last executing test programs: 4.50063425s ago: executing program 0 (id=1523): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x9, 0x101}}]}}]}, 0x48}}, 0x20040084) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x1, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x5, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x84, 0x3, 0x2, 0x7}, {0x1, 0x6, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x3}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x694, 0x51, 0x8001}, {0x3, 0x8004, 0x80000c, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x7ffd}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x685, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0x7ff, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x7, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0xfffffffa, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5c, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x8, 0x87, 0x60}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x6}, {0x8, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0xea3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x7c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd975, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x6, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x7}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158142, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x2, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x9, 0x6, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0x3, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x80, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff7ffe, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x4, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x5}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0xefa, 0x6, 0x7f, 0x2, 0x0, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0x5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x48}, {0x80000001, 0x9, 0x5202, 0x2, 0x53d2, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x83}, {0xfffffffd, 0x8, 0x6, 0x5, 0x7fffffff, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x0, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x8401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x8, 0x5, 0x8}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0x2000000e, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x7, 0x6, 0x6}, {0xa, 0x8f, 0x9, 0xffffff46, 0x84, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0xffffffff, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0x9}, {0x7, 0xd, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x54c4, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x2, 0x9, 0x8, 0x83, 0x100}, {0x81, 0x4, 0x988, 0x3, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0xfffffffe, 0x4}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x5}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0x43}, {0xfffff000, 0x8, 0xe98, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x2}, {0x3, 0x3, 0x5, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x0, 0x5, 0x8, 0xfa2f}, {0x10, 0x5e20, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x6, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0xffffffff, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x7}, {0x20000002, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x2, 0x5, 0x8000, 0x3}, {0x7ff, 0x5, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x4, 0x5}, {0x4, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x2001, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x1, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3}, {0x3}, {0x2}, {0x3}, {0x4}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x3}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {0x5}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x4}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x2}, {0x5}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 4.425863812s ago: executing program 1 (id=1524): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)={@void, @void, @eth={@broadcast, @random="8bc6002500", @val={@val, {0x8100, 0x0, 0x0, 0x9}}, {@generic={0x88f7}}}}, 0x16) 4.222506137s ago: executing program 3 (id=1527): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x4c23, 0x800e5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xffefffff}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710ffffefffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 4.147712029s ago: executing program 0 (id=1528): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file1/file2\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1/file2/file3\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1/file2/file3/file4\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file1/file2/file3/file5\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file6\x00', 0x1c0) mount$bind(&(0x7f0000000300)='./file0/file1\x00', &(0x7f0000000340)='./file0/file6\x00', 0x0, 0x5000, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file6/file2\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1/file2\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file2\x00', 0x0) r1 = landlock_create_ruleset(&(0x7f0000000440)={0x2004}, 0x30, 0x0) landlock_restrict_self(r1, 0x0) renameat2(r0, &(0x7f0000000540)='file3/file5\x00', r0, 0x0, 0x0) 4.066850261s ago: executing program 1 (id=1529): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x30008014}, 0x4004810) r4 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) 4.066042811s ago: executing program 3 (id=1531): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], 0x0}, 0x94) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0xf, 0x25, 0x4, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r0, 0x2000012, 0x24e, 0xfffffffffffffcb7, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) 3.966139023s ago: executing program 0 (id=1532): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3, 0x6, 0x7, 0x200, 0x4, 0x8, 0x8ed, 0x10, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x8810) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r3) 3.860225366s ago: executing program 3 (id=1533): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) socket$nl_generic(0x10, 0x3, 0x10) write$tun(r0, &(0x7f0000000b80)={@val={0x0, 0xf5}, @void, @ipv6=@tcp={0x4, 0x6, "5a96b2", 0x14, 0x6, 0xff, @local, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, {[], {{0x4e23, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x8, 0x6, 0x0, 0x3}}}}}, 0x40) 3.859369076s ago: executing program 1 (id=1535): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="020200"], 0x68}, 0x1, 0x7}, 0x0) write$bt_hci(r0, &(0x7f0000000140)=ANY=[], 0x6) 3.68987341s ago: executing program 1 (id=1536): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xb}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0xc040}, 0x0) 3.637854701s ago: executing program 0 (id=1537): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)={@void, @void, @eth={@broadcast, @random="8bc6002500", @val={@val, {0x8100, 0x0, 0x0, 0x9}}, {@generic={0x88f7}}}}, 0x16) 3.609515572s ago: executing program 1 (id=1538): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, 0x0, 0xc) write$nci(r0, &(0x7f0000000380)=@NCI_OP_CORE_INTF_ERROR_NTF={0x0, 0x0, 0x3, 0x8, 0x2, {0x0, 0x3}}, 0x5) 3.509685454s ago: executing program 3 (id=1540): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x4c23, 0x800e5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xffefffff}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710ffffefffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 3.404885297s ago: executing program 3 (id=1541): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r0, &(0x7f0000002e80)=[{{0x0, 0x0, 0x0}, 0x3fffff}, {{0x0, 0x0, 0x0}, 0x8000007}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001bc0)=""/4084, 0xff4}, {&(0x7f0000000180)=""/33, 0x21}, {&(0x7f00000001c0)=""/172, 0xac}, {&(0x7f0000003900)=""/151, 0x97}, {&(0x7f0000000a40)=""/103, 0x67}, {&(0x7f0000004b00)=""/4098, 0x1002}, {&(0x7f0000004ac0)=""/41, 0x29}], 0x7}, 0x19}], 0x3, 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000240)) 3.221323662s ago: executing program 0 (id=1543): sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, 0x0, 0x24000841) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)={0x34, r4, 0x1, 0x70ad2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}]}]}, 0x34}}, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r5, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8050}, 0x0) 1.948192943s ago: executing program 2 (id=1554): connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x1}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000080000000000000000fc632f6f375092628f3f21df7e0485e59954b882ad000f2844"], 0x50) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xfffffffd, @empty}, 0x1c) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x200008d0}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2c, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0x1, 0xe}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8}, @TCA_CODEL_TARGET={0x8, 0x1, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x55}, 0xc010) r3 = fsopen(&(0x7f0000000100)='ocfs2_dlmfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xa, &(0x7f0000000140)=0x6, 0x4) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000024c0)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002500)=0x40) r4 = fsmount(r3, 0x0, 0x0) mkdirat(r4, &(0x7f0000000040)='./mydev\x00', 0x8) shutdown(r0, 0x1) 1.849877855s ago: executing program 2 (id=1555): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x30008014}, 0x4004810) r4 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) 1.727991518s ago: executing program 2 (id=1556): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4000000) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c8, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) 1.301548279s ago: executing program 2 (id=1557): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0x6, &(0x7f00000006c0)=@raw=[@ringbuf_query, @call={0x85, 0x0, 0x0, 0xaf}, @call={0x85, 0x0, 0x0, 0x6c}], 0x0, 0x2942d502, 0x0, 0x0, 0x41100, 0x4a}, 0x94) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7103b3"], 0xb6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 148.343197ms ago: executing program 2 (id=1558): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x9c}}, 0x0) 142.464436ms ago: executing program 0 (id=1559): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0xa0}, 0x80) r3 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) fsopen(&(0x7f0000000000)='virtiofs\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) syz_io_uring_setup(0x75e7, &(0x7f0000000480)={0x0, 0x7210, 0x2, 0x1, 0x1cb, 0x0, r2}, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)=0x0) syz_io_uring_submit$UBLK(0x0, r3, r5, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, 0x0, 0xc0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r4, &(0x7f0000000180)={0x0, 0x9878, 0x0, 0x1, 0x38c}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7333, 0x2, 0x40040081, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x40000, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 132.361237ms ago: executing program 3 (id=1560): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) sendmsg$inet(r0, &(0x7f0000002dc0)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000140)="81", 0x1}], 0x1}, 0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) recvfrom$inet(r0, &(0x7f0000000200)=""/47, 0x2f, 0x10001, 0x0, 0x0) 69.892979ms ago: executing program 1 (id=1561): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000200)={'wg2\x00', 0x0}) bind$packet(r0, &(0x7f0000000200)={0x11, 0x5, r2, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x0) write(r0, &(0x7f0000000000)="0100000000", 0x5) 0s ago: executing program 2 (id=1562): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000704006c000500"], 0x398}}, 0x0) kernel console output (not intermixed with test programs): -1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.581067][ T5879] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 102.442468][ T5816] usb 1-1: config 0 descriptor?? [ 102.562717][ T5893] can0: slcan on ptm0. [ 103.541757][ T5774] block nbd0: Receive control failed (result -104) [ 103.594363][ T5898] can0: slcan on ptm1. [ 103.622198][ T5892] can0 (unregistered): slcan off ptm0. [ 103.834903][ T5877] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 104.077383][ T5902] ucsi_ccg 0-0008: ucsi_ccg_init failed - -110 [ 104.084852][ T5902] ucsi_ccg: probe of 0-0008 failed with error -110 [ 104.095074][ T5902] i2c i2c-0: new_device: Instantiated device ccgx-ucsi at 0x08 [ 104.611456][ T5904] can0: slcan on ptm0. [ 104.641466][ T5897] can0 (unregistered): slcan off ptm1. [ 105.934259][ T5914] netlink: 14 bytes leftover after parsing attributes in process `syz.3.15'. [ 106.071443][ T5900] can0 (unregistered): slcan off ptm0. [ 106.184595][ T28] usb 1-1: USB disconnect, device number 2 [ 106.492822][ T5931] futex_wake_op: syz.0.19 tries to shift op by 144; fix this program [ 106.515794][ T5928] loop2: detected capacity change from 0 to 256 [ 107.523310][ T5934] netlink: 36 bytes leftover after parsing attributes in process `syz.0.19'. [ 108.140057][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 108.259809][ T5084] Bluetooth: hci4: command 0xfc11 tx timeout [ 108.549883][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 108.689866][ T5774] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 109.223432][ T5951] can0: slcan on ptm1. [ 110.311497][ T5950] can0 (unregistered): slcan off ptm1. [ 110.691658][ T5963] netlink: 12 bytes leftover after parsing attributes in process `syz.3.25'. [ 110.704359][ T5965] loop1: detected capacity change from 0 to 256 [ 110.761001][ T5964] nbd1: detected capacity change from 0 to 63 [ 112.894926][ T5762] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 112.947350][ T5960] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 113.510558][ T5973] loop1: detected capacity change from 0 to 2048 [ 113.920594][ T5762] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 115.349533][ T5774] block nbd1: Receive control failed (result -104) [ 115.671230][ T5973] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 115.923551][ T5970] nbd2: detected capacity change from 0 to 63 [ 116.023330][ T5762] usb 4-1: config 0 interface 0 has no altsetting 0 [ 116.032978][ T5762] usb 4-1: string descriptor 0 read error: -71 [ 116.039496][ T5762] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 116.050796][ T5762] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 116.061639][ T5762] usb 4-1: config 0 descriptor?? [ 116.068624][ T5762] usb 4-1: can't set config #0, error -71 [ 116.076087][ T5762] usb 4-1: USB disconnect, device number 2 [ 116.267324][ T5974] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 116.362389][ T5982] futex_wake_op: syz.3.30 tries to shift op by 144; fix this program [ 116.441600][ T5984] netlink: 36 bytes leftover after parsing attributes in process `syz.3.30'. [ 118.380298][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 118.831422][ T5774] block nbd2: Receive control failed (result -104) [ 118.937241][ T5986] loop1: detected capacity change from 0 to 512 [ 119.240280][ T5986] EXT4-fs error (device loop1): ext4_iget_extra_inode:4740: inode #15: comm syz.1.31: corrupted in-inode xattr: e_value out of bounds [ 119.358273][ T5986] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.31: couldn't read orphan inode 15 (err -117) [ 119.392843][ T49] Bluetooth: hci4: Frame reassembly failed (-84) [ 119.424058][ T5986] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.519770][ T5989] EXT4-fs error (device loop1): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 119.980056][ T6004] loop0: detected capacity change from 0 to 2048 [ 120.331392][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.449878][ T5084] Bluetooth: hci4: command 0xfc11 tx timeout [ 121.488339][ T5774] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 121.664843][ T6004] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 124.569963][ T5816] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 124.767582][ T5816] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 124.779890][ T5816] usb 3-1: config 0 interface 0 has no altsetting 0 [ 124.824970][ T5816] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 124.863618][ T5816] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 124.874393][ T5816] usb 3-1: Product: syz [ 124.878808][ T5816] usb 3-1: Manufacturer: syz [ 124.887435][ T5816] usb 3-1: SerialNumber: syz [ 124.914689][ T5816] usb 3-1: config 0 descriptor?? [ 124.936671][ T5816] usb 3-1: selecting invalid