] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 362.663589][T13358] EXT4-fs error (device loop4): xattr_find_entry:337: inode #15: comm syz.4.2014: corrupted xattr entries [ 362.667143][T13358] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 362.673189][T13358] EXT4-fs (loop4): 1 orphan inode deleted [ 362.675125][T13358] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 362.697302][T13358] EXT4-fs error (device loop4): ext4_lookup:1789: inode #2: comm syz.4.2014: deleted inode referenced: 15 [ 362.716162][ T6581] EXT4-fs error (device loop4): mb_free_blocks:2037: group 0, inode 11: block 54:freeing already freed block (bit 53); block bitmap corrupt. [ 362.730450][ T6581] EXT4-fs error (device loop4): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 362.733939][ T6581] EXT4-fs error (device loop4): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 362.892176][T13368] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2017'. [ 362.892370][T13368] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2017'. [ 363.135666][T13368] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2017'. [ 363.135722][T13368] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2017'. [ 363.167936][ T6581] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.227125][T13368] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2017'. [ 363.227171][T13368] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2017'. [ 363.529330][ T6164] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 363.533110][ T6164] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 363.536113][ T6164] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 363.539153][ T6164] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 363.549165][ T6164] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 363.560749][T13370] Process accounting resumed [ 363.585427][ T6578] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 363.587169][ T6578] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 363.594371][ T6578] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 363.601130][ T6578] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 363.603000][ T6578] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 363.771646][T13379] chnl_net:caif_netlink_parms(): no params data found [ 363.809470][T13379] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.811173][T13379] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.812560][T13379] bridge_slave_0: entered allmulticast mode [ 363.814246][T13379] bridge_slave_0: entered promiscuous mode [ 363.816558][T13379] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.818030][T13379] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.819374][T13379] bridge_slave_1: entered allmulticast mode [ 363.821299][T13379] bridge_slave_1: entered promiscuous mode [ 363.832127][T13379] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 363.835353][T13379] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 363.844568][T13379] team0: Port device team_slave_0 added [ 363.846496][T13379] team0: Port device team_slave_1 added [ 363.855786][T13379] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 363.857138][T13379] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 363.861850][T13379] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 363.862574][T13379] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 363.862581][T13379] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 363.862596][T13379] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 363.885587][T13379] hsr_slave_0: entered promiscuous mode [ 363.887239][T13379] hsr_slave_1: entered promiscuous mode [ 363.888846][T13379] debugfs: 'hsr0' already exists in 'hsr' [ 363.889913][T13379] Cannot create hsr debugfs directory [ 363.949101][T13379] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 363.954734][T13379] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 363.958943][T13379] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 363.962217][T13379] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 364.060789][T13379] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.060837][T13379] bridge0: port 2(bridge_slave_1) entered forwarding state [ 364.060933][T13379] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.060961][T13379] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.086011][T13379] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.091006][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.094066][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.551706][T13379] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.562491][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.562532][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.573482][ T6034] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.573528][ T6034] bridge0: port 2(bridge_slave_1) entered forwarding state [ 364.599685][T13379] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 364.601616][T13379] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 364.677221][T13448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.681169][T13448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.685436][T13448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.685620][T13448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.690931][T13379] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 365.138266][T13379] veth0_vlan: entered promiscuous mode [ 365.141510][T13379] veth1_vlan: entered promiscuous mode [ 365.153577][T13379] veth0_macvtap: entered promiscuous mode [ 365.155034][T13379] veth1_macvtap: entered promiscuous mode [ 365.161751][T13379] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 365.164868][T13379] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 365.638578][ T6578] Bluetooth: hci4: command tx timeout [ 365.786808][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.789962][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.792858][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.792924][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.991715][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.991741][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.027141][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.030591][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.325535][T13482] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2021'. [ 367.724825][ T6578] Bluetooth: hci4: command tx timeout [ 367.878226][ T109] block nbd4: Possible stuck request 00000000249a1060: control (read@0,1024B). Runtime 180 seconds [ 367.878272][ T109] block nbd4: Possible stuck request 00000000411ffd3f: control (read@1024,1024B). Runtime 180 seconds [ 367.878284][ T109] block nbd4: Possible stuck request 000000005963ff00: control (read@2048,1024B). Runtime 180 seconds [ 367.878296][ T109] block nbd4: Possible stuck request 000000003e3e6600: control (read@3072,1024B). Runtime 180 seconds [ 369.019340][T13524] loop5: detected capacity change from 0 to 32768 [ 369.098930][T13540] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2062'. [ 369.394091][T13524] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 369.436906][T13524] XFS (loop5): Ending clean mount [ 369.441799][T13524] XFS (loop5): Quotacheck needed: Please wait. [ 369.502480][T13524] XFS (loop5): Quotacheck: Done. [ 369.650467][ T13] Bluetooth: hci5: Frame reassembly failed (-90) [ 369.654211][T13556] Bluetooth: hci5: Frame reassembly failed (-84) [ 369.656111][ T12] Bluetooth: hci5: Frame reassembly failed (-84) [ 369.667527][T13556] Bluetooth: hci5: Frame reassembly failed (-84) [ 369.787770][ T6164] Bluetooth: hci4: command tx timeout [ 369.907507][ T25] block nbd3: Possible stuck request 00000000f54990f3: control (read@0,1024B). Runtime 180 seconds [ 369.907555][ T25] block nbd3: Possible stuck request 0000000041fd4bda: control (read@1024,1024B). Runtime 180 seconds [ 369.907583][ T25] block nbd3: Possible stuck request 0000000007c53fd5: control (read@2048,1024B). Runtime 180 seconds [ 369.907592][ T25] block nbd3: Possible stuck request 00000000b6e8b915: control (read@3072,1024B). Runtime 180 seconds [ 369.926054][T13379] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 370.498282][T13566] No such timeout policy "syz0" [ 370.746693][T13581] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.747565][T13581] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.755276][T13581] team1: left promiscuous mode [ 370.755344][T13581] geneve2: left promiscuous mode [ 371.656081][T13592] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2077'. [ 371.707604][ T6578] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 371.718444][ T2466] ieee802154 phy0 wpan0: encryption failed: -22 [ 371.718483][ T2466] ieee802154 phy1 wpan1: encryption failed: -22 [ 371.881526][ T6578] Bluetooth: hci4: command tx timeout [ 372.006339][T13599] loop5: detected capacity change from 0 to 128 [ 372.020650][T13599] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 372.111899][T13379] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 375.792648][ T6210] udevd[6210]: worker [6561] /devices/virtual/block/nbd3 timeout; kill it [ 375.804529][ T6210] udevd[6210]: seq 15124 '/devices/virtual/block/nbd3' killed [ 375.805955][ T6210] udevd[6210]: worker [6563] /devices/virtual/block/nbd4 timeout; kill it [ 375.807610][ T6210] udevd[6210]: seq 15163 '/devices/virtual/block/nbd4' killed [ 376.421016][T13686] loop5: detected capacity change from 0 to 512 [ 376.453457][T13686] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 376.857208][T13379] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.737017][ T41] Bluetooth: hci5: Frame reassembly failed (-84) [ 381.126689][ T6164] Bluetooth: hci5: command 0x1003 tx timeout [ 381.137126][ T6578] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 382.784891][T13805] loop5: detected capacity change from 0 to 512 [ 382.859806][T13805] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 383.772036][T13379] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.814979][T13830] tipc: Started in network mode [ 383.815990][T13830] tipc: Node identity ca96a4f2ad44, cluster identity 4711 [ 383.817639][T13830] tipc: Enabled bearer , priority 0 [ 383.819396][T13830] syzkaller0: entered promiscuous mode [ 383.819426][T13830] syzkaller0: entered allmulticast mode [ 383.828405][T13830] tipc: Resetting bearer [ 383.831364][T13829] tipc: Resetting bearer [ 383.839320][T13829] tipc: Disabling bearer [ 384.131889][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.131923][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.141004][T13855] loop5: detected capacity change from 0 to 65536 [ 385.192368][T13855] XFS (loop5): Mounting V5 Filesystem 6653b971-41ab-480a-bd7b-5ff79b9409b5 [ 385.226140][T13855] XFS (loop5): Ending clean mount [ 385.924632][T13379] XFS (loop5): Unmounting Filesystem 6653b971-41ab-480a-bd7b-5ff79b9409b5 [ 386.631361][T13898] overlay: Unknown parameter '/' [ 386.632711][T13896] overlay: Unknown parameter '/' [ 387.038379][T13899] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 