last executing test programs: 17.512642895s ago: executing program 0 (id=233): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x93, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fea0"], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x79, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 16.981641602s ago: executing program 0 (id=235): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0xc1cc6, 0x0, 0x8000008, 0x3, 0xfffffffe, 0x2, 0x0, 0x7cce8c743ee810df, 0x4}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f00000001c0)={0x800100, 0xfffffffd, 0x22, 0x6, 0x1101, 0x1}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000000700)={{0x0, 0x1}, {0x1, 0x2f}, 0xfffffff4}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) r2 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="f200000000000000100100000100000043000000000000001800000000000000100100000d0000001000000000000000"], 0x30}, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x46}, {0xffffffffffffffff, 0x140}], 0x2, &(0x7f0000000080), &(0x7f00000000c0)={[0x9]}, 0x8) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r5, 0x560d, 0x1000000000003) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x2e288501978821b, 0x80) r6 = dup3(r4, r3, 0x0) recvmmsg$unix(r6, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000005140)=""/4111, 0x100f}], 0x1}}, {{&(0x7f0000000a40)=@abs, 0x6e, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/241, 0xf1}], 0x1}}, {{&(0x7f0000000500), 0x6e, &(0x7f00000003c0)=[{&(0x7f00000005c0)=""/227, 0xe3}], 0x1, &(0x7f00000006c0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000780)=""/246, 0xf6}], 0x1, &(0x7f00000008c0)=[@rights={{0x10}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}], 0x4, 0x58ca2280, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f00001c1000/0x3000)=nil, 0x40000, 0x9) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 16.599305715s ago: executing program 1 (id=237): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000080)={0x8, 0x8169, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0x40, 0x403, 0xc}) fcntl$dupfd(r2, 0x0, r1) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x4b, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000140)={0x6, 0x1000, 0x800}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) close_range(r0, 0xffffffffffffffff, 0x0) 15.99701118s ago: executing program 4 (id=239): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x5a4f, 0x4) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e20, @loopback}, 0xffffffffffffff07) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001300), 0x28200, 0x0) r2 = dup(r1) r3 = syz_io_uring_setup(0xc0f, &(0x7f00000000c0)={0x0, 0x6f00, 0x80, 0xffffffff, 0x1a}, &(0x7f00000003c0)=0x0, &(0x7f00000004c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000380)=@IORING_OP_CONNECT={0x10, 0x1, 0x0, r6, 0x80, &(0x7f00000001c0)=@nfc={0x27, r7, 0xffffffffffffffff, 0x5}}) r8 = fsmount(r5, 0x0, 0x1) fchdir(r8) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r9, 0x100, 0x1) getdents64(r9, 0x0, 0x3e) io_uring_enter(r3, 0x47f5, 0x0, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000740)='P', 0x1, 0x4008044, 0x0, 0x0) sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x0, 0x0, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xfffffffffffffed6, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000000) bind$inet(r10, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r10, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r10, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r10, &(0x7f0000004d00), 0x7fffffffffffd33, 0x20000890) connect$inet(r10, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) 15.843260208s ago: executing program 1 (id=240): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000) openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x121682, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) kexec_load(0x58fb, 0x0, 0x0, 0x160000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[], 0x50) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @loopback}, 0xc) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) socket$nl_route(0x10, 0x3, 0x0) 12.623788079s ago: executing program 3 (id=241): setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="bc0000001900010000000000000000000000000000000000000000000000000000000000000000000000ffffe000000100000000000000000200000000000da6a9ca0fa900000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000007000000000000000000000000000000ffffff7f000000000000000000000000020000000000000000000000000000000000000000000000feffffffffffffffffffffffffffffff000000000000000000000000000000000000000000000000010000030000000004000500"], 0xbc}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='veth0_to_team\x00', 0x10) syz_open_dev$MSR(0x0, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000300)={0x0, 0x5}, &(0x7f0000000340)=0x8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x2c000010) 11.386906172s ago: executing program 2 (id=242): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) inotify_init() socket$netlink(0x10, 0x3, 0xc) pipe2$9p(0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002b40)='/proc/tty/ldiscs\x00', 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) memfd_secret(0x80000) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e1d, 0x9, @remote, 0x10002}, 0x6) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x5, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r5, 0xc2b2}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 11.352420614s ago: executing program 1 (id=243): r0 = socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x4d, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x800) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)=@known='security.selinux\x00', &(0x7f0000000180)=""/39, 0x27) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x7, 0x0, 