last executing test programs: 13m35.032572318s ago: executing program 1 (id=149): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x0, 0x20040}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, r1, 0x0, 0x68221}}}}}}]}, 0x48}, 0x1, 0x2000, 0x0, 0x40}, 0x24048880) 13m34.727205597s ago: executing program 1 (id=151): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f000012d000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x7ba3, &(0x7f0000000040)={0x0, 0x9318, 0x1f480, 0x0, 0x152}) 13m33.997451021s ago: executing program 1 (id=156): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000380)={@initdev={0xfe, 0x88, '\x00', 0xfe, 0x0}, 0x800, 0x0, 0x3, 0x0, 0x0, 0x100}, 0x20) 13m33.624970422s ago: executing program 1 (id=158): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x84000, 0x0) 13m33.344137729s ago: executing program 1 (id=160): r0 = syz_usb_connect$uac2(0x0, 0x7b, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x245f, 0x931c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x5, 0x30, 0x9, {0x8, 0xb, 0x0, 0x1, 0x1, 0x7, 0x20, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4000, 0x4, 0x9, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0xb, 0x4, {0x8, 0x25, 0x1, 0x0, 0x0, 0x40, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x40, 0x6, 0x3, {0x8, 0x25, 0x1, 0x82, 0x3, 0xf3, 0x6}}}}}}}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f00000001c0)={0x0, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 13m30.885120087s ago: executing program 1 (id=177): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x54a, &(0x7f0000000200)="$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") unshare(0x20040600) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) fstat(r0, &(0x7f0000000140)) 13m30.422574661s ago: executing program 32 (id=177): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x54a, &(0x7f0000000200)="$eJzs3U9vHGcZAPBn1l7HSZzaBQ5QqaWiRUkF2Y1r2locSpEQt0pI5R6MvbGsrL2RvW5jq4LNJ0BCCJA4wYULEh8ACUXiwhEhRYIzSEUgBClIcCgdNLOzdrqZtTdhvUvs30+azPvOv+d5N57ZmZ1XMwGcWc9HxBsR8WGapi9FxHwxvVIM0ekO2XLv3393NRuSSNO3/pZEUkzLFkvTNO1t82K+ytRBjG8mDwScLcZ7+zdXms3GdlGttzdv1Xf29q9ubK6sN9YbW0tLi68uv7b8yvK1kbTzUkS8/pU/ff87P/3q67/8/Dt/vP6XK9/K0por5vfa8Rimj5rZbXr13GzfCtuPGez/Udae6gdF5fxw69w5yYQAABgoO8f/WER8JiJeivmYOvp0FgAAAHgCpV+aiw+S7v27EjMDpgMAAABPkEreBzap1Iq+AHNRqdRq3T68n4gLlWZrp/25G63drbVuX9mFqFZubDQb14q+wgtRTbL6Yl4+rL/cV1+KiKcj4nvz5/N6bbXVXJv0jx8AAABwRlzsu/7/53z3+v9oyXiSAwAAAEZnYdIJAAAAACfO9T8AAACcatVJJwAAAACcuK+9+WY2pL33X6+9vbd7s/X21bXGzs3a5u5qbbW1fau23mqt58/s2zxue81W69YXYmv3dr3d2GnXL+3tX99s7W61r2/E7FgaBAAAADzk6U/f/X0SEZ0vns+HzMykkwLGYvqg1HumZ8ne/4enuuP3xpQUMBZTQyzz3rny6c4T4Mk23T9hwL4OnD76/wPHvdFjYOed33RHlRHnAwAAjN7lT5Xf/z/+fL7jlB+ecHZiOLv67v+n85NKBBi7/P7/sB15nCzAqVIdqgcgcJr9r/f/j5emj5QQAAAwcnP5kFRqxc97c1Gp1GoRl/LXAlaTGxvNxrWIeCoifjdfPZfVF/M1k2OvGQAAAAAAAAAAAAAAAAAAAAAAAACArjRNIgUAAABOtYjKn5NfdZ/lf3n+xbn+3wdmkn/nrwSeiYh3fvTWD26vtNvbi9n0vx9Mb/+wmP7yJH7BAAAAAPr1rtPz8b8mnQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp837999d7Q1DLH5+VHH/+uWIWCiLPx2z+Xg2qhFx4R9JTD+wXhIRUyOI37kTEZ8si59kaR2ELIs/ig+hcyfppLnS+LFQfApl8S+OID6cZXez488bZft/JZ7Px+X733TER+qPa/DxLw6Of1MD9v9LQ8Z45t7P6wPj34l4Zrr8+NeLnwyI/8JQ0avxja/v7w+am/444nLv+yc/4j0Y4bBUb2/equ/s7V/d2FxZb6w3tpaWFl9dfm35leVr9RsbzUbxb2mM7z77iw+Pav+F0u+/pMhmcPtfLNneVEn+/7l3+/7He5XOw/GvvFAS/9c/KZZ4OH6liPPZopzNv9wrd7rlBz33s98+d1T71w7bX32U//8rgzba76Ed5dnh/nQAgBOxs7d/c6XZbGyfdCG7WB5XrI8UssBjDzqawsxkPrGzU/h2Vrg3qg2maZpm+1TJrLsRMcx2khhxSyvl+RwWBh4BJn1kAgAARu3wpH/SmQAAAAAAAAAAAAAAAAAAAMDZNY6nrPXHPHwEcjKKR2gDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIzEfwMAAP//O7TZvA==") unshare(0x20040600) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) fstat(r0, &(0x7f0000000140)) 10m52.768493907s ago: executing program 5 (id=1427): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0022230000009349d56b761761f3bdd527c6dc64b90000000000006784e14e67b322"], 0x0}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) 10m50.334487389s ago: executing program 5 (id=1452): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0xfe, 0x246, &(0x7f0000000ac0)="$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") mkdir(&(0x7f0000000180)='./bus\x00', 0x10c) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000003580)=""/4088, 0xff8) 10m49.64839609s ago: executing program 5 (id=1460): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x4c, r1, 0x101, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="a9"}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x2, 0x2, 0x1, 0x0, {0x800, 0x0, 0x0, 0x3c0, 0x0, 0x1, 0x0, 0x2}, 0x1, 0x2009, 0x3}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4890}, 0x4010) 10m48.980291384s ago: executing program 5 (id=1467): mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) 10m48.848641107s ago: executing program 5 (id=1470): open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0x80) 10m47.073830946s ago: executing program 5 (id=1489): syz_mount_image$exfat(&(0x7f0000000700), &(0x7f00000001c0)='./file0\x00', 0x810000, &(0x7f0000000280)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c696f636861727365743d69736f383835392d312c646d61736b3d30303030303030303030303033373737373737373737372c696f636861727365743d6b6f69382d72752c696f636861727365743d63703433372c6e616d65636173653d312c6e616d65636173653d312c009a8d4d9016e3d8128333e260a1b926dd0c5f7619710e03ea1ae6521494f87e5737dc0c5bec3f76668140a15258818b6fbc51f9a13940e63c378688559c351287f0e09ef0b7330db20eef797e5004484649e7f5fb64b746683a75b9ed822f5ae34fac"], 0x5, 0x1512, &(0x7f0000000740)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 10m46.662147779s ago: executing program 33 (id=1489): syz_mount_image$exfat(&(0x7f0000000700), &(0x7f00000001c0)='./file0\x00', 0x810000, &(0x7f0000000280)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c696f636861727365743d69736f383835392d312c646d61736b3d30303030303030303030303033373737373737373737372c696f636861727365743d6b6f69382d72752c696f636861727365743d63703433372c6e616d65636173653d312c6e616d65636173653d312c009a8d4d9016e3d8128333e260a1b926dd0c5f7619710e03ea1ae6521494f87e5737dc0c5bec3f76668140a15258818b6fbc51f9a13940e63c378688559c351287f0e09ef0b7330db20eef797e5004484649e7f5fb64b746683a75b9ed822f5ae34fac"], 0x5, 0x1512, &(0x7f0000000740)="$eJzs3AuYjtXaOPD7Xms9jGnS2ySHYa11P7xpsEyS5JAihyRJkiSnhKRJkoTEEJKEJOfDJDkMITlMY9I4nw85J022NEmSU05h/S/tvr+9v/p2375239//23P/rmtds+553nu99zP3zLzrea7rfb/vNrx20zo1GhMR/Evwr19SACAGAAYBwHUAEABAhfgK8ZeP55OY8q89CftzPZJ2tStgVxP3P3fj/udu3P/cjfufu3H/czfuf+7G/c/duP+M5WZbZxW5nkfuHXz/Pzfj1/9/IzllJ369vuyN3f+JFO5/7sb9z924/7kb9z934/7nbtz/f3/V/8Ex7n/uxv1nLDe72vefeVzdcbV//xhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOM5Q5n/RUKAP5jfrXrYowxxhhjjDHG2J/H573aFTDGGGOMMcYYY+x/HoIACQoCyAN5IQbyQSxcA3FwLeSH6yAC10M83AAF4EYoCIWgMBSBBCgKxUCDAQsEIRSHEhCFm6Ak3AyJUApKQxlwUBaS4BYoB7dCebgNKsDtUBHugEpQGapAVbgTqsFdcDdUhxpwD9SEWlAb6sC9UBfug3pwP9SHB6ABPAgN4SFoBA9DY3gEmsCj0BQeg2bwODSHFtASWkHrP8gH/L38l6EXvAK9oQ+kQF/oB69CfxgAA+E1GASvw2B4A4bAmzAUhsFweAtGwNswEt6BUTAaxsBYGAfjYQJMhEkwGVLhXZgC78FUeB+mwXSYATMhDWbBbPgA5sBcmAcfwnz4CBbAQlgEiyEdPoYMWAKZ8AkshU8hC5bBclgBK2EVrIY1sBbWwXrYABthE2yGLbAVPoNtsB12wE7YBbthD3wOe+EL2AdfQjZ89U/mn/lP+d0REFCgQIUK82AejMEYjMVYjMM4zI/5MYIRjMd4LIAFsCAWxMJYGBMwAYthMTRokJCwOBbHKEaxJJbEREzE0lgaHTpMwiQsh7dieSyPFbACVsSKWAkrY2WsilWxGlbDuxEqBVADa2JNrI218V68F+/DelgP62N9bIANsCE2xEbYCBtjY2yCTbApNsVm2AybY3NsiS2xNbbGNtgG22JbbI/tsQN2wI7YEZMxGTthJ+yMnbELdsGu2BW7YTfsjj2wB76ML+Mr+Ar2wZqiL/bDftgf+++7/MfwGr6Og/ENfAPfxKE4DIfjW/gWvo0j8TSOwtE4BsdgNTEeJ+BEJDEZUzEVp+AUnIpTcRpOx+k4E9NwFs7G2TgH5+Jc/BDn40f4ES7EhbgY0zEdM3AJZmImLsUzmIXLcDmuwJW4ClfiGlyLa3A9bsD1uAk34Rbcgp/hZ7gdt+NO3Im7cTd+jp/jF/gFDsVszMb9uB8P4AE8iAcxB3PwEB7Cw3gYj+ARPIpH8RgexxN4HE/hKTyNZ/AsnsXzeB4v4IsJ3zbZXWrdUBBCiC9/vQ0oYkSMiBWxIk7Eifwiv4iIiIgX8aKAKCAKioKisCgsEkSCKCaKCSOMIBGK4qK4iIqoKClKikSRKEqL0sIJJ5JEkignyonyoryoIG4XFcUdopKoLNq5qqKqqCbau7tFdVFD1BA1RS1RW9QRdURdUVfUE/VEfVFfNBANREPxkGgk+uJAfERc7kxTMQybieHYXLQQLUUr8TY+IdqIkdhWtBPtxVNiNI7CjqKNSxbPik5iAnYWz4uJ+ILoKiZjN/GS6C56iJ7iZdFLtHW9RR8xDfuKfmIm9hcDxEDxmpiDtcTljtUWb4qhYpgYLt4Si/FtMVK8I0aJ0WKMGCvGifFigpgoJonJIlW8K6aI98RU8b6YJqaLGWKmSBOzxGzxgZgj5op54kMxX3wkFoiFYpFYLNLFxyJDLBGZ4hOxVHwqssQysVysECvFKrFarBFrxTqxXmwQG8UmsVlsEVvFZ2Kb2C52iJ1il9gt9ojPxV7xhdgnvhTZ4iuxX/xFHBBfi4PiG5EjvhWHxHfisPheHBE/iKPiR3FMHBcnxElxSvwkTosz4qw4J86Ln8UFcVFcEl6ARCmklEoGMo/MK2NkPhkrr5Fx8lqZX14nI/J6GS9vkAXkjbKgLCQLyyIyQRaVxaSWRlpJMpTFZQkZlTfJkvJmmShLydKyjHSyrEySt8hy8lZZXt4mK8jbZUV5h6wkK8sqsqq8U1aTd8m7ZXVZQ94ja8pasrasI++VdeV9sp68X9aXD8gG8kHZUD4kG8mHZWP5iGwiH5VN5WOymXxcNpctZEvZSraWT8g28knZVraT7eVTsoN8WnaUz8hk+azsJJ+TneXzsot8QXaVL8pu8iXZXfaQPeVFeUl62Vv2kSmyr+wnX5X95QA5UL4mB8nX5WD5hhwi35RD5TA5XL4lR8i35Uj5jhwlR8sxcqwcJ8fLCXKinCQny1T5rpwi35NT5ftympwuZ8iZMk3OkgN/XWnefyP/vd/JH/LLs2+RW+VncpvcLnfInXKX3C33yD1yr9wr98l9Mltmy/1yvzwgD8iD8qDMkTnykDwkD8vD8og8Io/Ko/KYPC7PyZPylPxJnpZn5Bl5Tp6X5+WFX38GoFAJJZVSgcqj8qoYlU/FqmtUnLpW5VfXqYi6XsWrG1QBdaMqqAqpwqqISlBFVTGllVFWkQpVcVVCRdVNqqS6WSWqUqq0KqOcKquS1C3/cv4f1ddatVZtVBvVVrVV7VV71UF1UB1VR5WsklUn1Ul1Vp1VF9VFdVVdVTfVTXVX3VVP1VP1Ur1Ub9VbpagU1U+9qvqrAWqgek0NUq+rwWqwGqKGqKFqqBquhqsRaoQaqUaqUWqUGqPGqHFqnJqgJqhJapJKValqipqipqqpapqapmaoGSpNpanZaraao+aoeWqemq/mqwVqgVqkFql0la4yVIbKVJlqqVqqstQytUytUCvUKrVKrVFr1Dq1Tm1QG9QmtUllqa1qq9qmtqkdaofapXapPWqP2qv2qn1qn8pW2Wq/2q8OqAPqoDqoclSOOqQOqcPqsDqijqij6qg6po6pE+qEOqVOqdPqtDqrzqrz6ry6oC6oS+rS5W1fIAIRqEAFeYI8QUwQE8QGsUFcEBfkD/IHkSASxAfxQYHgxqBgUCgoHBQJEoKiQbFAByawAQVhUDwoEUSDm4KSwc1BYlAqKB2UCVxQNkgKbgnKBbcG5YPbggrB7UHF4I6gUlA5qBJUDe4MqgV3BXcH1YMawT1BzaBWUDuoE9wb1A3uC+oF9wf1gweCBsGDQcPgoaBR8HDQOHgkaBI8GjQNHguaBY8HzYMWQcugVdD6T13f+9OFnnS9dR+dovvqfvpV3V8P0AP1a3qQfl0P1m/oIfpNPVQP08P1W3qEfluP1O/oUXq0HqPH6nF6vJ6gJ+pJerJO1e/qKfo9PVW/r6fp6XqGnqnT9Cw9W3+g5+i5ep7+UM/XH+kFeqFepBfrdP2xztBLdKb+RC/Vn+osvUwv1yv0Sr1Kr9Zr9Fq9Tq/XG/RGvUlv1lv0Vv2Z3qa36x16p96ld+s9+nO9V3+h9+kvdbb+Su/Xf9EH9Nf6oP5G5+hv9SH9nT6sv9dH9A/6qP5RH9PH9Ql9Up/SP+nT+ow+q8/p8/pnfUFf1Je0v7y5v/zybpRRJo/JY2JMjIk1sSbOxJn8Jr+JmIiJN/GmgClgCpqCprApbBJMgilmipnLyJApboqbqImakqakSTSJprQpbZxxJskkmXKmnClvypsKpoKpaCqaSqaSqWKqmDvNneYuc5epbqqbe8w9ppapZeqYOqauqWvqmXqmvqlvGpgGpqFpaBqZRqaxaWyamCamqWlqmplmprlpblqalqa1aW3amDamrWlr2pv2poPpYDqajibZJJtOppPpbDqbLqaL6Wq6mm6mm+luupuepqfpZXqZ3qa3STEppp/pZ/qb/magGWgGmUFmsBlshpghZmy5DdUvb5ZGmBFmpBlpRpnRZowZa8aZ8WaCmWgmmckm1aSaKWaKmWqmmmlmmplhZpg0k2Zmm9lmjplj5pl5Zr6ZbxaYBWaRWWTSTbrJMBkm02SapWapyTJZZrlZblaalWa1WW3WmrVmvVlvNpqNZrPZbLaarWab2WZ2mB1ml9ll9pg9Zq/Za/aZfSbbZMf8enFnDpqDJsfkmEPmkDlsDpsj5og5ao6aY+aYOWFOmFPmlDltTpuz5qw5b342F8xFc8l4E2MFxNprbJy91ua319kYm8/+bVzYFrEJtqgtZrUtaAv9XWystYm2lC1ty1hny9oke8tv4kq2sq1iq9o7bTV7l737N3Fde5+tZ++39e0Dto699+/iBvZB29A+ZhvZx21j28I2sa1sU/uYbWYft81tC9vStrId7NO2o33GJttnbSf73G/iDLvErrXr7Hq7we61X9iz9pw9bL+35+3PtrftYwfZ1+1g+4YdYt+0Q+2w38Rj7Fg7zo63E+xEO8lO/k08w860aXaWnW0/sHPs3N/E6fZjO99m2gV2oV1kF/8SX64p035il9pPbZZdZpfbFXalXWVX2zX/t9YVdpPdbLfYPfZzu81utzvsTrvL7v4lvnwe++yXNtt+ZQ/Z7+wB+7U9aI/YHPvtL/Hl8wP4wR61P9pj9rg9YU/aU/Yne9qe+eX8L5/7SXvRXrLeAiEJkqQooDyUl2IoH8XSNRRH11J+uo4idD3F0w1UgG6kglSIClMRSqCiVIw0GbJEFFJxKkFRuolK0s2USKWoNJUhR2UpiW6hcnQrlafbqALdThXpDqpElakKVaU7qRrdRXdTdapB91BNqkW1qQ7dS3XpPqpH91N9eoAa0IPUkB6iRvQwNaZHqAk9Sk3pMWpGj1NzakEtqRW1pieoDT1JbakdtaenqAM9TR3pGUqmZ6kTPUed6XnqQi9QV3qRutFL1J16UE96mXrRK9Sb+lAK9aV+9Cr1pwE0kF6jQfQ6DaY3aAi9SUNpGA2nt2gEvU0j6R0aRaNpDI2lcTSeJtBEmkSTKZXepSn0Hk2l92kaTacZNJPSaBbNpg9oDs2lefQhzaePaAEtpEW0mNLpY8qgJZRJn9BS+pSyaBktpxW0klbRalpDa2kdracNtJE20WbaQlvpM9pG22kH7aRdtJv20Oe0l76gffQlZdNXtJ/+QgfoazpI31AOfUuH6Ds6TN/TEfqBjtKPdIyO0wk6SafoJzpNZ+gsnaPz9DNdoIt0iTxBiKEIZajCIMwT5g1jwnxhbHhNGBdeG+YPrwsj4fVhfHhDWCC8MSwYFgoLh0XChLBoWCzUoQltSGEYFg9LhNHwprBkeHOYGJYKS4dlQheWDZPCW8Jy4a1h+fC2sEJ4e1gxvCOsFFYOH3uganhnWC28K7w7rB7WCO8Ja4a1wtphnfDesG54X1gvvD+sHz4Qlg8fDBuGD4WNwofDxuEjYZPw0bBp+FjYLHw8bB62CFuGrcLW4RNhm/DJsG3YLmwfPhV2CJ8OO4bPhMnhs2Gn8Lk/PJ4S9g37ha+Gr4be3y8XRRdH06MfRzOiS6KZ0U+iS6OfRrOiy6LLoyuiK6Oroquja6Jro+ui66Mbohujm6Kbo1ui3tfJCw6dcNIpF7g8Lq+LcflcrLvGxblrXX53nYu46128u8EVcDe6gq6QK+yKuARX1BVz2hlnHbnQFXclXNTd5Eq6m12iK+VKuzLOubIuybVyrV1r18Y96dq6dq69e8o95Z52T7tn3DPuWdfJPec6u+ddF/eC6+pedC+6l1x318P1dC+7Xu4V19v1cSkuxfVz/Vx/198NdAPdIDfIDXaD3RA3xA11Q91wN9yNcCPcSDfSjXKj3Bg3xo1z49wEN8FNcpNcqkt1U9wUN9VNddPcNDfDzXBpLs3NdrPdHDfHzXPz3PzE+W6BW+AWuUUu3aW7DJfhMl2mW+qWuiyX5Za75W6lW+lWu9VurVvr1rv1bqPb6Da7zW6r2+q2uW1uh9vhdrldbo/b4/a6vW6f2+eyXbbb7/a7A+6AO+i+cTnuW3fIfecOu+/dEfeDO+p+dMfccXfCnXSn3E/utDvjzrpz7rz72V1wF90l511q5N3IlMh7kamR9yPTItMjMyIzI2mRWZHZkQ8icyJzI/MiH0bmRz6KLIgsjCyKLI6kRz6OZESWRDIjn0SWRj6NZEWWRZZHVkRWRlZFvC+6LfTFfQkf9Tf5kv5mn+hL+dK+jHe+rE/yt/hy/lZf3t/mK/jbfUV/h6/kK/sq/nHf3LfwLX0r39o/4dv4J31b386390/5Dv5p39E/45P9s76Tf8539s/7Lv4F39W/6Lv5l3x338P39C/7Xv4V39v38Sm+r+/nX/X9/QA/0L/mB/nX/WD/hh/i3/RD/TA/3L/lR/i3/Uj/jh/lR/sxfqwf58f7CX6in+Qn+1T/rp/i3/NT/ft+mp/uZ/iZPs3P8rP9B36On+vn+Q/9fP+RX+AX+kV+sU/3H/sMv8Rn+k/8Uv+pz/LL/HK/wq/0q/xqv8av9ev8er/Bb/Sb/Ga/xW/1n/ltfrvf4Xf6XX633+M/93v9F36f/9Jn+6/8fv8Xf8B/7Q/6b3yO/9Yf8t/5w/57f8T/4I/6H/0xf9yf8Cf9Kf+TP+3P+LP+nD/vf/YX/EV/6b/7nrU8/2M30hljjDHG/ldI/YPjfX/ne+LXcVk/ALh2e5Gcvz0uAWBjwb/OB4iEDhEAeLZPt0f+Y9SsmZKS8utjsyQEJRYCQORK/i9btF/jZdAenoZkaAflfre+AaLHefqD9aO3A8T+TU7MXz/m4D+tf+t/sf4TT43JqBiejf8H6y8ESCxxJScfXImvrF/+v1i/UJs/qD/f16kAbf8mJw6uxFfWT4In4TlI/rtHMsYYY4wxxhhjfzVAVOlCl6+I4R9fnyeoKzl54Ur8R9fnjDHGGGOMMcYYu/pe6NHzmSeSk9t1+bMmeQHgT13wf/skBv6/KIMnPPmnJlf7PxNjjDHGGGPsz3Zl03+1K2GMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxnKv/xcfJ3a1z5ExxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhi72v5PAAAA//+CHzd4") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 9m33.711285718s ago: executing program 6 (id=2167): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x2, 0x0, @loopback}, 0x1c) 9m33.458656681s ago: executing program 6 (id=2171): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x18, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x4}]}, 0x18}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803c0004"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 9m33.254956653s ago: executing program 6 (id=2174): mlockall(0x7) prlimit64(0x0, 0xe, 0x0, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000080)=@buf) io_setup(0x1015, &(0x7f0000000080)) 9m32.484367255s ago: executing program 6 (id=2185): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) mount_setattr(r0, &(0x7f00000001c0)='./file0/../file0\x00', 0x8000, &(0x7f00000002c0)={0x1, 0xa, 0x80000, {r0}}, 0x20) 9m32.215796055s ago: executing program 6 (id=2190): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) sendmsg$inet(r0, &(0x7f0000002500)={0x0, 0x0, 0x0}, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) landlock_restrict_self(r1, 0x8) 9m31.002065759s ago: executing program 6 (id=2205): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000002c0)={0x8400001e}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014", @ANYRES8=0x0, @ANYRES16=r0], 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a000111"], 0x30}}, 0x0) 9m30.409051051s ago: executing program 34 (id=2205): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000002c0)={0x8400001e}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014", @ANYRES8=0x0, @ANYRES16=r0], 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a000111"], 0x30}}, 0x0) 5m47.571593703s ago: executing program 3 (id=4692): r0 = fsopen(&(0x7f00000002c0)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x80) getdents64(r2, &(0x7f0000000f80)=""/4096, 0x1000) 5m46.776665617s ago: executing program 3 (id=4697): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001435010026bd0c333c84df250a4022fe", @ANYRES32, @ANYBLOB="140006000000000005"], 0x40}, 0x1, 0x0, 0x0, 0x811}, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv4_newaddr={0x40, 0x14, 0x509, 0x70bd27, 0x25dfdbfd, {0x2, 0x20, 0x0, 0xcb, r2}, [@IFA_ADDRESS={0x8, 0x1, @empty}, @IFA_RT_PRIORITY={0x8, 0x9, 0x200007}, @IFA_LOCAL={0x8, 0x2, @broadcast}, @IFA_RT_PRIORITY={0x8, 0x9, 0x6}, @IFA_RT_PRIORITY={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x4044814}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="18"], 0x18}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 5m46.075922086s ago: executing program 3 (id=4701): socket$inet_udp(0x2, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 5m45.536249596s ago: executing program 3 (id=4704): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10) sendto$inet(r0, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) recvmmsg(r0, &(0x7f00000031c0)=[{{0x0, 0x1802, &(0x7f0000000a40)=[{&(0x7f00000008c0)=""/135, 0x87}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000980)=""/146, 0x92}, {&(0x7f0000000080)=""/43, 0x2b}, {&(0x7f0000000a80)=""/242, 0xf2}, {&(0x7f0000000b80)=""/143, 0x8f}], 0x4}, 0x2}], 0x400000000000300, 0x22, 0x0) 5m44.293110713s ago: executing program 3 (id=4712): socket$inet(0x2b, 0x801, 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x836d9fb164f927b3) close(0x4) 5m42.940305469s ago: executing program 3 (id=4719): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000080)={[{@noload}, {@quota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@i_version}, {@quota}, {@quota}]}, 0x3, 0x443, &(0x7f0000000940)="$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") madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) getpgrp(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) syz_clone3(&(0x7f0000000140)={0x120006200, 0x0, 0x0, 0x0, {0x24}, 0x0, 0x0, 0x0, 0x0}, 0x58) 5m27.718769075s ago: executing program 35 (id=4719): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000080)={[{@noload}, {@quota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@i_version}, {@quota}, {@quota}]}, 0x3, 0x443, &(0x7f0000000940)="$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") madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) getpgrp(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) syz_clone3(&(0x7f0000000140)={0x120006200, 0x0, 0x0, 0x0, {0x24}, 0x0, 0x0, 0x0, 0x0}, 0x58) 3m11.193877145s ago: executing program 7 (id=5510): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x800, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffce, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000080), 0x8000, r1}, 0x38) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m9.457378069s ago: executing program 7 (id=5518): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f00000000c0)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, r3) setpgid(0x0, r3) fchdir(r2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) mknod$loop(&(0x7f00000017c0)='./file0\x00', 0x2480, 0x0) 3m6.246448189s ago: executing program 0 (id=5530): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x7, 0x4) sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)}, 0x4000800) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f00000004c0)={[{@jqfmt_vfsold}, {@jqfmt_vfsv0}, {@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}, {@noload}, {@grpjquota_path={'grpjquota', 0x3d, '.\x02'}}, {@noblock_validity}, {@resgid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}, {@errors_continue}]}, 0xfa, 0x491, &(0x7f0000000f00)="$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") clock_adjtime(0xffffffd3, &(0x7f0000000000)={0x8, 0x8a, 0xfffffffffffffff9, 0x2000000000009, 0x4000000007, 0x43, 0x52e6ac5d, 0x2000ffffffff, 0x9655, 0xfffffffffffffffe, 0xa, 0x9, 0x1, 0x8000000b, 0x80000000000000, 0xcc3, 0x1, 0x8, 0x16, 0x3, 0x100000000, 0x5, 0x9, 0xfffffffffffffffe, 0x3, 0xa}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x3, 0x0, 0x0) 3m5.910695758s ago: executing program 7 (id=5533): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) 3m4.010726497s ago: executing program 7 (id=5535): prlimit64(0x0, 0xb, &(0x7f0000000000)={0x0, 0x10000}, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x111) close(r0) r1 = inotify_init1(0x80000) fcntl$setstatus(r0, 0x4, 0x2c00) r2 = gettid() fcntl$setown(r0, 0x8, r2) fcntl$setsig(r0, 0xa, 0x22) inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa0000960) rmdir(&(0x7f0000000100)='./control\x00') 3m3.987155569s ago: executing program 0 (id=5538): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x80, &(0x7f0000000100)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0x61, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0x4d, 0x0, @wg=@initiation={0x1, 0x1, "65a252e7cb7a5918c004a9971a46afced2c32642b1ec9fe34818d8ccd82041b7", "c930713c550e74ee13c2638ac75b2a9666efd31a34fce4498df8105d8bd8ed283a220c3a9becd8a70d3607ea8270d351", "ae12e16b560f2f8ac4ca3e745ce285f12f6e8719e7f1e7f286a68f76", {"980aa8fb8f80d69f1fb587086447e93e", "55e824bb69e833bd36300b088233545a"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000006000)=[{{0x0, 0x0, 0x0}, 0x34ae}], 0x1, 0x22, 0x0) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000000)=0x3, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffe84}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x56ae, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x9f69a7a086f70ae8, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3m3.43663086s ago: executing program 7 (id=5543): syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2804c1a, &(0x7f0000000180)=ANY=[@ANYBLOB="636865636b3d72656c617865642c696f636861727365743d69736f383835392d312c6f76657272696465726f636b7065726d2c646d6f64653d3078303030303030300030303030303030392c686964652c6f76657272696465726f636b7065726d2c636865636b3d7374726963742c6d61703d6f66662c6d6f64653d3078303030303030303030303030303030312c696f636861727365743d63703933322c6e6f726f636b2c646d6f64653d3078666666666666666666666666666366612c6d61703d6e6f72bf616c2c6d61703d61636f726e2c6d6f1c113d307830233030303030303030065f41b4a73030303030352c686964652c657569643e9bffbbc8dc0831f1f71752c0ec6370d60ec0e169761a3a8f175112119b57f387cea723b9c1ceb05c28c44fa818248d2baadc1b5d05f2db2b872312abba57baab497f38ff34f39d07", @ANYRESDEC, @ANYRESOCT, @ANYRES32, @ANYRES8, @ANYRES8, @ANYRES8=0x0], 0x2, 0xa13, &(0x7f0000000300)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r0, 0x0, 0x0, 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_MCE_KILL(0x21, 0x1, 0x3) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) 2m57.433018763s ago: executing program 0 (id=5554): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa000000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) clock_adjtime(0x0, 0x0) 2m56.678465307s ago: executing program 7 (id=5556): openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) gettid() prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) mkdir(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1/file3\x00', 0x0) sendfile(r0, r0, 0x0, 0x200000) 2m55.947582114s ago: executing program 0 (id=5558): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0xa, 0x4}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x50, 0x0, &(0x7f0000000940)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10b0, 0x18, &(0x7f0000000400)={@ptr={0x66642a85, 0x0, 0x0, 0x0, 0x2, 0x3e}, @ptr={0x70742a85, 0x20000000, &(0x7f0000000580)=""/236, 0xec, 0x1, 0x26}, @fda={0x66646185, 0xc, 0x1, 0xb4}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1040}, @exit_looper], 0x0, 0x0, 0x0}) 2m55.453344338s ago: executing program 0 (id=5561): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x7) landlock_restrict_self(r1, 0x9) landlock_restrict_self(r0, 0xa) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r0, 0x6) landlock_restrict_self(r1, 0x5) landlock_restrict_self(r1, 0xa) link(&(0x7f0000000140)='.