altsetting 0 [ 125.022574][ T6027] can0: slcan on ptm0. [ 125.274768][ T5816] usb 3-1: USB disconnect, device number 2 [ 126.007036][ T6016] syz.0.37: vmalloc error: size 9223372036854775807, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 126.022045][ T6016] CPU: 1 PID: 6016 Comm: syz.0.37 Not tainted syzkaller #0 [ 126.029255][ T6016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.039519][ T6016] Call Trace: [ 126.042901][ T6016] [ 126.045847][ T6016] dump_stack_lvl+0x18c/0x250 [ 126.050559][ T6016] ? show_regs_print_info+0x20/0x20 [ 126.055775][ T6016] ? load_image+0x420/0x420 [ 126.060314][ T6016] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 126.066783][ T6016] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 126.073310][ T6016] warn_alloc+0x246/0x340 [ 126.077723][ T6016] ? zone_watermark_ok_safe+0x230/0x230 [ 126.083375][ T6016] ? __mutex_trylock_common+0x160/0x270 [ 126.088939][ T6016] __vmalloc_node_range+0x129/0x1320 [ 126.094264][ T6016] ? tomoyo_path_number_perm+0x217/0x5e0 [ 126.099940][ T6016] ? rcu_is_watching+0x15/0xb0 [ 126.104735][ T6016] ? trace_contention_end+0x39/0xe0 [ 126.109979][ T6016] ? __mutex_lock+0x30d/0xc80 [ 126.114758][ T6016] ? tomoyo_path_number_perm+0x56b/0x5e0 [ 126.120475][ T6016] ? tomoyo_path_number_perm+0x217/0x5e0 [ 126.126168][ T6016] ? free_vm_area+0x50/0x50 [ 126.131320][ T6016] ? dvb_dvr_do_ioctl+0x12e/0x220 [ 126.136373][ T6016] vmalloc+0x79/0x90 [ 126.140312][ T6016] ? dvb_dvr_do_ioctl+0x12e/0x220 [ 126.145373][ T6016] dvb_dvr_do_ioctl+0x12e/0x220 [ 126.150279][ T6016] dvb_usercopy+0x195/0x2b0 [ 126.154843][ T6016] ? dvb_dvr_release+0x3e0/0x3e0 [ 126.159826][ T6016] ? dvb_generic_ioctl+0xb0/0xb0 [ 126.164911][ T6016] ? dvb_dvr_poll+0x230/0x230 [ 126.169613][ T6016] dvb_dvr_ioctl+0x29/0x30 [ 126.174103][ T6016] __se_sys_ioctl+0xfd/0x170 [ 126.178741][ T6016] do_syscall_64+0x55/0xb0 [ 126.183200][ T6016] ? clear_bhb_loop+0x40/0x90 [ 126.187898][ T6016] ? clear_bhb_loop+0x40/0x90 [ 126.192607][ T6016] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 126.198544][ T6016] RIP: 0033:0x7fcff899e0d9 [ 126.203033][ T6016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.222702][ T6016] RSP: 002b:00007fcff989c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 126.231159][ T6016] RAX: ffffffffffffffda RBX: 00007fcff8c25fa0 RCX: 00007fcff899e0d9 [ 126.239228][ T6016] RDX: 7fffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000003 [ 126.247262][ T6016] RBP: 00007fcff8a35024 R08: 0000000000000000 R09: 0000000000000000 [ 126.255295][ T6016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.263336][ T6016] R13: 00007fcff8c26038 R14: 00007fcff8c25fa0 R15: 00007fff5a557ee8 [ 126.271359][ T6016] [ 126.276252][ T6016] Mem-Info: [ 126.279427][ T6016] active_anon:8958 inactive_anon:0 isolated_anon:0 [ 126.279427][ T6016] active_file:1186 inactive_file:39967 isolated_file:0 [ 126.279427][ T6016] unevictable:768 dirty:99 writeback:0 [ 126.279427][ T6016] slab_reclaimable:9905 slab_unreclaimable:91755 [ 126.279427][ T6016] mapped:27536 shmem:4233 pagetables:668 [ 126.279427][ T6016] sec_pagetables:0 bounce:0 [ 126.279427][ T6016] kernel_misc_reclaimable:0 [ 126.279427][ T6016] free:1361737 free_pcp:11782 free_cma:0 [ 126.324551][ T6016] Node 0 active_anon:35832kB inactive_anon:0kB active_file:4744kB inactive_file:159668kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:110144kB dirty:392kB writeback:0kB shmem:15396kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10736kB pagetables:2672kB sec_pagetables:0kB all_unreclaimable? no [ 126.357021][ T6016] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 126.388246][ T6016] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 126.415778][ T6016] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 126.421815][ T6016] Node 0 DMA32 free:1536996kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:35788kB inactive_anon:0kB active_file:4744kB inactive_file:158844kB unevictable:1536kB writepending:392kB present:3129332kB managed:2586824kB mlocked:0kB bounce:0kB free_pcp:26320kB local_pcp:17808kB free_cma:0kB [ 126.452502][ T6016] lowmem_reserve[]: 0 0 0 0 0 [ 126.457235][ T6016] Node 0 Normal free:4kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 126.485286][ T6016] lowmem_reserve[]: 0 0 0 0 0 [ 126.490135][ T6016] Node 1 Normal free:3894588kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:20808kB local_pcp:10788kB free_cma:0kB [ 126.519899][ T6016] lowmem_reserve[]: 0 0 0 0 0 [ 126.524740][ T6016] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 126.537457][ T6016] Node 0 DMA32: 89*4kB (UME) 782*8kB (UE) 217*16kB (UE) 2*32kB (UE) 1*64kB (U) 2*128kB (ME) 1*256kB (U) 1*512kB (E) 0*1024kB 3*2048kB (UME) 371*4096kB (M) = 1536996kB [ 126.554448][ T6016] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 126.566561][ T6016] Node 1 Normal: 237*4kB (UME) 51*8kB (UME) 41*16kB (UME) 51*32kB (UME) 18*64kB (UME) 9*128kB (UME) 2*256kB (ME) 0*512kB 1*1024kB (E) 2*2048kB (UE) 948*4096kB (M) = 3894588kB [ 126.584962][ T6016] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 126.594645][ T6016] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 126.604072][ T6016] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 126.613699][ T6016] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 126.623030][ T6016] 45384 total pagecache pages [ 126.627915][ T6016] 0 pages in swap cache [ 126.632297][ T6016] Free swap = 124996kB [ 126.636457][ T6016] Total swap = 124996kB [ 126.640746][ T6016] 2097051 pages RAM [ 126.644726][ T6016] 0 pages HighMem/MovableOnly [ 126.649407][ T6016] 416959 pages reserved [ 126.653647][ T6016] 0 pages cma reserved [ 126.725143][ T5977] udevd[5977]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 126.851592][ T6023] can0 (unregistered): slcan off ptm0. [ 127.341970][ T6040] nbd3: detected capacity change from 0 to 63 [ 127.535955][ T6040] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 129.844276][ T6045] nbd4: detected capacity change from 0 to 63 [ 129.881188][ T5774] block nbd3: Receive control failed (result -104) [ 129.958441][ T5084] block nbd4: Receive control failed (result -104) [ 130.002193][ T6059] can0: slcan on ptm0. [ 130.306152][ T6064] i2c i2c-0: Failed to register i2c client ccgx-ucsi at 0x08 (-16) [ 131.110704][ T6058] can0 (unregistered): slcan off ptm0. [ 131.225581][ T55] block nbd0: Possible stuck request ffff888021ef8000: control (read@0,4096B). Runtime 30 seconds [ 131.244450][ T6070] loop0: detected capacity change from 0 to 256 [ 131.504904][ T6075] loop1: detected capacity change from 0 to 2048 [ 132.594931][ T6075] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 133.173260][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.185867][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.227275][ T6081] loop2: detected capacity change from 0 to 2048 [ 133.304111][ T6081] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 136.606519][ T6091] syz.0.51 uses obsolete (PF_INET,SOCK_PACKET) [ 136.617338][ T6086] nbd5: detected capacity change from 0 to 63 [ 136.772857][ T6086] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 136.919500][ T5084] block nbd5: Receive control failed (result -104) [ 137.265140][ T6098] loop3: detected capacity change from 0 to 4096 [ 139.625856][ T6098] ntfs3: loop3: ino=3, ntfs_set_state failed, -22. [ 139.699871][ T6098] ntfs3: loop3: Failed to initialize $Extend/$ObjId. [ 140.218663][ T49] ntfs3: loop3: ino=3, ntfs3_write_inode failed, -22. [ 140.244132][ T5782] ntfs3: loop3: ino=3, ntfs_set_state failed, -22. [ 140.265087][ T5782] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 140.291261][ T5782] ntfs3: loop3: ino=3, ntfs_set_state failed, -22. [ 140.338447][ T42] ntfs3: loop3: ino=3, ntfs3_write_inode failed, -22. [ 140.693823][ T6126] can0: slcan on ptm0. [ 140.999846][ T55] block nbd1: Possible stuck request ffff888021f20000: control (read@0,4096B). Runtime 30 seconds [ 141.131803][ T6133] i2c i2c-0: Failed to register i2c client ccgx-ucsi at 0x08 (-16) [ 141.873781][ T6130] syz.1.60: vmalloc error: size 9223372036854775807, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 141.889374][ T6130] CPU: 0 PID: 6130 Comm: syz.1.60 Not tainted syzkaller #0 [ 141.896826][ T6130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 141.906925][ T6130] Call Trace: [ 141.910260][ T6130] [ 141.913269][ T6130] dump_stack_lvl+0x18c/0x250 [ 141.917975][ T6130] ? asm_sysvec_call_function_single+0x1a/0x20 [ 141.924151][ T6130] ? show_regs_print_info+0x20/0x20 [ 141.929373][ T6130] ? asm_sysvec_call_function_single+0x1a/0x20 [ 141.935583][ T6130] warn_alloc+0x246/0x340 [ 141.939961][ T6130] ? zone_watermark_ok_safe+0x230/0x230 [ 141.945547][ T6130] ? __mutex_trylock_common+0x160/0x270 [ 141.951130][ T6130] __vmalloc_node_range+0x129/0x1320 [ 141.956454][ T6130] ? tomoyo_path_number_perm+0x217/0x5e0 [ 141.962127][ T6130] ? rcu_is_watching+0x15/0xb0 [ 141.967026][ T6130] ? trace_contention_end+0x39/0xe0 [ 141.972263][ T6130] ? __mutex_lock+0x30d/0xc80 [ 141.976994][ T6130] ? tomoyo_path_number_perm+0x56b/0x5e0 [ 141.982707][ T6130] ? tomoyo_path_number_perm+0x217/0x5e0 [ 141.988382][ T6130] ? free_vm_area+0x50/0x50 [ 141.992929][ T6130] ? dvb_dvr_do_ioctl+0x12e/0x220 [ 141.997993][ T6130] vmalloc+0x79/0x90 [ 142.001931][ T6130] ? dvb_dvr_do_ioctl+0x12e/0x220 [ 142.007004][ T6130] dvb_dvr_do_ioctl+0x12e/0x220 [ 142.011903][ T6130] dvb_usercopy+0x195/0x2b0 [ 142.016443][ T6130] ? dvb_dvr_release+0x3e0/0x3e0 [ 142.021424][ T6130] ? dvb_generic_ioctl+0xb0/0xb0 [ 142.026411][ T6130] ? dvb_dvr_poll+0x230/0x230 [ 142.031124][ T6130] dvb_dvr_ioctl+0x29/0x30 [ 142.035588][ T6130] __se_sys_ioctl+0xfd/0x170 [ 142.040235][ T6130] do_syscall_64+0x55/0xb0 [ 142.044736][ T6130] ? clear_bhb_loop+0x40/0x90 [ 142.049451][ T6130] ? clear_bhb_loop+0x40/0x90 [ 142.054165][ T6130] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 142.060098][ T6130] RIP: 0033:0x7ff75cb9e0d9 [ 142.064550][ T6130] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.084222][ T6130] RSP: 002b:00007ff75da80028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 142.092684][ T6130] RAX: ffffffffffffffda RBX: 00007ff75ce26090 RCX: 00007ff75cb9e0d9 [ 142.100696][ T6130] RDX: 7fffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000003 [ 142.108697][ T6130] RBP: 00007ff75cc35024 R08: 0000000000000000 R09: 0000000000000000 [ 142.116700][ T6130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.124701][ T6130] R13: 00007ff75ce26128 R14: 00007ff75ce26090 R15: 00007ffde18ffaa8 [ 142.132716][ T6130] [ 142.136884][ T6130] Mem-Info: [ 142.144780][ T6130] active_anon:9210 inactive_anon:0 isolated_anon:0 [ 142.144780][ T6130] active_file:1267 inactive_file:39978 isolated_file:0 [ 142.144780][ T6130] unevictable:768 dirty:222 writeback:0 [ 142.144780][ T6130] slab_reclaimable:9942 slab_unreclaimable:91802 [ 142.144780][ T6130] mapped:27632 shmem:4233 pagetables:708 [ 142.144780][ T6130] sec_pagetables:0 bounce:0 [ 142.144780][ T6130] kernel_misc_reclaimable:0 [ 142.144780][ T6130] free:1361002 free_pcp:11966 free_cma:0 [ 142.192958][ T6130] Node 0 active_anon:36840kB inactive_anon:0kB active_file:5068kB inactive_file:159712kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:110528kB dirty:884kB writeback:0kB shmem:15396kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10832kB pagetables:2832kB sec_pagetables:0kB all_unreclaimable? no [ 142.225764][ T6130] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 142.280758][ T6130] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 142.311765][ T6130] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 142.320759][ T6130] Node 0 DMA32 free:1534056kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:36796kB inactive_anon:0kB active_file:5068kB inactive_file:158888kB unevictable:1536kB writepending:884kB present:3129332kB managed:2586824kB mlocked:0kB bounce:0kB free_pcp:26824kB local_pcp:10588kB free_cma:0kB [ 142.357754][ T6130] lowmem_reserve[]: 0 0 0 0 0 [ 142.377330][ T6130] Node 0 Normal free:4kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 142.406148][ T6130] lowmem_reserve[]: 0 0 0 0 0 [ 142.412641][ T6130] Node 1 Normal free:3894588kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:20908kB local_pcp:10020kB free_cma:0kB [ 142.442717][ T6130] lowmem_reserve[]: 0 0 0 0 0 [ 142.450749][ T6130] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 142.487109][ T6130] Node 0 DMA32: 2*4kB (ME) 668*8kB (UE) 218*16kB (UME) 3*32kB [ 142.604070][ T6135] loop2: detected capacity change from 0 to 2048 [ 142.689040][ T6130] (UME) 2*64kB (UM) [ 142.692972][ T6125] can0 (unregistered): slcan off ptm0. [ 142.799421][ T6130] 2*128kB (UE) 0*256kB 2*512kB (UE) 2*1024kB (UM) 3*2048kB (UME) 370*4096kB (M) = 1534056kB [ 142.833546][ T6135] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 142.897686][ T6130] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 142.933985][ T6130] Node 1 Normal: 237*4kB (UME) 51*8kB (UME) 41*16kB (UME) 51*32kB (UME) 18*64kB (UME) 9*128kB (UME) 2*256kB (ME) 0*512kB 1*1024kB (E) 2*2048kB (UE) 948*4096kB (M) = 3894588kB [ 143.180157][ T6137] loop0: detected capacity change from 0 to 4096 [ 143.232334][ T6130] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 143.980343][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 144.389917][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 145.232814][ T6130] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 145.460934][ T6130] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 145.655427][ T6130] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 145.672538][ T6137] ntfs3: loop0: ino=3, ntfs_set_state failed, -22. [ 145.679284][ T6137] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [ 146.528320][ T6130] 46283 total pagecache pages [ 146.559770][ T6130] 0 pages in swap cache [ 146.574168][ T10] block nbd2: Possible stuck request ffff888021f70000: control (read@0,1024B). Runtime 30 seconds [ 146.585095][ T10] block nbd2: Possible stuck request ffff888021f70200: control (read@1024,1024B). Runtime 30 seconds [ 146.596228][ T10] block nbd2: Possible stuck request ffff888021f70400: control (read@2048,1024B). Runtime 30 seconds [ 146.607195][ T10] block nbd2: Possible stuck request ffff888021f70600: control (read@3072,1024B). Runtime 30 seconds [ 146.806510][ T42] ntfs3: loop0: ino=3, ntfs3_write_inode failed, -22. [ 146.811351][ T6130] Free swap = 124996kB [ 146.830331][ T6130] Total swap = 124996kB [ 146.841006][ T5772] ntfs3: loop0: ino=3, ntfs_set_state failed, -22. [ 146.848404][ T5772] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 146.857651][ T6130] 2097051 pages RAM [ 146.869876][ T6130] 0 pages HighMem/MovableOnly [ 146.886201][ T6130] 416959 pages reserved [ 146.901909][ T6145] can0: slcan on ptm0. [ 146.905583][ T5772] ntfs3: loop0: ino=3, ntfs_set_state failed, -22. [ 146.924861][ T6130] 0 pages cma reserved [ 146.947171][ T49] ntfs3: loop0: ino=3, ntfs3_write_inode failed, -22. [ 147.199063][ T6149] can1: slcan on ptm1. [ 147.281544][ T6151] i2c i2c-0: Failed to register i2c client ccgx-ucsi at 0x08 (-16) [ 148.141477][ T6157] loop0: detected capacity change from 0 to 256 [ 148.171773][ T6144] can0 (unregistered): slcan off ptm0. [ 148.233295][ T6158] i2c i2c-0: Failed to register i2c client ccgx-ucsi at 0x08 (-16) [ 149.101785][ T6147] can1 (unregistered): slcan off ptm1. [ 149.608558][ T6168] netlink: 44 bytes leftover after parsing attributes in process `syz.1.67'. [ 151.545640][ T6193] futex_wake_op: syz.0.72 tries to shift op by 144; fix this program [ 151.718240][ T6194] netlink: 36 bytes leftover after parsing attributes in process `syz.0.72'. [ 152.926196][ T6197] MTD: Couldn't look up './dev/mtdblock0': -2 [ 153.392064][ T6206] loop0: detected capacity change from 0 to 2048 [ 153.579477][ T6206] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 153.603911][ T6207] futex_wake_op: syz.3.75 tries to shift op by 144; fix this program [ 154.214743][ T6209] netlink: 36 bytes leftover after parsing attributes in process `syz.3.75'. [ 156.213835][ T6222] syz.1.79 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 157.033916][ T5839] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 157.502979][ T5839] usb 2-1: config index 0 descriptor too short (expected 28277, got 36) [ 157.640154][ T5839] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.678336][ T5839] usb 2-1: config 0 has no interfaces? [ 157.707832][ T5839] usb 2-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 157.709765][ T5084] Bluetooth: hci3: command 0x0406 tx timeout [ 157.747297][ T5839] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.789019][ T5839] usb 2-1: config 0 descriptor?? [ 158.103135][ T24] block nbd3: Possible stuck request