387.039716][T13900] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 389.812856][T13946] loop5: detected capacity change from 0 to 256 [ 389.814685][T13946] exfat: Deprecated parameter 'utf8' [ 390.061054][T13946] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 390.464218][ T25] block nbd1: Possible stuck request 0000000023c35df9: control (read@0,1024B). Runtime 240 seconds [ 390.464262][ T25] block nbd1: Possible stuck request 00000000a92a6a49: control (read@1024,1024B). Runtime 240 seconds [ 390.464708][ T25] block nbd1: Possible stuck request 0000000050992986: control (read@2048,1024B). Runtime 240 seconds [ 390.464733][ T25] block nbd1: Possible stuck request 00000000ce8310c2: control (read@3072,1024B). Runtime 240 seconds [ 393.121396][T13983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 393.121577][T13983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 393.125333][T13983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 393.126072][T13983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.038422][T13996] ufs: You didn't specify the type of your ufs filesystem [ 394.038422][T13996] [ 394.038422][T13996] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 394.038422][T13996] [ 394.038422][T13996] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 394.038467][T13996] ufs: ufstype=old is supported read-only [ 396.642074][T14017] ufs: You didn't specify the type of your ufs filesystem [ 396.642074][T14017] [ 396.642074][T14017] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 396.642074][T14017] [ 396.642074][T14017] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 396.648331][T14017] ufs: ufstype=old is supported read-only [ 397.433532][T14029] overlay: Unknown parameter '/' [ 397.705494][T14032] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 397.992131][ T109] block nbd4: Possible stuck request 00000000249a1060: control (read@0,1024B). Runtime 210 seconds [ 397.994126][ T109] block nbd4: Possible stuck request 00000000411ffd3f: control (read@1024,1024B). Runtime 210 seconds [ 397.996025][ T109] block nbd4: Possible stuck request 000000005963ff00: control (read@2048,1024B). Runtime 210 seconds [ 397.997999][ T109] block nbd4: Possible stuck request 000000003e3e6600: control (read@3072,1024B). Runtime 210 seconds [ 398.729864][T14050] input: syz0 as /devices/virtual/input/input2 [ 398.730383][T14041] loop5: detected capacity change from 0 to 65536 [ 398.786447][T14041] XFS (loop5): Mounting V5 Filesystem 6653b971-41ab-480a-bd7b-5ff79b9409b5 [ 398.902497][T14060] overlay: Unknown parameter '/' [ 398.970280][T14061] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 399.532341][T14041] XFS (loop5): Ending clean mount [ 400.230882][T13379] XFS (loop5): Unmounting Filesystem 6653b971-41ab-480a-bd7b-5ff79b9409b5 [ 400.658575][ T25] block nbd3: Possible stuck request 00000000f54990f3: control (read@0,1024B). Runtime 210 seconds [ 400.658685][ T25] block nbd3: Possible stuck request 0000000041fd4bda: control (read@1024,1024B). Runtime 210 seconds [ 400.658696][ T25] block nbd3: Possible stuck request 0000000007c53fd5: control (read@2048,1024B). Runtime 210 seconds [ 400.658705][ T25] block nbd3: Possible stuck request 00000000b6e8b915: control (read@3072,1024B). Runtime 210 seconds [ 400.683739][T14087] loop5: detected capacity change from 0 to 512 [ 401.357913][T14087] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 401.860469][T13379] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.909252][T14102] tipc: Enabled bearer , priority 0 [ 401.911577][T14102] syzkaller0: entered promiscuous mode [ 401.912757][T14102] syzkaller0: entered allmulticast mode [ 401.941495][T14102] tipc: Resetting bearer [ 402.149968][T14101] tipc: Resetting bearer [ 402.197928][T14101] tipc: Disabling bearer [ 402.414968][T14119] overlay: Unknown parameter '/' [ 402.459712][T14119] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 403.582661][T14129] Process accounting resumed [ 403.654306][T14136] loop5: detected capacity change from 0 to 40427 [ 403.658094][T14136] F2FS-fs (loop5): invalid crc value [ 403.671265][T14136] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 403.748751][T14136] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 404.568413][T14151] input: syz0 as /devices/virtual/input/input3 [ 404.671996][T14156] batadv_slave_1: entered promiscuous mode [ 404.834141][T13379] syz-executor: attempt to access beyond end of device [ 404.834141][T13379] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 404.877931][T13379] CPU: 0 UID: 0 PID: 13379 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT [ 404.877963][T13379] Tainted: [L]=SOFTLOCKUP [ 404.877967][T13379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 404.877973][T13379] Call trace: [ 404.877977][T13379] show_stack+0x2c/0x3c (C) [ 404.877993][T13379] __dump_stack+0x30/0x40 [ 404.878002][T13379] dump_stack_lvl+0xd8/0x12c [ 404.878008][T13379] dump_stack+0x1c/0x28 [ 404.878013][T13379] f2fs_handle_critical_error+0x34c/0x4b8 [ 404.878023][T13379] f2fs_stop_checkpoint+0x5c/0x70 [ 404.878030][T13379] f2fs_write_end_io+0x770/0xa78 [ 404.878036][T13379] bio_endio+0x8d4/0x910 [ 404.878044][T13379] submit_bio_noacct+0xd44/0x186c [ 404.878050][T13379] submit_bio+0x3b4/0x550 [ 404.878056][T13379] f2fs_submit_write_bio+0x124/0x324 [ 404.878061][T13379] __submit_merged_bio+0x224/0x6d4 [ 404.878065][T13379] __submit_merged_write_cond+0x250/0x4ac [ 404.878070][T13379] f2fs_write_data_pages+0x1dd4/0x2878 [ 404.878075][T13379] do_writepages+0x270/0x468 [ 404.878083][T13379] filemap_fdatawrite+0x14c/0x1f4 [ 404.878091][T13379] f2fs_sync_dirty_inodes+0x2a0/0x788 [ 404.878097][T13379] f2fs_write_checkpoint+0x708/0x1c28 [ 404.878103][T13379] kill_f2fs_super+0x230/0x580 [ 404.878109][T13379] deactivate_locked_super+0xc4/0x12c [ 404.878116][T13379] deactivate_super+0xe0/0x100 [ 404.878122][T13379] cleanup_mnt+0x31c/0x3ac [ 404.878129][T13379] __cleanup_mnt+0x20/0x30 [ 404.878135][T13379] task_work_run+0x1dc/0x260 [ 404.878143][T13379] exit_to_user_mode_loop+0x10c/0x18c [ 404.878149][T13379] el0_svc+0x17c/0x26c [ 404.878156][T13379] el0t_64_sync_handler+0x84/0x12c [ 404.878162][T13379] el0t_64_sync+0x198/0x19c [ 404.905262][T13379] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 404.989338][T14148] batadv_slave_1: left promiscuous mode [ 406.081823][T14176] loop5: detected capacity change from 0 to 256 [ 406.092037][T14176] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xbc8dc3cd, utbl_chksum : 0xe619d30d) [ 406.736651][T14190] input: syz0 as /devices/virtual/input/input4 [ 407.111960][T14185] loop5: detected capacity change from 0 to 32768 [ 407.118490][T14185] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 407.421534][T14185] XFS (loop5): Ending clean mount [ 408.308615][T13379] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 409.733528][T14243] ufs: You didn't specify the type of your ufs filesystem [ 409.733528][T14243] [ 409.733528][T14243] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 409.733528][T14243] [ 409.733528][T14243] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 409.739962][T14243] ufs: ufstype=old is supported read-only [ 410.301627][T14257] loop5: detected capacity change from 0 to 256 [ 410.308932][T14257] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xbc8dc3cd, utbl_chksum : 0xe619d30d) [ 410.825942][T14267] tipc: Enabled bearer , priority 0 [ 410.838643][T14267] syzkaller0: entered promiscuous mode [ 410.838682][T14267] syzkaller0: entered allmulticast mode [ 411.225517][T14268] tipc: Resetting bearer [ 411.229978][T14266] tipc: Resetting bearer [ 411.237728][T14266] tipc: Disabling bearer [ 412.789296][T14293] loop5: detected capacity change from 0 to 128 [ 412.789866][T14293] vfat: Unknown parameter 'Zԃ^ԨӃcc[ihe@8&l&gqс t0ŧ UzuY!3h{sr8ap+a' [ 413.860031][T14318] input: syz0 as /devices/virtual/input/input5 [ 413.956315][T14319] batadv_slave_1: entered promiscuous mode [ 414.292869][ T3478] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.294376][ T3478] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.443440][T14312] batadv_slave_1: left promiscuous mode [ 415.457188][ T5512] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.460427][ T5512] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.474253][T14351] syzkaller0: entered promiscuous mode [ 416.475236][T14351] syzkaller0: entered allmulticast mode [ 417.242785][T14368] ufs: You didn't specify the type of your ufs filesystem [ 417.242785][T14368] [ 417.242785][T14368] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 417.242785][T14368] [ 417.242785][T14368] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 417.242864][T14368] ufs: ufstype=old is supported read-only [ 418.233438][T14377] block device autoloading is deprecated and will be removed. [ 418.233509][T14377] ufs: You didn't specify the type of your ufs filesystem [ 418.233509][T14377] [ 418.233509][T14377] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 418.233509][T14377] [ 418.233509][T14377] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 418.233534][T14377] ufs: ufstype=old is supported read-only [ 418.627056][T14387] syzkaller0: entered promiscuous mode [ 418.628308][T14387] syzkaller0: entered allmulticast mode [ 418.705041][T14390] ufs: You didn't specify the type of your ufs filesystem [ 418.705041][T14390] [ 418.705041][T14390] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 418.705041][T14390] [ 418.705041][T14390] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 418.705121][T14390] ufs: ufstype=old is supported read-only [ 419.278400][T14401] ufs: You didn't specify the type of your ufs filesystem [ 419.278400][T14401] [ 419.278400][T14401] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 419.278400][T14401] [ 419.278400][T14401] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 419.278496][T14401] ufs: ufstype=old is supported read-only [ 421.344567][T14420] ufs: You didn't specify the type of your ufs filesystem [ 421.344567][T14420] [ 421.344567][T14420] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 421.344567][T14420] [ 421.344567][T14420] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 421.344770][T14420] ufs: ufstype=old is supported read-only [ 421.557008][ T25] block nbd1: Possible stuck request 0000000023c35df9: control (read@0,1024B). Runtime 270 seconds [ 421.557059][ T25] block nbd1: Possible stuck request 00000000a92a6a49: control (read@1024,1024B). Runtime 270 seconds [ 421.557092][ T25] block nbd1: Possible stuck request 0000000050992986: control (read@2048,1024B). Runtime 270 seconds [ 421.557106][ T25] block nbd1: Possible stuck request 00000000ce8310c2: control (read@3072,1024B). Runtime 270 seconds [ 422.264329][T14434] ufs: You didn't specify the type of your ufs filesystem [ 422.264329][T14434] [ 422.264329][T14434] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 422.264329][T14434] [ 422.264329][T14434] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 422.264363][T14434] ufs: ufstype=old is supported read-only [ 