\x00', &(0x7f0000000180)='./file0\x00') 2m55.156722503s ago: executing program 0 (id=5564): sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd1}, 0x50) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000008c0)=ANY=[@ANYRES16, @ANYRES32, @ANYRESDEC, @ANYRES8, @ANYRES32, @ANYBLOB="400001801400020070696d367265673000000000000000001400020073797a5f74756e00", @ANYRES8, @ANYRES32, @ANYBLOB="1400", @ANYBLOB="b39487ce57695430d927980302b4cc2b384450befffac2d74e7f09b6eab8c401b0270bb64370f5fc9f059290abcd02c1860493cba1de7bc6ecd12ca51b7f564258f5bc71ac337e17056a4d604089fe4d62de21aa1ee9fefcdcea14be7cde39bb656366e22a822683b1bb74b6fbb7f2dcb69c2b50c1334eeecfa3d0a988a5895abed7957094d895633afad1c60579108c2b4412c236e0d4c239bccce62ecdc23fd0635f55c59f50a4ea45a6a088601fbae2"], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2m40.734923256s ago: executing program 36 (id=5556): openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) gettid() prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) mkdir(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1/file3\x00', 0x0) sendfile(r0, r0, 0x0, 0x200000) 2m39.351090872s ago: executing program 37 (id=5564): sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd1}, 0x50) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000008c0)=ANY=[@ANYRES16, @ANYRES32, @ANYRESDEC, @ANYRES8, @ANYRES32, @ANYBLOB="400001801400020070696d367265673000000000000000001400020073797a5f74756e00", @ANYRES8, @ANYRES32, @ANYBLOB="1400", @ANYBLOB="b39487ce57695430d927980302b4cc2b384450befffac2d74e7f09b6eab8c401b0270bb64370f5fc9f059290abcd02c1860493cba1de7bc6ecd12ca51b7f564258f5bc71ac337e17056a4d604089fe4d62de21aa1ee9fefcdcea14be7cde39bb656366e22a822683b1bb74b6fbb7f2dcb69c2b50c1334eeecfa3d0a988a5895abed7957094d895633afad1c60579108c2b4412c236e0d4c239bccce62ecdc23fd0635f55c59f50a4ea45a6a088601fbae2"], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.019724146s ago: executing program 4 (id=6863): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000300), 0x4) 1.019576993s ago: executing program 2 (id=6864): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000040)=@ethtool_cmd={0x2e, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x87, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80000045, [0x2, 0x89ff]}}) 772.723445ms ago: executing program 2 (id=6865): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) wait4(r0, 0x0, 0x2, 0x0) setpgid(r0, r0) 772.488068ms ago: executing program 4 (id=6866): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) wait4(r0, 0x0, 0x2, 0x0) setpgid(r0, r0) 617.339169ms ago: executing program 4 (id=6867): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000006"], 0x66) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xb97a, r0, 0x600000000000000}, 0x38) 616.896462ms ago: executing program 2 (id=6868): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000500)={0x6, {{0xa, 0x4e21, 0xffffffda, @mcast2, 0x72}}, 0x1, 0x1, [{{0xa, 0x4e23, 0xff, @rand_addr=' \x01\x00', 0xffe}}]}, 0x110) 414.228897ms ago: executing program 2 (id=6869): r0 = socket(0x2b, 0x80801, 0x1) ioctl$sock_netdev_private(r0, 0x89ff, &(0x7f0000000340)='^:') 370.999226ms ago: executing program 4 (id=6870): syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x5, 0xad0, &(0x7f0000000340)="$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") link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', 0x0) 165.149828ms ago: executing program 2 (id=6871): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x1412, 0x1, 0x4}, 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x0) 164.935238ms ago: executing program 4 (id=6872): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0x0, 0xfffffffc, 0x0, 0x0, 0xfc, "2af01c3d0064a3e0f95dc8507fff00"}) r0 = shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmctl$IPC_INFO(r0, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x8502, 0x0) write$sndseq(r2, 0x0, 0x0) unshare(0x20000400) fallocate(0xffffffffffffffff, 0x0, 0x9, 0x4) chdir(&(0x7f0000000540)='./cgroup\x00') copy_file_range(0xffffffffffffffff, &(0x7f00000000c0)=0xffffffffffff8000, 0xffffffffffffffff, 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b26, &(0x7f0000010500)={'virt_wifi0\x00', @random="a66765403b1b"}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x1f, 0x0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) 13.481382ms ago: executing program 2 (id=6873): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xc000, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 0s ago: executing program 4 (id=6874): r0 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x80) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000000c0)={"ae42ffff", 0x4, 0x5, 0x4, 0x100, 0x803, "000000ffff0600000800", '\x00', "05030400", '\x00\b\x00', ["0000000000000300", "6cb8ff080000000000fffd00", "f0ffffffffebffff00000010", "fdffffffff40b82dc44d00"]}) kernel console output (not intermixed with test programs): nfig 0 interface 0 has no altsetting 0 [ 386.871141][ T6422] usb 4-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 386.871162][ T6422] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.894087][ T6422] usb 4-1: config 0 descriptor?? [ 386.894932][T11993] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 387.342358][ T6422] hid_parser_main: 448 callbacks suppressed [ 387.342382][ T6422] elo 0003:04E7:0009.000F: unknown main item tag 0x0 [ 387.342410][ T6422] elo 0003:04E7:0009.000F: unknown main item tag 0x0 [ 387.343701][ T6422] elo 0003:04E7:0009.000F: unknown main item tag 0x0 [ 387.343736][ T6422] elo 0003:04E7:0009.000F: unknown main item tag 0x0 [ 387.343761][ T6422] elo 0003:04E7:0009.000F: unknown main item tag 0x0 [ 387.343784][ T6422] elo 0003:04E7:0009.000F: unknown main item tag 0x0 [ 387.343807][ T6422] elo 0003:04E7:0009.000F: unknown main item tag 0x0 [ 387.343831][ T6422] elo 0003:04E7:0009.000F: unknown main item tag 0x0 [ 387.343854][ T6422] elo 0003:04E7:0009.000F: unknown main item tag 0x0 [ 387.343877][ T6422] elo 0003:04E7:0009.000F: unknown main item tag 0x0 [ 387.355945][ T6422] elo 0003:04E7:0009.000F: hidraw0: USB HID v0.81 Device [HID 04e7:0009] on usb-dummy_hcd.3-1/input0 [ 387.596054][ T6422] usb 4-1: USB disconnect, device number 20 [ 387.666609][T12017] fido_id[12017]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 387.984344][ T760] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 388.342281][T12041] vcan0: tx drop: invalid sa for name 0xfffffffffffffffd [ 388.587327][ T3361] team0 (unregistering): Port device team_slave_1 removed [ 388.755589][ T3361] team0 (unregistering): Port device team_slave_0 removed [ 390.156577][T12093] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2448'. [ 390.537856][T11518] hsr_slave_0: entered promiscuous mode [ 390.541641][T11518] hsr_slave_1: entered promiscuous mode [ 390.548585][T11518] debugfs: 'hsr0' already exists in 'hsr' [ 390.548611][T11518] Cannot create hsr debugfs directory [ 390.552011][ T5277] 8021q: adding VLAN 0 to HW filter on device eth10 [ 390.598402][T12093] ipvlan2: entered allmulticast mode [ 390.598421][T12093] syz_tun: entered allmulticast mode [ 391.830452][T12136] loop2: detected capacity change from 0 to 128 [ 391.832274][T12136] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 392.537827][ T8703] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 393.309075][T12169] IPVS: Scheduler module ip_vs_sip not found [ 393.531541][T12184] loop3: detected capacity change from 0 to 2048 [ 393.651745][T12184] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 393.691263][T12184] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 393.904420][ T5621] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.294391][ T10] kernel read not supported for file /vcs (pid: 10 comm: kworker/0:1) [ 394.771102][T12215] loop0: detected capacity change from 0 to 1024 [ 394.777537][T12215] EXT4-fs: Ignoring removed bh option [ 394.875119][ T5277] 8021q: adding VLAN 0 to HW filter on device eth11 [ 394.908869][T12215] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 395.645974][ T5619] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.750989][T11518] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 395.812097][T11518] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 395.821088][T11518] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 395.889233][T11518] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 395.890661][T11518] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 396.145458][T12247] loop2: detected capacity change from 0 to 32768 [ 396.214230][T12247] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 396.373485][T11518] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 396.639853][T11518] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 396.866954][T11518] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 397.273435][ T5277] 8021q: adding VLAN 0 to HW filter on device eth12 [ 397.842763][T11518] 8021q: adding VLAN 0 to HW filter on device bond0 [ 397.979444][ T5618] ocfs2: Unmounting device (7,2) on (node local) [ 398.066556][T11518] 8021q: adding VLAN 0 to HW filter on device team0 [ 398.101305][ T8699] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.101458][ T8699] bridge0: port 1(bridge_slave_0) entered forwarding state [ 398.174141][T12305] input: syz1 as /devices/virtual/input/input20 [ 398.205103][ T8699] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.205226][ T8699] bridge0: port 2(bridge_slave_1) entered forwarding state [ 400.551108][T11518] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 400.720844][T12389] loop2: detected capacity change from 0 to 256 [ 400.751325][T12389] exfat: Deprecated parameter 'namecase' [ 400.751382][T12389] exfat: Deprecated parameter 'utf8' [ 400.808905][T12389] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xea424414, utbl_chksum : 0xe619d30d) [ 401.510813][T11518] veth0_vlan: entered promiscuous mode [ 401.587406][T11518] veth1_vlan: entered promiscuous mode [ 401.958023][T11518] veth0_macvtap: entered promiscuous mode [ 402.004426][T11518] veth1_macvtap: entered promiscuous mode [ 402.155234][T11518] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 402.229138][T11518] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 402.269648][ T8704] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.272569][ T8704] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.272610][ T8704] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.272642][ T8704] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.790298][ T5756] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 403.008174][T12445] loop0: detected capacity change from 0 to 4096 [ 403.018235][T12445] EXT4-fs: Ignoring removed orlov option [ 403.020190][ T5756] usb 4-1: Using ep0 maxpacket: 8 [ 403.054500][ T5756] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 403.054531][ T5756] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 403.054571][ T5756] usb 4-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 403.054593][ T5756] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.088802][ T5756] usb 4-1: config 0 descriptor?? [ 403.128201][T12445] EXT4-fs (loop0): Test dummy encryption mode enabled [ 403.318370][T12454] loop2: detected capacity change from 0 to 1024 [ 403.337362][T12445] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 403.466909][T12454] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 403.501461][T12454] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 403.539534][T12454] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 403.561166][ T5756] hid (null): report_id 370376188 is invalid [ 403.676680][ T8699] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.676701][ T8699] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.841056][ T5756] hid_parser_main: 25 callbacks suppressed [ 403.841080][ T5756] hid-rmi 0003:06CB:81A7.0010: unknown main item tag 0x6 [ 403.841106][ T5756] hid-rmi 0003:06CB:81A7.0010: report_id 370376188 is invalid [ 403.841122][ T5756] hid-rmi 0003:06CB:81A7.0010: item 0 4 1 8 parsing failed [ 403.841690][ T5756] hid-rmi 0003:06CB:81A7.0010: parse failed [ 403.841792][ T5756] hid-rmi 0003:06CB:81A7.0010: probe with driver hid-rmi failed with error -22 [ 403.911538][ T5756] usb 4-1: USB disconnect, device number 21 [ 405.035931][ T5619] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.081948][ T5618] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.268429][ T8702] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.268448][ T8702] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.749090][T12492] loop0: detected capacity change from 0 to 16 [ 405.792819][T12492] erofs (device loop0): mounted with root inode @ nid 36. [ 406.749248][T12527] Invalid argument reading file caps for ./file0 [ 406.776497][T12529] loop7: detected capacity change from 0 to 128 [ 407.083889][ T5603] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 407.166687][T12529] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 407.171569][T12529] ext4 filesystem being mounted at /1/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 407.256511][T12547] loop3: detected capacity change from 0 to 128 [ 407.290764][ T5603] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 407.290795][ T5603] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.290815][ T5603] usb 1-1: Product: syz [ 407.290830][ T5603] usb 1-1: Manufacturer: syz [ 407.290844][ T5603] usb 1-1: SerialNumber: syz [ 407.369943][ T5603] usb 1-1: config 0 descriptor?? [ 407.388451][ T5603] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 017 [ 407.812647][ T5603] (null): failure reading functionality [ 407.872465][ T5603] i2c i2c-1: connected i2c-tiny-usb device [ 407.941715][T11518] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 408.086945][ T6423] usb 1-1: USB disconnect, device number 17 [ 408.537075][T12579] netlink: 'syz.3.2629': attribute type 5 has an invalid length. [ 410.219142][T12648] netlink: 264 bytes leftover after parsing attributes in process `syz.0.2661'. [ 410.219169][T12648] netlink: 264 bytes leftover after parsing attributes in process `syz.0.2661'. [ 410.239270][T12650] loop3: detected capacity change from 0 to 256 [ 410.326630][T12650] exfat: Deprecated parameter 'namecase' [ 410.404096][T12650] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36df086c, utbl_chksum : 0xe619d30d) [ 411.240765][T12685] loop0: detected capacity change from 0 to 128 [ 411.295009][T12685] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 411.557851][ T8703] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 411.814169][ T5603] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 411.964133][ T5603] usb 4-1: Using ep0 maxpacket: 16 [ 411.980975][ T5603] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 411.981004][ T5603] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.981023][ T5603] usb 4-1: Product: syz [ 411.981037][ T5603] usb 4-1: Manufacturer: syz [ 411.981051][ T5603] usb 4-1: SerialNumber: syz [ 412.036936][ T5603] usb 4-1: config 0 descriptor?? [ 412.052030][ T5603] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 413.116738][ T5603] ssu100 4-1:0.0: probe with driver ssu100 failed with error -71 [ 413.124083][ T6423] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 413.168769][ T5603] usb 4-1: USB disconnect, device number 22 [ 413.308068][ T6423] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 413.308125][ T6423] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 413.308149][ T6423] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.343994][ T6423] usb 1-1: config 0 descriptor?? [ 413.691204][T12737] loop7: detected capacity change from 0 to 32768 [ 413.872579][ T6423] keytouch 0003:0926:3333.0011: fixing up Keytouch IEC report descriptor [ 413.873214][T12737] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 413.914838][ T6423] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0011/input/input23 [ 414.161882][T12737] XFS (loop7): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 414.489694][T12737] XFS (loop7): Starting recovery (logdev: internal) [ 414.890572][T12737] XFS (loop7): Ending recovery (logdev: internal) [ 415.169876][T11518] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 415.967951][ T6423] keytouch 0003:0926:3333.0011: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 415.972463][ T6423] usb 1-1: USB disconnect, device number 18 [ 416.579580][T12838] fido_id[12838]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 417.398992][T12821] loop3: detected capacity change from 0 to 32768 [ 418.159117][T12887] input: syz1 as /devices/virtual/input/input24 [ 418.215211][T12887] input: failed to attach handler leds to device input24, error: -6 [ 418.573785][ T5603] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 418.723954][ T5603] usb 8-1: Using ep0 maxpacket: 16 [ 418.726233][ T5603] usb 8-1: config 0 has an invalid interface number: 34 but max is 0 [ 418.726258][ T5603] usb 8-1: config 0 has no interface number 0 [ 418.726301][ T5603] usb 8-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 418.726326][ T5603] usb 8-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 418.772285][ T5603] usb 8-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 418.772315][ T5603] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.772335][ T5603] usb 8-1: Product: syz [ 418.772349][ T5603] usb 8-1: Manufacturer: syz [ 418.772363][ T5603] usb 8-1: SerialNumber: syz [ 418.813851][ T5603] usb 8-1: config 0 descriptor?? [ 418.816198][T12892] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 418.816299][T12892] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 419.009363][T12909] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.011411][ T8697] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 419.012831][T12909] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.087365][T12892] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 419.087483][T12892] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 419.291723][ T5603] asix 8-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 419.936983][ T5603] asix 8-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 419.937014][ T5603] asix 8-1:0.34 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 419.954037][ T5603] asix 8-1:0.34: probe with driver asix failed with error -71 [ 419.965540][T12940] loop0: detected capacity change from 0 to 1024 [ 419.966626][T12940] EXT4-fs: Ignoring removed bh option [ 420.002158][ T5603] usb 8-1: USB disconnect, device number 2 [ 420.030334][T12940] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 420.127050][ T37] audit: type=1800 audit(1780002001.099:104): pid=12940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2772" name="file2" dev="loop0" ino=19 res=0 errno=0 [ 420.355318][ T5619] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.219556][T12980] loop3: detected capacity change from 0 to 1764 [ 421.335698][ T5636] Bluetooth: hci4: unexpected event for opcode 0x1005 [ 421.687141][T13002] loop0: detected capacity change from 0 to 512 [ 421.732240][T13002] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.2800: iget: bad i_size value: 38620345925642 [ 421.732275][T13002] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 421.733650][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 421.733668][ C1] EXT4-fs (loop0): initial error at time 1780002002: ext4_orphan_get:1397: inode 15 [ 421.733692][ C1] EXT4-fs (loop0): last error at time 1780002002: ext4_orphan_get:1397: inode 15 [ 421.788111][T13002] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.2800: couldn't read orphan inode 15 (err -117) [ 421.788143][T13002] loop0: lost filesystem error report for type 5 error -117 [ 421.908516][T13002] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 422.151981][T13011] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.2800: bg 0: block 5: invalid block bitmap [ 422.308431][ T5619] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.327156][T13020] loop7: detected capacity change from 0 to 256 [ 422.329726][T13020] exfat: Deprecated parameter 'utf8' [ 422.329781][T13020] exfat: Deprecated parameter 'namecase' [ 422.329883][T13020] exfat: Deprecated parameter 'namecase' [ 422.329906][T13020] exfat: Deprecated parameter 'utf8' [ 422.499565][T13020] exFAT-fs (loop7): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 422.499961][T13020] exFAT-fs (loop7): failed to test first cluster bit of root dir(5) [ 422.991306][ T5603] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 423.325847][T13048] loop7: detected capacity change from 0 to 32768 [ 423.333273][T13048] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.2814 (13048) [ 423.337385][ T6422] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 423.393430][T13048] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 423.393464][T13048] BTRFS info (device loop7): using sha256 checksum algorithm [ 423.466482][ T5603] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 423.466513][ T5603] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.491212][ T6422] usb 4-1: Using ep0 maxpacket: 32 [ 423.502972][ T6422] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 423.503000][ T6422] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.503020][ T6422] usb 4-1: Product: syz [ 423.503033][ T6422] usb 4-1: Manufacturer: syz [ 423.503047][ T6422] usb 4-1: SerialNumber: syz [ 423.503071][ T5603] usb 1-1: config 0 descriptor?? [ 423.569561][ T6422] usb 4-1: config 0 descriptor?? [ 423.569883][ T5603] cp210x 1-1:0.0: cp210x converter detected [ 423.592996][T13048] BTRFS info (device loop7): rebuilding free space tree [ 423.778513][T13048] BTRFS info (device loop7): allowing degraded mounts [ 423.778539][T13048] BTRFS info (device loop7): enabling ssd optimizations [ 423.778556][T13048] BTRFS info (device loop7): using spread ssd allocation scheme [ 423.778573][T13048] BTRFS info (device loop7): turning on async discard [ 423.778589][T13048] BTRFS info (device loop7): enabling free space tree [ 423.778605][T13048] BTRFS info (device loop7): force clearing of disk cache [ 423.778622][T13048] BTRFS info (device loop7): enabling auto defrag [ 423.957292][ T5603] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 423.958115][ T5603] cp210x 1-1:0.0: GPIO initialisation failed: -524 [ 423.998956][ T5603] usb 1-1: cp210x converter now attached to ttyUSB0 [ 424.096039][ T6422] airspy 4-1:0.0: Board ID: 00 [ 424.096059][ T6422] airspy 4-1:0.0: Firmware version: [ 424.354877][ T50] usb 1-1: USB disconnect, device number 19 [ 424.387922][ T50] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 424.423796][ T50] cp210x 1-1:0.0: device disconnected [ 424.783750][ T6422] airspy 4-1:0.0: usb_control_msg() failed -71 request 12 [ 425.306856][ T6422] airspy 4-1:0.0: Registered as swradio24 [ 425.306877][ T6422] airspy 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 425.331801][ T6422] usb 4-1: USB disconnect, device number 23 [ 425.599041][T11518] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 425.910158][ T4157] BTRFS info (device loop7): qgroup scan completed (inconsistency flag cleared) [ 426.714402][ T6422] kernel read not supported for file /1109/net/snmp6 (pid: 6422 comm: kworker/1:7) [ 426.823214][T13150] loop3: detected capacity change from 0 to 128 [ 431.115407][ T5603] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 431.266057][ T5603] usb 1-1: Using ep0 maxpacket: 16 [ 431.269678][ T5603] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 431.269732][ T5603] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 431.269760][ T5603] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 431.271681][ T5603] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 431.271709][ T5603] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 431.271728][ T5603] usb 1-1: SerialNumber: syz [ 431.362478][ T5603] hub 1-1:1.0: bad descriptor, ignoring hub [ 431.362514][ T5603] hub 1-1:1.0: probe with driver hub failed with error -5 [ 431.379746][ T5603] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 431.685463][ T5603] usb 1-1: USB disconnect, device number 20 [ 432.445128][T13328] loop7: detected capacity change from 0 to 32768 [ 433.353108][T13388] loop7: detected capacity change from 0 to 512 [ 433.365274][T13388] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 433.406106][T13388] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.2976: invalid indirect mapped block 9 (level 0) [ 433.406145][T13388] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 433.409700][T13388] EXT4-fs (loop7): Remounting filesystem read-only [ 433.409800][T13388] EXT4-fs (loop7): 1 truncate cleaned up [ 433.462679][T13388] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 433.701226][T11518] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.511767][T13433] loop7: detected capacity change from 0 to 128 [ 434.549484][T13433] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 434.898896][ T8705] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 435.166896][T13459] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3009'. [ 435.244040][T13459] macvlan0: left promiscuous mode [ 435.301455][T13459] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3009'. [ 438.347237][T13567] loop7: detected capacity change from 0 to 32768 [ 438.361177][T13567] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.3056 (13567) [ 438.462408][T13567] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 438.462429][T13567] BTRFS info (device loop7): using sha256 checksum algorithm [ 438.879061][T13567] BTRFS info (device loop7): rebuilding free space tree [ 439.525050][T13643] loop0: detected capacity change from 0 to 512 [ 439.552271][T13643] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 439.598695][T13643] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.3085: bad orphan inode 131083 [ 439.598724][T13643] loop0: lost filesystem error report for type 5 error -117 [ 439.607617][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 439.607637][ C1] EXT4-fs (loop0): initial error at time 1780002020: ext4_orphan_get:1423 [ 439.607656][ C1] EXT4-fs (loop0): last error at time 1780002020: ext4_orphan_get:1423 [ 439.727503][T13643] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 439.773908][T13643] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1332: inode #12: block 7: comm syz.0.3085: path /496/bus/file0: bad entry in directory: directory entry overrun - offset=80, inode=1560281102, rec_len=1024, size=60 fake=0 [ 440.008382][T13567] BTRFS info (device loop7): allowing degraded mounts [ 440.008407][T13567] BTRFS info (device loop7): enabling ssd optimizations [ 440.008423][T13567] BTRFS info (device loop7): using spread ssd allocation scheme [ 440.008441][T13567] BTRFS info (device loop7): turning on async discard [ 440.008457][T13567] BTRFS info (device loop7): enabling free space tree [ 440.008472][T13567] BTRFS info (device loop7): force clearing of disk cache [ 440.008489][T13567] BTRFS info (device loop7): enabling auto defrag [ 440.027785][ T5619] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.080864][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.080942][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.632425][T13693] netlink: 27 bytes leftover after parsing attributes in process `syz.0.3106'. [ 442.709114][T13721] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3120'. [ 442.763369][ T3361] BTRFS info (device loop7): qgroup scan completed (inconsistency flag cleared) [ 442.801236][T11518] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 444.086064][T13761] loop7: detected capacity change from 0 to 512 [ 444.097146][T13761] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 444.189574][T13761] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 444.189711][T13761] ext4 filesystem being mounted at /42/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 444.387209][T11518] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 446.834888][ T5636] Bluetooth: hci1: command tx timeout [ 447.303741][ T6422] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 447.485508][ T6422] usb 1-1: too many endpoints for config 0 interface 0 altsetting 15: 254, using maximum allowed: 30 [ 447.485554][ T6422] usb 1-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 447.485582][ T6422] usb 1-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 447.485611][ T6422] usb 1-1: config 0 interface 0 has no altsetting 0 [ 447.485643][ T6422] usb 1-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 447.485666][ T6422] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.521253][ T6422] usb 1-1: config 0 descriptor?? [ 447.523470][T13872] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 447.984009][ T5893] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 448.052422][ T6422] belkin 0003:1020:0006.0012: unexpected long global item [ 448.053141][ T6422] belkin 0003:1020:0006.0012: parse failed [ 448.105978][ T6422] belkin 0003:1020:0006.0012: probe with driver belkin failed with error -22 [ 448.163862][ T5893] usb 8-1: Using ep0 maxpacket: 16 [ 448.166284][ T5893] usb 8-1: unable to get BOS descriptor or descriptor too short [ 448.166361][ T5893] usb 8-1: too many configurations: 32, using maximum allowed: 8 [ 448.167624][ T5893] usb 8-1: config 9 has an invalid interface number: 57 but max is 0 [ 448.167648][ T5893] usb 8-1: config 9 has no interface number 0 [ 448.167678][ T5893] usb 8-1: config 9 interface 57 has no altsetting 0 [ 448.172195][ T5893] usb 8-1: config 9 has an invalid interface number: 57 but max is 0 [ 448.172218][ T5893] usb 8-1: config 9 has no interface number 0 [ 448.172247][ T5893] usb 8-1: config 9 interface 57 has no altsetting 0 [ 448.179417][ T5893] usb 8-1: config 9 has an invalid interface number: 57 but max is 0 [ 448.179441][ T5893] usb 8-1: config 9 has no interface number 0 [ 448.179470][ T5893] usb 8-1: config 9 interface 57 has no altsetting 0 [ 448.180637][ T5893] usb 8-1: config 9 has an invalid interface number: 57 but max is 0 [ 448.180659][ T5893] usb 8-1: config 9 has no interface number 0 [ 448.180687][ T5893] usb 8-1: config 9 interface 57 has no altsetting 0 [ 448.190642][ T5893] usb 8-1: config 9 has an invalid interface number: 57 but max is 0 [ 448.190666][ T5893] usb 8-1: config 9 has no interface number 0 [ 448.190694][ T5893] usb 8-1: config 9 interface 57 has no altsetting 0 [ 448.191876][ T5893] usb 8-1: config 9 has an invalid interface number: 57 but max is 0 [ 448.191897][ T5893] usb 8-1: config 9 has no interface number 0 [ 448.191926][ T5893] usb 8-1: config 9 interface 57 has no altsetting 0 [ 448.201241][ T5893] usb 8-1: config 9 has an invalid interface number: 57 but max is 0 [ 448.201265][ T5893] usb 8-1: config 9 has no interface number 0 [ 448.201293][ T5893] usb 8-1: config 9 interface 57 has no altsetting 0 [ 448.208897][ T5893] usb 8-1: config 9 has an invalid interface number: 57 but max is 0 [ 448.208921][ T5893] usb 8-1: config 9 has no interface number 0 [ 448.208950][ T5893] usb 8-1: config 9 interface 57 has no altsetting 0 [ 448.216971][ T5893] usb 8-1: string descriptor 0 read error: -22 [ 448.217103][ T5893] usb 8-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=61.f7 [ 448.217126][ T5893] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.312751][ T6422] usb 1-1: USB disconnect, device number 21 [ 449.333014][ T5893] video4linux radio48: keene_cmd_set failed (-71) [ 449.333039][ T5893] radio-keene 8-1:9.57: V4L2 device registered as radio48 [ 449.340146][ T5893] usb 8-1: USB disconnect, device number 3 [ 449.849929][T13962] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 449.849958][T13962] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 450.141750][ T1462] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 450.211106][T13981] loop7: detected capacity change from 0 to 512 [ 450.212856][T13981] EXT4-fs (loop7): Test dummy encryption mode enabled [ 450.212875][T13981] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 450.247180][T13981] EXT4-fs error (device loop7): ext4_orphan_get:1423: comm syz.7.3243: bad orphan inode 131083 [ 450.247210][T13981] loop7: lost filesystem error report for type 5 error -117 [ 450.253648][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 450.253667][ C0] EXT4-fs (loop7): initial error at time 1780002031: ext4_orphan_get:1423 [ 450.253683][ C0] EXT4-fs (loop7): last error at time 1780002031: ext4_orphan_get:1423 [ 450.421646][T13981] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 450.619692][ T6422] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 450.880643][ T6422] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 451.017739][T11518] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.720240][T14024] block nbd7: NBD_DISCONNECT [ 453.179457][T14036] loop7: detected capacity change from 0 to 32768 [ 453.420545][ T5756] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 453.656559][T14054] loop3: detected capacity change from 0 to 131072 [ 453.690371][T14054] F2FS-fs (loop3): invalid crc value [ 453.696073][ T5756] usb 1-1: config 150 has an invalid interface number: 204 but max is 2 [ 453.696100][ T5756] usb 1-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 453.696121][ T5756] usb 1-1: config 150 has no interface number 0 [ 453.696162][ T5756] usb 1-1: config 150 interface 204 has no altsetting 0 [ 453.740686][ T5756] usb 1-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 453.740714][ T5756] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.740734][ T5756] usb 1-1: Product: syz [ 453.740748][ T5756] usb 1-1: Manufacturer: syz [ 453.740762][ T5756] usb 1-1: SerialNumber: syz [ 453.903975][T14054] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 453.933530][T14054] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 454.164562][ T5756] xr_serial 1-1:150.204: skipping garbage [ 454.164617][ T5756] xr_serial 1-1:150.204: xr_serial converter detected [ 454.981219][ T5756] xr_serial ttyUSB0: Failed to set reg 0x0e: -71 [ 454.981279][ T5756] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 455.025295][ T5756] usb 1-1: USB disconnect, device number 22 [ 455.067472][ T5756] xr_serial 1-1:150.204: device disconnected [ 455.982046][T14137] loop0: detected capacity change from 0 to 128 [ 456.815364][T14160] bond0: entered promiscuous mode [ 456.815386][T14160] bond_slave_0: entered promiscuous mode [ 456.815609][T14160] bond_slave_1: entered promiscuous mode [ 456.918184][T14160] batadv0: entered promiscuous mode [ 457.551948][T14178] netlink: 80 bytes leftover after parsing attributes in process `syz.7.3333'. [ 457.688008][T14152] loop0: detected capacity change from 0 to 8 [ 457.761345][T14152] SQUASHFS error: lzo decompression failed, data probably corrupt [ 457.761377][T14152] SQUASHFS error: Failed to read block 0x91: -5 [ 457.761396][T14152] SQUASHFS error: Unable to read metadata cache entry [8f] [ 457.761412][T14152] SQUASHFS error: Unable to read inode 0x11f [ 458.464628][T14215] netlink: 'syz.3.3351': attribute type 4 has an invalid length. [ 459.571932][T14260] loop7: detected capacity change from 0 to 512 [ 459.611585][T14260] EXT4-fs error (device loop7): __ext4_iget:5481: inode #11: block 1: comm syz.7.3373: invalid block [ 459.611618][T14260] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 459.612172][T14260] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.3373: couldn't read orphan inode 11 (err -117) [ 459.612200][T14260] loop7: lost filesystem error report for type 5 error -117 [ 459.613647][ C0] EXT4-fs (loop7): error count since last fsck: 2 [ 459.613665][ C0] EXT4-fs (loop7): initial error at time 1780002040: __ext4_iget:5481: inode 11: block 1 [ 459.613694][ C0] EXT4-fs (loop7): last error at time 1780002040: ext4_orphan_get:1402 [ 459.702809][T14260] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 459.758746][T14260] EXT4-fs error (device loop7): __ext4_add_entry:2412: inode #2: comm syz.7.3373: Directory hole found for htree leaf block 0 [ 459.853102][T11518] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.092784][T14288] loop3: detected capacity change from 0 to 128 [ 460.161631][T14288] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 460.188502][T14288] ext4 filesystem being mounted at /571/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 460.694626][ T5621] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 461.112294][T14333] loop7: detected capacity change from 0 to 512 [ 461.124508][T14333] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 461.133901][T14333] EXT4-fs (loop7): 1 truncate cleaned up [ 461.142291][T14333] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 461.169735][T14333] EXT4-fs error (device loop7): ext4_generic_delete_entry:2673: inode #2: block 13: comm syz.7.3404: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 461.183687][T14333] EXT4-fs (loop7): Remounting filesystem read-only [ 461.183709][T14333] EXT4-fs warning (device loop7): ext4_rename_delete:3739: inode #2: comm syz.7.3404: Deleting old file: nlink 4, error=-117 [ 461.349940][T11518] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 461.700641][T14359] loop0: detected capacity change from 0 to 256 [ 461.709469][T14359] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 461.709486][T14359] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 461.740049][T14359] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xda9016d0, utbl_chksum : 0xe619d30d) [ 461.746769][T14359] exFAT-fs (loop0): failed to load alloc-bitmap [ 461.746784][T14359] exFAT-fs (loop0): failed to recognize exfat type [ 465.646572][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 465.863848][ T5756] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 466.016898][ T5756] usb 8-1: Using ep0 maxpacket: 32 [ 466.023943][ T5756] usb 8-1: config 0 has an invalid interface number: 184 but max is 0 [ 466.023968][ T5756] usb 8-1: config 0 has no interface number 0 [ 466.024012][ T5756] usb 8-1: config 0 interface 184 has no altsetting 0 [ 466.054138][ T5756] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 466.054167][ T5756] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.054187][ T5756] usb 8-1: Product: syz [ 466.054200][ T5756] usb 8-1: Manufacturer: syz [ 466.054214][ T5756] usb 8-1: SerialNumber: syz [ 466.101841][ T5756] usb 8-1: config 0 descriptor?? [ 467.181995][ T5756] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 467.182026][ T5756] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 467.182647][ T5756] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 467.182674][ T5756] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 467.182694][ T5756] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 467.182714][ T5756] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 467.183012][ T5756] smsc75xx 8-1:0.184: probe with driver smsc75xx failed with error -71 [ 467.223966][ T5756] usb 8-1: USB disconnect, device number 4 [ 467.717473][T14562] loop3: detected capacity change from 0 to 512 [ 467.723124][T14562] EXT4-fs: Ignoring removed nomblk_io_submit option [ 467.738919][T14562] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 468.138708][T14562] EXT4-fs (loop3): 1 truncate cleaned up [ 468.301602][T14562] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 469.112486][ T5621] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 471.390423][T14670] loop0: detected capacity change from 0 to 1024 [ 471.568168][T14670] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 471.568301][T14670] ext4 filesystem being mounted at /542/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 471.667121][T14679] loop3: detected capacity change from 0 to 2048 [ 471.784685][T14679] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 471.918449][T14679] EXT4-fs (loop3): shut down requested (1) [ 471.919447][ T5619] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 472.068819][ T5621] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 474.750608][T14790] loop3: detected capacity change from 0 to 128 [ 474.786463][T14790] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 474.790477][T14790] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 475.530001][T14818] input: syz1 as /devices/virtual/input/input27 [ 477.473786][ T9] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 477.623786][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 477.631980][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 477.633207][ T9] usb 1-1: config 4 has an invalid interface number: 28 but max is 0 [ 477.633230][ T9] usb 1-1: config 4 has no interface number 0 [ 477.633261][ T9] usb 1-1: config 4 interface 28 has no altsetting 0 [ 477.664779][ T9] usb 1-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.02 [ 477.664807][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.664826][ T9] usb 1-1: Product: syz [ 477.664840][ T9] usb 1-1: Manufacturer: syz [ 477.664854][ T9] usb 1-1: SerialNumber: syz [ 478.072328][ T9] usb 1-1: USB disconnect, device number 23 [ 479.563753][ T5893] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 479.726818][ T5893] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 479.726843][ T5893] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 479.726863][ T5893] usb 8-1: config 1 has no interface number 0 [ 479.726906][ T5893] usb 8-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 479.726931][ T5893] usb 8-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 479.726957][ T5893] usb 8-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 479.731700][ T5893] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 479.731728][ T5893] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.731747][ T5893] usb 8-1: Product: syz [ 479.731761][ T5893] usb 8-1: Manufacturer: syz [ 479.731775][ T5893] usb 8-1: SerialNumber: syz [ 479.762396][T14933] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 480.191974][T14933] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 480.676495][ T5893] cdc_ncm 8-1:1.1: bind() failure [ 480.707773][ T5893] usb 8-1: USB disconnect, device number 5 [ 481.280137][ T8699] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 481.342662][T14994] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3699'. [ 481.342687][T14994] block nbd0: Unsupported socket: should be TCP or UNIX. [ 482.274359][ T5893] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 482.473702][ T5893] usb 1-1: Using ep0 maxpacket: 8 [ 482.476064][ T5893] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 482.476090][ T5893] usb 1-1: config 179 has no interface number 0 [ 482.476135][ T5893] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 482.476162][ T5893] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 482.476190][ T5893] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 482.476216][ T5893] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 482.476242][ T5893] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 482.476282][ T5893] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 482.476303][ T5893] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.491334][T15019] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 483.046613][T15019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.075124][T15019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.452140][ T9] usb 1-1: USB disconnect, device number 24 [ 483.452144][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 483.452566][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 484.061743][ T50] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input28 [ 485.702534][T15122] loop7: detected capacity change from 0 to 128 [ 485.736331][T15122] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 485.740936][T15122] ext4 filesystem being mounted at /115/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 486.591086][T11518] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 488.886326][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803a8dd400: rx timeout, send abort [ 489.386411][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803a8dd400: abort rx timeout. Force session deactivation [ 489.391793][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803bc03c00: rx timeout, send abort [ 489.891864][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803bc03c00: abort rx timeout. Force session deactivation [ 490.774700][T15296] loop3: detected capacity change from 0 to 1024 [ 492.112355][T15322] loop0: detected capacity change from 0 to 32768 [ 492.113464][T15322] btrfs: Deprecated parameter 'usebackuproot' [ 492.113483][T15322] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 492.114769][T15322] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.3857 (15322) [ 492.219185][T15322] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 492.219218][T15322] BTRFS info (device loop0): using crc32c checksum algorithm [ 492.348257][ T8699] BTRFS warning (device loop0): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 492.348372][T15322] BTRFS error (device loop0): failed to load root extent [ 492.356630][T15322] BTRFS warning (device loop0): try to load backup roots slot 1 [ 492.357661][ T8699] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 492.357776][T15322] BTRFS warning (device loop0): couldn't read tree root [ 492.357794][T15322] BTRFS warning (device loop0): try to load backup roots slot 2 [ 492.358151][ T8699] BTRFS error (device loop0): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 492.358248][T15322] BTRFS warning (device loop0): couldn't read tree root [ 492.358267][T15322] BTRFS warning (device loop0): try to load backup roots slot 3 [ 492.387346][T15322] BTRFS info (device loop0): rebuilding free space tree [ 492.482495][T15322] BTRFS info (device loop0): checking UUID tree [ 492.489569][T15322] BTRFS info (device loop0): enabling ssd optimizations [ 492.489594][T15322] BTRFS info (device loop0): turning on async discard [ 492.489610][T15322] BTRFS info (device loop0): enabling free space tree [ 492.489626][T15322] BTRFS info (device loop0): force clearing of disk cache [ 492.489641][T15322] BTRFS info (device loop0): enabling auto defrag [ 492.489656][T15322] BTRFS info (device loop0): trying to use backup root at mount time [ 492.489674][T15322] BTRFS info (device loop0): use zstd compression, level 3 [ 493.989481][ T5619] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 496.552536][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88802751b400: rx timeout, send abort [ 496.553251][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88802751b400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 