ffff888022020000: control (read@0,4096B). Runtime 30 seconds [ 159.463741][ T6271] netlink: 'syz.2.95': attribute type 11 has an invalid length. [ 159.717274][ T5844] usb 2-1: USB disconnect, device number 2 [ 160.013009][ T24] block nbd4: Possible stuck request ffff888022060000: control (read@0,1024B). Runtime 30 seconds [ 160.024343][ T24] block nbd4: Possible stuck request ffff888022060200: control (read@1024,3072B). Runtime 30 seconds [ 160.196710][ T5839] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 160.296979][ T6293] autofs4:pid:6293:autofs_fill_super: called with bogus options [ 160.556052][ T5839] usb 3-1: config index 0 descriptor too short (expected 28277, got 36) [ 160.691029][ T5839] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 160.719835][ T5839] usb 3-1: config 0 has no interfaces? [ 160.747215][ T5839] usb 3-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 160.766409][ T6292] bridge1: entered allmulticast mode [ 160.802681][ T5839] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.828154][ T6296] netlink: 830 bytes leftover after parsing attributes in process `syz.0.103'. [ 160.887355][ T5839] usb 3-1: config 0 descriptor?? [ 162.530593][ T55] block nbd0: Possible stuck request ffff888021ef8000: control (read@0,4096B). Runtime 60 seconds [ 164.559940][ T8] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 165.614175][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 165.621937][ T8] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 165.630619][ T8] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 165.645370][ T8] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 165.655437][ T8] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 165.793583][ T8] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 165.807259][ T8] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 165.816457][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.130454][ T8] usb 1-1: GET_CAPABILITIES returned 0 [ 166.136488][ T8] usbtmc 1-1:16.0: can't read capabilities [ 166.538017][ T8] usb 1-1: USB disconnect, device number 3 [ 166.550701][ T5762] usb 3-1: USB disconnect, device number 3 [ 167.067955][ T10] block nbd5: Possible stuck request ffff8880220b0000: control (read@0,4096B). Runtime 30 seconds [ 167.812269][ T6338] netlink: 64 bytes leftover after parsing attributes in process `syz.3.115'. [ 167.821645][ T6338] netlink: 64 bytes leftover after parsing attributes in process `syz.3.115'. [ 167.830698][ T6338] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 167.844884][ T6338] mmap: syz.3.115 (6338) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 169.989957][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 170.738052][ T8] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 172.100753][ T10] block nbd1: Possible stuck request ffff888021f20000: control (read@0,4096B). Runtime 60 seconds [ 172.140887][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 172.210280][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 172.239170][ T8] usb 3-1: device descriptor read/all, error -71 [ 173.706236][ T6369] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 173.773720][ T6369] infiniband syz5: RDMA CMA: cma_listen_on_dev, error -98 [ 176.813194][ T55] block nbd2: Possible stuck request ffff888021f70000: control (read@0,1024B). Runtime 60 seconds [ 176.840517][ T55] block nbd2: Possible stuck request ffff888021f70200: control (read@1024,1024B). Runtime 60 seconds [ 176.852130][ T55] block nbd2: Possible stuck request ffff888021f70400: control (read@2048,1024B). Runtime 60 seconds [ 176.863251][ T55] block nbd2: Possible stuck request ffff888021f70600: control (read@3072,1024B). Runtime 60 seconds [ 178.949381][ T6398] vim2m vim2m.0: Removing vim2m [ 179.081325][ T6398] vim2m vim2m.0: Device registered as /dev/video3 [ 179.360156][ T6403] block nbd6: server does not support multiple connections per device. [ 179.380556][ T6403] block nbd6: shutting down sockets [ 182.380288][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 188.285234][ T24] block nbd3: Possible stuck request ffff888022020000: control (read@0,4096B). Runtime 60 seconds [ 190.508665][ T24] block nbd4: Possible stuck request ffff888022060000: control (read@0,1024B). Runtime 60 seconds [ 190.529744][ T24] block nbd4: Possible stuck request ffff888022060200: control (read@1024,3072B). Runtime 60 seconds [ 190.670028][ T6461] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 191.177138][ T6461] o2cb: This node has not been configured. [ 191.247794][ T6461] o2cb: Cluster check failed. Fix errors before retrying. [ 191.402574][ T6461] (syz.0.150,6461,0):user_dlm_register:674 ERROR: status = -22 [ 191.471825][ T6461] (syz.0.150,6461,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "mydev" [ 193.029909][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 193.679490][ T55] block nbd0: Possible stuck request ffff888021ef8000: control (read@0,4096B). Runtime 90 seconds [ 194.573437][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.580000][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.589940][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 198.255554][ T55] block nbd5: Possible stuck request ffff8880220b0000: control (read@0,4096B). Runtime 60 seconds [ 198.533769][ T6493] vim2m vim2m.0: Removing vim2m [ 198.570221][ T6493] vim2m vim2m.0: Device registered as /dev/video3 [ 202.249908][ T10] block nbd1: Possible stuck request ffff888021f20000: control (read@0,4096B). Runtime 90 seconds [ 203.912988][ T6520] autofs4:pid:6520:autofs_fill_super: called with bogus options [ 204.617333][ T6522] Bluetooth: MGMT ver 1.22 [ 206.358026][ T5084] Bluetooth: hci4: command 0x1003 tx timeout [ 206.365591][ T5774] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 208.373601][ T55] block nbd2: Possible stuck request ffff888021f70000: control (read@0,1024B). Runtime 90 seconds [ 208.384919][ T55] block nbd2: Possible stuck request ffff888021f70200: control (read@1024,1024B). Runtime 90 seconds [ 208.396541][ T55] block nbd2: Possible stuck request ffff888021f70400: control (read@2048,1024B). Runtime 90 seconds [ 208.407772][ T55] block nbd2: Possible stuck request ffff888021f70600: control (read@3072,1024B). Runtime 90 seconds [ 212.018133][ T6548] Bluetooth: hci1: command 0x0406 tx timeout [ 212.024692][ T5780] Bluetooth: hci0: command 0x0406 tx timeout [ 212.031023][ T5780] Bluetooth: hci2: command 0x0406 tx timeout [ 218.679435][ T6595] netlink: 64 bytes leftover after parsing attributes in process `syz.0.178'. [ 218.688838][ T6595] netlink: 64 bytes leftover after parsing attributes in process `syz.0.178'. [ 218.698110][ T6595] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 219.477830][ T24] block nbd3: Possible stuck request ffff888022020000: control (read@0,4096B). Runtime 90 seconds [ 220.055214][ T6599] netlink: 12 bytes leftover after parsing attributes in process `syz.3.190'. [ 220.829924][ T24] block nbd4: Possible stuck request ffff888022060000: control (read@0,1024B). Runtime 90 seconds [ 220.842489][ T24] block nbd4: Possible stuck request ffff888022060200: control (read@1024,3072B). Runtime 90 seconds [ 221.649740][ T6612] tipc: Started in network mode [ 221.933762][ T6612] tipc: Node identity 4, cluster identity 4711 [ 221.959057][ T6612] tipc: Node number set to 4 [ 223.774573][ T5774] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 224.020467][ T55] block nbd0: Possible stuck request ffff888021ef8000: control (read@0,4096B). Runtime 120 seconds [ 225.699791][ T5839] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 226.026568][ T5839] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 226.570117][ T5839] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 226.617159][ T5839] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 226.646308][ T5839] usb 3-1: SerialNumber: syz [ 229.049004][ T5774] Bluetooth: hci0: command 0x0406 tx timeout [ 229.069059][ T55] block nbd5: Possible stuck request ffff8880220b0000: control (read@0,4096B). Runtime 90 seconds [ 229.204876][ T5839] cdc_ether: probe of 3-1:1.0 failed with error -71 [ 229.218413][ T5839] usb 3-1: USB disconnect, device number 6 [ 229.342421][ T6653] tipc: Started in network mode [ 229.347385][ T6653] tipc: Node identity 4, cluster identity 4711 [ 229.547560][ T6653] tipc: Node number set to 4 [ 232.423363][ T55] block nbd1: Possible stuck request ffff888021f20000: control (read@0,4096B). Runtime 120 seconds [ 233.304662][ T5774] Bluetooth: hci4: command 0x1003 tx timeout [ 233.312165][ T5084] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 233.678427][ T6684] netlink: 12 bytes leftover after parsing attributes in process `syz.2.216'. [ 234.710097][ T5084] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 235.118006][ T6697] tipc: Started in network mode [ 235.168877][ T6697] tipc: Node identity 4, cluster identity 4711 [ 235.266226][ T6697] tipc: Node number set to 4 [ 235.523545][ T6701] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 235.685904][ T6701] o2cb: This node has not been configured. [ 235.741870][ T6701] o2cb: Cluster check failed. Fix errors before retrying. [ 235.818185][ T6701] (syz.2.222,6701,1):user_dlm_register:674 ERROR: status = -22 [ 236.050184][ T6701] (syz.2.222,6701,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "mydev" [ 238.738499][ T55] block nbd2: Possible stuck request ffff888021f70000: control (read@0,1024B). Runtime 120 seconds [ 238.750162][ T55] block nbd2: Possible stuck request ffff888021f70200: control (read@1024,1024B). Runtime 120 seconds [ 238.769285][ T55] block nbd2: Possible stuck request ffff888021f70400: control (read@2048,1024B). Runtime 120 seconds [ 238.780683][ T55] block nbd2: Possible stuck request ffff888021f70600: control (read@3072,1024B). Runtime 120 seconds [ 240.786311][ T5774] Bluetooth: hci3: command 0x0406 tx timeout [ 241.651325][ T6747] tipc: Started in network mode [ 241.656298][ T6747] tipc: Node identity 4, cluster identity 4711 [ 241.682008][ T6747] tipc: Node number set to 4 [ 244.987029][ T6770] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 245.035569][ T6770] o2cb: This node has not been configured. [ 245.059795][ T6770] o2cb: Cluster check failed. Fix errors before retrying. [ 245.067019][ T6770] (syz.1.239,6770,1):user_dlm_register:674 ERROR: status = -22 [ 245.105117][ T6770] (syz.1.239,6770,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "mydev" [ 245.249908][ T5844] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 245.439840][ T5844] usb 3-1: Using ep0 maxpacket: 32 [ 245.494110][ T5844] usb 3-1: unable to get BOS descriptor or descriptor too short [ 245.608697][ T5844] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 245.755193][ T5844] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 245.992790][ T5844] usb 3-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 246.113881][ T5844] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.235682][ T5844] usb 3-1: Product: syz [ 246.240833][ T5844] usb 3-1: Manufacturer: syz [ 246.254417][ T5844] usb 3-1: SerialNumber: syz [ 249.864198][ T5844] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 249.916009][ T24] block nbd3: Possible stuck request ffff888022020000: control (read@0,4096B). Runtime 120 seconds [ 249.966844][ T5844] snd-usb-audio: probe of 3-1:1.1 failed with error -22 [ 250.155565][ T5844] snd-usb-audio: probe of 3-1:1.2 failed with error -22 [ 250.178361][ T5844] usb 3-1: USB disconnect, device number 7 [ 250.214748][ T6806] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 250.304621][ T6039] udevd[6039]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 251.249069][ T24] block nbd4: Possible stuck request ffff888022060000: control (read@0,1024B). Runtime 120 seconds [ 251.270256][ T24] block nbd4: Possible stuck request ffff888022060200: control (read@1024,3072B). Runtime 120 seconds [ 251.792612][ T5774] Bluetooth: hci1: command 0x0406 tx timeout [ 252.147083][ T6826] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 253.781074][ T5844] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 253.907201][ T6840] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 253.989836][ T5844] usb 1-1: Using ep0 maxpacket: 16 [ 254.032374][ T5844] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 254.069262][ T5844] usb 1-1: config 0 has no interface number 0 [ 254.090170][ T55] block nbd0: Possible stuck request ffff888021ef8000: control (read@0,4096B). Runtime 150 seconds [ 254.105260][ T5844] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 254.134200][ T5844] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 254.151343][ T5844] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 254.160994][ T5844] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.171361][ T5844] usb 1-1: Product: syz [ 254.175602][ T5844] usb 1-1: Manufacturer: syz [ 254.180788][ T5844] usb 1-1: SerialNumber: syz [ 254.192634][ T5844] usb 1-1: config 0 descriptor?? [ 254.204783][ T6832] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 254.222396][ T6832] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 254.476899][ T6832] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 254.485759][ T6832] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 254.499781][ T175] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 254.709965][ T175] usb 2-1: Using ep0 maxpacket: 8 [ 254.721335][ T5844] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 254.733723][ T175] usb 2-1: config 0 interface 0 has no altsetting 0 [ 254.741079][ T175] usb 2-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 254.751179][ T175] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.766116][ T175] usb 2-1: config 0 descriptor?? [ 255.248971][ T175] logitech 0003:046D:C293.0001: unknown global tag 0xc [ 255.257407][ T175] logitech 0003:046D:C293.0001: item 0 0 1 12 parsing failed [ 255.272741][ T175] logitech 0003:046D:C293.0001: parse failed [ 255.297274][ T175] logitech: probe of 0003:046D:C293.0001 failed with error -22 [ 255.424197][ T5816] usb 2-1: USB disconnect, device number 3 [ 256.063027][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.076474][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.331573][ T5774] Bluetooth: hci4: command 0x1003 tx timeout [ 256.339059][ T5084] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 258.000895][ T5844] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 258.069003][ T5844] asix: probe of 1-1:0.34 failed with error -71 [ 258.111503][ T5844] usb 1-1: USB disconnect, device number 4 [ 259.219983][ T55] block nbd5: Possible stuck request ffff8880220b0000: control (read@0,4096B). Runtime 120 seconds [ 261.936278][ T59] Bluetooth: hci4: Frame reassembly failed (-84) [ 262.208022][ T6904] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 262.730091][ T5844] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 263.961658][ T55] block nbd1: Possible stuck request ffff888021f20000: control (read@0,4096B). Runtime 150 seconds [ 264.009937][ T5084] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 264.031942][ T5844] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 264.044954][ T5844] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 264.061558][ T5844] usb 1-1: New USB device found, idVendor=04dd, idProduct=8005, bcdDevice= 0.00 [ 264.072078][ T5844] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.081204][ T5844] usb 1-1: Product: syz [ 264.085594][ T5844] usb 1-1: Manufacturer: syz [ 264.090478][ T5844] usb 1-1: SerialNumber: syz [ 264.101191][ T6910] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 264.139970][ T6910] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 264.460202][ T6910] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 264.559145][ T6910] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 265.161330][ T5844] zaurus 1-1:1.0 usb0: register 'zaurus' at usb-dummy_hcd.0-1, pseudo-MDLM (BLAN) device, 5e:85:dd:40:b2:2d [ 265.245834][ T5844] usb 1-1: USB disconnect, device number 5 [ 265.295754][ T5844] zaurus 1-1:1.0 usb0: unregister 'zaurus' usb-dummy_hcd.0-1, pseudo-MDLM (BLAN) device [ 265.539837][ T28] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 265.739831][ T28] usb 3-1: Using ep0 maxpacket: 32 [ 265.754882][ T28] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 265.779799][ T28] usb 3-1: config 0 has no interface number 0 [ 265.798812][ T28] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 265.821941][ T28] usb 3-1: config 0 interface 196 has no altsetting 0 [ 265.841960][ T28] usb 3-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 265.860620][ T28] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.868715][ T28] usb 3-1: Product: syz [ 265.889893][ T28] usb 3-1: Manufacturer: syz [ 265.894682][ T28] usb 3-1: SerialNumber: syz [ 265.936296][ T28] usb 3-1: config 0 descriptor?? [ 265.952967][ T6935] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 265.968527][ T6926] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 268.240576][ T28] ipheth 3-1:0.196: ipheth_get_macaddr: usb_control_msg: -110 [ 268.250341][ T28] ipheth: probe of 3-1:0.196 failed with error -110 [ 268.378847][ T28] usb 3-1: USB disconnect, device number 8 [ 268.841880][ T55] block nbd2: Possible stuck request ffff888021f70000: control (read@0,1024B). Runtime 150 seconds [ 268.853373][ T55] block nbd2: Possible stuck request ffff888021f70200: control (read@1024,1024B). Runtime 150 seconds [ 268.870505][ T55] block nbd2: Possible stuck request ffff888021f70400: control (read@2048,1024B). Runtime 150 seconds [ 268.884736][ T55] block nbd2: Possible stuck request ffff888021f70600: control (read@3072,1024B). Runtime 150 seconds [ 269.668897][ T6965] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 274.780602][ T6992] capability: warning: `syz.3.320' uses deprecated v2 capabilities in a way that may be insecure [ 275.111297][ T5839] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 275.314302][ T5839] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 275.638644][ T7002] syzkaller1: entered promiscuous mode [ 275.683896][ T7002] syzkaller1: entered allmulticast mode [ 276.137068][ T5839] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 276.147933][ T5839] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 276.157150][ T5839] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 276.168404][ T5839] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 276.184117][ T5839] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 276.194087][ T5839] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 276.202404][ T5839] usb 4-1: Product: syz [ 276.206807][ T5839] usb 4-1: Manufacturer: syz [ 276.235037][ T5839] cdc_wdm 4-1:1.0: skipping garbage [ 276.240566][ T5839] cdc_wdm 4-1:1.0: skipping garbage [ 276.248359][ T5839] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 276.256391][ T5839] cdc_wdm 4-1:1.0: Unknown control protocol [ 276.347134][ T7005] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 277.888117][ T5774] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 277.894736][ T5084] Bluetooth: hci4: command 0x1003 tx timeout [ 277.906934][ T5816] usb 4-1: USB disconnect, device number 3 [ 279.858166][ T7038] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 279.900846][ T7038] o2cb: This node has not been configured. [ 279.917210][ T7038] o2cb: Cluster check failed. Fix errors before retrying. [ 279.947833][ T7038] (syz.1.336,7038,0):user_dlm_register:674 ERROR: status = -22 [ 279.974505][ T7038] (syz.1.336,7038,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "mydev" [ 280.341767][ T24] block nbd3: Possible stuck request ffff888022020000: control (read@0,4096B). Runtime 150 seconds [ 280.729735][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 281.500927][ T7068] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 281.515670][ T7068] overlayfs: missing 'lowerdir' [ 281.681391][ T24] block nbd4: Possible stuck request ffff888022060000: control (read@0,1024B). Runtime 150 seconds [ 281.692755][ T24] block nbd4: Possible stuck request ffff888022060200: control (read@1024,3072B). Runtime 150 seconds [ 282.436466][ T7073] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 282.450797][ T7073] o2cb: This node has not been configured. [ 282.467093][ T7073] o2cb: Cluster check failed. Fix errors before retrying. [ 282.479916][ T5839] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 282.489804][ T7073] (syz.2.347,7073,1):user_dlm_register:674 ERROR: status = -22 [ 282.497445][ T7073] (syz.2.347,7073,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "mydev" [ 282.689838][ T5839] usb 1-1: Using ep0 maxpacket: 8 [ 282.698701][ T5839] usb 1-1: unable to get BOS descriptor or descriptor too short [ 282.712432][ T5839] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 282.743005][ T5839] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 282.769710][ T5839] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 282.786859][ T5839] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 282.797183][ T5839] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 282.819261][ T5839] usb 1-1: string descriptor 0 read error: -22 [ 282.829422][ T5839] usb 1-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 282.850012][ T5839] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.856464][ T7086] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 282.866899][ T5839] usb 1-1: config 0 descriptor?? [ 282.880630][ T7072] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 282.900805][ T5839] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 282.915737][ T7086] o2cb: This node has not been configured. [ 282.931594][ T7086] o2cb: Cluster check failed. Fix errors before retrying. [ 282.943489][ T7086] (syz.1.360,7086,0):user_dlm_register:674 ERROR: status = -22 [ 282.951995][ T7086] (syz.1.360,7086,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "mydev" [ 283.138421][ T6095] udevd[6095]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 283.538292][ T5839] usb 1-1: USB disconnect, device number 6 [ 284.171612][ T55] block nbd0: Possible stuck request ffff888021ef8000: control (read@0,4096B). Runtime 180 seconds [ 285.300385][ T7114] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 285.392054][ T7114] o2cb: This node has not been configured. [ 285.470820][ T7114] o2cb: Cluster check failed. Fix errors before retrying. [ 285.663052][ T7114] (syz.2.364,7114,1):user_dlm_register:674 ERROR: status = -22 [ 285.769980][ T7114] (syz.2.364,7114,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "mydev" [ 287.927968][ T7135] syzkaller1: entered promiscuous mode [ 287.946775][ T7135] syzkaller1: entered allmulticast mode [ 288.460265][ T7141] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 289.290063][ T10] block nbd5: Possible stuck request ffff8880220b0000: control (read@0,4096B). Runtime 150 seconds [ 289.653608][ T7146] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 289.695774][ T7146] o2cb: This node has not been configured. [ 289.727394][ T7149] unsupported nla_type 35 [ 289.732333][ T7146] o2cb: Cluster check failed. Fix errors before retrying. [ 289.757134][ T7146] (syz.0.378,7146,0):user_dlm_register:674 ERROR: status = -22 [ 290.607767][ T7146] (syz.0.378,7146,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "mydev" [ 291.561082][ T7167] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 291.579998][ T7167] overlayfs: overlapping lowerdir path [ 291.620097][ T175] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 291.759904][ T5774] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 291.882666][ T175] usb 1-1: config 1 interface 0 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 292.689815][ T175] usb 1-1: New USB device found, idVendor=174c, idProduct=56aa, bcdDevice= 1.00 [ 292.698975][ T175] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.707513][ T175] usb 1-1: Product: syz [ 292.712331][ T175] usb 1-1: Manufacturer: syz [ 292.716998][ T175] usb 1-1: SerialNumber: syz [ 294.393820][ T175] scsi host1: uas [ 294.414231][ T55] block nbd1: Possible stuck request ffff888021f20000: control (read@0,4096B). Runtime 180 seconds [ 294.598137][ T1132] scsi 1:0:0:0: tag#16 sense submit err -2 uas-tag 1 inflight: s-st a-in a-cmd s-cmd [ 294.608186][ T1132] scsi 1:0:0:0: tag#16 CDB: Inquiry 12 00 00 00 24 00 [ 294.696579][ T175] usb 1-1: USB disconnect, device number 7 [ 295.098844][ T7190] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 295.125489][ T7190] o2cb: This node has not been configured. [ 295.133314][ T7190] o2cb: Cluster check failed. Fix errors before retrying. [ 295.154796][ T7190] (syz.0.391,7190,0):user_dlm_register:674 ERROR: status = -22 [ 295.169890][ T7190] (syz.0.391,7190,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "mydev" [ 296.110408][ T5774] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 297.847094][ T7220] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 298.387305][ T27] audit: type=1800 audit(1787381797.450:2): pid=7234 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.404" name="c_srate" dev="configfs" ino=13491 res=0 errno=0 [ 298.691314][ T5774] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 299.761027][ T55] block nbd2: Possible stuck request ffff888021f70000: control (read@0,1024B). Runtime 180 seconds [ 299.771985][ T55] block nbd2: Possible stuck request ffff888021f70200: control (read@1024,1024B). Runtime 180 seconds [ 299.783373][ T55] block nbd2: Possible stuck request ffff888021f70400: control (read@2048,1024B). Runtime 180 seconds [ 299.812524][ T55] block nbd2: Possible stuck request ffff888021f70600: control (read@3072,1024B). Runtime 180 seconds [ 299.932648][ T7253] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 302.502615][ T7283] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 302.550983][ T5774] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 303.619131][ T7297] kvm: pic: non byte write [ 304.179870][ T7307] netlink: 24 bytes leftover after parsing attributes in process `syz.2.428'. [ 305.130198][ T5774] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 305.791711][ T27] audit: type=1800 audit(1787381804.860:3): pid=7317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.433" name="c_srate" dev="configfs" ino=12932 res=0 errno=0 [ 306.215268][ T7319] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 306.773086][ T5774] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 309.990578][ T7355] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 310.167029][ T51] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 310.428774][ T24] block nbd3: Possible stuck request ffff888022020000: control (read@0,4096B). Runtime 180 seconds [ 311.450014][ T5774] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 312.781401][ T1176] block nbd4: Possible stuck request ffff888022060000: control (read@0,1024B). Runtime 180 seconds [ 312.792595][ T1176] block nbd4: Possible stuck request ffff888022060200: control (read@1024,3072B). Runtime 180 seconds [ 312.974854][ T7377] netlink: 'syz.2.453': attribute type 32 has an invalid length. [ 313.369276][ T7380] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 313.828088][ T5774] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 314.251823][ T10] block nbd0: Possible stuck request ffff888021ef8000: control (read@0,4096B). Runtime 210 seconds [ 315.879944][ T5816] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 316.083407][ T5816] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 316.182180][ T5816] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 316.218122][ T5816] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 316.258433][ T5816] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.296509][ T5816] usb 2-1: config 0 descriptor?? [ 316.497027][ T7415] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 316.530696][ T7415] o2cb: This node has not been configured. [ 316.572321][ T7415] o2cb: Cluster check failed. Fix errors before retrying. [ 316.602096][ T7415] (syz.2.465,7415,1):user_dlm_register:674 ERROR: status = -22 [ 316.630370][ T7415] (syz.2.465,7415,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "mydev" [ 316.776895][ T5816] usbhid 2-1:0.0: can't add hid device: -71 [ 316.814159][ T5816] usbhid: probe of 2-1:0.0 failed with error -71 [ 316.862959][ T5816] usb 2-1: USB disconnect, device number 4 [ 317.456212][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.467367][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.667987][ T5774] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 319.380320][ T55] block nbd5: Possible stuck request ffff8880220b0000: control (read@0,4096B). Runtime 180 seconds [ 320.353450][ T7447] o2cb: This node has not been configured. [ 320.398474][ T7444] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 320.443048][ T7447] o2cb: Cluster check failed. Fix errors before retrying. [ 320.451465][ T7447] (syz.0.477,7447,1):user_dlm_register:674 ERROR: status = -22 [ 320.480142][ T7447] (syz.0.477,7447,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "mydev" [ 320.689817][ T5762] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 320.919945][ T5762] usb 2-1: Using ep0 maxpacket: 16 [ 320.996831][ T5762] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 321.089419][ T5762] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.114302][ T5762] usb 2-1: Product: syz [ 321.118617][ T5762] usb 2-1: Manufacturer: syz [ 321.141425][ T5762] usb 2-1: SerialNumber: syz [ 324.495801][ T55] block nbd1: Possible stuck request ffff888021f20000: control (read@0,4096B). Runtime 210 seconds [ 324.625458][ T5762] snd-usb-audio: probe of 2-1:1.0 failed with error -71 [ 324.655804][ T5762] usb 2-1: USB disconnect, device number 5 [ 326.655672][ T7478] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 326.771439][ T7478] o2cb: This node has not been configured. [ 326.815319][ T7478] o2cb: Cluster check failed. Fix errors before retrying. [ 326.852922][ T7478] (syz.0.487,7478,1):user_dlm_register:674 ERROR: status = -22 [ 326.886004][ T7478] (syz.0.487,7478,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "mydev" [ 328.387959][ T7489] netlink: 'syz.1.492': attribute type 4 has an invalid length. [ 328.451586][ T7489] netlink: 'syz.1.492': attribute type 5 has an invalid length. [ 328.492419][ T7491] futex_wake_op: syz.1.492 tries to shift op by 144; fix this program [ 328.507049][ T7489] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.492'. [ 328.970143][ T5762] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 329.173966][ T5762] usb 1-1: Using ep0 maxpacket: 16 [ 329.183204][ T5762] usb 1-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 329.250125][ T5762] usb 1-1: config 0 interface 0 has no altsetting 0 [ 329.256805][ T5762] usb 1-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 329.301912][ T5762] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.355403][ T5762] usb 1-1: config 0 descriptor?? [ 331.610604][ T5762] holtek 0003:1241:5015.0002: unknown main item tag 0x2 [ 331.611148][ T55] block nbd2: Possible stuck request ffff888021f70000: control (read@0,1024B). Runtime 210 seconds [ 331.639705][ T55] block nbd2: Possible stuck request ffff888021f70200: control (read@1024,1024B). Runtime 210 seconds [ 331.651290][ T55] block nbd2: Possible stuck request ffff888021f70400: control (read@2048,1024B). Runtime 210 seconds [ 331.653207][ T5762] holtek 0003:1241:5015.0002: unknown main item tag 0x1 [ 331.662436][ T55] block nbd2: Possible stuck request ffff888021f70600: control (read@3072,1024B). Runtime 210 seconds [ 331.799856][ T5762] holtek 0003:1241:5015.0002: unknown global tag 0xd [ 331.806609][ T5762] holtek 0003:1241:5015.0002: item 0 2 1 13 parsing failed [ 331.883019][ T5762] holtek 0003:1241:5015.0002: parse failed [ 331.921457][ T5762] holtek: probe of 0003:1241:5015.0002 failed with error -22 [ 331.964349][ T5762] usb 1-1: USB disconnect, device number 8 [ 335.239813][ T28] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 335.479746][ T28] usb 1-1: Using ep0 maxpacket: 16 [ 335.513848][ T28] usb 1-1: too many endpoints for config 0 interface 0 altsetting 255: 255, using maximum allowed: 30 [ 335.539875][ T28] usb 1-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 335.589792][ T28] usb 1-1: config 0 interface 0 has no altsetting 0 [ 335.597724][ T28] usb 1-1: New USB device found, idVendor=6253, idProduct=0100, bcdDevice= 0.00 [ 335.773656][ T28] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.792582][ T28] usb 1-1: config 0 descriptor?? [ 337.784317][ T28] input: HID 6253:0100 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:6253:0100.0003/input/input5 [ 337.949716][ T28] twinhan 0003:6253:0100.0003: input,hidraw0: USB HID v0.02 Joystick [HID 6253:0100] on usb-dummy_hcd.0-1/input0 [ 338.098214][ T28] usb 1-1: USB disconnect, device number 9 [ 338.201550][ T7529] fido_id[7529]: Failed to read report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:6253:0100.0003/report_descriptor': No such device [ 339.119717][ T28] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 339.362649][ T28] usb 2-1: Using ep0 maxpacket: 16 [ 339.373406][ T28] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 339.405157][ T28] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.449943][ T28] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 339.469783][ T5824] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 339.559798][ T28] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 