422.584872][T14436] syzkaller0: entered promiscuous mode [ 422.585937][T14436] syzkaller0: entered allmulticast mode [ 423.471903][T14460] ufs: You didn't specify the type of your ufs filesystem [ 423.471903][T14460] [ 423.471903][T14460] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 423.471903][T14460] [ 423.471903][T14460] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 423.471935][T14460] ufs: ufstype=old is supported read-only [ 423.727136][T14462] tipc: Enabled bearer , priority 0 [ 423.729665][T14462] syzkaller0: entered promiscuous mode [ 423.731018][T14462] syzkaller0: entered allmulticast mode [ 423.741163][T14461] tipc: Resetting bearer [ 423.750683][T14461] tipc: Disabling bearer [ 424.564613][T14482] syzkaller0: entered promiscuous mode [ 424.565839][T14482] syzkaller0: entered allmulticast mode [ 424.789654][T14488] ufs: You didn't specify the type of your ufs filesystem [ 424.789654][T14488] [ 424.789654][T14488] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 424.789654][T14488] [ 424.789654][T14488] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 424.789753][T14488] ufs: ufstype=old is supported read-only [ 425.166466][T14490] ufs: You didn't specify the type of your ufs filesystem [ 425.166466][T14490] [ 425.166466][T14490] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 425.166466][T14490] [ 425.166466][T14490] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 425.166544][T14490] ufs: ufstype=old is supported read-only [ 425.524719][T14499] loop5: detected capacity change from 0 to 128 [ 425.525104][T14499] vfat: Unknown parameter 'Zԃ^ԨӃcc[ihe@8&l&gqс t0ŧ UzuY!3h{sr8ap+a' [ 426.789740][T14511] tipc: Enabling of bearer rejected, failed to enable media [ 427.081199][T14511] syzkaller0: entered promiscuous mode [ 427.082921][T14511] syzkaller0: entered allmulticast mode [ 428.421528][ T109] block nbd4: Possible stuck request 00000000249a1060: control (read@0,1024B). Runtime 240 seconds [ 428.423481][ T109] block nbd4: Possible stuck request 00000000411ffd3f: control (read@1024,1024B). Runtime 240 seconds [ 428.423526][ T109] block nbd4: Possible stuck request 000000005963ff00: control (read@2048,1024B). Runtime 240 seconds [ 428.423541][ T109] block nbd4: Possible stuck request 000000003e3e6600: control (read@3072,1024B). Runtime 240 seconds [ 428.663043][T14539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 428.665509][T14539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 428.671636][T14539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 428.674993][T14539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 429.334209][T14547] block device autoloading is deprecated and will be removed. [ 429.334507][T14547] ufs: You didn't specify the type of your ufs filesystem [ 429.334507][T14547] [ 429.334507][T14547] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 429.334507][T14547] [ 429.334507][T14547] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 429.334574][T14547] ufs: ufstype=old is supported read-only [ 430.116099][T14557] overlay: Unknown parameter '/' [ 430.527128][T14563] tipc: Enabled bearer , priority 0 [ 430.928551][T14563] syzkaller0: entered promiscuous mode [ 430.929944][T14563] syzkaller0: entered allmulticast mode [ 430.990611][T14562] tipc: Resetting bearer [ 431.036830][T14562] tipc: Disabling bearer [ 431.274360][ T25] block nbd3: Possible stuck request 00000000f54990f3: control (read@0,1024B). Runtime 240 seconds [ 431.274410][ T25] block nbd3: Possible stuck request 0000000041fd4bda: control (read@1024,1024B). Runtime 240 seconds [ 431.274435][ T25] block nbd3: Possible stuck request 0000000007c53fd5: control (read@2048,1024B). Runtime 240 seconds [ 431.274449][ T25] block nbd3: Possible stuck request 00000000b6e8b915: control (read@3072,1024B). Runtime 240 seconds [ 431.910732][T14582] input: syz0 as /devices/virtual/input/input6 [ 432.013024][T14583] batadv_slave_1: entered promiscuous mode [ 432.547928][T14577] batadv_slave_1: left promiscuous mode [ 432.841962][T14598] block device autoloading is deprecated and will be removed. [ 432.842250][T14598] ufs: You didn't specify the type of your ufs filesystem [ 432.842250][T14598] [ 432.842250][T14598] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 432.842250][T14598] [ 432.842250][T14598] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 432.842297][T14598] ufs: ufstype=old is supported read-only [ 433.157886][ T2466] ieee802154 phy0 wpan0: encryption failed: -22 [ 433.159784][ T2466] ieee802154 phy1 wpan1: encryption failed: -22 [ 433.173373][T14600] Bluetooth: hci5: Frame reassembly failed (-90) [ 434.582914][T14633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 434.586005][T14633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 435.187028][T14641] ufs: You didn't specify the type of your ufs filesystem [ 435.187028][T14641] [ 435.187028][T14641] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 435.187028][T14641] [ 435.187028][T14641] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 435.187080][T14641] ufs: ufstype=old is supported read-only [ 435.232269][ T6578] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 435.452749][T14645] sock: sock_set_timeout: `syz.0.2354' (pid 14645) tries to set negative timeout [ 435.460060][T14645] GUP no longer grows the stack in syz.0.2354 (14645): 20002000-20005000 (20001000) [ 435.460101][T14645] CPU: 0 UID: 0 PID: 14645 Comm: syz.0.2354 Tainted: G L syzkaller #0 PREEMPT [ 435.460113][T14645] Tainted: [L]=SOFTLOCKUP [ 