497.102313][T15510] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 499.543811][ T5603] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 499.695264][ T5603] usb 8-1: Using ep0 maxpacket: 16 [ 499.717088][ T5603] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 499.717113][ T5603] usb 8-1: config 0 has no interfaces? [ 499.717142][ T5603] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 499.717165][ T5603] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.755273][ T5603] usb 8-1: config 0 descriptor?? [ 500.010660][ T6422] usb 8-1: USB disconnect, device number 6 [ 500.802021][T15635] ip6erspan0: entered allmulticast mode [ 501.485079][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.485184][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.676122][ T5636] Bluetooth: hci4: Invalid handle: 0xffff > 0x0eff [ 502.276573][ T5893] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 502.425147][ T5893] usb 1-1: Using ep0 maxpacket: 32 [ 502.427605][ T5893] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x61, changing to 0x1 [ 502.427635][ T5893] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 97, changing to 7 [ 502.427661][ T5893] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 24929, setting to 1024 [ 502.430480][ T5893] usb 1-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 502.430507][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.430526][ T5893] usb 1-1: Product: syz [ 502.430540][ T5893] usb 1-1: Manufacturer: syz [ 502.430554][ T5893] usb 1-1: SerialNumber: syz [ 502.526440][ T5893] usb 1-1: config 0 descriptor?? [ 502.532726][ T5893] usb 1-1: no audio or video endpoints found [ 502.740402][ T5603] usb 1-1: USB disconnect, device number 25 [ 505.016979][T15745] loop0: detected capacity change from 0 to 256 [ 505.102535][T15745] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 509.637745][ T5603] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 509.823700][ T5603] usb 8-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 509.823731][ T5603] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.823751][ T5603] usb 8-1: Product: syz [ 509.823766][ T5603] usb 8-1: Manufacturer: syz [ 509.823780][ T5603] usb 8-1: SerialNumber: syz [ 509.902654][ T5603] usb 8-1: config 0 descriptor?? [ 510.490176][ T5603] usb 8-1: Firmware: major: 49, minor: 56, hardware type: UNKNOWN (52) [ 510.692148][ T5603] usb 8-1: Read permanent extended address fa:89:ef:7e:4b:71:68:e0 from device [ 510.692173][ T5603] usb 8-1: atusb_probe: initialization failed, error = -524 [ 510.692413][ T5603] atusb 8-1:0.0: probe with driver atusb failed with error -524 [ 510.993868][ T5603] usb 8-1: USB disconnect, device number 7 [ 512.299934][ T8698] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 513.496861][T15895] virt_wifi0 speed is unknown, defaulting to 1000 [ 513.497514][T15895] virt_wifi0 speed is unknown, defaulting to 1000 [ 513.503377][T15895] virt_wifi0 speed is unknown, defaulting to 1000 [ 513.508034][T15895] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 513.508069][T15895] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 513.508137][T15895] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 513.515051][T15895] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 513.530953][T15895] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 513.685572][T15895] virt_wifi0 speed is unknown, defaulting to 1000 [ 513.693118][T15895] virt_wifi0 speed is unknown, defaulting to 1000 [ 513.698066][T15895] virt_wifi0 speed is unknown, defaulting to 1000 [ 513.702967][T15895] virt_wifi0 speed is unknown, defaulting to 1000 [ 513.706248][T15895] virt_wifi0 speed is unknown, defaulting to 1000 [ 515.476990][T15919] io-wq is not configured for unbound workers [ 519.387204][T15985] loop0: detected capacity change from 0 to 1024 [ 519.517638][T15985] EXT4-fs: Ignoring removed nobh option [ 519.744818][T15985] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 519.744965][T15985] ext4 filesystem being mounted at /614/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 520.758760][T15994] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 521.202837][ T5619] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 524.759308][T16066] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4196'. [ 524.778296][T16066] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4196'. [ 533.654972][T16222] loop7: detected capacity change from 0 to 256 [ 536.538166][ T5603] IPVS: starting estimator thread 0... [ 536.572579][T16282] tipc: Started in network mode [ 536.572645][T16282] tipc: Node identity ac1414aa, cluster identity 4711 [ 536.628191][T16284] IPVS: using max 8 ests per chain, 19200 per kthread [ 537.189525][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 537.281299][T16282] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 537.326919][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 537.359307][T16296] netlink: 'syz.3.4302': attribute type 4 has an invalid length. [ 537.439808][T16282] tipc: Enabled bearer , priority 10 [ 537.466658][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 537.604061][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 537.744050][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 537.883827][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 538.024039][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 538.170980][ T9] tipc: Node number set to 2886997162 [ 538.307957][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 538.573939][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 539.207143][T16288] kexec: Could not allocate control_code_buffer [ 542.194018][ C0] net_ratelimit: 3 callbacks suppressed [ 542.194035][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 542.217922][T16364] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4335'. [ 542.217943][T16364] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4335'. [ 542.218397][T16364] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4335'. [ 542.218413][T16364] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4335'. [ 543.235557][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 544.370125][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 544.428998][ T760] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 544.631101][T16401] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4350'. [ 544.631124][T16401] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4350'. [ 545.394028][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 546.357032][T16434] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 546.435105][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 546.893138][T16450] netlink: 'syz.3.4373': attribute type 2 has an invalid length. [ 546.893159][T16450] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4373'. [ 547.474013][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 547.600577][T16460] loop7: detected capacity change from 0 to 512 [ 547.705154][T16460] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 548.127884][T11518] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 548.514075][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 549.553993][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 550.594041][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 551.633988][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 552.680310][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 553.713802][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 554.763866][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 555.794111][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 556.163438][T16589] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4437'. [ 556.723200][T16599] Invalid ELF header len 12 [ 556.834035][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 557.874077][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 558.914122][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 559.953882][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 560.995485][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 561.932073][T16690] loop0: detected capacity change from 0 to 128 [ 562.034094][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 562.919960][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.920059][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.074124][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 563.921852][T16723] loop7: detected capacity change from 0 to 2048 [ 564.062436][T16723] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 564.114162][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 564.867064][T11518] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 565.154240][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 565.262935][T16748] loop0: detected capacity change from 0 to 2048 [ 565.384433][T16748] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 565.384456][T16748] UDF-fs: Scanning with blocksize 512 failed [ 565.642563][T16748] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 565.984113][ T37] audit: type=1800 audit(1780002146.949:105): pid=16748 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4493" name="file1" dev="loop0" ino=818 res=0 errno=0 [ 566.194201][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 567.239044][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 570.807097][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 571.901145][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 572.529723][ T5636] Bluetooth: hci1: command 0x0406 tx timeout [ 572.883744][ T5603] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 572.890029][T16834] netlink: 'syz.3.4550': attribute type 1 has an invalid length. [ 572.890048][T16834] netlink: 'syz.3.4550': attribute type 4 has an invalid length. [ 572.890062][T16834] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.4550'. [ 572.914043][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 573.043839][ T5603] usb 1-1: Using ep0 maxpacket: 16 [ 573.051954][ T5603] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 573.051987][ T5603] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 573.052030][ T5603] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 573.052053][ T5603] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.180458][ T5603] usb 1-1: config 0 descriptor?? [ 573.703493][ T5603] HID 045e:07da: Invalid code 65791 type 1 [ 573.954228][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 573.962643][ T5603] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0014/input/input29 [ 574.993782][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 575.085363][ T5603] microsoft 0003:045E:07DA.0014: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 575.259522][ T5603] usb 1-1: USB disconnect, device number 26 [ 575.670849][T16864] loop0: detected capacity change from 0 to 128 [ 575.708114][T16864] EXT4-fs (loop0): Test dummy encryption mode enabled [ 575.980856][T16864] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 576.005090][T16864] ext4 filesystem being mounted at /647/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 576.510014][ T8701] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 576.847718][T16876] fido_id[16876]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 577.399191][ T5629] Bluetooth: hci4: SCO packet for unknown connection handle 201 [ 578.498842][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 579.002268][ T5619] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 579.554015][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 580.733811][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 581.794081][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 581.893780][ T9] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 582.045192][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 582.053085][ T9] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 582.053111][ T9] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 582.053130][ T9] usb 8-1: config 0 has no interface number 0 [ 582.053161][ T9] usb 8-1: too many endpoints for config 0 interface 55 altsetting 166: 58, using maximum allowed: 30 [ 582.053198][ T9] usb 8-1: config 0 interface 55 altsetting 166 has 0 endpoint descriptors, different from the interface descriptor's value: 58 [ 582.053224][ T9] usb 8-1: config 0 interface 55 has no altsetting 0 [ 582.229332][ T9] usb 8-1: New USB device found, idVendor=17a1, idProduct=0128, bcdDevice= 5.f6 [ 582.229364][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.229385][ T9] usb 8-1: Product: syz [ 582.229400][ T9] usb 8-1: Manufacturer: syz [ 582.229415][ T9] usb 8-1: SerialNumber: syz [ 582.324418][ T9] usb 8-1: config 0 descriptor?? [ 582.730072][ T9] gspca_main: t613-2.14.0 probing 17a1:0128 [ 582.732420][ T9] gspca_t613: unknown sensor 0000 [ 582.732508][ T9] t613 8-1:0.55: probe with driver t613 failed with error -22 [ 582.834410][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 582.870180][ T9] usb 8-1: USB disconnect, device number 8 [ 583.877975][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 584.914049][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 585.954047][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 586.774290][T17053] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4653'. [ 586.994131][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 588.034055][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 588.784978][T17053] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4653'. [ 589.074135][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 589.709910][T17105] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 590.113983][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 591.203725][T17127] loop0: detected capacity change from 0 to 32768 [ 591.207842][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 591.233877][T17127] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.4686 (17127) [ 591.272881][T17127] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 591.272914][T17127] BTRFS info (device loop0): using sha256 checksum algorithm [ 592.189521][T17127] BTRFS info (device loop0): enabling ssd optimizations [ 592.189559][T17127] BTRFS info (device loop0): turning on async discard [ 592.189577][T17127] BTRFS info (device loop0): enabling free space tree [ 592.274077][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 592.761219][T17165] netlink: 7 bytes leftover after parsing attributes in process `syz.3.4697'. [ 593.315811][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 594.354821][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 595.394152][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 596.434060][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 597.485762][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 598.514057][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 599.554900][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 600.593847][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 600.664490][T17262] loop7: detected capacity change from 0 to 512 [ 600.672444][T17262] EXT4-fs: Ignoring removed nomblk_io_submit option [ 601.050633][T17262] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 601.050772][T17262] ext4 filesystem being mounted at /206/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 601.649621][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 601.706073][T11518] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 602.030608][ T5619] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 602.674084][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 603.714083][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 604.421956][T17333] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4750'. [ 604.753980][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 605.183959][T17349] nftables ruleset with unbound set [ 605.794884][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 606.833984][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 606.947056][T17380] loop0: detected capacity change from 0 to 512 [ 607.652151][T17380] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 607.652197][T17380] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 607.652215][T17380] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.4796: Corrupt directory, running e2fsck is recommended [ 607.874102][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 608.071820][T17380] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -117 [ 608.071956][T17380] EXT4-fs error (device loop0): ext4_iget_extra_inode:5128: inode #15: comm syz.0.4796: corrupted in-inode xattr: e_name out of bounds [ 608.071982][T17380] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 608.073568][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 608.073586][ C0] EXT4-fs (loop0): initial error at time 1780002189: ext4_iget_extra_inode:5128: inode 15 [ 608.073614][ C0] EXT4-fs (loop0): last error at time 1780002189: ext4_iget_extra_inode:5128: inode 15 [ 608.226378][T17380] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.4796: couldn't read orphan inode 15 (err -117) [ 608.226415][T17380] loop0: lost filesystem error report for type 5 error -117 [ 608.241380][T17380] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 608.290308][T17380] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 608.290346][T17380] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 608.290364][T17380] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.4796: Corrupt directory, running e2fsck is recommended [ 608.293050][T17380] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 608.293100][T17380] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 608.293119][T17380] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.4796: Corrupt directory, running e2fsck is recommended [ 608.442246][T17380] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 608.442278][T17380] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 608.442296][T17380] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.4796: Corrupt directory, running e2fsck is recommended [ 608.442356][T17380] EXT4-fs error (device loop0): ext4_readdir:265: inode #2: block 3: comm syz.0.4796: path /658/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 608.518640][T17380] EXT4-fs error (device loop0): ext4_readdir:265: inode #2: block 8: comm syz.0.4796: path /658/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 608.914053][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 609.262400][T17386] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 609.636419][ T5619] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 609.954027][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 610.807026][ T833] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 610.994940][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 612.033850][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 613.018654][ T5636] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 613.033709][ T9] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 613.081808][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 613.130370][ T5636] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 613.140733][ T5636] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 613.145235][ T5636] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 613.156908][ T5636] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 613.451659][ T9] usb 8-1: config 0 has an invalid interface number: 117 but max is 0 [ 613.451688][ T9] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 613.451707][ T9] usb 8-1: config 0 has no interface number 0 [ 613.451753][ T9] usb 8-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 613.451779][ T9] usb 8-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 613.451802][ T9] usb 8-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 613.536904][ T9] usb 8-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 613.536935][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.536956][ T9] usb 8-1: Product: syz [ 613.536970][ T9] usb 8-1: Manufacturer: syz [ 613.536984][ T9] usb 8-1: SerialNumber: syz [ 613.621982][ T9] usb 8-1: config 0 descriptor?? [ 614.115762][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 614.406660][ T9] usbtouchscreen 8-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 614.427334][ T9] usb 8-1: USB disconnect, device number 9 [ 614.655552][T17482] loop0: detected capacity change from 0 to 2048 [ 614.711516][T17482] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 615.153984][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 615.313764][ T5636] Bluetooth: hci5: command tx timeout [ 615.773749][ T9] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 615.923753][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 615.936653][ T9] usb 8-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 615.936683][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.093287][ T9] usb 8-1: config 0 descriptor?? [ 616.210329][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 616.341114][ T9] gspca_main: sq930x-2.14.0 probing 041e:403c [ 617.193736][ T9] gspca_sq930x: reg_w 0105 bf00 failed -71 [ 617.234000][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 617.253726][ T9] sq930x 8-1:0.0: probe with driver sq930x failed with error -71 [ 617.261930][ T9] usb 8-1: USB disconnect, device number 10 [ 617.394538][ T5636] Bluetooth: hci5: command tx timeout [ 618.276155][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 619.072289][T17470] virt_wifi0 speed is unknown, defaulting to 1000 [ 619.313966][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 619.477133][ T5636] Bluetooth: hci5: command tx timeout [ 620.359535][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 621.399058][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 621.554523][ T5636] Bluetooth: hci5: command tx timeout [ 622.435411][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 623.474014][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 624.153016][T17470] bridge0: port 1(bridge_slave_0) entered blocking state [ 624.153401][T17470] bridge0: port 1(bridge_slave_0) entered disabled state [ 624.170362][T17470] bridge_slave_0: entered allmulticast mode [ 624.183737][T12448] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 624.186218][T17470] bridge_slave_0: entered promiscuous mode [ 624.338028][T12448] usb 8-1: Using ep0 maxpacket: 16 [ 624.348816][T12448] usb 8-1: config 0 has an invalid interface number: 34 but max is 0 [ 624.348843][T12448] usb 8-1: config 0 has no interface number 0 [ 624.348887][T12448] usb 8-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 624.348913][T12448] usb 8-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 624.381197][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.381302][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.512792][T17470] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.513330][T17470] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.514016][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 624.514842][T17470] bridge_slave_1: entered allmulticast mode [ 624.656480][T12448] usb 