339.579760][ T28] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.603719][ T28] usb 2-1: config 0 descriptor?? [ 339.723340][ T5824] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 339.737605][ T5824] usb 1-1: config 1 interface 0 altsetting 1 endpoint 0x2 has invalid maxpacket 33715, setting to 1024 [ 339.786538][ T5824] usb 1-1: config 1 interface 0 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 1024 [ 339.827595][ T5824] usb 1-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 339.868874][ T5824] usb 1-1: New USB device found, idVendor=174c, idProduct=56aa, bcdDevice= 1.00 [ 339.879911][ T5824] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.888043][ T5824] usb 1-1: Product: syz [ 339.903340][ T5824] usb 1-1: Manufacturer: syz [ 339.908107][ T5824] usb 1-1: SerialNumber: syz [ 339.984854][ T5824] usb-storage 1-1:1.0: USB Mass Storage device detected [ 340.044850][ T28] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 340.055953][ T28] microsoft 0003:045E:07DA.0004: ignoring exceeding usage max [ 340.071155][ T5824] scsi host1: usb-storage 1-1:1.0 [ 340.088305][ T28] microsoft 0003:045E:07DA.0004: unbalanced delimiter at end of report description [ 340.141106][ T28] microsoft 0003:045E:07DA.0004: parse failed [ 340.147352][ T28] microsoft: probe of 0003:045E:07DA.0004 failed with error -22 [ 340.190749][ T28] usb 1-1: USB disconnect, device number 10 [ 340.257356][ T5824] usb 2-1: USB disconnect, device number 6 [ 340.494741][ T1176] block nbd3: Possible stuck request ffff888022020000: control (read@0,4096B). Runtime 210 seconds [ 343.095849][ T1176] block nbd4: Possible stuck request ffff888022060000: control (read@0,1024B). Runtime 210 seconds [ 343.106793][ T1176] block nbd4: Possible stuck request ffff888022060200: control (read@1024,3072B). Runtime 210 seconds [ 345.047517][ T55] block nbd0: Possible stuck request ffff888021ef8000: control (read@0,4096B). Runtime 240 seconds [ 345.890299][ T7563] netlink: 36 bytes leftover after parsing attributes in process `syz.3.519'. [ 349.450091][ T55] block nbd5: Possible stuck request ffff8880220b0000: control (read@0,4096B). Runtime 210 seconds [ 349.470192][ T7584] binder: BINDER_SET_CONTEXT_MGR already set [ 349.476722][ T7584] binder: 7583:7584 ioctl 4018620d 2000000003c0 returned -16 [ 356.149937][ T55] block nbd1: Possible stuck request ffff888021f20000: control (read@0,4096B). Runtime 240 seconds [ 356.783251][ T7646] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 356.810231][ T5816] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 357.005369][ T5816] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 357.034959][ T5816] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 357.053120][ T5816] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 357.064401][ T5816] usb 1-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 357.085749][ T5816] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.120920][ T5816] usb 1-1: config 0 descriptor?? [ 359.414601][ T5816] hid-picolcd 0003:04D8:F002.0005: item fetching failed at offset 1/5 [ 359.449019][ T5816] hid-picolcd 0003:04D8:F002.0005: device report parse failed [ 359.480342][ T5816] hid-picolcd: probe of 0003:04D8:F002.0005 failed with error -22 [ 359.609934][ T9] usb 1-1: USB disconnect, device number 11 [ 359.873870][ T7669] netlink: 'syz.3.557': attribute type 32 has an invalid length. [ 362.612388][ T55] block nbd2: Possible stuck request ffff888021f70000: control (read@0,1024B). Runtime 240 seconds [ 362.626201][ T55] block nbd2: Possible stuck request ffff888021f70200: control (read@1024,1024B). Runtime 240 seconds [ 362.639629][ T55] block nbd2: Possible stuck request ffff888021f70400: control (read@2048,1024B). Runtime 240 seconds [ 362.653989][ T55] block nbd2: Possible stuck request ffff888021f70600: control (read@3072,1024B). Runtime 240 seconds [ 363.109801][ T7708] input: syz1 as /devices/virtual/input/input6 [ 366.429358][ T5774] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 369.104459][ T7744] o2cb: This node has not been configured. [ 369.137268][ T7744] o2cb: Cluster check failed. Fix errors before retrying. [ 369.147195][ T7744] (syz.3.583,7744,0):user_dlm_register:674 ERROR: status = -22 [ 369.176947][ T7744] (syz.3.583,7744,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "mydev" [ 370.376163][ T5839] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 370.764592][ T5839] usb 4-1: Using ep0 maxpacket: 32 [ 370.809128][ T5839] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 370.832466][ T5839] usb 4-1: config 0 has no interface number 0 [ 370.858756][ T5839] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 370.901085][ T5839] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.036389][ T5839] usb 4-1: Product: syz [ 371.081544][ T5839] usb 4-1: Manufacturer: syz [ 371.119223][ T5839] usb 4-1: SerialNumber: syz [ 371.521320][ T1176] block nbd3: Possible stuck request ffff888022020000: control (read@0,4096B). Runtime 240 seconds [ 371.553719][ T5839] usb 4-1: config 0 descriptor?? [ 371.562205][ T5839] smsc95xx v2.0.0 [ 372.249740][ T5839] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 372.309259][ T5839] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 372.347146][ T5839] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 372.394397][ T5839] smsc95xx: probe of 4-1:0.67 failed with error -71 [ 372.446240][ T5839] usb 4-1: USB disconnect, device number 4 [ 373.076038][ T7778] o2cb: This node has not been configured. [ 373.104202][ T7778] o2cb: Cluster check failed. Fix errors before retrying. [ 373.120369][ T7778] (syz.3.595,7778,0):user_dlm_register:674 ERROR: status = -22 [ 373.162577][ T7778] (syz.3.595,7778,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "mydev" [ 373.771382][ T7794] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 373.958426][ T1176] block nbd4: Possible stuck request ffff888022060000: control (read@0,1024B). Runtime 240 seconds [ 373.969393][ T1176] block nbd4: Possible stuck request ffff888022060200: control (read@1024,3072B). Runtime 240 seconds [ 374.472880][ T5824] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 374.689526][ T5824] usb 1-1: Using ep0 maxpacket: 8 [ 374.708637][ T5824] usb 1-1: config 1 has an invalid interface number: 158 but max is 0 [ 374.749093][ T5824] usb 1-1: config 1 has no interface number 0 [ 374.805549][ T5824] usb 1-1: config 1 interface 158 has no altsetting 0 [ 374.846144][ T5824] usb 1-1: New USB device found, idVendor=19d2, idProduct=b062, bcdDevice=6c.13 [ 374.855725][ T5824] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.871464][ T5824] usb 1-1: Product: syz [ 374.875847][ T5824] usb 1-1: Manufacturer: syz [ 374.881904][ T5824] usb 1-1: SerialNumber: syz [ 375.136143][ T5824] usb 1-1: bad CDC descriptors [ 375.165090][ T5824] usb 1-1: USB disconnect, device number 12 [ 376.991774][ T55] block nbd0: Possible stuck request ffff888021ef8000: control (read@0,4096B). Runtime 270 seconds [ 380.179615][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 380.191763][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.856762][ T55] block nbd5: Possible stuck request ffff8880220b0000: control (read@0,4096B). Runtime 240 seconds [ 386.237378][ T27] audit: type=1326 audit(1787382663.720:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7911 comm="syz.2.637" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa75c99e0d9 code=0x0 [ 388.486224][ T55] block nbd1: Possible stuck request ffff888021f20000: control (read@0,4096B). Runtime 270 seconds [ 388.674320][ T7925] overlayfs: failed to resolve 'work': -2 [ 393.321767][ T7958] overlayfs: failed to resolve 'work': -2 [ 393.482113][ T27] audit: type=1326 audit(1787382670.400:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7956 comm="syz.0.653" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcff899e0d9 code=0x0 [ 395.953365][ T55] block nbd2: Possible stuck request ffff888021f70000: control (read@0,1024B). Runtime 270 seconds [ 395.964398][ T55] block nbd2: Possible stuck request ffff888021f70200: control (read@1024,1024B). Runtime 270 seconds [ 395.976225][ T55] block nbd2: Possible stuck request ffff888021f70400: control (read@2048,1024B). Runtime 270 seconds [ 395.987496][ T55] block nbd2: Possible stuck request ffff888021f70600: control (read@3072,1024B). Runtime 270 seconds [ 399.510801][ T7989] overlayfs: failed to resolve 'work': -2 [ 401.477193][ T27] audit: type=1326 audit(1787382677.782:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7993 comm="syz.3.664" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8a0bf9e0d9 code=0x0 [ 402.599433][ T8017] overlayfs: failed to resolve 'upper': -2 [ 404.320445][ T5774] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 404.515580][ T8028] block nbd3: Possible stuck request ffff888022020000: control (read@0,4096B). Runtime 270 seconds [ 406.530896][ T8028] block nbd4: Possible stuck request ffff888022060000: control (read@0,1024B). Runtime 270 seconds [ 406.541907][ T8028] block nbd4: Possible stuck request ffff888022060200: control (read@1024,3072B). Runtime 270 seconds [ 406.602185][ T8048] syzkaller1: entered promiscuous mode [ 406.618417][ T8048] syzkaller1: entered allmulticast mode [ 406.652033][ T8053] overlayfs: failed to resolve 'upper': -2 [ 406.667581][ T27] audit: type=1326 audit(1787382682.571:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8049 comm="syz.1.679" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff75cb9e0d9 code=0x0 [ 409.026206][ T5774] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 410.140097][ T55] block nbd0: Possible stuck request ffff888021ef8000: control (read@0,4096B). Runtime 300 seconds [ 411.669498][ T8089] overlayfs: failed to resolve 'upper': -2 [ 411.974340][ T8096] tmpfs: Unknown parameter 'grpquota_block_har' [ 413.848842][ T55] block nbd5: Possible stuck request ffff8880220b0000: control (read@0,4096B). Runtime 270 seconds [ 413.911594][ T5774] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 414.768913][ T8117] overlayfs: failed to resolve 'lower': -2 [ 415.121108][ T8123] tmpfs: Unknown parameter 'grpquota_block_hardlim' [ 415.549244][ T27] audit: type=1326 audit(1787382690.774:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8126 comm="syz.1.709" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff75cb9e0d9 code=0x0 [ 415.674550][ T8133] usb usb9: usbfs: process 8133 (syz.3.710) did not claim interface 0 before use [ 416.137283][ T5774] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 417.786809][ T8148] overlayfs: failed to resolve 'lower': -2 [ 418.214128][ T8158] tmpfs: Unknown parameter 'grpquota_block_hardlim' [ 418.802947][ T175] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 418.823750][ T8163] kvm: kvm [8162]: vcpu2, guest rIP: 0x9134 Unhandled WRMSR(0x11e) = 0xbe702111 [ 419.041241][ T175] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 419.960916][ T175] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 419.977584][ T175] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.000954][ T175] usb 2-1: config 0 descriptor?? [ 420.612259][ T175] keytouch 0003:0926:3333.0006: fixing up Keytouch IEC report descriptor [ 420.649763][ T175] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0006/input/input8 [ 420.901372][ T175] keytouch 0003:0926:3333.0006: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 421.086553][ T55] block nbd1: Possible stuck request ffff888021f20000: control (read@0,4096B). Runtime 300 seconds [ 421.109547][ T175] usb 2-1: USB disconnect, device number 7 [ 421.438445][ T8173] fido_id[8173]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 422.059127][ T27] audit: type=1326 audit(1787382696.771:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8187 comm="syz.0.721" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcff899e0d9 code=0x0 [ 422.158910][ T5816] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 422.379551][ T5816] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 422.391307][ T5816] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 422.401011][ T5816] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.412964][ T5816] usb 4-1: config 0 descriptor?? [ 422.880192][ T5816] keytouch 0003:0926:3333.0007: fixing up Keytouch IEC report descriptor [ 422.919340][ T5816] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0007/input/input9 [ 423.090490][ T5816] keytouch 0003:0926:3333.0007: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 424.680017][ T8204] futex_wake_op: syz.0.731 tries to shift op by 144; fix this program [ 426.138376][ T5816] usb 4-1: USB disconnect, device number 5 [ 426.208605][ T5781] cgroup: fork rejected by pids controller in /syz1 [ 426.586715][ T27] audit: type=1326 audit(1787382700.951:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8219 comm="syz.0.739" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcff899e0d9 code=0x0 [ 428.266875][ T8238] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 428.676390][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 428.688294][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 428.697786][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 428.707966][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 428.717723][ T8253] overlayfs: failed to resolve 'lower': -2 [ 428.722781][ T10] block nbd2: Possible stuck request ffff888021f70000: control (read@0,1024B). Runtime 300 seconds [ 428.723659][ T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 428.734819][ T10] block nbd2: Possible stuck request ffff888021f70200: control (read@1024,1024B). Runtime 300 seconds [ 428.753894][ T10] block nbd2: Possible stuck request ffff888021f70400: control (read@2048,1024B). Runtime 300 seconds [ 428.754886][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 428.765130][ T10] block nbd2: Possible stuck request ffff888021f70600: control (read@3072,1024B). Runtime 300 seconds [ 429.062509][ T27] audit: type=1326 audit(1787382703.230:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8257 comm="syz.2.754" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa75c99e0d9 code=0x0 [ 429.135897][ T8250] chnl_net:caif_netlink_parms(): no params data found [ 429.222635][ T8250] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.230043][ T8250] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.237814][ T8250] bridge_slave_0: entered allmulticast mode [ 429.245373][ T8250] bridge_slave_0: entered promiscuous mode [ 429.254581][ T8250] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.263691][ T8250] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.272208][ T8250] bridge_slave_1: entered allmulticast mode [ 429.280633][ T8250] bridge_slave_1: entered promiscuous mode [ 429.332080][ T8250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 429.344303][ T5762] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 429.370157][ T8250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 429.439128][ T8250] team0: Port device team_slave_0 added [ 429.450090][ T8250] team0: Port device team_slave_1 added [ 429.514592][ T8250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 429.525927][ T8250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 429.561392][ T8250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 429.582783][ T5762] usb 4-1: Using ep0 maxpacket: 32 [ 429.589476][ T8250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 429.596861][ T8250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 429.610904][ T5762] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 429.624813][ T8250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 429.633945][ T5762] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 429.668124][ T5762] usb 4-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 429.681766][ T5762] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.690068][ T5762] usb 4-1: Product: syz [ 429.699483][ T5762] usb 4-1: Manufacturer: syz [ 429.706241][ T5762] usb 4-1: SerialNumber: syz [ 429.748307][ T8272] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 429.902008][ T8250] hsr_slave_0: entered promiscuous mode [ 429.923791][ T8250] hsr_slave_1: entered promiscuous mode [ 429.934428][ T8250] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 429.946078][ T8250] Cannot create hsr debugfs directory [ 430.007802][ T5762] usb 4-1: failed waiting for Axe-Fx III to boot: -71 [ 430.014689][ T5762] snd-usb-audio: probe of 4-1:1.0 failed with error -71 [ 430.075275][ T5762] usb 4-1: USB disconnect, device number 6 [ 430.175132][ T8276] overlayfs: statfs failed on './file0' [ 430.367172][ T8250] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.510245][ T8286] overlayfs: failed to resolve 'upper': -2 [ 430.543873][ T8250] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.790548][ T8250] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.923012][ T8295] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 430.973418][ T8250] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.039946][ T27] audit: type=1326 audit(1787382705.066:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8296 comm="syz.2.767" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa75c99e0d9 code=0x0 [ 431.066773][ T8300] usb usb7: usbfs: process 8300 (syz.0.768) did not claim interface 0 before use [ 431.076426][ T51] Bluetooth: hci2: command tx timeout [ 431.257183][ T8250] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 431.268637][ T8250] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 431.288548][ T8250] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 431.304443][ T8250] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 431.478962][ T8250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 431.515992][ T8250] 8021q: adding VLAN 0 to HW filter on device team0 [ 431.544910][ T6305] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.553279][ T6305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 431.580768][ T6305] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.588141][ T6305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 432.060723][ T8313] overlayfs: failed to resolve 'upper': -2 [ 432.075501][ T175] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 432.165464][ T8250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 432.277489][ T8250] veth0_vlan: entered promiscuous mode [ 432.301923][ T8250] veth1_vlan: entered promiscuous mode [ 432.314272][ T175] usb 4-1: Using ep0 maxpacket: 32 [ 432.343735][ T8250] veth0_macvtap: entered promiscuous mode [ 432.348657][ T175] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 432.375593][ T175] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 432.387328][ T175] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 432.396219][ T8250] veth1_macvtap: entered promiscuous mode [ 432.399625][ T175] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.423524][ T175] usb 4-1: config 0 descriptor?? [ 432.452540][ T175] hub 4-1:0.0: USB hub found [ 432.474803][ T8250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 432.494928][ T8250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.505630][ T8250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 432.516772][ T8250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.526876][ T8250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 432.537765][ T8250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.558667][ T8250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 432.570340][ T8250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.581050][ T5816] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 432.591467][ T8250] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 432.614650][ T8250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 432.625577][ T8250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.637352][ T8250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 432.652848][ T8250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.676735][ T8250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 432.692665][ T175] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 432.711144][ T8250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.803092][ T8250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 432.814198][ T8250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.827070][ T8250] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 432.933084][ T5816] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 432.975996][ T5816] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 432.987458][ T5816] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 432.997734][ T5816] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 433.036472][ T8250] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.070334][ T8250] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.164506][ T5816] usb 3-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 433.187390][ T5816] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.195810][ T5816] usb 3-1: Product: syz [ 433.195840][ T8250] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.200213][ T5816] usb 3-1: Manufacturer: syz [ 433.215132][ T5816] usb 3-1: SerialNumber: syz [ 433.221400][ T175] hid-generic 0003:046D:C31C.0008: unknown main item tag 0x0 [ 433.240130][ T8250] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.251990][ T5816] usbserial_generic 3-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 433.269129][ T5816] usbserial_generic 3-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 433.283514][ T5816] usbserial_generic 3-1:1.0: generic converter detected [ 433.295244][ T5816] usb 3-1: generic converter now attached to ttyUSB0 [ 433.311384][ T51] Bluetooth: hci2: command tx timeout [ 433.393907][ T175] hid-generic 0003:046D:C31C.0008: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.3-1/input0 [ 433.459597][ T5816] usb 4-1: USB disconnect, device number 7 [ 433.566244][ T175] usb 3-1: USB disconnect, device number 9 [ 433.609995][ T175] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 433.631649][ T8322] fido_id[8322]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 433.646927][ T175] usbserial_generic 3-1:1.0: device disconnected [ 433.689217][ T6305] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.705958][ T6305] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.786308][ T1132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.797523][ T1132] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 435.076907][ T8331] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 435.230379][ T5816] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 435.392436][ T8335] overlayfs: failed to resolve 'upper': -2 [ 435.533774][ T27] audit: type=1326 audit(1787382709.209:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8337 comm="syz.2.779" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa75c99e0d9 code=0x0 [ 435.565557][ T51] Bluetooth: hci2: command tx timeout [ 436.159882][ T8349] kvm: pic: non byte write [ 437.982529][ T51] Bluetooth: hci2: command tx timeout [ 438.080843][ T1176] block nbd3: Possible stuck request ffff888022020000: control (read@0,4096B). Runtime 300 seconds [ 438.253342][ T5824] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 440.054578][ T1176] block nbd4: Possible stuck request ffff888022060000: control (read@0,1024B). Runtime 300 seconds [ 440.065735][ T1176] block nbd4: Possible stuck request ffff888022060200: control (read@1024,3072B). Runtime 300 seconds [ 440.129109][ T5824] usb 4-1: device descriptor read/all, error -71 [ 441.740183][ T8404] binder: BINDER_SET_CONTEXT_MGR already set [ 441.758934][ T8404] binder: 8403:8404 ioctl 40046207 0 returned -16 [ 443.281984][ T10] block nbd0: Possible stuck request ffff888021ef8000: control (read@0,4096B). Runtime 330 seconds [ 444.594165][ T8435] futex_wake_op: syz.2.813 tries to shift op by 144; fix this program [ 446.752111][ T10] block nbd5: Possible stuck request ffff8880220b0000: control (read@0,4096B). Runtime 300 seconds [ 446.763202][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 446.769575][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 449.004148][ T51] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 449.903067][ T8476] netlink: 165 bytes leftover after parsing attributes in process `syz.3.830'. [ 452.593711][ T8504] Bluetooth: hci4: Frame reassembly failed (-84) [ 452.600959][ T1006] Bluetooth: hci4: Frame reassembly failed (-84) [ 453.021752][ T8516] binder: 8515:8516 ioctl c0306201 200000000080 returned -14 [ 453.089211][ T8518] netlink: 'syz.2.843': attribute type 27 has an invalid length. [ 453.155147][ T8518] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 453.535284][ T51] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 453.757949][ T8488] block nbd1: Possible stuck request ffff888021f20000: control (read@0,4096B). Runtime 330 seconds [ 455.821976][ T5774] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 457.111083][ T5824] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 457.327487][ T5824] usb 4-1: Using ep0 maxpacket: 32 [ 457.365423][ T5824] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 457.387095][ T5824] usb 4-1: config 0 has no interfaces? [ 457.398137][ T5824] usb 4-1: New USB device found, idVendor=046d, idProduct=c08a, bcdDevice= 0.00 [ 457.424851][ T5824] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.457548][ T5824] usb 4-1: config 0 descriptor?? [ 457.687558][ T5824] usb 4-1: USB disconnect, device number 11 [ 457.969561][ T8559] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 459.852570][ T5816] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 459.959343][ T8574] overlayfs: workdir and upperdir must reside under the same mount [ 460.096456][ T5816] usb 1-1: unable to get BOS descriptor or descriptor too short [ 460.127202][ T5816] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 460.149640][ T5816] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 460.191063][ T5816] usb 1-1: string descriptor 0 read error: -22 [ 460.197455][ T5816] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 460.218202][ T5816] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.250031][ T5816] usb 1-1: selecting invalid altsetting 1 [ 460.292353][ T5816] usb 1-1: unit 3 not found! [ 460.475977][ T5816] usb 1-1: cannot request logical cluster ID: 0 (err: -5) [ 460.502726][ T5816] usb 1-1: invalid MIXER UNIT descriptor 6 [ 460.574656][ T5816] snd-usb-audio: probe of 1-1:1.0 failed with error -5 [ 460.707211][ T5816] usb 1-1: USB disconnect, device number 13 [ 461.509886][ T10] block nbd2: Possible stuck request ffff888021f70000: control (read@0,1024B). Runtime 330 seconds [ 461.520950][ T10] block nbd2: Possible stuck request ffff888021f70200: control (read@1024,1024B). Runtime 330 seconds [ 461.532358][ T10] block nbd2: Possible stuck request ffff888021f70400: control (read@2048,1024B). Runtime 330 seconds [ 461.543502][ T10] block nbd2: Possible stuck request ffff888021f70600: control (read@3072,1024B). Runtime 330 seconds [ 461.616989][ T8592] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 462.030868][ T175] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 462.270858][ T175] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 462.299688][ T175] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 462.338318][ T175] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 462.392223][ T175] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 462.424900][ T175] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.461989][ T175] usb 4-1: config 0 descriptor?? [ 464.556903][ T175] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 464.642398][ T175] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 464.992791][ T9] usb 4-1: USB disconnect, device number 12 [ 469.825678][ T8661] overlayfs: missing 'lowerdir' [ 471.096257][ T1176] block nbd3: Possible stuck request ffff888022020000: control (read@0,4096B). Runtime 330 seconds [ 472.113121][ T8699] overlayfs: missing 'lowerdir' [ 473.113909][ T1176] block nbd4: Possible stuck request ffff888022060000: control (read@0,1024B). Runtime 330 seconds [ 473.124916][ T1176] block nbd4: Possible stuck request ffff888022060200: control (read@1024,3072B). Runtime 330 seconds [ 473.748661][ T8723] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 474.200756][ T8727] overlayfs: missing 'lowerdir' [ 474.656957][ T5762] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 474.928191][ T5762] usb 4-1: Using ep0 maxpacket: 32 [ 474.984582][ T5762] usb 4-1: unable to get BOS descriptor or descriptor too short [ 475.025799][ T5762] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 73, changing to 7 [ 475.066495][ T5762] usb 4-1: New USB device found, idVendor=0582, idProduct=0016, bcdDevice= 0.40 [ 475.091457][ T5762] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.099688][ T5762] usb 4-1: Product: syz [ 475.116866][ T5762] usb 4-1: Manufacturer: syz [ 475.122273][ T5762] usb 4-1: SerialNumber: syz [ 475.496147][ T5762] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 475.714652][ T5762] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 475.727080][ T5762] snd-usb-audio: probe of 4-1:1.0 failed with error -2 [ 475.801183][ T5762] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 475.810065][ T5762] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 475.819035][ T5762] snd-usb-audio: probe of 4-1:1.1 failed with error -2 [ 475.853548][ T5762] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 475.885327][ T5762] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 475.894529][ T10] block nbd0: Possible stuck request ffff888021ef8000: control (read@0,4096B). Runtime 360 seconds [ 475.977643][ T5762] snd-usb-audio: probe of 4-1:1.2 failed with error -2 [ 476.046009][ T5762] usb 4-1: USB disconnect, device number 13 [ 476.095159][ T5976] udevd[5976]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 477.913528][ T5824] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 478.288567][ T5824] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 478.329587][ T5824] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 478.363410][ T5824] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 478.428395][ T5824] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 478.471906][ T5824] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.511886][ T5824] usb 2-1: config 0 descriptor?? [ 478.805782][ T8760] overlayfs: missing 'lowerdir' [ 479.098568][ T5824] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 479.133854][ T5824] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 479.393128][ T10] block nbd5: Possible stuck request ffff8880220b0000: control (read@0,4096B). Runtime 330 seconds [ 479.889827][ T5824] usb 2-1: USB disconnect, device number 8 [ 480.312830][ T8766] fido_id[8766]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 483.316268][ T5762] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 483.511582][ T5762] usb 3-1: Using ep0 maxpacket: 32 [ 483.558680][ T5762] usb 3-1: unable to get BOS descriptor or descriptor too short [ 483.600278][ T5762] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 7 [ 483.623691][ T5762] usb 3-1: New USB device found, idVendor=249c, idProduct=931c, bcdDevice= 0.40 [ 483.663201][ T5762] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.671279][ T5762] usb 3-1: Product: syz [ 483.706396][ T5762] usb 3-1: Manufacturer: syz [ 483.712026][ T5762] usb 3-1: SerialNumber: syz [ 483.856321][ T8784] kvm_intel: kvm [8783]: vcpu2, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x5 [ 483.976476][ T5762] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 484.032246][ T5762] usb 3-1: found format II with max.bitrate = 6, frame size=5 [ 484.043534][ T5762] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 484.124056][ T5762] usb 3-1: USB disconnect, device number 10 [ 484.241543][ T5976] udevd[5976]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 484.813735][ T8793] overlayfs: missing 'lowerdir' [ 486.990408][ T10] block nbd1: Possible stuck request ffff888021f20000: control (read@0,4096B). Runtime 360 seconds [ 488.759840][ T8830] overlayfs: missing 'lowerdir' [ 492.070341][ T8864] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 492.179495][ T8864] o2cb: This node has not been configured. [ 492.215654][ T8864] o2cb: Cluster check failed. Fix errors before retrying. [ 492.280254][ T8864] (syz.2.952,8864,0):user_dlm_register:674 ERROR: status = -22 [ 492.334943][ T8864] (syz.2.952,8864,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "mydev" [ 492.539225][ T5839] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 493.950426][ T5839] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 493.960737][ T5839] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 493.972326][ T5839] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 493.987898][ T5839] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 494.001543][ T5839] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 494.011160][ T5839] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.025400][ T5839] usb 4-1: config 0 descriptor?? [ 494.572211][ T5839] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 494.620603][ T10] block nbd2: Possible stuck request ffff888021f70000: control (read@0,1024B). Runtime 360 seconds [ 494.631790][ T10] block nbd2: Possible stuck request ffff888021f70200: control (read@1024,1024B). Runtime 360 seconds [ 494.652174][ T10] block nbd2: Possible stuck request