435.460116][T14645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 435.460121][T14645] Call trace: [ 435.460124][T14645] show_stack+0x2c/0x3c (C) [ 435.460138][T14645] __dump_stack+0x30/0x40 [ 435.460147][T14645] dump_stack_lvl+0xd8/0x12c [ 435.460154][T14645] dump_stack+0x1c/0x28 [ 435.460161][T14645] __get_user_pages+0x2c34/0x2dd0 [ 435.460171][T14645] __gup_longterm_locked+0x314/0x11ec [ 435.460180][T14645] gup_fast_fallback+0x207c/0x232c [ 435.460188][T14645] pin_user_pages_fast+0xa4/0x100 [ 435.460197][T14645] get_vaddr_frames+0x90/0x1f8 [ 435.460207][T14645] vb2_create_framevec+0x5c/0xd8 [ 435.460213][T14645] vb2_vmalloc_get_userptr+0xf4/0x408 [ 435.460220][T14645] __buf_prepare+0xa70/0x394c [ 435.460228][T14645] vb2_core_prepare_buf+0xb8/0x2ac [ 435.460237][T14645] vb2_prepare_buf+0x270/0x2c8 [ 435.460242][T14645] v4l2_m2m_ioctl_prepare_buf+0x120/0x3f8 [ 435.460251][T14645] v4l_prepare_buf+0xa8/0xd4 [ 435.460258][T14645] __video_do_ioctl+0x8f8/0xa60 [ 435.460263][T14645] video_usercopy+0x910/0xef4 [ 435.460268][T14645] video_ioctl2+0x3c/0x50 [ 435.460274][T14645] v4l2_ioctl+0x148/0x18c [ 435.460283][T14645] __arm64_sys_ioctl+0x14c/0x1c4 [ 435.460289][T14645] invoke_syscall+0x98/0x254 [ 435.460297][T14645] el0_svc_common+0xe8/0x23c [ 435.460304][T14645] do_el0_svc+0x48/0x58 [ 435.460311][T14645] el0_svc+0x5c/0x26c [ 435.460319][T14645] el0t_64_sync_handler+0x84/0x12c [ 435.460327][T14645] el0t_64_sync+0x198/0x19c [ 435.469094][T14645] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2354'. [ 435.975689][T14653] input: syz0 as /devices/virtual/input/input7 [ 435.981869][T14652] input: syz0 as /devices/virtual/input/input8 [ 436.018204][T14653] batadv_slave_1: entered promiscuous mode [ 436.021287][T14652] batadv_slave_1: entered promiscuous mode [ 436.336381][T14646] batadv_slave_1: left promiscuous mode [ 436.340539][T14648] batadv_slave_1: left promiscuous mode [ 437.517441][ T6769] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 437.897098][ T6769] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 437.897141][ T6769] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 437.907668][ T6769] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 437.908225][ T6769] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.913085][ T6769] usb 1-1: config 0 descriptor?? [ 438.095848][ T6865] IPVS: starting estimator thread 0... [ 438.297424][T14677] IPVS: using max 69 ests per chain, 165600 per kthread [ 438.455005][T14682] sock: sock_set_timeout: `syz.1.2363' (pid 14682) tries to set negative timeout [ 438.467186][T14682] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2363'. [ 440.989875][ T6769] usbhid 1-1:0.0: can't add hid device: -71 [ 440.990098][ T6769] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 441.008336][ T6769] usb 1-1: USB disconnect, device number 6 [ 442.066281][T14717] input: syz0 as /devices/virtual/input/input9 [ 442.080578][T14717] batadv_slave_1: entered promiscuous mode [ 442.193627][T14713] batadv_slave_1: left promiscuous mode [ 442.353457][T14725] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2374'. [ 442.598156][T14727] block device autoloading is deprecated and will be removed. [ 442.598219][T14727] ufs: You didn't specify the type of your ufs filesystem [ 442.598219][T14727] [ 442.598219][T14727] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 442.598219][T14727] [ 442.598219][T14727] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 442.598243][T14727] ufs: ufstype=old is supported read-only [ 443.328770][T14736] block device autoloading is deprecated and will be removed. [ 443.328828][T14736] ufs: You didn't specify the type of your ufs filesystem [ 443.328828][T14736] [ 443.328828][T14736] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 443.328828][T14736] [ 443.328828][T14736] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 443.328852][T14736] ufs: ufstype=old is supported read-only [ 445.019593][T14747] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2381'. [ 446.155616][T14773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 446.156046][T14773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 447.089429][T14790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 447.091652][T14790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 447.283407][T14792] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 448.351966][T14806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 448.352203][T14806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 451.129909][T14842] input: syz0 as /devices/virtual/input/input10 [ 451.140635][T14842] batadv_slave_1: entered promiscuous mode [ 451.298370][T14840] batadv_slave_1: left promiscuous mode [ 451.746169][ T25] block nbd1: Possible stuck request 0000000023c35df9: control (read@0,1024B). Runtime 300 seconds [ 451.749665][ T25] block nbd1: Possible stuck request 00000000a92a6a49: control (read@1024,1024B). Runtime 300 seconds [ 451.753649][ T25] block nbd1: Possible stuck request 0000000050992986: control (read@2048,1024B). Runtime 300 seconds [ 451.757657][ T25] block nbd1: Possible stuck request 00000000ce8310c2: control (read@3072,1024B). Runtime 300 seconds [ 452.762913][T14862] input: syz0 as /devices/virtual/input/input11 [ 452.970480][T14861] batadv_slave_1: entered promiscuous mode [ 453.119109][T14859] batadv_slave_1: left promiscuous mode [ 453.271357][T14873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 