8-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 624.656517][T12448] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.656537][T12448] usb 8-1: Product: syz [ 624.656551][T12448] usb 8-1: Manufacturer: syz [ 624.656566][T12448] usb 8-1: SerialNumber: syz [ 624.660560][T17470] bridge_slave_1: entered promiscuous mode [ 624.737160][T12448] usb 8-1: config 0 descriptor?? [ 624.738128][T17621] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 624.738308][T17621] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 624.976769][T17621] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 624.977046][T17621] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 625.198553][T17470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 625.201757][T12448] asix 8-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 625.398001][T17470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 625.507724][T17637] netlink: 7 bytes leftover after parsing attributes in process `syz.0.4907'. [ 625.557028][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 626.248445][T12448] asix 8-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 626.248476][T12448] asix 8-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 626.248806][T12448] asix 8-1:0.34: probe with driver asix failed with error -71 [ 626.323946][T12448] usb 8-1: USB disconnect, device number 11 [ 626.594024][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 627.080947][T17470] team0: Port device team_slave_0 added [ 627.164664][T17470] team0: Port device team_slave_1 added [ 627.207577][T17659] loop0: detected capacity change from 0 to 512 [ 627.226041][T17659] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 627.634015][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 627.742191][T17470] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 627.742207][T17470] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 627.742232][T17470] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 627.930142][T17470] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 627.930159][T17470] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 627.930185][T17470] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 628.674021][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 628.708944][T17470] hsr_slave_0: entered promiscuous mode [ 628.728588][T17470] hsr_slave_1: entered promiscuous mode [ 628.747285][T17470] debugfs: 'hsr0' already exists in 'hsr' [ 628.747313][T17470] Cannot create hsr debugfs directory [ 629.713996][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 630.754357][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 631.099515][T17723] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4944'. [ 631.178843][T17726] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4944'. [ 631.465277][T17723] netlink: 'syz.7.4944': attribute type 2 has an invalid length. [ 631.465298][T17723] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4944'. [ 631.702580][T17726] netlink: 'syz.7.4944': attribute type 2 has an invalid length. [ 631.702602][T17726] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4944'. [ 631.797681][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 632.677862][T17750] loop7: detected capacity change from 0 to 8 [ 632.781490][T17750] SQUASHFS error: lzo decompression failed, data probably corrupt [ 632.781521][T17750] SQUASHFS error: Failed to read block 0x91: -5 [ 632.781537][T17750] SQUASHFS error: Unable to read metadata cache entry [8f] [ 632.781552][T17750] SQUASHFS error: Unable to read inode 0x11f [ 632.836242][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 633.279159][T17759] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4961'. [ 633.279181][T17759] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4961'. [ 633.887306][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 634.455430][T17759] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4961'. [ 634.455454][T17759] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4961'. [ 634.914668][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 635.953988][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 636.994008][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 638.035600][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 639.075858][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 639.107308][T17844] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5000'. [ 639.506304][T17848] l2tp_ppp: sess 2/0: no socket in recv [ 640.113989][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 641.154003][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 642.193980][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 642.364249][ T760] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 643.233999][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 644.084518][T17470] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 644.273973][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 644.446754][T17470] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 644.577885][T17470] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 645.275604][T17470] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 645.280831][T17470] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 645.313994][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 645.958796][T17470] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 645.962861][T17470] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 646.294291][ T9] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 646.353965][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 646.443656][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 646.451838][ T9] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 646.451867][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.451886][ T9] usb 1-1: Product: syz [ 646.451900][ T9] usb 1-1: Manufacturer: syz [ 646.451914][ T9] usb 1-1: SerialNumber: syz [ 646.534309][ T9] usb 1-1: config 0 descriptor?? [ 646.600339][ T9] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 646.656680][T17470] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 647.400883][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 647.953053][ T9] usb 1-1: Quatech SSU-100 USB to Serial Driver converter now attached to ttyUSB0 [ 648.160758][ T5756] usb 1-1: USB disconnect, device number 27 [ 648.356437][ T5756] ssu100 ttyUSB0: Quatech SSU-100 USB to Serial Driver converter now disconnected from ttyUSB0 [ 648.446468][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 648.761177][ T5756] ssu100 1-1:0.0: device disconnected [ 649.474013][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 649.868054][T17989] loop7: detected capacity change from 0 to 512 [ 650.257815][T17470] 8021q: adding VLAN 0 to HW filter on device bond0 [ 650.525204][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 650.806228][T17470] 8021q: adding VLAN 0 to HW filter on device team0 [ 651.563557][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 651.566771][ T1029] bridge0: port 1(bridge_slave_0) entered blocking state [ 651.566932][ T1029] bridge0: port 1(bridge_slave_0) entered forwarding state [ 651.857078][ T213] bridge0: port 2(bridge_slave_1) entered blocking state [ 651.857248][ T213] bridge0: port 2(bridge_slave_1) entered forwarding state [ 652.595798][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 653.634008][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 654.674712][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 655.714307][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 656.756026][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 657.794018][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 658.834020][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 659.037925][T17470] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 659.874059][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 660.780122][T18143] loop7: detected capacity change from 0 to 512 [ 660.806646][T18143] EXT4-fs: Ignoring removed i_version option [ 660.806693][T18143] EXT4-fs: Ignoring removed oldalloc option [ 660.833350][T18143] EXT4-fs (loop7): Test dummy encryption mode enabled [ 660.897127][T18143] EXT4-fs (loop7): 1 truncate cleaned up [ 660.913398][T18143] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 660.913988][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 661.953833][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 662.712203][T17470] veth0_vlan: entered promiscuous mode [ 662.984758][T17470] veth1_vlan: entered promiscuous mode [ 662.993965][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 663.110443][T11518] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 663.922944][T17470] veth0_macvtap: entered promiscuous mode [ 663.985968][T17470] veth1_macvtap: entered promiscuous mode [ 664.042750][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 664.381613][T17470] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 664.561393][T17470] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 664.663480][ T1029] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.782591][ T1029] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.796124][ T1029] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.796184][ T1029] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.905800][T18202] loop7: detected capacity change from 0 to 8 [ 665.073742][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 666.114217][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 667.153987][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 668.193987][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 669.234001][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 670.274055][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 671.313954][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 672.354764][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 673.393769][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 673.831205][ T1502] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 674.434062][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 675.473973][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 676.514020][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 677.559768][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 678.047613][ T5629] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 678.107805][ T5629] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 678.126555][ T5629] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 678.217397][ T5629] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 678.218434][ T5629] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 678.593817][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 679.424161][T18264] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5154'. [ 679.634007][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 680.335939][T18274] loop7: detected capacity change from 0 to 4096 [ 680.397308][T18274] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024) [ 680.397348][T18274] NILFS (loop7): mounting unchecked fs [ 680.397361][T18274] NILFS (loop7): recovery required for readonly filesystem [ 680.397374][T18274] NILFS (loop7): write access will be enabled during recovery [ 680.518609][ T5629] Bluetooth: hci6: command tx timeout [ 680.679484][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 681.099542][T18274] NILFS (loop7): recovery complete [ 681.713987][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 682.268567][T18237] virt_wifi0 speed is unknown, defaulting to 1000 [ 682.599522][ T5629] Bluetooth: hci6: command tx timeout [ 682.754037][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 683.805130][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 684.673833][ T5629] Bluetooth: hci6: command tx timeout [ 684.834036][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 685.794142][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 685.796530][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.796631][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.874009][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 686.483744][T18370] loop7: detected capacity change from 0 to 32768 [ 686.648192][T18370] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 686.648223][T18370] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 686.790391][ T5629] Bluetooth: hci6: command tx timeout [ 686.914012][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 687.133095][T18370] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 687.144558][ T9] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 687.144575][ T9] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 687.955328][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 688.835362][ T5629] Bluetooth: hci6: command tx timeout [ 689.041393][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 689.586394][ T9] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 2441ms [ 690.105539][ T9] gfs2: fsid=syz:syz.0: jid=0: Done [ 690.105650][T18370] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 690.113349][T18370] gfs2: fsid=syz:syz.0: can't create logd thread: -4 [ 690.116480][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 691.118197][T18401] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5223'. [ 691.154099][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 692.196415][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 693.234014][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 694.273959][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 695.315891][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 696.354942][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 697.393770][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 698.433761][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 699.478887][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 700.515447][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 701.187745][ T8706] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.555092][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 702.593770][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 703.633954][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 703.934966][T18237] bridge0: port 1(bridge_slave_0) entered blocking state [ 703.935282][T18237] bridge0: port 1(bridge_slave_0) entered disabled state [ 703.935566][T18237] bridge_slave_0: entered allmulticast mode [ 703.995936][T18237] bridge_slave_0: entered promiscuous mode [ 704.042659][T18237] bridge0: port 2(bridge_slave_1) entered blocking state [ 704.058982][T18237] bridge0: port 2(bridge_slave_1) entered disabled state [ 704.059333][T18237] bridge_slave_1: entered allmulticast mode [ 704.278131][T18237] bridge_slave_1: entered promiscuous mode [ 704.673742][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 704.964367][T18237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 705.201051][T18237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 705.713766][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 706.753913][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 707.245236][T18237] team0: Port device team_slave_0 added [ 707.309765][T18237] team0: Port device team_slave_1 added [ 707.794018][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 707.993190][ T8705] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 708.835149][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 709.874207][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 709.976093][T18634] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 709.976406][T18634] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 710.594532][T18634] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 710.744710][T18634] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 710.744834][T18634] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 710.914135][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 711.209210][ T5629] Bluetooth: hci2: command 0x0406 tx timeout [ 711.945418][T18634] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 711.945502][T18634] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 711.954180][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 712.000784][ T8706] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.035349][ T5629] Bluetooth: hci4: command 0x0406 tx timeout [ 712.675479][ T5629] Bluetooth: hci3: command 0x0406 tx timeout [ 712.753661][ T5629] Bluetooth: hci1: command 0x0406 tx timeout [ 712.971283][T18237] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 712.971299][T18237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 712.971324][T18237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 712.993982][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 713.061373][T18237] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 713.061389][T18237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 713.061415][T18237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 713.652780][T18237] hsr_slave_0: entered promiscuous mode [ 713.766921][T18237] hsr_slave_1: entered promiscuous mode [ 713.782800][T18237] debugfs: 'hsr0' already exists in 'hsr' [ 713.782826][T18237] Cannot create hsr debugfs directory [ 713.956569][ T5629] Bluetooth: hci6: command 0x0c1a tx timeout [ 714.039430][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 714.484655][T18634] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 714.833751][ T5629] Bluetooth: hci1: command 0x0406 tx timeout [ 715.074076][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 716.035283][ T5629] Bluetooth: hci6: command 0x0c1a tx timeout [ 716.119982][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 717.163827][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 718.113658][ T5629] Bluetooth: hci6: command 0x0c1a tx timeout [ 718.194113][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 719.234035][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 719.701159][ T8706] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.274092][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 720.405352][T18844] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 720.405379][T18844] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 720.861731][T18844] vhci_hcd vhci_hcd.0: Device attached [ 721.153719][ T5603] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 721.316353][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 721.316904][ T5603] usb 1-1: Using ep0 maxpacket: 32 [ 721.321749][ T5603] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 721.321772][ T5603] usb 1-1: config 0 has no interfaces? [ 721.333679][ T9] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 721.380176][ T5603] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 721.380208][ T5603] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.380228][ T5603] usb 1-1: Product: syz [ 721.380242][ T5603] usb 1-1: Manufacturer: syz [ 721.380257][ T5603] usb 1-1: SerialNumber: syz [ 721.464413][ T5603] usb 1-1: config 0 descriptor?? [ 721.881254][T12448] usb 1-1: USB disconnect, device number 28 [ 721.968844][T18856] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 722.325789][ T9] usb 33-1: device descriptor read/64, error -71 [ 722.354085][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 722.388817][ T8704] vhci_hcd vhci_hcd.0: stop threads [ 722.466697][ T8704] vhci_hcd vhci_hcd.0: release socket [ 722.550823][ T37] audit: type=1326 audit(1780002303.519:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18880 comm="syz.7.5444" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e7ef5ce59 code=0x7ffc0000 [ 722.552694][ T37] audit: type=1326 audit(1780002303.519:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18880 comm="syz.7.5444" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e7ef5ce59 code=0x7ffc0000 [ 722.647042][ T37] audit: type=1326 audit(1780002303.609:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18880 comm="syz.7.5444" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e7ef5ce59 code=0x7ffc0000 [ 722.647095][ T37] audit: type=1326 audit(1780002303.619:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18880 comm="syz.7.5444" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e7ef5ce59 code=0x7ffc0000 [ 722.649308][ T37] audit: type=1326 audit(1780002303.619:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18880 comm="syz.7.5444" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6e7ef5ce59 code=0x7ffc0000 [ 722.649355][ T37] audit: type=1326 audit(1780002303.619:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18880 comm="syz.7.5444" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e7ef5ce59 code=0x7ffc0000 [ 722.649396][ T37] audit: type=1326 audit(1780002303.619:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18880 comm="syz.7.5444" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e7ef5ce59 code=0x7ffc0000 [ 722.650034][ T37] audit: type=1326 audit(1780002303.619:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18880 comm="syz.7.5444" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e7ef5ce59 code=0x7ffc0000 [ 722.650078][ T37] audit: type=1326 audit(1780002303.619:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18880 comm="syz.7.5444" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e7ef5ce59 code=0x7ffc0000 [ 722.693975][ T37] audit: type=1326 audit(1780002303.619:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18880 comm="syz.7.5444" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f6e7ef5ce59 code=0x7ffc0000 [ 723.250430][ T8704] vhci_hcd vhci_hcd.0: disconnect device [ 723.394070][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 723.434867][ T9] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 724.435354][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 724.743514][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 724.923530][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 725.475199][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 726.513989][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 727.553972][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 728.386551][T18892] ALSA: mixer_oss: invalid OSS volume '' [ 728.594011][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 729.633964][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 730.674007][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 731.698842][ T8706] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.713936][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 732.754009][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 733.796370][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 734.834006][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 735.873992][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 736.913989][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 737.954034][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 738.008013][T18953] loop0: detected capacity change from 0 to 512 [ 738.125795][T18953] EXT4-fs warning (device loop0): read_mmp_block:111: Error -117 while reading MMP block 0 [ 738.376090][T18953] netlink: 168 bytes leftover after parsing attributes in process `syz.0.5477'. [ 738.875734][ T5636] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 