0xffffffff}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000100010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000100075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a30"], 0xec}, 0x1, 0x0, 0x0, 0x24004005}, 0x0) 10.923949881s ago: executing program 4 (id=244): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x3fff, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x4}, {0xffff, 0xffff}, {0xfff1, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0xdc}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r4, {0xffff}, {}, {0x2, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r12, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) 9.065379763s ago: executing program 3 (id=245): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x93, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fea0"], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x79, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 8.753534532s ago: executing program 1 (id=246): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000740)={@ifindex, 0xffffffffffffffff, 0x2, 0x8}, 0x20) mknodat$loop(0xffffffffffffff9c, 0x0, 0x100, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/udplite\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) semctl$SEM_STAT(0x0, 0x2, 0x12, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) socket$nl_route(0x10, 0x3, 0x0) lseek(r0, 0x10001, 0x0) 8.54759247s ago: executing program 0 (id=247): syz_mount_image$nilfs2(&(0x7f0000000280), &(0x7f0000000400)='./file0\x00', 0x3000040, &(0x7f0000003280)=ANY=[], 0xfe, 0xd99, &(0x7f0000006900)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r0, 0x40786e88, &(0x7f0000000640)={{0x0, 0x0, 0x40, 0xd, 0xe2}, {&(0x7f0000000340)=[{0x3, 0x8000}], 0x1, 0x10, 0x20c, 0xfffffffffffffff8}, {0x0, 0x0, 0x8, 0x1, 0x2}, {0x0, 0x0, 0x28, 0x0, 0xffffffffffffff2d}, {&(0x7f00000003c0)=[0x9], 0x1fffffffffffff29, 0x8, 0x98f, 0xffff}}) 8.499531852s ago: executing program 2 (id=248): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newqdisc={0x68, 0x14, 0xf0b, 0x70bd25, 0x0, {0x2, 0x0, 0x0, 0x0, {0x10, 0x7}, {0x0, 0x8}, {0x1, 0xffe0}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x0, 0x0, 0xb, 0x0, 0x0, 0x7e}}, {0x4}}, {{0x1c, 0x1, {0xf4, 0xf3, 0x6, 0x1a, 0x0, 0x2, 0x591}}, {0x4}}]}]}, 0x68}}, 0x0) 8.46454879s ago: executing program 4 (id=249): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201100100080020b404010000000000000109022400010000200009040000050300010009210600060122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 8.33292676s ago: executing program 3 (id=250): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000080)={0x8, 0x8169, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0x40, 0x403, 0xc}) fcntl$dupfd(r2, 0x0, r1) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x4b, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000140)={0x6, 0x1000, 0x800}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0xff, 0x2, 0xd83f}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4.842655368s ago: executing program 1 (id=251): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) unlink(0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={r1, 0x0, 0x0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x24, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008081}, 0x20000014) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='cgroup.clone_children\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000700)=ANY=[@ANYBLOB='1-'], 0x31) socket$can_j1939(0x1d, 0x2, 0x7) umount2(0x0, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x3c, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) sendmsg$IPSET_CMD_SAVE(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)={0x38, 0x8, 0x6, 0x201, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x200484d}, 0x8000) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) 4.74203727s ago: executing program 2 (id=252): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, 0x0, 0x303, 0x70bd28, 0x0, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) 4.435692499s ago: executing program 0 (id=253): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8001) accept4(r1, 0x0, 0x0, 0x80800) 4.435365812s ago: executing program 4 (id=254): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xe7e7}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x8}]}}]}, 0x44}}, 0x20004015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.200194893s ago: executing program 2 (id=255): setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="bc0000001900010000000000000000000000000000000000000000000000000000000000000000000000ffffe000000100000000000000000200000000000da6a9ca0fa900000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000007000000000000000000000000000000ffffff7f000000000000000000000000020000000000000000000000000000000000000000000000feffffffffffffffffffffffffffffff000000000000000000000000000000000000000000000000010000030000000004000500"], 0xbc}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='veth0_to_team\x00', 0x10) syz_open_dev$MSR(0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x86, @private1, 0x7fffffff}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000280)="8a", 0x1}], 0x1}}], 0x1, 0x40000c0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000300)={0x0, 0x5}, &(0x7f0000000340)=0x8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x2c000010) 4.084683814s ago: executing program 3 (id=256): r0 = socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x4d, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x800) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)=@known='security.selinux\x00', &(0x7f0000000180)=""/39, 0x27) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x7, 0x0, 0xffffffff}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000100010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000100075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a30"], 0xec}, 0x1, 0x0, 0x0, 0x24004005}, 0x0) 3.845480358s ago: executing program 1 (id=257): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0xc1cc6, 0x0, 0x8000008, 0x3, 0xfffffffe, 0x2, 0x0, 0x7cce8c743ee810df, 0x4}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f00000001c0)={0x800100, 0xfffffffd, 0x22, 0x6, 0x1101, 0x1}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000000700)={{0x0, 0x1}, {0x1, 0x2f}, 0xfffffff4}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) r2 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="f200000000000000100100000100000043000000000000001800000000000000100100000d0000001000000000000000"], 0x30}, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x46}, {0xffffffffffffffff, 0x140}], 0x2, &(0x7f0000000080), &(0x7f00000000c0)={[0x9]}, 0x8) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r5, 0x560d, 0x1000000000003) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x2e288501978821b, 0x80) r6 = dup3(r4, r3, 0x0) recvmmsg$unix(r6, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000005140)=""/4111, 0x100f}], 0x1}}, {{&(0x7f0000000a40)=@abs, 0x6e, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/241, 0xf1}], 0x1}}, {{&(0x7f0000000500), 0x6e, &(0x7f00000003c0)=[{&(0x7f00000005c0)=""/227, 0xe3}], 0x1, &(0x7f00000006c0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000780)=""/246, 0xf6}], 0x1, &(0x7f00000008c0)=[@rights={{0x10}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}], 0x4, 0x58ca2280, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f00001c1000/0x3000)=nil, 0x40000, 0x9) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 3.775153612s ago: executing program 0 (id=258): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) inotify_init() socket$netlink(0x10, 0x3, 0xc) pipe2$9p(&(0x7f0000000000), 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002b40)='/proc/tty/ldiscs\x00', 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) memfd_secret(0x80000) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e1d, 0x9, @remote, 0x10002}, 0x6) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x5, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r5, 0xc2b2}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 1.943972288s ago: executing program 2 (id=259): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x3fff, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x4}, {0xffff, 0xffff}, {0xfff1, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0xdc}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r4, {0xffff}, {}, {0x2, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r12, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) 1.2290435s ago: executing program 4 (id=260): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x93, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fea0"], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x79, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 870.197905ms ago: executing program 2 (id=261): r0 = socket$can_j1939(0x1d, 0x2, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001080), 0x1, 0x0) write$vga_arbiter(r4, &(0x7f0000000440)=ANY=[@ANYBLOB="746172676574205043493a31373a393a652e3000ad1385b682ffea4be51bda70838404cbae90ab442f17c60b5ef8b727496e6dcee52d9e451097f71b9a28f5da3866beb6816449efa5436c4883452138cb67adca86f093b827d2f8f7afcf539c15671f422116f47ed0"], 0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r6 = socket$can_j1939(0x1d, 0x2, 0x7) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) bind$can_j1939(r6, 0x0, 0x0) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r5, 0x1, {0x2, 0xff, 0x3}}, 0x18) close(0x3) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000000)={0x0, r0, 0x200, 0x1, 0x0, 0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x13, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000c300400079146a0000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x22, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r7 = socket$isdn(0x22, 0x2, 0x25) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x0}) remap_file_pages(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x2, 0x3) bind$isdn(r7, 0x0, 0x0) io_setup(0x1, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f00000000c0)) 802.841971ms ago: executing program 3 (id=262): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/udplite\x00') lseek(r0, 0x10001, 0x0) 541.618737ms ago: executing program 4 (id=263): syz_mount_image$nilfs2(&(0x7f0000000280), &(0x7f0000000400)='./file0\x00', 0x3000040, &(0x7f0000003280)=ANY=[], 0xfe, 0xd99, &(0x7f0000006900)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r0, 0x40786e88, &(0x7f0000000640)={{0x0, 0x0, 0x40, 0xd, 0xe2}, {&(0x7f0000000340)=[{0x3, 0x8000}], 0x1, 0x10, 0x20c, 0xfffffffffffffff8}, {0x0, 0x0, 0x8, 0x1, 0x2}, {0x0, 0x0, 0x28, 0x0, 0xffffffffffffff2d}, {&(0x7f00000003c0)=[0x9], 0x1fffffffffffff29, 0x8, 0x98f, 0xffff}}) 432.150381ms ago: executing program 0 (id=264): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x2c020400) msgget$private(0x0, 0x0) r3 = syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x700) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r3, 0x40146f2c, &(0x7f0000000000)={0xefb8, 0x1, 0x2, 0x3, 0x4}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r3, 0x40146f2c, &(0x7f0000000040)={0x3, 0x0, 0x3, 0x13}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2) close(0xffffffffffffffff) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.parent_freezing\x00', 0x275a, 0x0) write$binfmt_script(r4, 0x0, 0x0) 0s ago: executing program 3 (id=265): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, 0x0, 0x303, 0x70bd28, 0x0, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.62' (ED25519) to the list of known hosts. [ 155.503629][ T5757] cgroup: Unknown subsys name 'net' [ 155.638280][ T5757] cgroup: Unknown subsys name 'cpuset' [ 155.656142][ T5757] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 161.111215][ T5757] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 166.371117][ T5073] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 