453.274303][T14873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.186263][T14893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.186440][T14893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.678469][T14080] Bluetooth: hci5: Frame reassembly failed (-90) [ 455.682058][T14905] Bluetooth: hci5: Frame reassembly failed (-84) [ 455.683776][T14905] Bluetooth: hci5: Frame reassembly failed (-84) [ 455.690176][T14905] Bluetooth: hci5: Frame reassembly failed (-84) [ 456.594625][T14917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 456.599129][T14917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 457.707445][ T6578] Bluetooth: hci5: command 0x1003 tx timeout [ 457.709859][ T6164] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 458.748242][ T109] block nbd4: Possible stuck request 00000000249a1060: control (read@0,1024B). Runtime 270 seconds [ 458.750379][ T109] block nbd4: Possible stuck request 00000000411ffd3f: control (read@1024,1024B). Runtime 270 seconds [ 458.752309][ T109] block nbd4: Possible stuck request 000000005963ff00: control (read@2048,1024B). Runtime 270 seconds [ 458.754348][ T109] block nbd4: Possible stuck request 000000003e3e6600: control (read@3072,1024B). Runtime 270 seconds [ 458.940648][T14945] hub 6-0:1.0: USB hub found [ 458.941099][T14945] hub 6-0:1.0: 8 ports detected [ 460.208358][T14952] lo speed is unknown, defaulting to 1000 [ 460.208425][T14952] lo speed is unknown, defaulting to 1000 [ 460.209188][T14952] lo speed is unknown, defaulting to 1000 [ 460.210257][T14952] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 460.212705][T14952] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 460.240893][T14952] lo speed is unknown, defaulting to 1000 [ 460.243614][T14952] lo speed is unknown, defaulting to 1000 [ 460.246103][T14952] lo speed is unknown, defaulting to 1000 [ 460.248456][T14952] lo speed is unknown, defaulting to 1000 [ 460.250584][T14952] lo speed is unknown, defaulting to 1000 [ 460.252666][T14952] lo speed is unknown, defaulting to 1000 [ 460.677148][T14961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.680027][T14961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.315767][ T25] block nbd3: Possible stuck request 00000000f54990f3: control (read@0,1024B). Runtime 270 seconds [ 461.387133][ T25] block nbd3: Possible stuck request 0000000041fd4bda: control (read@1024,1024B). Runtime 270 seconds [ 461.394439][ T25] block nbd3: Possible stuck request 0000000007c53fd5: control (read@2048,1024B). Runtime 270 seconds [ 461.394462][ T25] block nbd3: Possible stuck request 00000000b6e8b915: control (read@3072,1024B). Runtime 270 seconds [ 461.721561][T14973] lo speed is unknown, defaulting to 1000 [ 462.367069][T14983] hub 6-0:1.0: USB hub found [ 462.367726][T14983] hub 6-0:1.0: 8 ports detected [ 462.714004][T14985] tmpfs: Bad value for 'mpol' [ 464.787056][T15001] lo speed is unknown, defaulting to 1000 [ 464.927919][T15003] siw: device registration error -23 [ 465.489794][T15013] lo speed is unknown, defaulting to 1000 [ 466.066433][T15023] lo speed is unknown, defaulting to 1000 [ 466.388761][T15024] lo speed is unknown, defaulting to 1000 [ 466.677942][T15037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 466.679648][T15037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 467.282258][T15045] hub 6-0:1.0: USB hub found [ 467.283221][T15045] hub 6-0:1.0: 8 ports detected [ 471.191398][T15068] hub 6-0:1.0: USB hub found [ 471.297408][T15068] hub 6-0:1.0: 8 ports detected [ 471.549736][T15072] x_tables: ip_tables: osf match: only valid for protocol 6 [ 471.766752][T15074] syz_tun: entered allmulticast mode [ 474.491115][T15093] hub 6-0:1.0: USB hub found [ 474.491305][T15093] hub 6-0:1.0: 8 ports detected [ 475.977818][T15102] hub 6-0:1.0: USB hub found [ 475.977989][T15102] hub 6-0:1.0: 8 ports detected [ 476.702185][T15112] x_tables: ip_tables: osf match: only valid for protocol 6 [ 477.314409][T15116] hub 6-0:1.0: USB hub found [ 477.316498][T15116] hub 6-0:1.0: 8 ports detected [ 477.515887][T15119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.520002][T15119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 478.730082][T15127] hub 6-0:1.0: USB hub found [ 478.730932][T15127] hub 6-0:1.0: 8 ports detected [ 480.167255][T15140] hub 6-0:1.0: USB hub found [ 480.169128][T15140] hub 6-0:1.0: 8 ports detected [ 482.406935][ T25] block nbd1: Possible stuck request 0000000023c35df9: control (read@0,1024B). Runtime 330 seconds [ 482.408894][ T25] block nbd1: Possible stuck request 00000000a92a6a49: control (read@1024,1024B). Runtime 330 seconds [ 482.464246][ T25] block nbd1: Possible stuck request 0000000050992986: control (read@2048,1024B). Runtime 330 seconds [ 482.464300][ T25] block nbd1: Possible stuck request 00000000ce8310c2: control (read@3072,1024B). Runtime 330 seconds [ 482.685341][T15165] x_tables: ip_tables: osf match: only valid for protocol 6 [ 483.574163][T15187] hub 6-0:1.0: USB hub found [ 483.574485][T15187] hub 6-0:1.0: 8 ports detected [ 484.696266][T15200] tipc: Enabled bearer , priority 0 [ 484.700259][T15200] syzkaller0: entered promiscuous mode [ 484.701282][T15200] syzkaller0: entered allmulticast mode [ 485.265811][T15200] tipc: Resetting bearer [ 485.589098][T15199] tipc: Resetting bearer [ 485.613296][T15199] tipc: Disabling bearer [ 486.000113][T15218] x_tables: ip_tables: osf match: only valid for protocol 6 [ 486.687466][ T6164] Bluetooth: hci4: command 0x0406 tx timeout [ 486.760114][T15222] syzkaller0: entered promiscuous mode [ 486.765006][T15222] syzkaller0: entered allmulticast mode [ 