738.932821][ T5636] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 738.964878][ T5636] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 738.995227][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 739.039385][ T5636] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 739.042334][ T5636] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 740.195844][ T1462] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 740.195894][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 741.128526][T18982] futex_wake_op: à³OñJ÷N\ìg´é tries to shift op by 144; fix this program [ 741.235705][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 742.331538][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 742.433364][ T5629] Bluetooth: hci5: command tx timeout [ 743.611874][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 744.831598][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 744.841638][ T5629] Bluetooth: hci5: command tx timeout [ 745.050230][T19014] loop0: detected capacity change from 0 to 512 [ 745.343765][T19014] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.5496: bg 0: block 104: invalid block bitmap [ 745.343799][T19014] loop0: lost filesystem error report for type 5 error -117 [ 745.353561][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 745.353581][ C0] EXT4-fs (loop0): initial error at time 1780002326: ext4_validate_block_bitmap:432 [ 745.353603][ C0] EXT4-fs (loop0): last error at time 1780002326: ext4_validate_block_bitmap:432 [ 745.417453][T19014] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 745.417479][T19014] loop0: lost filesystem error report for type 5 error -117 [ 745.421974][T19014] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.5496: invalid indirect mapped block 1 (level 1) [ 745.422010][T19014] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 745.456373][T19014] EXT4-fs (loop0): 1 truncate cleaned up [ 745.503773][T19014] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 745.874099][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 747.019510][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 747.022485][ T5629] Bluetooth: hci5: command tx timeout [ 747.745905][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.746007][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.034067][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 748.773284][ T8706] bridge_slave_1: left allmulticast mode [ 748.773317][ T8706] bridge_slave_1: left promiscuous mode [ 748.790029][ T8706] bridge0: port 2(bridge_slave_1) entered disabled state [ 748.983944][ T5619] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 749.074030][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 749.083711][ T5629] Bluetooth: hci5: command tx timeout [ 750.114085][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 751.265201][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 751.405224][ T8706] bridge_slave_0: left allmulticast mode [ 751.405260][ T8706] bridge_slave_0: left promiscuous mode [ 751.405522][ T8706] bridge0: port 1(bridge_slave_0) entered disabled state [ 752.277832][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 753.251948][T19112] loop0: detected capacity change from 0 to 512 [ 753.313950][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 754.353991][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 754.492073][T19112] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 754.546398][T19112] EXT4-fs error (device loop0): ext4_iget_extra_inode:5128: inode #15: comm syz.0.5530: corrupted in-inode xattr: e_value size too large [ 754.546434][T19112] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 754.548075][T19112] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.5530: couldn't read orphan inode 15 (err -117) [ 754.548104][T19112] loop0: lost filesystem error report for type 5 error -117 [ 754.554050][ C0] EXT4-fs (loop0): error count since last fsck: 2 [ 754.554070][ C0] EXT4-fs (loop0): initial error at time 1780002335: ext4_iget_extra_inode:5128: inode 15 [ 754.554096][ C0] EXT4-fs (loop0): last error at time 1780002335: ext4_orphan_get:1402 [ 754.699125][T19112] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 755.393944][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 755.575359][ T5619] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 756.211708][T19141] loop7: detected capacity change from 0 to 1764 [ 756.457348][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 757.474814][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 758.513972][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 759.553948][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 760.593962][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 761.633982][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 762.694912][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 763.372067][T19177] binder: 19175:19177 ioctl c0306201 200000000080 returned -14 [ 763.440354][T19178] binder: 19175:19178 ioctl c0306201 2000000003c0 returned -14 [ 763.713945][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 764.754505][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 765.797837][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 766.833746][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 767.873965][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 767.917061][ T13] kworker/u8:1 (13) used greatest stack depth: 16504 bytes left [ 768.913969][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 769.954863][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 770.993969][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 771.652559][ T69] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 772.033922][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 773.101217][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 774.114523][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 775.153978][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 775.791896][ T8706] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 776.193947][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 776.753087][ T8706] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 777.069919][ T8706] bond0 (unregistering): Released all slaves [ 777.233780][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 778.273939][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 778.642542][ T5277] 8021q: adding VLAN 0 to HW filter on device eth13 [ 779.313958][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 780.353910][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 781.402616][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 782.434493][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 782.970854][T18241] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 783.102911][T18241] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 783.112192][T18241] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 783.128252][T18241] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 783.129221][T18241] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 783.465272][ T5636] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 783.478747][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 783.580165][ T5636] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 783.605406][ T5636] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 783.609718][ T5636] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 783.612145][ T5636] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 784.513916][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 785.371015][ T5629] Bluetooth: hci7: command tx timeout [ 785.554146][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 785.793894][ T5629] Bluetooth: hci4: command tx timeout [ 786.595165][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 787.393741][ T5629] Bluetooth: hci7: command tx timeout [ 787.633965][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 787.873885][ T5629] Bluetooth: hci4: command tx timeout [ 788.673923][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 789.474442][ T5629] Bluetooth: hci7: command tx timeout [ 789.713961][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 789.953635][ T5629] Bluetooth: hci4: command tx timeout [ 790.755808][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 791.553608][ T5629] Bluetooth: hci7: command tx timeout [ 791.793957][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 792.034044][ T5629] Bluetooth: hci4: command tx timeout [ 792.833925][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 793.874025][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 794.913836][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 795.953842][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 796.993909][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 798.033966][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 799.073988][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 800.113973][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 801.153977][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 802.193951][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 803.233946][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 804.273778][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 804.586602][ T8703] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 805.313904][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 806.353991][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 806.615090][ T5636] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 806.683176][ T5636] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 806.740391][ T5636] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 806.742128][ T5636] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 806.743048][ T5636] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 807.394430][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 808.433982][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 808.679091][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.679207][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.150045][ T5629] Bluetooth: hci0: command tx timeout [ 809.473915][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 810.513936][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 811.243664][ T5629] Bluetooth: hci0: command tx timeout [ 811.553918][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 812.597728][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 813.314006][ T5629] Bluetooth: hci0: command tx timeout [ 813.633919][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 814.673939][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 815.393860][ T5629] Bluetooth: hci0: command tx timeout [ 815.714748][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 816.753963][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 817.793925][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 818.833974][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 819.873929][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 820.913936][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 821.953909][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 822.993988][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 824.034781][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 825.075141][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 826.113917][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 827.153963][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 828.193952][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 829.233954][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 830.273896][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 831.313944][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 832.354741][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 833.393999][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 834.433950][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 835.473946][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 836.513946][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 837.554015][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 837.624483][ T1462] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 838.593888][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 839.634072][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 839.847341][ T5636] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 839.917156][ T5636] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 839.921056][ T5636] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 839.922692][ T5636] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 839.933276][ T5636] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 840.674876][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 841.232285][ T5629] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 841.302008][ T5629] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 841.304488][ T5629] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 841.345160][ T5629] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 841.395478][ T5629] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 841.713934][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 842.035187][ T5629] Bluetooth: hci1: command tx timeout [ 842.753900][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 843.553774][ T5629] Bluetooth: hci8: command tx timeout [ 843.793947][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 844.113547][ T5629] Bluetooth: hci1: command tx timeout [ 844.833916][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 845.633679][ T5629] Bluetooth: hci8: command tx timeout [ 845.878884][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 846.193603][ T5629] Bluetooth: hci1: command tx timeout [ 846.913907][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 847.716417][ T5636] Bluetooth: hci8: command tx timeout [ 847.953955][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 848.274263][ T5629] Bluetooth: hci1: command tx timeout [ 848.994490][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 849.801687][ T5629] Bluetooth: hci8: command tx timeout [ 850.033934][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 851.979526][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 852.993957][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 854.033970][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 855.073994][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 856.113937][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 857.153939][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 858.193952][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 859.234614][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 860.275854][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 861.316477][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 861.321584][ T5636] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 861.425705][ T5636] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 861.539861][ T5636] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 861.978203][ T5636] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 861.979087][ T5636] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 862.353893][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 863.395527][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 864.194636][ T5636] Bluetooth: hci9: command tx timeout [ 864.433891][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 865.473969][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 866.275378][ T5636] Bluetooth: hci9: command tx timeout [ 866.513918][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 867.086028][ T5636] Bluetooth: hci5: command 0x0406 tx timeout [ 867.553982][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 868.353701][ T5636] Bluetooth: hci9: command tx timeout [ 868.593886][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 869.265031][ T8701] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 869.633952][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 870.142886][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.142992][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.435181][ T5629] Bluetooth: hci9: command tx timeout [ 870.673917][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 871.713949][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 872.753908][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 873.793909][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 874.833927][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 875.874344][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 876.913949][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 877.953878][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 878.993884][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 880.033913][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 881.073921][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 882.113927][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 883.153864][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 884.194269][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 885.233937][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 886.273918][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 887.313913][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 888.358029][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 889.393918][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 890.434610][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 891.476052][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 892.514488][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 893.553911][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 894.594016][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 895.633899][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 896.673947][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 897.713935][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 898.753903][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 899.793952][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 900.139454][ T5636] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 900.219597][ T5636] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 900.236966][ T5636] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 900.441692][ T5636] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 900.463782][ T5636] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 900.837243][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 901.111170][ T213] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 901.760109][ T5636] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 901.841005][ T5636] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 901.852522][ T5636] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 901.873913][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 902.021243][ T5636] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 902.029444][ T5636] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 902.513782][ T5629] Bluetooth: hci10: command tx timeout [ 902.913954][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 903.953875][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 904.274324][ T5629] Bluetooth: hci11: command tx timeout [ 904.598131][ T5629] Bluetooth: hci10: command tx timeout [ 904.993920][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 906.034188][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 906.353633][ T5636] Bluetooth: hci11: command tx timeout [ 906.673662][T21236] Bluetooth: hci10: command tx timeout [ 907.073991][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 908.113881][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 908.115560][T18964] Bluetooth: hci4: command 0x0406 tx timeout [ 908.115610][T21236] Bluetooth: hci7: command 0x0406 tx timeout [ 908.435328][T21236] Bluetooth: hci11: command tx timeout [ 908.753672][T18241] Bluetooth: hci10: command tx timeout [ 909.160608][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 910.193911][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 910.515188][ T5629] Bluetooth: hci11: command tx timeout [ 911.233946][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 912.273898][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 913.313901][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 914.358376][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 915.393947][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 916.434014][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 917.475579][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 918.514717][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 919.553925][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 920.593919][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 921.633953][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 922.406934][T18241] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 922.525982][T18241] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 922.569901][T18241] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 922.644210][T18241] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 922.644996][T18241] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 922.677378][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 923.713924][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 924.753848][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 924.837801][ T5629] Bluetooth: hci12: command tx timeout [ 925.794383][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 926.834150][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 926.915960][ T5629] Bluetooth: hci12: command tx timeout [ 927.873995][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 928.913902][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 928.994308][T18241] Bluetooth: hci12: command tx timeout [ 929.953868][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 930.994193][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 931.075124][ T5629] Bluetooth: hci12: command tx timeout [ 931.603991][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.604100][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.033908][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 933.077811][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 933.162229][ T833] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 933.643935][ T5629] Bluetooth: hci0: command 0x0406 tx timeout [ 934.114454][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 935.153876][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 936.193894][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 937.241855][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 938.273970][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 939.234850][ T38] INFO: task kworker/0:0:9 blocked for more than 143 seconds. [ 939.234877][ T38] Tainted: G L syzkaller #0 [ 939.234888][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 939.234897][ T38] task:kworker/0:0 state:D stack:20728 pid:9 tgid:9 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 939.234950][ T38] Workqueue: events