ffff888021f70400: control (read@2048,1024B). Runtime 360 seconds [ 494.671357][ T10] block nbd2: Possible stuck request ffff888021f70600: control (read@3072,1024B). Runtime 360 seconds [ 494.685019][ T5839] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 494.980452][ T5839] usb 4-1: USB disconnect, device number 14 [ 496.072879][ T8890] netlink: 'syz.3.960': attribute type 13 has an invalid length. [ 500.600654][ T8941] netlink: 'syz.0.983': attribute type 1 has an invalid length. [ 503.630157][ T1176] block nbd3: Possible stuck request ffff888022020000: control (read@0,4096B). Runtime 360 seconds [ 503.895904][ T8989] warning: `syz.3.999' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 505.235036][ T9002] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1005'. [ 505.729032][ T1176] block nbd4: Possible stuck request ffff888022060000: control (read@0,1024B). Runtime 360 seconds [ 505.740550][ T1176] block nbd4: Possible stuck request ffff888022060200: control (read@1024,3072B). Runtime 360 seconds [ 506.163383][ T9016] Driver unsupported XDP return value 0 on prog (id 15) dev N/A, expect packet loss! [ 508.505782][ T10] block nbd0: Possible stuck request ffff888021ef8000: control (read@0,4096B). Runtime 390 seconds [ 509.314784][ T9061] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 509.345799][ T9061] o2cb: This node has not been configured. [ 509.363326][ T9061] o2cb: Cluster check failed. Fix errors before retrying. [ 509.399467][ T9065] syzkaller1: entered promiscuous mode [ 509.405752][ T9061] (syz.3.1030,9061,1):user_dlm_register:674 ERROR: status = -22 [ 509.424540][ T9065] syzkaller1: entered allmulticast mode [ 509.452808][ T9061] (syz.3.1030,9061,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "mydev" [ 511.074127][ T9097] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 511.098309][ T9097] o2cb: This node has not been configured. [ 511.120463][ T9097] o2cb: Cluster check failed. Fix errors before retrying. [ 511.145211][ T9097] (syz.1.1042,9097,0):user_dlm_register:674 ERROR: status = -22 [ 511.154675][ T9097] (syz.1.1042,9097,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "mydev" [ 511.355120][ T9104] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1045'. [ 511.460923][ T9111] batman_adv: batadv0: Adding interface: gretap1 [ 511.472151][ T9111] batman_adv: batadv0: The MTU of interface gretap1 is too small (1438) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 511.505934][ T9111] batman_adv: batadv0: Interface activated: gretap1 [ 512.008498][ T10] block nbd5: Possible stuck request ffff8880220b0000: control (read@0,4096B). Runtime 360 seconds [ 513.344308][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 513.351785][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 515.670220][ T9177] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 516.860885][ T51] Bluetooth: hci2: link tx timeout [ 516.866785][ T51] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 517.030187][ T9226] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1085'. [ 517.144650][ T51] Bluetooth: hci2: link tx timeout [ 517.149958][ T51] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 517.198415][ T51] Bluetooth: hci2: link tx timeout [ 517.206060][ T51] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 517.224912][ T51] Bluetooth: hci2: link tx timeout [ 517.230262][ T51] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 517.271539][ T51] Bluetooth: hci2: link tx timeout [ 517.277368][ T51] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 517.515571][ T51] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 518.561488][ T51] Bluetooth: hci2: link tx timeout [ 518.566874][ T51] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 518.791024][ T51] Bluetooth: hci2: link tx timeout [ 518.796328][ T51] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 518.921577][ T9263] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 518.932415][ T9263] o2cb: This node has not been configured. [ 518.938319][ T9263] o2cb: Cluster check failed. Fix errors before retrying. [ 518.955563][ T9263] (syz.0.1095,9263,0):user_dlm_register:674 ERROR: status = -22 [ 518.963760][ T9263] (syz.0.1095,9263,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "mydev" [ 519.063542][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 519.579744][ T10] block nbd1: Possible stuck request ffff888021f20000: control (read@0,4096B). Runtime 390 seconds [ 519.920090][ T9291] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1102'. [ 520.247461][ T9304] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 520.285783][ T9304] o2cb: This node has not been configured. [ 520.316614][ T9304] o2cb: Cluster check failed. Fix errors before retrying. [ 520.335250][ T9304] (syz.2.1104,9304,1):user_dlm_register:674 ERROR: status = -22 [ 520.343673][ T9304] (syz.2.1104,9304,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "mydev" [ 521.452309][ T9346] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 521.489772][ T9346] o2cb: This node has not been configured. [ 521.495678][ T9346] o2cb: Cluster check failed. Fix errors before retrying. [ 521.519414][ T9346] (syz.2.1117,9346,0):user_dlm_register:674 ERROR: status = -22 [ 521.553281][ T9346] (syz.2.1117,9346,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "mydev" [ 521.907087][ T9363] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1122'. [ 522.497630][ T9387] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 522.524999][ T9387] o2cb: This node has not been configured. [ 522.538396][ T9387] o2cb: Cluster check failed. Fix errors before retrying. [ 522.546339][ T9387] (syz.3.1129,9387,0):user_dlm_register:674 ERROR: status = -22 [ 522.572543][ T9387] (syz.3.1129,9387,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "mydev" [ 522.990643][ T8984] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 523.443880][ T9417] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 523.456023][ T9417] o2cb: This node has not been configured. [ 523.466762][ T9417] o2cb: Cluster check failed. Fix errors before retrying. [ 523.474334][ T9417] (syz.0.1140,9417,0):user_dlm_register:674 ERROR: status = -22 [ 523.483907][ T9417] (syz.0.1140,9417,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "mydev" [ 526.139892][ T9400] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 526.150968][ T9407] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1136'. [ 526.491581][ T9480] block nbd0: reconnected socket [ 526.517978][ T5774] block nbd0: Receive control failed (result -32) [ 527.209818][ T10] block nbd2: Possible stuck request ffff888021f70000: control (read@0,1024B). Runtime 390 seconds [ 527.221458][ T10] block nbd2: Possible stuck request ffff888021f70200: control (read@1024,1024B). Runtime 390 seconds [ 527.232661][ T10] block nbd2: Possible stuck request ffff888021f70400: control (read@2048,1024B). Runtime 390 seconds [ 527.243910][ T10] block nbd2: Possible stuck request ffff888021f70600: control (read@3072,1024B). Runtime 390 seconds [ 527.483681][ T9507] tipc: Started in network mode [ 527.488656][ T9507] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 527.513293][ T9507] tipc: Enabled bearer , priority 0 [ 528.442585][ T9535] overlayfs: missing 'lowerdir' [ 528.462804][ T5774] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 529.422136][ T5816] tipc: Node number set to 43690 [ 530.040795][ T5774] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 531.478107][ T9584] bridge_slave_0: left allmulticast mode [ 531.490139][ T9584] bridge_slave_0: left promiscuous mode [ 531.508042][ T9584] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.632848][ T9584] bridge_slave_1: left allmulticast mode [ 531.685837][ T9584] bridge_slave_1: left promiscuous mode [ 531.691755][ T9584] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.835542][ T9584] bond0: (slave bond_slave_0): Releasing backup interface [ 531.954427][ T9584] bond0: (slave bond_slave_1): Releasing backup interface [ 532.153695][ T9584] team0: Port device team_slave_0 removed [ 532.284920][ T9584] team0: Port device team_slave_1 removed [ 532.331595][ T9618] o2cb: This node has not been configured. [ 532.363280][ T9618] o2cb: Cluster check failed. Fix errors before retrying. [ 532.390809][ T9584] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 532.409204][ T9618] (syz.0.1220,9618,0):user_dlm_register:674 ERROR: status = -22 [ 532.476292][ T9584] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 532.483669][ T9618] (syz.0.1220,9618,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "mydev" [ 532.522171][ T9584] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 532.529818][ T9584] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 532.539761][ T5774] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 533.494253][ T9610] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 534.356318][ T9660] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 534.403303][ T9660] o2cb: This node has not been configured. [ 534.430685][ T9660] o2cb: Cluster check failed. Fix errors before retrying. [ 534.464171][ T9660] (syz.3.1233,9660,1):user_dlm_register:674 ERROR: status = -22 [ 534.473086][ T9660] (syz.3.1233,9660,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "mydev" [ 535.372715][ T9696] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 535.403282][ T9696] o2cb: This node has not been configured. [ 535.413279][ T9696] o2cb: Cluster check failed. Fix errors before retrying. [ 535.426985][ T9696] (syz.1.1244,9696,0):user_dlm_register:674 ERROR: status = -22 [ 535.449419][ T9696] (syz.1.1244,9696,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "mydev" [ 535.854300][ T5774] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 536.534269][ T1176] block nbd3: Possible stuck request ffff888022020000: control (read@0,4096B). Runtime 390 seconds [ 537.024090][ T9720] syz_tun: entered allmulticast mode [ 537.087364][ T9722] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 537.135329][ T9722] o2cb: This node has not been configured. [ 537.169155][ T9722] o2cb: Cluster check failed. Fix errors before retrying. [ 537.178823][ T9722] (syz.3.1255,9722,0):user_dlm_register:674 ERROR: status = -22 [ 537.188737][ T9722] (syz.3.1255,9722,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "mydev" [ 537.383704][ T9736] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1261'. [ 537.802496][ T9747] syzkaller0: entered promiscuous mode [ 537.818806][ T9747] syzkaller0: entered allmulticast mode [ 537.843052][ T9753] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 537.846056][ T9754] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1268'. [ 537.863775][ T9753] o2cb: This node has not been configured. [ 537.869917][ T9753] o2cb: Cluster check failed. Fix errors before retrying. [ 537.878419][ T9753] (syz.2.1269,9753,0):user_dlm_register:674 ERROR: status = -22 [ 537.885884][ T9747] TC_ACT_REPEAT abuse ? [ 537.891229][ T9753] (syz.2.1269,9753,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "mydev" [ 538.307377][ T1176] block nbd4: Possible stuck request ffff888022060000: control (read@0,1024B). Runtime 390 seconds [ 538.318573][ T1176] block nbd4: Possible stuck request ffff888022060200: control (read@1024,3072B). Runtime 390 seconds [ 538.547174][ T9776] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 538.570306][ T9776] o2cb: This node has not been configured. [ 538.577980][ T9776] o2cb: Cluster check failed. Fix errors before retrying. [ 538.605006][ T9776] (syz.3.1278,9776,0):user_dlm_register:674 ERROR: status = -22 [ 538.632179][ T9776] (syz.3.1278,9776,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "mydev" [ 539.155271][ T9795] ip_tables: iptables: counters copy to user failed while replacing table [ 539.266789][ T9800] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 539.278922][ T9800] o2cb: This node has not been configured. [ 539.285462][ T9800] o2cb: Cluster check failed. Fix errors before retrying. [ 539.292926][ T9800] (syz.0.1289,9800,1):user_dlm_register:674 ERROR: status = -22 [ 539.302249][ T9800] (syz.0.1289,9800,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "mydev" [ 540.255955][ T9821] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 540.282872][ T9821] o2cb: This node has not been configured. [ 540.293995][ T9821] o2cb: Cluster check failed. Fix errors before retrying. [ 540.337250][ T9821] (syz.3.1298,9821,0):user_dlm_register:674 ERROR: status = -22 [ 540.345670][ T9825] syzkaller0: entered promiscuous mode [ 540.351208][ T9825] syzkaller0: entered allmulticast mode [ 540.358567][ T9821] (syz.3.1298,9821,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "mydev" [ 540.379805][ T9825] TC_ACT_REPEAT abuse ? [ 541.082804][ T10] block nbd0: Possible stuck request ffff888021ef8000: control (read@0,4096B). Runtime 420 seconds [ 541.104101][ T8488] block nbd0: Dead connection, failed to find a fallback [ 541.111581][ T8488] block nbd0: shutting down sockets [ 541.119426][ T8488] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 541.129836][ T8488] Buffer I/O error on dev nbd0, logical block 0, async page read [ 541.138803][ T8488] Buffer I/O error on dev nbd0, logical block 1, async page read [ 541.146996][ T8488] Buffer I/O error on dev nbd0, logical block 2, async page read [ 541.154859][ T8488] Buffer I/O error on dev nbd0, logical block 3, async page read [ 541.165344][ T10] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 541.178229][ T10] Buffer I/O error on dev nbd0, logical block 0, async page read [ 541.186534][ T10] Buffer I/O error on dev nbd0, logical block 1, async page read [ 541.195524][ T10] Buffer I/O error on dev nbd0, logical block 2, async page read [ 541.203731][ T10] Buffer I/O error on dev nbd0, logical block 3, async page read [ 541.213692][ T10] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 541.223462][ T10] Buffer I/O error on dev nbd0, logical block 0, async page read [ 541.231558][ T10] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 541.240817][ T10] Buffer I/O error on dev nbd0, logical block 1, async page read [ 541.248975][ T10] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 541.258545][ T10] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 541.268110][ T10] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 541.277520][ T10] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 541.286915][ T10] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 2 prio class 2 [ 541.296559][ T10] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 541.307939][ T5784] ldm_validate_partition_table(): Disk read failed. [ 541.317241][ T5784] Dev nbd0: unable to read RDB block 0 [ 541.325093][ T5784] nbd0: unable to read partition table [ 541.340351][ T5784] ldm_validate_partition_table(): Disk read failed. [ 541.349294][ T5784] Dev nbd0: unable to read RDB block 0 [ 541.357180][ T5784] nbd0: unable to read partition table [ 541.595203][ T9853] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 541.625312][ T9853] o2cb: This node has not been configured. [ 541.643637][ T9853] o2cb: Cluster check failed. Fix errors before retrying. [ 541.657754][ T9853] (syz.1.1311,9853,1):user_dlm_register:674 ERROR: status = -22 [ 541.666086][ T9853] (syz.1.1311,9853,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "mydev" [ 542.090070][ T9869] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 542.768083][ T9894] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 542.833321][ T9894] o2cb: This node has not been configured. [ 542.870336][ T9894] o2cb: Cluster check failed. Fix errors before retrying. [ 542.877570][ T9894] (syz.0.1325,9894,1):user_dlm_register:674 ERROR: status = -22 [ 542.942735][ T9894] (syz.0.1325,9894,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "mydev" [ 543.634840][ T9923] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 543.674264][ T9923] o2cb: This node has not been configured. [ 543.680155][ T9923] o2cb: Cluster check failed. Fix errors before retrying. [ 543.717331][ T9923] (syz.0.1337,9923,1):user_dlm_register:674 ERROR: status = -22 [ 543.752265][ T9923] (syz.0.1337,9923,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "mydev" [ 544.228298][ T9945] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1347'. [ 544.253184][ T9944] syzkaller0: entered promiscuous mode [ 544.261460][ T9944] syzkaller0: entered allmulticast mode [ 544.437827][ T9954] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 544.464659][ T9954] o2cb: This node has not been configured. [ 544.470556][ T9954] o2cb: Cluster check failed. Fix errors before retrying. [ 544.494440][ T9954] (syz.1.1351,9954,0):user_dlm_register:674 ERROR: status = -22 [ 544.519226][ T9954] (syz.1.1351,9954,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "mydev" [ 