487.238112][T15233] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2513'. [ 487.238299][T15233] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2513'. [ 487.238457][T15233] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2513'. [ 487.238584][T15233] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2513'. [ 487.238810][T15233] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2513'. [ 487.238949][T15233] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2513'. [ 487.239106][T15233] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2513'. [ 487.239235][T15233] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2513'. [ 487.239379][T15233] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2513'. [ 487.239503][T15233] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2513'. [ 488.498432][T15251] hub 6-0:1.0: USB hub found [ 488.499587][T15251] hub 6-0:1.0: 8 ports detected [ 488.957422][ T109] block nbd4: Possible stuck request 00000000249a1060: control (read@0,1024B). Runtime 300 seconds [ 488.959232][ T109] block nbd4: Possible stuck request 00000000411ffd3f: control (read@1024,1024B). Runtime 300 seconds [ 488.961209][ T109] block nbd4: Possible stuck request 000000005963ff00: control (read@2048,1024B). Runtime 300 seconds [ 488.963138][ T109] block nbd4: Possible stuck request 000000003e3e6600: control (read@3072,1024B). Runtime 300 seconds [ 489.144414][T15269] x_tables: ip_tables: osf match: only valid for protocol 6 [ 490.480358][T15282] geneve3: entered promiscuous mode [ 490.480396][T15282] geneve3: entered allmulticast mode [ 491.495315][ T25] block nbd3: Possible stuck request 00000000f54990f3: control (read@0,1024B). Runtime 300 seconds [ 491.497317][ T25] block nbd3: Possible stuck request 0000000041fd4bda: control (read@1024,1024B). Runtime 300 seconds [ 491.498085][ T25] block nbd3: Possible stuck request 0000000007c53fd5: control (read@2048,1024B). Runtime 300 seconds [ 491.498105][ T25] block nbd3: Possible stuck request 00000000b6e8b915: control (read@3072,1024B). Runtime 300 seconds [ 492.518285][T15325] tipc: Enabling of bearer rejected, failed to enable media [ 492.962210][T15327] hub 6-0:1.0: USB hub found [ 492.962377][T15327] hub 6-0:1.0: 8 ports detected [ 493.015010][T15337] __nla_validate_parse: 52 callbacks suppressed [ 493.016244][T15337] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2544'. [ 494.651366][ T2466] ieee802154 phy0 wpan0: encryption failed: -22 [ 494.654524][ T2466] ieee802154 phy1 wpan1: encryption failed: -22 [ 495.405827][T15372] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2555'. [ 495.408445][T15372] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2555'. [ 496.495464][T15387] tipc: Enabling of bearer rejected, already enabled [ 497.332526][T15401] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2564'. [ 497.361530][T15401] team2: entered promiscuous mode [ 497.365647][T15401] team2: entered allmulticast mode [ 498.434749][ T32] INFO: task udevd:6752 blocked for more than 143 seconds. [ 498.434789][ T32] Tainted: G L syzkaller #0 [ 498.434796][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 498.434801][ T32] task:udevd state:D stack:0 pid:6752 tgid:6752 ppid:6210 task_flags:0x400140 flags:0x00800011 [ 498.434819][ T32] Call trace: [ 498.434823][ T32] __switch_to+0x418/0x87c (T) [ 498.434839][ T32] __schedule+0x1250/0x2a7c [ 498.434847][ T32] schedule+0xb4/0x230 [ 498.434853][ T32] io_schedule+0x84/0xf4 [ 498.434859][ T32] folio_wait_bit_common+0x56c/0x9e0 [ 498.434866][ T32] do_read_cache_folio+0x240/0x5c8 [ 498.434873][ T32] read_cache_folio+0x68/0x88 [ 498.434878][ T32] read_part_sector+0xcc/0x6fc [ 498.434887][ T32] adfspart_check_POWERTEC+0x90/0xd5c [ 498.434894][ T32] bdev_disk_changed+0x674/0x11fc [ 498.434900][ T32] blkdev_get_whole+0x2b0/0x4a4 [ 498.434907][ T32] bdev_open+0x3b0/0xc20 [ 498.434913][ T32] blkdev_open+0x364/0x4e8 [ 498.434919][ T32] do_dentry_open+0x68c/0x1154 [ 498.434926][ T32] vfs_open+0x44/0x2d4 [ 498.434931][ T32] path_openat+0x2890/0x3114 [ 498.434938][ T32] do_filp_open+0x18c/0x36c [ 498.434945][ T32] do_sys_openat2+0x11c/0x1f0 [ 498.434956][ T32] __arm64_sys_openat+0x120/0x158 [ 498.434963][ T32] invoke_syscall+0x98/0x254 [ 498.434971][ T32] el0_svc_common+0xe8/0x23c [ 498.434978][ T32] do_el0_svc+0x48/0x58 [ 498.434985][ T32] el0_svc+0x5c/0x26c [ 498.434992][ T32] el0t_64_sync_handler+0x84/0x12c [ 498.434999][ T32] el0t_64_sync+0x198/0x19c [ 498.435017][ T32] [ 498.435017][ T32] Showing all locks held in the system: [ 498.435022][ T32] 1 lock held by khungtaskd/32: [ 498.435026][ T32] #0: ffff80008fa5b6e0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire+0x4/0x48 [ 498.435047][ T32] 2 locks held by pr/ttyAMA-1/43: [ 498.435063][ T32] 2 locks held by getty/6355: [ 498.435067][ T32] #0: ffff0000db4c80a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c [ 498.435084][ T32] #1: ffff800099f1e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x34c/0xfc8 [ 498.435102][ T32] 1 lock held by udevd/6561: [ 498.435105][ T32] #0: ffff0000cbc31358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xcc/0xc20 [ 498.435122][ T32] 1 lock held by udevd/6563: [ 498.435125][ T32] #0: ffff0000cbc35358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xcc/0xc20 [ 498.435146][ T32] 1 lock held by udevd/6752: [ 498.435150][ T32] #0: ffff0000cb1fb358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xcc/0xc20 [ 498.435168][ T32] 1 lock held by syz.2.2561/15393: [ 498.435172][ T32] [ 498.435174][ T32] ============================================= [ 498.435174][ T32]