166.380308][ T5073] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 166.390075][ T5073] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 166.403451][ T5073] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 166.421772][ T5073] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 166.468082][ T5777] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 166.481914][ T5777] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 166.492971][ T5782] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 166.505766][ T5782] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 166.516922][ T5782] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 166.560478][ T5782] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 166.570383][ T5782] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 166.580544][ T5782] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 166.598431][ T5782] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 166.630721][ T5782] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 166.631396][ T5783] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 166.641325][ T5782] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 166.654914][ T5783] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 166.658769][ T5782] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 166.690560][ T5782] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 166.755860][ T5782] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 166.765097][ T5782] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 166.774318][ T5782] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 166.790331][ T5782] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 166.801538][ T5782] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 168.051732][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 168.076126][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 168.223022][ T5788] chnl_net:caif_netlink_parms(): no params data found [ 168.416128][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 168.479765][ T5073] Bluetooth: hci0: command tx timeout [ 168.497863][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 168.569968][ T5073] Bluetooth: hci1: command tx timeout [ 168.720105][ T5073] Bluetooth: hci2: command tx timeout [ 168.800424][ T5073] Bluetooth: hci3: command tx timeout [ 168.879734][ T5073] Bluetooth: hci4: command tx timeout [ 169.102787][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.120180][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.127825][ T5775] bridge_slave_0: entered allmulticast mode [ 169.152902][ T5775] bridge_slave_0: entered promiscuous mode [ 169.178415][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.188592][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.200662][ T5779] bridge_slave_0: entered allmulticast mode [ 169.211199][ T5779] bridge_slave_0: entered promiscuous mode [ 169.227165][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.235187][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.244388][ T5775] bridge_slave_1: entered allmulticast mode [ 169.254703][ T5775] bridge_slave_1: entered promiscuous mode [ 169.302800][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.311462][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.319094][ T5779] bridge_slave_1: entered allmulticast mode [ 169.330381][ T5779] bridge_slave_1: entered promiscuous mode [ 169.473559][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.481271][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.488695][ T5788] bridge_slave_0: entered allmulticast mode [ 169.497870][ T5788] bridge_slave_0: entered promiscuous mode [ 169.563422][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.596378][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.604583][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.612413][ T5788] bridge_slave_1: entered allmulticast mode [ 169.621073][ T5788] bridge_slave_1: entered promiscuous mode [ 169.662719][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.680704][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.691076][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.698559][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.706455][ T5781] bridge_slave_0: entered allmulticast mode [ 169.714877][ T5781] bridge_slave_0: entered promiscuous mode [ 169.747817][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.755604][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.763558][ T5784] bridge_slave_0: entered allmulticast mode [ 169.773225][ T5784] bridge_slave_0: entered promiscuous mode [ 169.791479][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.825341][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.833311][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.841400][ T5781] bridge_slave_1: entered allmulticast mode [ 169.849458][ T5781] bridge_slave_1: entered promiscuous mode [ 169.885885][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.893557][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.901319][ T5784] bridge_slave_1: entered allmulticast mode [ 169.909744][ T5784] bridge_slave_1: entered promiscuous mode [ 169.994361][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.086246][ T5775] team0: Port device team_slave_0 added [ 170.105322][ T5775] team0: Port device team_slave_1 added [ 170.146294][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.185219][ T5779] team0: Port device team_slave_0 added [ 170.224075][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.265358][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.282633][ T5779] team0: Port device team_slave_1 added [ 170.320838][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.362055][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.418806][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.425972][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.452142][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.495111][ T5788] team0: Port device team_slave_0 added [ 170.549283][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.556881][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.559994][ T5073] Bluetooth: hci0: command tx timeout [ 170.585365][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.631918][ T5788] team0: Port device team_slave_1 added [ 170.639845][ T5073] Bluetooth: hci1: command tx timeout [ 170.647864][ T5784] team0: Port device team_slave_0 added [ 170.656014][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.663304][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.689686][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.726656][ T5781] team0: Port device team_slave_0 added [ 170.763447][ T5784] team0: Port device team_slave_1 added [ 170.799884][ T5073] Bluetooth: hci2: command tx timeout [ 170.801655][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.812842][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.839171][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.861359][ T5781] team0: Port device team_slave_1 added [ 170.879963][ T5073] Bluetooth: hci3: command tx timeout [ 170.893153][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.900392][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.926912][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.944134][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.951570][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.977926][ T5073] Bluetooth: hci4: command tx timeout [ 170.983902][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.140964][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.148075][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.174443][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.225407][ T5775] hsr_slave_0: entered promiscuous mode [ 171.235078][ T5775] hsr_slave_1: entered promiscuous mode [ 171.255414][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.262854][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.289882][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.303725][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.310983][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.337261][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.423410][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.430582][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.456841][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.588461][ T5788] hsr_slave_0: entered promiscuous mode [ 171.597188][ T5788] hsr_slave_1: entered promiscuous mode [ 171.605406][ T5788] debugfs: 'hsr0' already exists in 'hsr' [ 171.611436][ T5788] Cannot create hsr debugfs directory [ 171.629188][ T5779] hsr_slave_0: entered promiscuous mode [ 171.637758][ T5779] hsr_slave_1: entered promiscuous mode [ 171.645835][ T5779] debugfs: 'hsr0' already exists in 'hsr' [ 171.651774][ T5779] Cannot create hsr debugfs directory [ 171.778946][ T5781] hsr_slave_0: entered promiscuous mode [ 171.787649][ T5781] hsr_slave_1: entered promiscuous mode [ 171.795862][ T5781] debugfs: 'hsr0' already exists in 'hsr' [ 171.801828][ T5781] Cannot create hsr debugfs directory [ 171.957390][ T5784] hsr_slave_0: entered promiscuous mode [ 171.965929][ T5784] hsr_slave_1: entered promiscuous mode [ 171.974000][ T5784] debugfs: 'hsr0' already exists in 'hsr' [ 171.979911][ T5784] Cannot create hsr debugfs directory [ 172.639759][ T5073] Bluetooth: hci0: command tx timeout [ 172.720049][ T5073] Bluetooth: hci1: command tx timeout [ 172.879978][ T5073] Bluetooth: hci2: command tx timeout [ 172.959780][ T5073] Bluetooth: hci3: command tx timeout [ 173.039884][ T5073] Bluetooth: hci4: command tx timeout [ 173.044177][ T5775] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 173.082022][ T5775] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 173.113816][ T5775] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 173.148229][ T5775] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 173.287915][ T5788] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 173.308300][ T5788] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 173.327673][ T5788] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 173.371383][ T5788] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 173.466710][ T5779] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 173.518841][ T5779] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 173.579146][ T5779] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 173.607686][ T5779] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 173.825680][ T5781] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 173.869436][ T5781] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 173.930816][ T5781] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 173.970414][ T5781] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 174.176663][ T5784] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 174.227268][ T5784] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 174.249042][ T5784] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 174.289184][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.301594][ T5784] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 174.560018][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.581711][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.666562][ T132] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.674072][ T132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.720771][ T5073] Bluetooth: hci0: command tx timeout [ 174.769095][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.776688][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.799891][ T5073] Bluetooth: hci1: command tx timeout [ 174.898423][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.960855][ T5073] Bluetooth: hci2: command tx timeout [ 174.977197][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.032380][ T1015] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.039834][ T5073] Bluetooth: hci3: command tx timeout [ 175.039876][ T1015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.120837][ T5073] Bluetooth: hci4: command tx timeout [ 175.166634][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.174096][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.258275][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.329465][ T132] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.336996][ T132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.409375][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.471636][ T132] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.479121][ T132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.513942][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.656797][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.677520][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.787489][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.795053][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.814296][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.821850][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.904470][ T132] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.911923][ T132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.058998][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.066804][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.386537][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.914931][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.384832][ T5775] veth0_vlan: entered promiscuous mode [ 177.618287][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.734376][ T5775] veth1_vlan: entered promiscuous mode [ 178.032164][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.118679][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.185941][ T5775] veth0_macvtap: entered promiscuous mode [ 178.261195][ T5775] veth1_macvtap: entered promiscuous mode [ 178.384414][ T5779] veth0_vlan: entered promiscuous mode [ 178.455280][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.501172][ T5779] veth1_vlan: entered promiscuous mode [ 178.522826][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.590389][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.628817][ T57] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.638285][ T57] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.710320][ T57] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.851673][ T5781] veth0_vlan: entered promiscuous mode [ 178.872445][ T5784] veth0_vlan: entered promiscuous mode [ 178.954196][ T5779] veth0_macvtap: entered promiscuous mode [ 179.007094][ T5784] veth1_vlan: entered promiscuous mode [ 179.078029][ T5781] veth1_vlan: entered promiscuous mode [ 179.093266][ T5779] veth1_macvtap: entered promiscuous mode [ 179.114136][ T5788] veth0_vlan: entered promiscuous mode [ 179.232534][ T5788] veth1_vlan: entered promiscuous mode [ 179.326054][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.475693][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.506358][ T5781] veth0_macvtap: entered promiscuous mode [ 179.556333][ T5784] veth0_macvtap: entered promiscuous mode [ 179.590018][ T57] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.598950][ T57] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.655046][ T5784] veth1_macvtap: entered promiscuous mode [ 179.667140][ T5781] veth1_macvtap: entered promiscuous mode [ 179.725368][ T57] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.752541][ T57] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.883603][ T5788] veth0_macvtap: entered promiscuous mode [ 179.935702][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.965284][ T5788] veth1_macvtap: entered promiscuous mode [ 180.054377][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.091712][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.208686][ T57] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.221447][ T57] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.262092][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.280086][ T57] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.289196][ T57] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.362538][ T1015] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.401102][ T1015] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.497042][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.533650][ T1015] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.564221][ T1015] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.649901][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.755831][ T81] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.774607][ T81] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.869890][ T81] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.943116][ T81] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.999959][ T147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.007988][ T147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.337717][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.391158][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.826001][ T5775] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 186.858313][ T147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.909869][ T147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.319929][ T1015] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.327945][ T1015] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.344452][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.379729][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.636673][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.685745][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.265696][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.342887][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.518061][ T147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.731930][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.762187][ T147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.790369][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.448325][ T5967] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.563113][ T5967] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.018356][ T5983] netlink: 'syz.3.9': attribute type 4 has an invalid length. [ 195.120316][ T5989] netlink: 'syz.3.9': attribute type 4 has an invalid length. [ 195.306139][ T5991] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2'. [ 195.756534][ T5073] Bluetooth: Frame is too long (len 18, expected len 4) [ 195.951475][ T6000] netlink: 'syz.2.14': attribute type 10 has an invalid length. [ 196.149893][ T2143] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 196.370741][ T2143] usb 4-1: Using ep0 maxpacket: 16 [ 196.393460][ T2143] usb 4-1: unable to get BOS descriptor or descriptor too short [ 196.425880][ T2143] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 196.493987][ T2143] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 196.516757][ T2143] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.526933][ T6012] loop2: detected capacity change from 0 to 64 [ 196.539831][ T2143] usb 4-1: Product: syz [ 196.544228][ T2143] usb 4-1: Manufacturer: syz [ 196.570944][ T2143] usb 4-1: SerialNumber: syz [ 196.698168][ T6012] syz.2.18: attempt to access beyond end of device [ 196.698168][ T6012] loop2: rw=8388608, sector=1024, nr_sectors = 2 limit=64 [ 196.771788][ T6007] loop0: detected capacity change from 0 to 4096 [ 196.797566][ T6012] Buffer I/O error on dev loop2, logical block 512, async page read [ 196.980623][ T6012] syz.2.18: attempt to access beyond end of device [ 196.980623][ T6012] loop2: rw=8388608, sector=113152, nr_sectors = 2 limit=64 [ 197.003911][ T2143] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 197.029102][ T6016] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 197.076381][ T2143] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 197.090801][ T6012] Buffer I/O error on dev loop2, logical block 56576, async page read [ 202.079562][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 202.908402][ T6024] loop1: detected capacity change from 0 to 256 [ 203.000462][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 203.285754][ T5886] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 203.292265][ T6028] Zero length message leads to an empty skb [ 203.390471][ T6024] FAT-fs (loop1): Directory bread(block 64) failed [ 203.430393][ T6024] FAT-fs (loop1): Directory bread(block 65) failed [ 203.437306][ T6024] FAT-fs (loop1): Directory bread(block 66) failed [ 203.496322][ T5886] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 13961, setting to 64 [ 203.543851][ T6024] FAT-fs (loop1): Directory bread(block 67) failed [ 203.554739][ T5886] usb 1-1: New USB device found, idVendor=056a, idProduct=5000, bcdDevice= 0.00 [ 203.574935][ T6024] FAT-fs (loop1): Directory bread(block 68) failed [ 203.612022][ T5886] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.625862][ T6024] FAT-fs (loop1): Directory bread(block 69) failed [ 203.665272][ T6024] FAT-fs (loop1): Directory bread(block 70) failed [ 203.703252][ T6033] loop4: detected capacity change from 0 to 512 [ 203.718801][ T6024] FAT-fs (loop1): Directory bread(block 71) failed [ 203.725627][ T5886] usb 1-1: config 0 descriptor?? [ 203.741216][ T6026] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 203.799832][ T2143] usb 4-1: USB disconnect, device number 2 [ 203.807939][ T6024] FAT-fs (loop1): Directory bread(block 72) failed [ 203.868381][ T6024] FAT-fs (loop1): Directory bread(block 73) failed [ 203.952253][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 203.959716][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 204.130015][ T6026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.156393][ T6033] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #11: block 10: comm syz.4.24: lblock 0 mapped to illegal pblock 10 (length 1) [ 204.197856][ T6026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.256908][ T6039] loop3: detected capacity change from 0 to 128 [ 204.285558][ T6033] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 204.287226][ T6033] EXT4-fs (loop4): Remounting filesystem read-only [ 204.296882][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 204.296976][ C0] EXT4-fs (loop4): initial error at time 1774120977: ext4_map_blocks:776: inode 11: block 10 [ 204.297188][ C0] EXT4-fs (loop4): last error at time 1774120977: ext4_map_blocks:776: inode 11: block 10 [ 204.412143][ T6033] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 204.492537][ T6041] syz.3.26: attempt to access beyond end of device [ 204.492537][ T6041] loop3: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 204.506533][ T6033] EXT4-fs warning (device loop4): ext4_evict_inode:258: couldn't mark inode dirty (err -30) [ 204.566093][ T6033] EXT4-fs (loop4): 1 orphan inode deleted [ 204.591897][ T6041] syz.3.26: attempt to access beyond end of device [ 204.591897][ T6041] loop3: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 204.596812][ T5915] udevd[5915]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 204.644521][ T6033] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.675783][ T5886] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 204.699770][ T5886] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 204.724246][ T6041] syz.3.26: attempt to access beyond end of device [ 204.724246][ T6041] loop3: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 204.760526][ T5886] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 204.767696][ T5886] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 204.806423][ T6041] syz.3.26: attempt to access beyond end of device [ 204.806423][ T6041] loop3: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 204.861803][ T5886] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 