544.576378][ T10] block nbd5: Possible stuck request ffff8880220b0000: control (read@0,4096B). Runtime 390 seconds [ 545.161226][ T9978] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 545.287316][ T9983] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 545.371851][ T9983] o2cb: This node has not been configured. [ 545.384103][ T9983] o2cb: Cluster check failed. Fix errors before retrying. [ 545.391335][ T9983] (syz.0.1362,9983,0):user_dlm_register:674 ERROR: status = -22 [ 545.427906][ T9983] (syz.0.1362,9983,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "mydev" [ 545.667901][ T5774] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 546.963312][T10015] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 546.994325][T10015] o2cb: This node has not been configured. [ 547.009687][T10015] o2cb: Cluster check failed. Fix errors before retrying. [ 547.028317][T10015] (syz.2.1375,10015,0):user_dlm_register:674 ERROR: status = -22 [ 547.042297][T10015] (syz.2.1375,10015,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "mydev" [ 547.283876][ T5774] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 548.617397][T10049] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 548.639891][T10049] o2cb: This node has not been configured. [ 548.651570][T10049] o2cb: Cluster check failed. Fix errors before retrying. [ 548.684112][T10049] (syz.3.1389,10049,1):user_dlm_register:674 ERROR: status = -22 [ 548.695014][T10049] (syz.3.1389,10049,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "mydev" [ 549.084105][T10066] kvm: pic: non byte write [ 549.473826][T10082] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 549.484679][T10082] o2cb: This node has not been configured. [ 549.490709][T10082] o2cb: Cluster check failed. Fix errors before retrying. [ 549.502574][T10082] (syz.3.1400,10082,0):user_dlm_register:674 ERROR: status = -22 [ 549.512743][T10082] (syz.3.1400,10082,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "mydev" [ 550.657788][T10106] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 550.669157][T10106] o2cb: This node has not been configured. [ 550.675173][T10106] o2cb: Cluster check failed. Fix errors before retrying. [ 550.682554][T10106] (syz.0.1410,10106,1):user_dlm_register:674 ERROR: status = -22 [ 550.690489][T10106] (syz.0.1410,10106,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "mydev" [ 551.895940][ T5774] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 552.060441][T10059] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 552.264239][ T10] block nbd1: Possible stuck request ffff888021f20000: control (read@0,4096B). Runtime 420 seconds [ 553.227932][T10131] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 553.282093][T10131] o2cb: This node has not been configured. [ 553.296049][T10131] o2cb: Cluster check failed. Fix errors before retrying. [ 553.303272][T10131] (syz.1.1419,10131,1):user_dlm_register:674 ERROR: status = -22 [ 553.327724][T10131] (syz.1.1419,10131,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "mydev" [ 553.630095][ T5774] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 554.927109][T10165] syzkaller0: entered promiscuous mode [ 554.937868][T10165] syzkaller0: entered allmulticast mode [ 555.175874][T10172] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 555.243525][T10172] o2cb: This node has not been configured. [ 555.263868][T10172] o2cb: Cluster check failed. Fix errors before retrying. [ 555.289865][T10172] (syz.0.1432,10172,1):user_dlm_register:674 ERROR: status = -22 [ 555.297879][T10172] (syz.0.1432,10172,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "mydev" [ 555.350491][T10176] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1434'. [ 555.565606][ T5774] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 556.966298][T10211] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 556.993241][T10211] o2cb: This node has not been configured. [ 557.010478][T10211] o2cb: Cluster check failed. Fix errors before retrying. [ 557.027059][T10211] (syz.1.1446,10211,0):user_dlm_register:674 ERROR: status = -22 [ 557.047269][T10211] (syz.1.1446,10211,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "mydev" [ 557.407054][T10225] netlink: 892 bytes leftover after parsing attributes in process `syz.2.1451'. [ 557.539964][ T5774] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 558.499378][T10235] syzkaller0: entered promiscuous mode [ 558.529291][T10235] syzkaller0: entered allmulticast mode [ 558.724726][T10244] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 558.751973][T10244] o2cb: This node has not been configured. [ 558.769092][T10244] o2cb: Cluster check failed. Fix errors before retrying. [ 558.801249][T10244] (syz.1.1458,10244,0):user_dlm_register:674 ERROR: status = -22 [ 558.822500][T10244] (syz.1.1458,10244,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "mydev" [ 559.231385][T10256] bond1: entered promiscuous mode [ 559.240094][T10256] bond1: entered allmulticast mode [ 559.505234][T10270] syzkaller0: entered promiscuous mode [ 559.518746][T10270] syzkaller0: entered allmulticast mode [ 559.789617][T10279] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 559.822998][ T10] block nbd2: Possible stuck request ffff888021f70000: control (read@0,1024B). Runtime 420 seconds [ 559.823956][T10279] o2cb: This node has not been configured. [ 559.834876][ T10] block nbd2: Possible stuck request ffff888021f70200: control (read@1024,1024B). Runtime 420 seconds [ 559.853323][ T10] block nbd2: Possible stuck request ffff888021f70400: control (read@2048,1024B). Runtime 420 seconds [ 559.865098][ T10] block nbd2: Possible stuck request ffff888021f70600: control (read@3072,1024B). Runtime 420 seconds [ 559.877570][T10279] o2cb: Cluster check failed. Fix errors before retrying. [ 559.890990][T10279] (syz.3.1470,10279,1):user_dlm_register:674 ERROR: status = -22 [ 559.901454][T10279] (syz.3.1470,10279,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "mydev" [ 560.451555][T10295] bond2: entered promiscuous mode [ 560.457449][T10295] bond2: entered allmulticast mode [ 560.960754][T10307] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 560.974673][T10307] o2cb: This node has not been configured. [ 560.982638][T10307] o2cb: Cluster check failed. Fix errors before retrying. [ 560.990064][T10307] (syz.2.1481,10307,1):user_dlm_register:674 ERROR: status = -22 [ 560.999155][T10307] (syz.2.1481,10307,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "mydev" [ 561.801494][T10340] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 561.812369][T10340] o2cb: This node has not been configured. [ 561.818615][T10340] o2cb: Cluster check failed. Fix errors before retrying. [ 561.826032][T10340] (syz.1.1491,10340,0):user_dlm_register:674 ERROR: status = -22 [ 561.834620][T10340] (syz.1.1491,10340,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "mydev" [ 561.920720][T10342] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 564.466048][T10317] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 564.676275][T10347] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1494'. [ 564.770122][T10355] bond1: entered promiscuous mode [ 564.775462][T10355] bond1: entered allmulticast mode [ 565.118324][T10368] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 565.198139][T10371] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1504'. [ 565.685860][T10389] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1510'. [ 565.731803][T10389] bond3: entered promiscuous mode [ 565.737011][T10389] bond3: entered allmulticast mode [ 565.880485][T10400] ip_tables: iptables: counters copy to user failed while replacing table [ 566.037548][T10407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 566.411777][T10419] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 567.802649][T10471] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1542'. [ 568.000873][T10479] bond4: entered promiscuous mode [ 568.006373][T10479] bond4: entered allmulticast mode [ 569.191455][T10511] o2cb: This node has not been configured. [ 569.198442][T10511] o2cb: Cluster check failed. Fix errors before retrying. [ 569.206571][T10511] (syz.2.1554,10511,1):user_dlm_register:674 ERROR: status = -22 [ 569.214506][T10511] (syz.2.1554,10511,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "mydev" [ 569.521084][ T1176] block nbd3: Possible stuck request ffff888022020000: control (read@0,4096B). Runtime 420 seconds [ 570.815983][T10457] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 570.922149][ T1176] block nbd4: Possible stuck request ffff888022060000: control (read@0,1024B). Runtime 420 seconds [ 570.934043][ T1176] block nbd4: Possible stuck request ffff888022060200: control (read@1024,3072B). Runtime 420 seconds [ 571.095478][T10533] ------------[ cut here ]------------ [ 571.101684][T10533] skb_assert_len [ 571.136080][T10533] WARNING: CPU: 0 PID: 10533 at include/linux/skbuff.h:2597 __dev_queue_xmit+0x1ec3/0x3630 [ 571.146721][T10533] Modules linked in: [ 571.150740][T10533] CPU: 0 PID: 10533 Comm: syz.1.1561 Not tainted syzkaller #0 [ 571.159157][T10533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 571.169644][T10533] RIP: 0010:__dev_queue_xmit+0x1ec3/0x3630 [ 571.175623][T10533] Code: df 4c 8b 6c 24 28 e9 10 e7 ff ff e8 17 30 04 f9 c6 05 da c2 f3 05 01 48 c7 c7 20 69 c4 8b 48 c7 c6 17 ab 9f 8c e8 bd fc cd f8 <0f> 0b 80 3d bf c2 f3 05 01 0f 84 0f e3 ff ff e8 e9 2f 04 f9 c6 05 [ 571.196325][T10533] RSP: 0018:ffffc900053ef640 EFLAGS: 00010246 [ 571.203086][T10533] RAX: eaf4949974c6e200 RBX: ffff88805ea75a70 RCX: 0000000000080000 [ 571.211581][T10533] RDX: ffffc9001801a000 RSI: 0000000000004a69 RDI: 0000000000004a6a [ 571.219624][T10533] RBP: ffffc900053ef890 R08: ffffc900053ef247 R09: 1ffff92000a7de48 [ 571.227954][T10533] R10: dffffc0000000000 R11: fffff52000a7de49 R12: 1ffff1100bd4eb42 [ 571.236134][T10533] R13: 1ffff92000a7dee8 R14: 0000000000000000 R15: dffffc0000000000 [ 571.244406][T10533] FS: 00007ff8a75cc6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 571.253492][T10533] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 571.260354][T10533] CR2: 00007fa75d7556c8 CR3: 0000000027356000 CR4: 00000000003506f0 [ 571.269146][T10533] Call Trace: [ 571.272573][T10533] [ 571.275917][T10533] ? alloc_skb_with_frags+0x6f5/0x7a0 [ 571.281512][T10533] ? skb_set_owner_w+0x232/0x380 [ 571.286646][T10533] ? netdev_core_pick_tx+0x370/0x370 [ 571.292312][T10533] ? packet_parse_headers+0x7bd/0xad0 [ 571.297972][T10533] ? packet_parse_headers+0x83e/0xad0 [ 571.303431][T10533] ? sock_kzfree_s+0x50/0x50 [ 571.308217][T10533] ? skb_setup_tx_timestamp+0x1f0/0x1f0 [ 571.313834][T10533] ? packet_xmit+0x66/0x340 [ 571.318489][T10533] packet_sendmsg+0x2015/0x49a0 [ 571.323642][T10533] ? packet_getsockopt+0xad0/0xad0 [ 571.328839][T10533] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 571.335545][T10533] ? apparmor_socket_sendmsg+0x8e/0x330 [ 571.341460][T10533] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 571.346874][T10533] ? security_socket_sendmsg+0x80/0xa0 [ 571.352532][T10533] sock_write_iter+0x2dc/0x420 [ 571.357640][T10533] ? sock_read_iter+0x3f0/0x3f0 [ 571.362710][T10533] ? common_file_perm+0x198/0x1f0 [ 571.367812][T10533] vfs_write+0x474/0x9a0 [ 571.372251][T10533] ? file_end_write+0x250/0x250 [ 571.377919][T10533] ? __fget_files+0x3fc/0x460 [ 571.382717][T10533] ? __fdget_pos+0x1d8/0x330 [ 571.387774][T10533] ? ksys_write+0x74/0x260 [ 571.392289][T10533] ksys_write+0x151/0x260 [ 571.396825][T10533] ? __ia32_sys_read+0x90/0x90 [ 571.401687][T10533] ? lockdep_hardirqs_on+0x98/0x150 [ 571.407385][T10533] do_syscall_64+0x55/0xb0 [ 571.411878][T10533] ? clear_bhb_loop+0x40/0x90 [ 571.416973][T10533] ? clear_bhb_loop+0x40/0x90 [ 571.421744][T10533] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 571.427953][T10533] RIP: 0033:0x7ff8a679e0d9 [ 571.432438][T10533] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 571.452368][T10533] RSP: 002b:00007ff8a75cc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 571.461051][T10533] RAX: ffffffffffffffda RBX: 00007ff8a6a25fa0 RCX: 00007ff8a679e0d9 [ 571.469110][T10533] RDX: 0000000000000005 RSI: 0000200000000000 RDI: 0000000000000003 [ 571.477320][T10533] RBP: 00007ff8a6835024 R08: 0000000000000000 R09: 0000000000000000 [ 571.486039][T10533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 571.494341][T10533] R13: 00007ff8a6a26038 R14: 00007ff8a6a25fa0 R15: 00007ffc9ba94318 [ 571.502581][T10533] [ 571.505878][T10533] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 571.513210][T10533] CPU: 0 PID: 10533 Comm: syz.1.1561 Not tainted syzkaller #0 [ 571.520721][T10533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 571.530834][T10533] Call Trace: [ 571.534171][T10533] [ 571.537155][T10533] dump_stack_lvl+0x18c/0x250 [ 571.537200][T10538] netlink: 868 bytes leftover after parsing attributes in process `syz.2.1562'. [ 571.551083][T10533] ? show_regs_print_info+0x20/0x20 [ 571.556534][T10533] ? load_image+0x420/0x420 [ 571.561150][T10533] panic+0x2ca/0x720 [ 571.565135][T10533] ? bpf_jit_dump+0xd0/0xd0 [ 571.569728][T10533] __warn+0x2e0/0x470 [ 571.573779][T10533] ? __dev_queue_xmit+0x1ec3/0x3630 [ 571.579050][T10533] ? __dev_queue_xmit+0x1ec3/0x3630 [ 571.584308][T10533] report_bug+0x2be/0x4f0 [ 571.588910][T10533] ? __dev_queue_xmit+0x1ec3/0x3630 [ 571.594183][T10533] ? __dev_queue_xmit+0x1ec3/0x3630 [ 571.599486][T10533] ? __dev_queue_xmit+0x1ec5/0x3630 [ 571.604748][T10533] handle_bug+0xcf/0x120 [ 571.609060][T10533] exc_invalid_op+0x1a/0x50 [ 571.613668][T10533] asm_exc_invalid_op+0x1a/0x20 [ 571.618579][T10533] RIP: 0010:__dev_queue_xmit+0x1ec3/0x3630 [ 571.624453][T10533] Code: df 4c 8b 6c 24 28 e9 10 e7 ff ff e8 17 30 04 f9 c6 05 da c2 f3 05 01 48 c7 c7 20 69 c4 8b 48 c7 c6 17 ab 9f 8c e8 bd fc cd f8 <0f> 0b 80 3d bf c2 f3 05 01 0f 84 0f e3 ff ff e8 e9 2f 04 f9 c6 05 [ 571.644210][T10533] RSP: 0018:ffffc900053ef640 EFLAGS: 00010246 [ 571.650337][T10533] RAX: eaf4949974c6e200 RBX: ffff88805ea75a70 RCX: 0000000000080000 [ 571.658366][T10533] RDX: ffffc9001801a000 RSI: 0000000000004a69 RDI: 0000000000004a6a [ 571.666581][T10533] RBP: ffffc900053ef890 R08: ffffc900053ef247 R09: 1ffff92000a7de48 [ 571.674613][T10533] R10: dffffc0000000000 R11: fffff52000a7de49 R12: 1ffff1100bd4eb42 [ 571.682812][T10533] R13: 1ffff92000a7dee8 R14: 0000000000000000 R15: dffffc0000000000 [ 571.690865][T10533] ? alloc_skb_with_frags+0x6f5/0x7a0 [ 571.696320][T10533] ? skb_set_owner_w+0x232/0x380 [ 571.701341][T10533] ? netdev_core_pick_tx+0x370/0x370 [ 571.706784][T10533] ? packet_parse_headers+0x7bd/0xad0 [ 571.712221][T10533] ? packet_parse_headers+0x83e/0xad0 [ 571.717664][T10533] ? sock_kzfree_s+0x50/0x50 [ 571.722317][T10533] ? skb_setup_tx_timestamp+0x1f0/0x1f0 [ 571.727927][T10533] ? packet_xmit+0x66/0x340 [ 571.732494][T10533] packet_sendmsg+0x2015/0x49a0 [ 571.737451][T10533] ? packet_getsockopt+0xad0/0xad0 [ 571.742630][T10533] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 571.749120][T10533] ? apparmor_socket_sendmsg+0x8e/0x330 [ 571.754732][T10533] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 571.760084][T10533] ? security_socket_sendmsg+0x80/0xa0 [ 571.765610][T10533] sock_write_iter+0x2dc/0x420 [ 571.770489][T10533] ? sock_read_iter+0x3f0/0x3f0 [ 571.775445][T10533] ? common_file_perm+0x198/0x1f0 [ 571.780541][T10533] vfs_write+0x474/0x9a0 [ 571.784861][T10533] ? file_end_write+0x250/0x250 [ 571.789778][T10533] ? __fget_files+0x3fc/0x460 [ 571.794583][T10533] ? __fdget_pos+0x1d8/0x330 [ 571.799284][T10533] ? ksys_write+0x74/0x260 [ 571.803777][T10533] ksys_write+0x151/0x260 [ 571.808232][T10533] ? __ia32_sys_read+0x90/0x90 [ 571.813259][T10533] ? lockdep_hardirqs_on+0x98/0x150 [ 571.818555][T10533] do_syscall_64+0x55/0xb0 [ 571.823050][T10533] ? clear_bhb_loop+0x40/0x90 [ 571.827796][T10533] ? clear_bhb_loop+0x40/0x90 [ 571.832548][T10533] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 571.838510][T10533] RIP: 0033:0x7ff8a679e0d9 [ 571.842988][T10533] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 571.862662][T10533] RSP: 002b:00007ff8a75cc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 571.871144][T10533] RAX: ffffffffffffffda RBX: 00007ff8a6a25fa0 RCX: 00007ff8a679e0d9 [ 571.879263][T10533] RDX: 0000000000000005 RSI: 0000200000000000 RDI: 0000000000000003 [ 571.887293][T10533] RBP: 00007ff8a6835024 R08: 0000000000000000 R09: 0000000000000000 [ 571.895318][T10533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 571.903351][T10533] R13: 00007ff8a6a26038 R14: 00007ff8a6a25fa0 R15: 00007ffc9ba94318 [ 571.911701][T10533] [ 571.915415][T10533] Kernel Offset: disabled [ 571.920057][T10533] Rebooting in 86400 seconds..