netdev_rx_mode_work [ 939.234998][ T38] Call Trace: [ 939.235010][ T38] [ 939.235022][ T38] __schedule+0x16f9/0x5500 [ 939.235053][ T38] ? psi_group_change+0xab8/0x1050 [ 939.235084][ T38] ? wakeup_preempt_fair+0x745/0xb10 [ 939.235124][ T38] ? __pfx___schedule+0x10/0x10 [ 939.235166][ T38] rt_mutex_schedule+0x76/0xf0 [ 939.235195][ T38] rt_mutex_slowlock_block+0x508/0x680 [ 939.235237][ T38] rt_mutex_slowlock+0x2dc/0x780 [ 939.235265][ T38] ? rt_mutex_slowlock+0x1fd/0x780 [ 939.235291][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 939.235327][ T38] ? netdev_rx_mode_work+0x1c/0x460 [ 939.235354][ T38] ? process_one_work+0x8be/0x1630 [ 939.235390][ T38] ? netdev_rx_mode_work+0x1c/0x460 [ 939.235410][ T38] mutex_lock_nested+0x168/0x1d0 [ 939.235439][ T38] ? process_one_work+0x8be/0x1630 [ 939.235467][ T38] netdev_rx_mode_work+0x1c/0x460 [ 939.235493][ T38] ? process_one_work+0x8be/0x1630 [ 939.235521][ T38] process_one_work+0x98b/0x1630 [ 939.235571][ T38] ? __pfx_process_one_work+0x10/0x10 [ 939.235598][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 939.235636][ T38] worker_thread+0xb8e/0x1140 [ 939.235682][ T38] kthread+0x388/0x470 [ 939.235707][ T38] ? __pfx_worker_thread+0x10/0x10 [ 939.235725][ T38] ? __pfx_kthread+0x10/0x10 [ 939.235750][ T38] ret_from_fork+0x514/0xb70 [ 939.235780][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 939.235804][ T38] ? __switch_to+0xc79/0x1410 [ 939.235830][ T38] ? __pfx_kthread+0x10/0x10 [ 939.235855][ T38] ret_from_fork_asm+0x1a/0x30 [ 939.235899][ T38] [ 939.235954][ T38] INFO: task kworker/u8:9:1029 blocked for more than 143 seconds. [ 939.235971][ T38] Tainted: G L syzkaller #0 [ 939.235987][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 939.235996][ T38] task:kworker/u8:9 state:D stack:17824 pid:1029 tgid:1029 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 939.236046][ T38] Workqueue: ipv6_addrconf addrconf_verify_work [ 939.236075][ T38] Call Trace: [ 939.236082][ T38] [ 939.236094][ T38] __schedule+0x16f9/0x5500 [ 939.236152][ T38] ? __pfx___schedule+0x10/0x10 [ 939.236196][ T38] rt_mutex_schedule+0x76/0xf0 [ 939.236237][ T38] rt_mutex_slowlock_block+0x508/0x680 [ 939.236280][ T38] rt_mutex_slowlock+0x2dc/0x780 [ 939.236308][ T38] ? rt_mutex_slowlock+0x1fd/0x780 [ 939.236355][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 939.236391][ T38] ? addrconf_verify_work+0x19/0x30 [ 939.236424][ T38] ? process_one_work+0x8be/0x1630 [ 939.236452][ T38] ? addrconf_verify_work+0x19/0x30 [ 939.236486][ T38] ? addrconf_verify_work+0x19/0x30 [ 939.236513][ T38] mutex_lock_nested+0x168/0x1d0 [ 939.236542][ T38] ? process_one_work+0x8be/0x1630 [ 939.236569][ T38] addrconf_verify_work+0x19/0x30 [ 939.236598][ T38] process_one_work+0x98b/0x1630 [ 939.236648][ T38] ? __pfx_process_one_work+0x10/0x10 [ 939.236675][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 939.236713][ T38] worker_thread+0xb49/0x1140 [ 939.236742][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 939.236785][ T38] kthread+0x388/0x470 [ 939.236809][ T38] ? __pfx_worker_thread+0x10/0x10 [ 939.236827][ T38] ? __pfx_kthread+0x10/0x10 [ 939.236853][ T38] ret_from_fork+0x514/0xb70 [ 939.236880][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 939.236906][ T38] ? __switch_to+0xc79/0x1410 [ 939.236931][ T38] ? __pfx_kthread+0x10/0x10 [ 939.236956][ T38] ret_from_fork_asm+0x1a/0x30 [ 939.237005][ T38] [ 939.237089][ T38] INFO: task dhcpcd:5277 blocked for more than 143 seconds. [ 939.237106][ T38] Tainted: G L syzkaller #0 [ 939.237116][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 939.237125][ T38] task:dhcpcd state:D stack:21496 pid:5277 tgid:5277 ppid:5276 task_flags:0x400140 flags:0x00080000 [ 939.237176][ T38] Call Trace: [ 939.237182][ T38] [ 939.237193][ T38] __schedule+0x16f9/0x5500 [ 939.237253][ T38] ? __pfx___schedule+0x10/0x10 [ 939.237297][ T38] rt_mutex_schedule+0x76/0xf0 [ 939.237324][ T38] rt_mutex_slowlock_block+0x508/0x680 [ 939.237367][ T38] rt_mutex_slowlock+0x2dc/0x780 [ 939.237395][ T38] ? rt_mutex_slowlock+0x1fd/0x780 [ 939.237421][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 939.237457][ T38] ? rtnl_dump_ifinfo+0xa31/0x1450 [ 939.237490][ T38] ? rtnl_dump_ifinfo+0xa31/0x1450 [ 939.237524][ T38] ? rtnl_dump_ifinfo+0xa31/0x1450 [ 939.237551][ T38] mutex_lock_nested+0x168/0x1d0 [ 939.237581][ T38] rtnl_dump_ifinfo+0xa31/0x1450 [ 939.237626][ T38] ? __pfx_rtnl_dump_ifinfo+0x10/0x10 [ 939.253536][ T38] ? stack_trace_save+0xa9/0x100 [ 939.253574][ T38] ? __pfx_stack_trace_save+0x10/0x10 [ 939.253601][ T38] ? stack_depot_save_flags+0x33/0x810 [ 939.253680][ T38] ? rcu_is_watching+0x15/0xb0 [ 939.253711][ T38] ? trace_kmalloc+0x2a/0xf0 [ 939.253741][ T38] ? __kmalloc_node_track_caller_noprof+0x390/0x7e0 [ 939.253774][ T38] ? __pfx_rtnl_dump_ifinfo+0x10/0x10 [ 939.253804][ T38] rtnl_dumpit+0xcc/0x200 [ 939.253838][ T38] netlink_dump+0x702/0xe10 [ 939.253871][ T38] ? __pfx_netlink_dump+0x10/0x10 [ 939.253903][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 939.253933][ T38] __netlink_dump_start+0x5cb/0x7e0 [ 939.253962][ T38] rtnetlink_rcv_msg+0xa3a/0xbe0 [ 939.253996][ T38] ? kasan_save_track+0x3e/0x80 [ 939.254022][ T38] ? __pfx_rtnl_dump_ifinfo+0x10/0x10 [ 939.254050][ T38] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 939.254078][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 939.254105][ T38] ? __pfx_rtnl_dumpit+0x10/0x10 [ 939.254132][ T38] ? __pfx_rtnl_dump_ifinfo+0x10/0x10 [ 939.254172][ T38] netlink_rcv_skb+0x232/0x4b0 [ 939.254195][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 939.254225][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 939.254258][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 939.254278][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 939.254304][ T38] netlink_unicast+0x780/0x920 [ 939.254344][ T38] netlink_sendmsg+0x813/0xb40 [ 939.254375][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 939.254398][ T38] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 939.254431][ T38] ? aa_sock_msg_perm+0x122/0x200 [ 939.254458][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 939.254478][ T38] sock_sendmsg_nosec+0x13a/0x180 [ 939.254507][ T38] __sys_sendto+0x402/0x590 [ 939.254542][ T38] ? __pfx___sys_sendto+0x10/0x10 [ 939.254608][ T38] ? exc_page_fault+0x6a/0xc0 [ 939.254631][ T38] ? do_user_addr_fault+0xc6f/0x1340 [ 939.254661][ T38] __x64_sys_sendto+0xde/0x100 [ 939.254690][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 939.254712][ T38] do_syscall_64+0x174/0x580 [ 939.254731][ T38] ? trace_irq_disable+0x3b/0x140 [ 939.254756][ T38] ? clear_bhb_loop+0x40/0x90 [ 939.254780][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 939.254799][ T38] RIP: 0033:0x7efe9b1d7407 [ 939.254818][ T38] RSP: 002b:00007fff49108cf0 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 939.254839][ T38] RAX: ffffffffffffffda RBX: 00007efe9b14d780 RCX: 00007efe9b1d7407 [ 939.254854][ T38] RDX: 0000000000000014 RSI: 00007fff49108d80 RDI: 0000000000000034 [ 939.254867][ T38] RBP: 00007fff49108d64 R08: 00007fff49108d64 R09: 000000000000000c [ 939.254880][ T38] R10: 0000000000000000 R11: 0000000000000202 R12: 00007fff49129670 [ 939.254892][ T38] R13: 00007efe9b14d708 R14: 00007fff49108e60 R15: 00007fff49119440 [ 939.254924][ T38] [ 939.254942][ T38] INFO: task kworker/0:3:5603 blocked for more than 143 seconds. [ 939.254960][ T38] Tainted: G L syzkaller #0 [ 939.254971][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 939.254985][ T38] task:kworker/0:3 state:D [ 939.313853][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 939.757327][ T38] stack:20480 pid:5603 tgid:5603 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 939.757358][ T38] Workqueue: events switchdev_deferred_process_work [ 939.757387][ T38] Call Trace: [ 939.757394][ T38] [ 939.757408][ T38] __schedule+0x16f9/0x5500 [ 939.757469][ T38] ? __pfx___schedule+0x10/0x10 [ 939.757513][ T38] rt_mutex_schedule+0x76/0xf0 [ 939.757542][ T38] rt_mutex_slowlock_block+0x508/0x680 [ 939.757585][ T38] rt_mutex_slowlock+0x2dc/0x780 [ 939.757613][ T38] ? rt_mutex_slowlock+0x1fd/0x780 [ 939.757639][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 939.757683][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 939.757717][ T38] ? switchdev_deferred_process_work+0xe/0x20 [ 939.757738][ T38] mutex_lock_nested+0x168/0x1d0 [ 939.757761][ T38] ? switchdev_deferred_process_work+0xe/0x20 [ 939.757785][ T38] ? process_one_work+0x8be/0x1630 [ 939.757814][ T38] switchdev_deferred_process_work+0xe/0x20 [ 939.757835][ T38] process_one_work+0x98b/0x1630 [ 939.757884][ T38] ? __pfx_process_one_work+0x10/0x10 [ 939.757912][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 939.757957][ T38] worker_thread+0xb8e/0x1140 [ 939.758003][ T38] kthread+0x388/0x470 [ 939.758026][ T38] ? __pfx_worker_thread+0x10/0x10 [ 939.758044][ T38] ? __pfx_kthread+0x10/0x10 [ 939.758069][ T38] ret_from_fork+0x514/0xb70 [ 939.758099][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 939.758124][ T38] ? __switch_to+0xc79/0x1410 [ 939.758147][ T38] ? __pfx_kthread+0x10/0x10 [ 939.758172][ T38] ret_from_fork_asm+0x1a/0x30 [ 939.758217][ T38] [ 940.104062][ T38] INFO: task syz.0.928:8327 blocked for more than 144 seconds. [ 940.263095][ T38] Tainted: G L syzkaller #0 [ 940.263110][ T38] Blocked by coredump. [ 940.263117][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 940.263126][ T38] task:syz.0.928 state:D stack:25736 pid:8327 tgid:8327 ppid:5619 task_flags:0x40044c flags:0x00080003 [ 940.263184][ T38] Call Trace: [ 940.263192][ T38] [ 940.263205][ T38] __schedule+0x16f9/0x5500 [ 940.263271][ T38] ? __pfx___schedule+0x10/0x10 [ 940.263315][ T38] rt_mutex_schedule+0x76/0xf0 [ 940.263344][ T38] rt_mutex_slowlock_block+0x508/0x680 [ 940.267418][ T38] rt_mutex_slowlock+0x2dc/0x780 [ 940.267452][ T38] ? rt_mutex_slowlock+0x1fd/0x780 [ 940.267479][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 940.267521][ T38] ? tun_chr_close+0x41/0x1c0 [ 940.267547][ T38] ? tun_chr_close+0x41/0x1c0 [ 940.267564][ T38] mutex_lock_nested+0x168/0x1d0 [ 940.267591][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 940.267612][ T38] tun_chr_close+0x41/0x1c0 [ 940.267632][ T38] __fput+0x461/0xa70 [ 940.267669][ T38] task_work_run+0x1d9/0x270 [ 940.267698][ T38] ? __pfx_task_work_run+0x10/0x10 [ 940.267725][ T38] ? do_exit+0x70a/0x22c0 [ 940.267747][ T38] ? kmem_cache_free+0x187/0x6c0 [ 940.267772][ T38] ? put_net+0x191/0x260 [ 940.267790][ T38] ? do_exit+0x70a/0x22c0 [ 940.267817][ T38] do_exit+0x70f/0x22c0 [ 940.267845][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 940.267879][ T38] ? __pfx_do_exit+0x10/0x10 [ 940.267907][ T38] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 940.267932][ T38] ? reacquire_held_locks+0x104/0x190 [ 940.267960][ T38] ? rt_spin_lock+0x1e0/0x400 [ 940.267997][ T38] do_group_exit+0x21b/0x2d0 [ 940.268022][ T38] ? rt_spin_unlock+0x160/0x200 [ 940.268050][ T38] get_signal+0x1284/0x1330 [ 940.268101][ T38] arch_do_signal_or_restart+0xbc/0x840 [ 940.268126][ T38] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 940.268150][ T38] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 940.268181][ T38] ? __se_sys_clock_nanosleep+0x35b/0x3b0 [ 940.268214][ T38] exit_to_user_mode_loop+0xa9/0x680 [ 940.268238][ T38] ? rcu_is_watching+0x15/0xb0 [ 940.268268][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 940.268290][ T38] do_syscall_64+0x353/0x580 [ 940.268309][ T38] ? trace_irq_disable+0x3b/0x140 [ 940.268333][ T38] ? clear_bhb_loop+0x40/0x90 [ 940.268358][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 940.268378][ T38] RIP: 0033:0x7f119b33d68e [ 940.268396][ T38] RSP: 002b:00007f11995d5f58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 940.268417][ T38] RAX: fffffffffffffdfc RBX: 00007f11995d66c0 RCX: 00007f119b33d68e [ 940.268432][ T38] RDX: 00007f11995d5fb0 RSI: 0000000000000000 RDI: 0000000000000000 [ 940.268445][ T38] RBP: 00007f119b412d6f R08: 0000000000000000 R09: 0000000000000000 [ 940.268458][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 940.268469][ T38] R13: 00007f119b5f6038 R14: 00007f119b5f5fa0 R15: 00007ffe169690c8 [ 940.268501][ T38] [ 940.353897][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 940.409812][ T38] INFO: task kworker/u8:28:8706 blocked for more than 144 seconds. [ 940.409834][ T38] Tainted: G L syzkaller #0 [ 940.409846][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 940.409854][ T38] task:kworker/u8:28 state:D stack:23272 pid:8706 tgid:8706 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 940.409918][ T38] Workqueue: netns cleanup_net [ 940.409950][ T38] Call Trace: [ 940.409958][ T38] [ 940.409970][ T38] __schedule+0x16f9/0x5500 [ 940.410032][ T38] ? __pfx___schedule+0x10/0x10 [ 940.410076][ T38] rt_mutex_schedule+0x76/0xf0 [ 940.410105][ T38] rt_mutex_slowlock_block+0x508/0x680 [ 940.410162][ T38] rt_mutex_slowlock+0x2dc/0x780 [ 940.410191][ T38] ? rt_mutex_slowlock+0x1fd/0x780 [ 940.410217][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 940.410260][ T38] ? ieee80211_unregister_hw+0x55/0x2c0 [ 940.410287][ T38] ? ieee80211_unregister_hw+0x55/0x2c0 [ 940.410306][ T38] mutex_lock_nested+0x168/0x1d0 [ 940.410336][ T38] ieee80211_unregister_hw+0x55/0x2c0 [ 940.410360][ T38] mac80211_hwsim_del_radio+0x28a/0x4a0 [ 940.410394][ T38] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 940.410424][ T38] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 940.410445][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 940.410469][ T38] hwsim_exit_net+0xf02/0xfc0 [ 940.410490][ T38] ? hwsim_exit_net+0xce/0xfc0 [ 940.410513][ T38] ? __pfx_hwsim_exit_net+0x10/0x10 [ 940.410546][ T38] ? __ip_vs_dev_cleanup_batch+0x238/0x260 [ 940.410573][ T38] ops_undo_list+0x49f/0x940 [ 940.410604][ T38] ? rt_spin_unlock+0x1a0/0x200 [ 940.410629][ T38] ? __pfx_ops_undo_list+0x10/0x10 [ 940.410656][ T38] ? rt_spin_unlock+0x14f/0x200 [ 940.410683][ T38] ? idr_destroy+0x21b/0x2a0 [ 940.410711][ T38] ? rt_spin_unlock+0x160/0x200 [ 940.410739][ T38] cleanup_net+0x56e/0x800 [ 940.410770][ T38] ? __pfx_cleanup_net+0x10/0x10 [ 940.410810][ T38] ? process_one_work+0x8be/0x1630 [ 940.410839][ T38] process_one_work+0x98b/0x1630 [ 940.410895][ T38] ? __pfx_process_one_work+0x10/0x10 [ 940.410923][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 940.410962][ T38] worker_thread+0xb49/0x1140 [ 940.411007][ T38] kthread+0x388/0x470 [ 940.411031][ T38] ? __pfx_worker_thread+0x10/0x10 [ 940.411049][ T38] ? __pfx_kthread+0x10/0x10 [ 940.411074][ T38] ret_from_fork+0x514/0xb70 [ 940.411103][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 940.411129][ T38] ? __switch_to+0xc79/0x1410 [ 940.411154][ T38] ? __pfx_kthread+0x10/0x10 [ 940.411178][ T38] ret_from_fork_asm+0x1a/0x30 [ 940.411223][ T38] [ 940.411231][ T38] INFO: task kworker/u8:29:8707 blocked for more than 144 seconds. [ 940.551338][ T38] Tainted: G L syzkaller #0 [ 940.551354][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 940.551364][ T38] task:kworker/u8:29 state:D stack:22392 pid:8707 tgid:8707 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 940.551421][ T38] Workqueue: events_unbound linkwatch_event [ 940.551450][ T38] Call Trace: [ 940.551457][ T38] [ 940.551470][ T38] __schedule+0x16f9/0x5500 [ 940.551532][ T38] ? __pfx___schedule+0x10/0x10 [ 940.551576][ T38] rt_mutex_schedule+0x76/0xf0 [ 940.551606][ T38] rt_mutex_slowlock_block+0x508/0x680 [ 940.551649][ T38] rt_mutex_slowlock+0x2dc/0x780 [ 940.551677][ T38] ? rt_mutex_slowlock+0x1fd/0x780 [ 940.551704][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 940.551754][ T38] ? linkwatch_event+0xe/0x60 [ 940.551780][ T38] ? process_one_work+0x8be/0x1630 [ 940.551817][ T38] ? linkwatch_event+0xe/0x60 [ 940.551843][ T38] mutex_lock_nested+0x168/0x1d0 [ 940.551872][ T38] ? process_one_work+0x8be/0x1630 [ 940.551901][ T38] linkwatch_event+0xe/0x60 [ 940.551921][ T38] process_one_work+0x98b/0x1630 [ 940.551971][ T38] ? __pfx_process_one_work+0x10/0x10 [ 940.551998][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 940.552037][ T38] worker_thread+0xb8e/0x1140 [ 940.552066][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 940.552110][ T38] kthread+0x388/0x470 [ 940.552135][ T38] ? __pfx_worker_thread+0x10/0x10 [ 940.552153][ T38] ? __pfx_kthread+0x10/0x10 [ 940.552177][ T38] ret_from_fork+0x514/0xb70 [ 940.552207][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 940.552232][ T38] ? __switch_to+0xc79/0x1410 [ 940.552257][ T38] ? __pfx_kthread+0x10/0x10 [ 940.552282][ T38] ret_from_fork_asm+0x1a/0x30 [ 940.552326][ T38] [ 940.552363][ T38] INFO: task syz-executor:18237 blocked for more than 144 seconds. [ 940.552379][ T38] Tainted: G L syzkaller #0 [ 940.552390][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 940.552398][ T38] task:syz-executor state:D stack:21704 pid:18237 tgid:18237 ppid:1 task_flags:0x480140 flags:0x00080002 [ 940.552449][ T38] Call Trace: [ 940.552455][ T38] [ 940.552466][ T38] __schedule+0x16f9/0x5500 [ 940.552525][ T38] ? __pfx___schedule+0x10/0x10 [ 940.552568][ T38] rt_mutex_schedule+0x76/0xf0 [ 940.552595][ T38] rt_mutex_slowlock_block+0x508/0x680 [ 940.552638][ T38] rt_mutex_slowlock+0x2dc/0x780 [ 940.552666][ T38] ? rt_mutex_slowlock+0x1fd/0x780 [ 940.552692][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 940.552732][ T38] ? nsim_destroy+0x16b/0x7f0 [ 940.552757][ T38] ? nsim_destroy+0x16b/0x7f0 [ 940.552774][ T38] mutex_lock_nested+0x168/0x1d0 [ 940.552797][ T38] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 940.696139][ T38] nsim_destroy+0x16b/0x7f0 [ 940.696177][ T38] __nsim_dev_port_del+0x14f/0x200 [ 940.696206][ T38] nsim_dev_reload_destroy+0x288/0x490 [ 940.696229][ T38] ? nsim_drv_remove+0x50/0x160 [ 940.696256][ T38] nsim_drv_remove+0x58/0x160 [ 940.696278][ T38] ? __pfx_nsim_bus_remove+0x10/0x10 [ 940.696299][ T38] device_release_driver_internal+0x46f/0x870 [ 940.696329][ T38] bus_remove_device+0x45a/0x570 [ 940.696361][ T38] ? __pfx_bus_remove_device+0x10/0x10 [ 940.696391][ T38] ? up_read+0x23/0x40 [ 940.696411][ T38] ? kernfs_remove_by_name_ns+0x101/0x140 [ 940.696445][ T38] device_del+0x52b/0x900 [ 940.696496][ T38] ? __pfx_device_del+0x10/0x10 [ 940.696527][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 940.696547][ T38] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 940.696581][ T38] device_unregister+0x21/0xf0 [ 940.696612][ T38] del_device_store+0x2b0/0x370 [ 940.696635][ T38] ? __pfx_del_device_store+0x10/0x10 [ 940.696655][ T38] ? sysfs_file_kobj+0x1e4/0x230 [ 940.696678][ T38] ? sysfs_kf_write+0x166/0x260 [ 940.696703][ T38] ? __pfx_sysfs_kf_write+0x10/0x10 [ 940.696724][ T38] kernfs_fop_write_iter+0x3b0/0x540 [ 940.696751][ T38] vfs_write+0x629/0xba0 [ 940.696790][ T38] ? __pfx_vfs_write+0x10/0x10 [ 940.696828][ T38] ? do_sys_openat2+0x14e/0x200 [ 940.696850][ T38] ? kmem_cache_free+0x187/0x6c0 [ 940.696892][ T38] ksys_write+0x156/0x270 [ 940.696924][ T38] ? __pfx_ksys_write+0x10/0x10 [ 940.696960][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 940.696982][ T38] do_syscall_64+0x174/0x580 [ 940.697004][ T38] ? clear_bhb_loop+0x40/0x90 [ 940.697027][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 940.697047][ T38] RIP: 0033:0x7fb80d6cd68e [ 940.697065][ T38] RSP: 002b:00007ffd7aaccb88 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 940.697087][ T38] RAX: ffffffffffffffda RBX: 000055559531b500 RCX: 00007fb80d6cd68e [ 940.697102][ T38] RDX: 0000000000000001 RSI: 00007ffd7aaccc10 RDI: 0000000000000005 [ 940.697115][ T38] RBP: 00007fb80d7a35f2 R08: 0000000000000000 R09: 0000000000000000 [ 940.697128][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 940.697140][ T38] R13: 00007ffd7aaccc10 R14: 00007fb80e4b4620 R15: 0000000000000003 [ 940.697171][ T38] [ 940.697189][ T38] INFO: task syz-executor:18954 blocked for more than 144 seconds. [ 940.697207][ T38] Tainted: G L syzkaller #0 [ 940.697217][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 940.697225][ T38] task:syz-executor state:D stack:24568 pid:18954 tgid:18954 ppid:1 task_flags:0x400140 flags:0x00080002 [ 940.697280][ T38] Call Trace: [ 940.697287][ T38] [ 940.697298][ T38] __schedule+0x16f9/0x5500 [ 940.697325][ T38] ? is_bpf_text_address+0x26/0x2b0 [ 940.697384][ T38] ? __pfx___schedule+0x10/0x10 [ 940.697427][ T38] rt_mutex_schedule+0x76/0xf0 [ 940.697456][ T38] rt_mutex_slowlock_block+0x508/0x680 [ 940.697499][ T38] rt_mutex_slowlock+0x2dc/0x780 [ 940.697526][ T38] ? rt_mutex_slowlock+0x1fd/0x780 [ 940.697553][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 940.835857][ T38] ? register_netdevice_notifier_net+0x1a/0xa0 [ 940.835911][ T38] ? register_netdevice_notifier_net+0x1a/0xa0 [ 940.835939][ T38] mutex_lock_nested+0x168/0x1d0 [ 940.835965][ T38] ? net_generic+0x1e/0x240 [ 940.835990][ T38] register_netdevice_notifier_net+0x1a/0xa0 [ 940.836021][ T38] ops_init+0x35c/0x5c0 [ 940.836059][ T38] setup_net+0x118/0x340 [ 940.836088][ T38] ? __pfx_setup_net+0x10/0x10 [ 940.836115][ T38] ? mutex_rt_init_lockdep+0x66/0x80 [ 940.836137][ T38] ? preinit_net+0x4b5/0x7d0 [ 940.836166][ T38] copy_net_ns+0x50e/0x730 [ 940.836196][ T38] create_new_namespaces+0x3e7/0x6a0 [ 940.836230][ T38] ? security_capable+0x7e/0x2c0 [ 940.836262][ T38] unshare_nsproxy_namespaces+0x149/0x190 [ 940.836301][ T38] ksys_unshare+0x57d/0x9f0 [ 940.836333][ T38] ? __pfx_ksys_unshare+0x10/0x10 [ 940.836366][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 940.836388][ T38] __x64_sys_unshare+0x38/0x50 [ 940.836410][ T38] do_syscall_64+0x174/0x580 [ 940.836429][ T38] ? trace_irq_disable+0x3b/0x140 [ 940.836454][ T38] ? clear_bhb_loop+0x40/0x90 [ 940.836478][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 940.836497][ T38] RIP: 0033:0x7f77b035e127 [ 940.836516][ T38] RSP: 002b:00007ffc9fd4e0a8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 940.836537][ T38] RAX: ffffffffffffffda RBX: 00007f77b05d5f40 RCX: 00007f77b035e127 [ 940.836552][ T38] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 940.836564][ T38] RBP: 00007f77b05d67b8 R08: 0000000000000000 R09: 0000000000000000 [ 940.836577][ T38] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000008 [ 940.836589][ T38] R13: 0000000000000003 R14: 00007ffc9fd4e2e8 R15: 0000000000000000 [ 940.836619][ T38] [ 940.836638][ T38] INFO: task syz-executor:19265 blocked for more than 144 seconds. [ 940.836656][ T38] Tainted: G L syzkaller #0 [ 940.836667][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 940.836676][ T38] task:syz-executor state:D stack:25752 pid:19265 tgid:19265 ppid:1 task_flags:0x400140 flags:0x00080002 [ 940.836732][ T38] Call Trace: [ 940.836739][ T38] [ 940.836751][ T38] __schedule+0x16f9/0x5500 [ 940.836778][ T38] ? unwind_next_frame+0xa6/0x2550 [ 940.836836][ T38] ? __pfx___schedule+0x10/0x10 [ 940.836879][ T38] rt_mutex_schedule+0x76/0xf0 [ 940.836908][ T38] rt_mutex_slowlock_block+0x508/0x680 [ 940.836951][ T38] rt_mutex_slowlock+0x2dc/0x780 [ 940.836979][ T38] ? rt_mutex_slowlock+0x1fd/0x780 [ 940.837005][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 940.837042][ T38] ? inet_rtm_newaddr+0x404/0x1ad0 [ 940.837072][ T38] ? inet_rtm_newaddr+0x404/0x1ad0 [ 940.837101][ T38] ? inet_rtm_newaddr+0x404/0x1ad0 [ 940.837124][ T38] mutex_lock_nested+0x168/0x1d0 [ 940.837154][ T38] inet_rtm_newaddr+0x404/0x1ad0 [ 940.837179][ T38] ? __kernel_text_address+0xd/0x30 [ 940.837215][ T38] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 940.837257][ T38] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 940.972555][ T38] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 940.972594][ T38] ? kasan_save_track+0x3e/0x80 [ 940.972621][ T38] ? kmem_cache_alloc_node_noprof+0x22a/0x6e0 [ 940.972649][ T38] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 940.972678][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 940.972708][ T38] ? __lock_acquire+0x6b5/0x2d10 [ 940.972746][ T38] netlink_rcv_skb+0x232/0x4b0 [ 940.972770][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 940.972800][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 940.972844][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 940.972865][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 940.972892][ T38] netlink_unicast+0x780/0x920 [ 940.972932][ T38] netlink_sendmsg+0x813/0xb40 [ 940.972963][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 940.972986][ T38] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 940.973020][ T38] ? aa_sock_msg_perm+0x122/0x200 [ 940.973046][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 940.973066][ T38] sock_sendmsg_nosec+0x13a/0x180 [ 940.973096][ T38] __sys_sendto+0x402/0x590 [ 940.973131][ T38] ? __pfx___sys_sendto+0x10/0x10 [ 940.973185][ T38] ? exc_page_fault+0x6a/0xc0 [ 940.973208][ T38] ? do_user_addr_fault+0xc6f/0x1340 [ 940.973238][ T38] __x64_sys_sendto+0xde/0x100 [ 940.973268][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 940.973290][ T38] do_syscall_64+0x174/0x580 [ 940.973310][ T38] ? trace_irq_disable+0x3b/0x140 [ 940.973335][ T38] ? clear_bhb_loop+0x40/0x90 [ 940.973359][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 941.005542][ T38] RIP: 0033:0x7faaa310d68e [ 941.005568][ T38] RSP: 002b:00007fffd1c43b78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 941.005589][ T38] RAX: ffffffffffffffda RBX: 000055556cef7500 RCX: 00007faaa310d68e [ 941.005604][ T38] RDX: 0000000000000028 RSI: 00007faaa3ef4670 RDI: 0000000000000003 [ 941.005617][ T38] RBP: 0000000000000001 R08: 00007fffd1c43bf4 R09: 000000000000000c [ 941.005629][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 941.005641][ T38] R13: 0000000000000000 R14: 00007faaa3ef4670 R15: 0000000000000000 [ 941.005671][ T38] [ 941.005680][ T38] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 941.005692][ T38] INFO: task syz-executor:19267 blocked for more than 145 seconds. [ 941.005710][ T38] Tainted: G L syzkaller #0 [ 941.005721][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 941.005721][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 941.005730][ T38] task:syz-executor state:D stack:25752 pid:19267 tgid:19267 ppid:1 task_flags:0x400140 flags:0x00080002 [ 941.005787][ T38] Call Trace: [ 941.005794][ T38] [ 941.005805][ T38] __schedule+0x16f9/0x5500 [ 941.005842][ T38] ? unwind_next_frame+0xa6/0x2550 [ 941.005902][ T38] ? __pfx___schedule+0x10/0x10 [ 941.005947][ T38] rt_mutex_schedule+0x76/0xf0 [ 941.005976][ T38] rt_mutex_slowlock_block+0x508/0x680 [ 941.006019][ T38] rt_mutex_slowlock+0x2dc/0x780 [ 941.006047][ T38] ? rt_mutex_slowlock+0x1fd/0x780 [ 941.006073][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 941.134654][ T38] ? inet_rtm_newaddr+0x404/0x1ad0 [ 941.134696][ T38] ? inet_rtm_newaddr+0x404/0x1ad0 [ 941.134728][ T38] ? inet_rtm_newaddr+0x404/0x1ad0 [ 941.134751][ T38] mutex_lock_nested+0x168/0x1d0 [ 941.134784][ T38] inet_rtm_newaddr+0x404/0x1ad0 [ 941.134817][ T38] ? __kernel_text_address+0xd/0x30 [ 941.134855][ T38] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 941.134896][ T38] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 941.134920][ T38] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 941.134948][ T38] ? kasan_save_track+0x3e/0x80 [ 941.134986][ T38] ? kmem_cache_alloc_node_noprof+0x22a/0x6e0 [ 941.135015][ T38] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 941.135042][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 941.135072][ T38] ? __lock_acquire+0x6b5/0x2d10 [ 941.135110][ T38] netlink_rcv_skb+0x232/0x4b0 [ 941.135133][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 941.135163][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 941.135195][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 941.135216][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 941.135242][ T38] netlink_unicast+0x780/0x920 [ 941.135283][ T38] netlink_sendmsg+0x813/0xb40 [ 941.135314][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 941.135338][ T38] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 941.135371][ T38] ? aa_sock_msg_perm+0x122/0x200 [ 941.135398][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 941.135418][ T38] sock_sendmsg_nosec+0x13a/0x180 [ 941.135447][ T38] __sys_sendto+0x402/0x590 [ 941.135482][ T38] ? __pfx___sys_sendto+0x10/0x10 [ 941.135536][ T38] ? exc_page_fault+0x6a/0xc0 [ 941.135560][ T38] ? do_user_addr_fault+0xc6f/0x1340 [ 941.135590][ T38] __x64_sys_sendto+0xde/0x100 [ 941.135620][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 941.135642][ T38] do_syscall_64+0x174/0x580 [ 941.135661][ T38] ? trace_irq_disable+0x3b/0x140 [ 941.135685][ T38] ? clear_bhb_loop+0x40/0x90 [ 941.135709][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 941.135728][ T38] RIP: 0033:0x7f8b88ffd68e [ 941.135746][ T38] RSP: 002b:00007ffc0639e338 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 941.135768][ T38] RAX: ffffffffffffffda RBX: 0000555587f64500 RCX: 00007f8b88ffd68e [ 941.135782][ T38] RDX: 0000000000000028 RSI: 00007f8b89de4670 RDI: 0000000000000003 [ 941.135802][ T38] RBP: 0000000000000001 R08: 00007ffc0639e3b4 R09: 000000000000000c [ 941.135815][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 941.135827][ T38] R13: 0000000000000000 R14: 00007f8b89de4670 R15: 0000000000000000 [ 941.135856][ T38] [ 941.135864][ T38] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 941.135895][ T38] [ 941.135895][ T38] Showing all locks held in the system: [ 941.135906][ T38] 3 locks held by kworker/0:0/9: [ 941.135917][ T38] #0: ffff88813fe4f938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 941.135974][ T38] #1: ffffc900000e7c40 (rx_mode_work){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 941.136027][ T38] #2: ffffffff8f390178 (rtnl_mutex){+.+.}-{4:4}, at: netdev_rx_mode_work+0x1c/0x460 [ 941.393863][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 941.473379][ T38] 4 locks held by pr/legacy/17: [ 941.522986][ T38] #0: ffffffff8dfbccc0 (console_lock){+.+.}-{0:0}, at: legacy_kthread_func+0x1a3/0x250 [ 941.523512][ T38] #1: ffffffff8dea45b8 (console_srcu){....}-{0:0}, at: console_flush_one_record+0xfa/0xb90 [ 941.523770][ T38] #2: ffffffff99bc0f98 (&port_lock_key){+.+.}-{3:3}, at: serial8250_console_write+0x178/0x1b50 [ 941.523998][ T38] #3: ffffffff8dfcac60 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 941.524266][ T38] 1 lock held by khungtaskd/38: [ 941.524357][ T38] #0: ffffffff8dfcac60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 941.897186][ T38] 4 locks held by kworker/u8:6/213: [ 941.897214][ T38] #0: ffff8880658df938 ((wq_completion)krds_cp_wq#8/0){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 941.897283][ T38] #1: ffffc90003e1fc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 941.897338][ T38] #2: ffff88805e58d700 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x930 [ 941.897389][ T38] #3: ffffffff8dfcac60 (rcu_read_lock){....}-{1:3}, at: __inet_dev_addr_type+0x154/0x500 [ 941.897441][ T38] 5 locks held by kworker/u8:7/760: [ 941.897452][ T38] #0: ffff88802db4f938 ((wq_completion)wg-kex-wg0#13){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 941.897510][ T38] #1: ffffc90004a2fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 941.897564][ T38] #2: ffff888039d6d6f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12f/0x830 [ 941.897621][ T38] #3: ffff88801d3fd938 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x140/0x830 [ 941.897676][ T38] #4: ffff8880b8636e90 ((crngs.lock)){+.+.}-{3:3}, at: crng_make_state+0x162/0x5d0 [ 941.897726][ T38] 2 locks held by kworker/u8:8/833: [ 941.897736][ T38] #0: ffff88813fe8c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 941.897790][ T38] #1: ffffc9000564fc40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 941.897846][ T38] 3 locks held by kworker/u8:9/1029: [ 941.897856][ T38] #0: ffff8880328c5138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 941.897909][ T38] #1: ffffc90005ea7c40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 941.897969][ T38] #2: ffffffff8f390178 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 941.898026][ T38] 5 locks held by kworker/u8:10/1177: [ 941.898036][ T38] #0: ffff88813fe8c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 941.898090][ T38] #1: ffffc90006467c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 941.898145][ T38] #2: ffff88801eea6310 (&devlink->lock_key#4){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbd0 [ 941.898203][ T38] #3: ffff888061054520 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbd0 [ 941.898261][ T38] #4: ffffffff8dfcac60 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 941.898314][ T38] 4 locks held by kworker/u8:11/1462: [ 941.898325][ T38] #0: ffff88813fe8c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 941.898377][ T38] #1: ffffc90006db7c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 941.898431][ T38] #2: ffff8880629d08d8 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x460 [ 941.898483][ T38] #3: ffffffff8dfcac60 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xa6/0x2550 [ 941.898537][ T38] 3 locks held by kworker/u8:12/1483: [ 941.898548][ T38] #0: ffff88802a96e938 ((wq_completion)wg-kex-wg0#11){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 941.898606][ T38] #1: ffffc90006e67c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 941.898662][ T38] #2: ffff8880b8746420 ((&pcs->lock)){+.+.}-{3:3}, at: kmem_cache_alloc_node_noprof+0x304/0x6e0 [ 941.898728][ T38] 6 locks held by kworker/u8:19/4157: [ 941.898739][ T38] #0: ffff88813fe8c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 941.898793][ T38] #1: ffffc9000f6c7c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 941.898848][ T38] #2: ffff88803dd56310 (&devlink->lock_key#2){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbd0 [ 941.898903][ T38] #3: ffff8880607d9d20 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbd0 [ 941.898955][ T38] #4: ffffffff8dfcac60 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 941.899004][ T38] #5: ffff8880b8636e90 ((crngs.lock)){+.+.}-{3:3}, at: crng_make_state+0x162/0x5d0 [ 941.899054][ T38] 1 lock held by syslogd/4964: [ 941.899064][ T38] #0: ffff8880366807f0 (&u->iolock){+.+.}-{4:4}, at: __unix_dgram_recvmsg+0x1e2/0xd60 [ 941.899113][ T38] 2 locks held by dhcpcd/5277: [ 941.899123][ T38] #0: ffff888035aee928 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 941.899169][ T38] #1: ffffffff8f390178 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dump_ifinfo+0xa31/0x1450 [ 941.899241][ T38] 2 locks held by getty/5368: [ 941.899252][ T38] #0: ffff8880365160a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 941.899304][ T38] #1: ffffc90003cc62e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13a0 [ 941.899354][ T38] 3 locks held by kworker/0:3/5603: [ 941.899364][ T38] #0: ffff88813fe4f938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 941.899418][ T38] #1: ffffc9000445fc40 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 941.899471][ T38] #2: ffffffff8f390178 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 941.899527][ T38] 3 locks held by kworker/1:6/5893: [ 941.899538][ T38] #0: ffff88813fe4e538 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 941.899591][ T38] #1: ffffc90005c7fc40 ((gc_work).work){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 941.899645][ T38] #2: ffffffff8ead0498 ("ratelimiter_table_lock"){+.+.}-{3:3}, at: wg_ratelimiter_gc_entries+0x5d/0x480 [ 941.899699][ T38] 3 locks held by kworker/1:8/6423: [ 941.899709][ T38] #0: ffff88813fe4f938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 941.899763][ T38] #1: ffffc90006147c40 ((work_completion)(&(&hwstats->traffic_dw)->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 941.899818][ T38] #2: ffff88801eea6650 (&hwstats->hwsdev_list_lock){+.+.}-{4:4}, at: nsim_dev_hwstats_traffic_work+0x31/0x1b0 [ 941.899867][ T38] 1 lock held by syz.0.928/8327: [ 941.899878][ T38] #0: ffffffff8f390178 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 941.899922][ T38] 3 locks held by kworker/u8:20/8697: [ 941.899933][ T38] #0: ffff88813fe8c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 941.899986][ T38] #1: ffffc9001d26fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 941.900040][ T38] #2: ffff888061e008d8 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x460 [ 941.900093][ T38] 6 locks held by kworker/u8:23/8701: [ 941.900104][ T38] #0: ffff88813fe8c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 941.900157][ T38] #1: ffffc9001d28fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 941.900213][ T38] #2: ffff888039e46310 (&devlink->lock_key#6){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbd0 [ 941.900281][ T38] #3: ffff8880388d6920 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbd0 [ 941.900334][ T38] #4: ffffffff8dfcac60 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 941.900384][ T38] #5: ffff8880b8636e90 ((crngs.lock)){+.+.}-{3:3}, at: crng_make_state+0x162/0x5d0 [ 941.900432][ T38] 4 locks held by kworker/u8:24/8702: [ 941.900443][ T38] #0: ffff888031484938 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 941.900497][ T38] #1: ffffc9001d29fc40 ((work_completion)(&(&bat_priv->tt.work)->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 941.900551][ T38] #2: ffffffff8de613c0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 941.900595][ T38] #3: ffffffff8dfcac60 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 941.900639][ T38] 6 locks held by kworker/u8:26/8704: [ 941.900650][ T38] #0: ffff88813fe8c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 941.900703][ T38] #1: ffffc9001d2bfc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 941.900758][ T38] #2: ffff888062fe2310 (&devlink->lock_key#7){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbd0 [ 941.900815][ T38] #3: ffff888029368920 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbd0 [ 941.900867][ T38] #4: ffffffff8dfcac60 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 941.900915][ T38] #5: ffff8880b8636e90 ((crngs.lock)){+.+.}-{3:3}, at: crng_make_state+0x162/0x5d0 [ 941.900964][ T38] 4 locks held by kworker/u8:28/8706: [ 941.900975][ T38] #0: ffff88801b69e138 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 941.901029][ T38] #1: ffffc9001d2dfc40 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 941.901082][ T38] #2: ffffffff8f380c60 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 941.901134][ T38] #3: ffffffff8f390178 (rtnl_mutex){+.+.}-{4:4}, at: ieee80211_unregister_hw+0x55/0x2c0 [ 941.901180][ T38] 3 locks held by kworker/u8:29/8707: [ 941.901191][ T38] #0: ffff88813fe8c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 941.901251][ T38] #1: ffffc9001d2efc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 941.901304][ T38] #2: ffffffff8f390178 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 941.901354][ T38] 3 locks held by kworker/0:2/12448: [ 941.901365][ T38] #0: ffff88813fe4e538 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 941.901418][ T38] #1: ffffc9000505fc40 ((work_completion)(&(&gc_work->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 941.901473][ T38] #2: ffffffff8dfcac60 (rcu_read_lock){....}-{1:3}, at: gc_worker+0x265/0x12e0 [ 941.901519][ T38] 2 locks held by syz.3.4719/17216: [ 941.901530][ T38] #0: ffffffff8f390178 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 941.901573][ T38] #1: ffffffff8e111470 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 941.901623][ T38] 7 locks held by syz-executor/18237: [ 941.901633][ T38] #0: ffff888034fc4480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 941.901691][ T38] #1: ffff88803324fc78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 941.901736][ T38] #2: ffff8880290a5788 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 941.901783][ T38] #3: ffffffff8ec05258 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 941.901828][ T38] #4: ffff88801b3f5160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x870 [ 941.901875][ T38] #5: ffff8880377e2310 (&devlink->lock_key#9){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 941.901926][ T38] #6: ffffffff8f390178 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x16b/0x7f0 [ 941.901971][ T38] 1 lock held by kworker/1:11/18373: [ 941.901981][ T38] #0: ffff88805f89dd38 ((wq_completion)wg-crypt-wg0){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 941.902037][ T38] 2 locks held by syz-executor/18954: [ 941.902048][ T38] #0: ffffffff8f380c60 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 941.902098][ T38] #1: ffffffff8f390178 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 941.902152][ T38] 1 lock held by syz.7.5556/19206: [ 941.902163][ T38] #0: ffffffff8f390178 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 941.902208][ T38] 1 lock held by syz-executor/19265: [ 941.902219][ T38] #0: ffffffff8f390178 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 941.902274][ T38] 1 lock held by syz-executor/19267: [ 941.902285][ T38] #0: ffffffff8f390178 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 941.902335][ T38] 1 lock held by syz-executor/19330: [ 941.902345][ T38] #0: ffffffff8f390178 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 941.902395][ T38] 1 lock held by syz-executor/19911: [ 941.902405][ T38] #0: ffffffff8f390178 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 941.902454][ T38] 1 lock held by syz-executor/19932: [ 941.902465][ T38] #0: ffffffff8f390178 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 941.902514][ T38] 1 lock held by syz-executor/20344: [ 941.902525][ T38] #0: ffffffff8f390178 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 941.902574][ T38] 1 lock held by syz-executor/21123: [ 941.902585][ T38] #0: ffffffff8f390178 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 941.902640][ T38] 1 lock held by syz-executor/21146: [ 941.902650][ T38] #0: ffffffff8f390178 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 941.902699][ T38] 1 lock held by syz-executor/21538: [ 941.902710][ T38] #0: ffffffff8f390178 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 942.031755][ T38] [ 942.031767][ T38] ============================================= [ 942.031767][ T38] [ 942.031788][ T38] NMI backtrace for cpu 0 [ 942.031810][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 942.031836][ T38] Tainted: [L]=SOFTLOCKUP [ 942.031843][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 942.031854][ T38] Call Trace: [ 942.031864][ T38] [ 942.031873][ T38] dump_stack_lvl+0xe8/0x150 [ 942.031905][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 942.031932][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 942.031959][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 942.031988][ T38] sys_info+0x135/0x170 [ 942.032011][ T38] watchdog+0xfd3/0x1030 [ 942.032041][ T38] ? watchdog+0x1c9/0x1030 [ 942.032069][ T38] kthread+0x388/0x470 [ 942.032093][ T38] ? __pfx_watchdog+0x10/0x10 [ 942.032114][ T38] ? __pfx_kthread+0x10/0x10 [ 942.032138][ T38] ret_from_fork+0x514/0xb70 [ 942.032166][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 942.032191][ T38] ? __switch_to+0xc79/0x1410 [ 942.032215][ T38] ? __pfx_kthread+0x10/0x10 [ 942.032239][ T38] ret_from_fork_asm+0x1a/0x30 [ 942.032294][ T38] [ 942.032302][ T38] Sending NMI from CPU 0 to CPUs 1: [ 942.032330][ C1] NMI backtrace for cpu 1 [ 942.032345][ C1] CPU: 1 UID: 0 PID: 30 Comm: ktimers/1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 942.032367][ C1] Tainted: [L]=SOFTLOCKUP [ 942.032372][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 942.032381][ C1] RIP: 0010:__schedule+0x34c3/0x5500 [ 942.032406][ C1] Code: e9 1a 00 00 49 8d 5f 30 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 f0 e4 fe f6 4c 8b 1b <48> 8b 7c 24 20 48 8d b4 24 a0 01 00 00 2e 2e 2e 41 ff d3 48 89 44 [ 942.032421][ C1] RSP: 0018:ffffc90000a4fb20 EFLAGS: 00000046 [ 942.032435][ C1] RAX: 1ffffffff1b1cac2 RBX: ffffffff8d8e5610 RCX: dffffc0000000000 [ 942.032447][ C1] RDX: dffffc0000000000 RSI: ffffffff8d8b03aa RDI: ffffffff8baa2980 [ 942.032459][ C1] RBP: ffffc90000a4fd40 R08: ffff88801baed007 R09: 1ffff1100375da00 [ 942.032470][ C1] R10: dffffc0000000000 R11: ffffffff819e16c0 R12: ffff8880b873c3d0 [ 942.032482][ C1] R13: ffff8880b873c400 R14: 1ffff110170e787a R15: ffffffff8d8e55e0 [ 942.032494][ C1] FS: 0000000000000000(0000) GS:ffff888125fcd000(0000) knlGS:0000000000000000 [ 942.032507][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 942.032517][ C1] CR2: 00007fb0e54c3ed0 CR3: 00000000386a4000 CR4: 00000000003526f0 [ 942.032532][ C1] Call Trace: [ 942.032537][ C1] [ 942.032558][ C1] ? __pfx___schedule+0x10/0x10 [ 942.032579][ C1] ? schedule+0x90/0x360 [ 942.032605][ C1] ? schedule+0x90/0x360 [ 942.032628][ C1] schedule+0x164/0x360 [ 942.032649][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 942.032666][ C1] smpboot_thread_fn+0x5bc/0xa50 [ 942.032682][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 942.032702][ C1] kthread+0x388/0x470 [ 942.032720][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 942.032735][ C1] ? __pfx_kthread+0x10/0x10 [ 942.032754][ C1] ret_from_fork+0x514/0xb70 [ 942.032774][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 942.032794][ C1] ? __switch_to+0xc79/0x1410 [ 942.032811][ C1] ? __pfx_kthread+0x10/0x10 [ 942.032830][ C1] ret_from_fork_asm+0x1a/0x30 [ 942.032858][ C1] [ 942.152664][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 942.152690][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 942.152718][ T38] Tainted: [L]=SOFTLOCKUP [ 942.152724][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 942.152742][ T38] Call Trace: [ 942.152751][ T38] [ 942.152759][ T38] vpanic+0x56c/0xa60 [ 942.152791][ T38] ? __pfx___schedule+0x10/0x10 [ 942.152820][ T38] ? __pfx_vpanic+0x10/0x10 [ 942.152855][ T38] panic+0xc5/0xd0 [ 942.152880][ T38] ? __pfx_panic+0x10/0x10 [ 942.152907][ T38] ? preempt_schedule_thunk+0x16/0x40 [ 942.152933][ T38] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 942.152964][ T38] watchdog+0x102c/0x1030 [ 942.152995][ T38] ? watchdog+0x1c9/0x1030 [ 942.153023][ T38] kthread+0x388/0x470 [ 942.153047][ T38] ? __pfx_watchdog+0x10/0x10 [ 942.153068][ T38] ? __pfx_kthread+0x10/0x10 [ 942.153092][ T38] ret_from_fork+0x514/0xb70 [ 942.153120][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 942.153145][ T38] ? __switch_to+0xc79/0x1410 [ 942.153169][ T38] ? __pfx_kthread+0x10/0x10 [ 942.153193][ T38] ret_from_fork_asm+0x1a/0x30 [ 942.153234][ T38] [ 942.153497][ T38] Kernel Offset: disabled