204.868965][ T5886] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 204.896816][ T6041] syz.3.26: attempt to access beyond end of device [ 204.896816][ T6041] loop3: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 204.940946][ T5886] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 204.991081][ T5886] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 204.998257][ T5886] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 205.004370][ T6041] syz.3.26: attempt to access beyond end of device [ 205.004370][ T6041] loop3: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 205.094270][ T5886] wacom 0003:056A:5000.0001: unknown main item tag 0x0 [ 205.141275][ T5788] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.184046][ T5886] wacom 0003:056A:5000.0001: item 0 0 0 8 parsing failed [ 205.237169][ T5886] wacom 0003:056A:5000.0001: parse failed [ 205.264366][ T5886] wacom 0003:056A:5000.0001: probe with driver wacom failed with error -22 [ 205.350869][ T5886] usb 1-1: USB disconnect, device number 2 [ 206.318410][ T6053] loop2: detected capacity change from 0 to 32768 [ 206.406626][ T6053] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.30 (6053) [ 206.443857][ T6053] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 206.454285][ T6053] BTRFS info (device loop2): using sha256 checksum algorithm [ 206.647323][ T6053] BTRFS info (device loop2): enabling ssd optimizations [ 206.654564][ T6053] BTRFS info (device loop2): turning on async discard [ 206.661592][ T6053] BTRFS info (device loop2): enabling free space tree [ 208.533000][ T6069] loop1: detected capacity change from 0 to 512 [ 209.978731][ T6069] EXT4-fs: error -4 creating inode table initialization thread [ 210.026475][ T6069] EXT4-fs (loop1): mount failed [ 210.144965][ T5779] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 210.241819][ T5886] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 210.454286][ T5886] usb 1-1: Using ep0 maxpacket: 16 [ 210.519839][ T5886] usb 1-1: unable to get BOS descriptor or descriptor too short [ 210.589035][ T5886] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 210.659446][ T5886] usb 1-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 210.668982][ T5886] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.738896][ T5886] usb 1-1: Product: syz [ 210.762767][ T5886] usb 1-1: Manufacturer: syz [ 210.767611][ T5886] usb 1-1: SerialNumber: syz [ 210.852704][ T6086] loop1: detected capacity change from 0 to 8 [ 211.185196][ T5886] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 211.281206][ T5886] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 212.209576][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 212.320469][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 214.730169][ T5886] usb 1-1: USB disconnect, device number 3 [ 215.006025][ T5970] udevd[5970]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 215.331621][ T6107] loop2: detected capacity change from 0 to 2048 [ 215.511874][ T6111] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 215.725969][ T6116] capability: warning: `syz.2.41' uses 32-bit capabilities (legacy support in use) [ 216.179897][ T2143] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 216.221190][ T6116] NILFS (loop2): error -2 truncating bmap (ino=16) [ 216.359833][ T2143] usb 2-1: Using ep0 maxpacket: 8 [ 216.385531][ T2143] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 216.443972][ T2143] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 216.497155][ T2143] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.563735][ T6111] NILFS (loop2): vblocknr = 15 has abnormal lifetime: start cno (= 4128770) > current cno (= 3) [ 216.601374][ T2143] usb 2-1: config 0 descriptor?? [ 216.625523][ T6111] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=16) [ 216.677788][ T6111] Remounting filesystem read-only [ 216.704297][ T5779] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 216.731552][ T2143] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 216.836435][ T2143] gspca_vc032x: reg_r err -32 [ 216.854641][ T2143] vc032x 2-1:0.0: probe with driver vc032x failed with error -32 [ 217.873977][ T6134] process 'syz.2.48' launched './file2' with NULL argv: empty string added [ 220.839828][ T5832] usb 2-1: USB disconnect, device number 2 [ 220.962703][ T2143] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 221.164614][ T2143] usb 1-1: Using ep0 maxpacket: 16 [ 221.194381][ T2143] usb 1-1: unable to get BOS descriptor or descriptor too short [ 221.211570][ T6146] syz.1.54 (6146): attempted to duplicate a private mapping with mremap. This is not supported. [ 221.252106][ T2143] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 221.380026][ T2143] usb 1-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 221.518786][ T2143] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.667766][ T2143] usb 1-1: Product: syz [ 221.689430][ T2143] usb 1-1: Manufacturer: syz [ 221.695394][ T2143] usb 1-1: SerialNumber: syz [ 222.161239][ T6152] netlink: 8 bytes leftover after parsing attributes in process `syz.1.54'. [ 223.243907][ T2143] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 223.352283][ T2143] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 225.496554][ T2143] usb 1-1: USB disconnect, device number 4 [ 226.104373][ T6176] loop4: detected capacity change from 0 to 7 [ 226.331027][ T5825] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 227.269772][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 227.371903][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 229.900842][ T6176] Dev loop4: unable to read RDB block 7 [ 229.951018][ T6176] loop4: AHDI p1 p2 p3 [ 229.961725][ T6176] loop4: partition table partially beyond EOD, truncated [ 230.006836][ T6176] loop4: p1 start 1601398130 is beyond EOD, truncated [ 230.110244][ T6176] loop4: p2 start 1702059890 is beyond EOD, truncated [ 230.129195][ T5825] usb 3-1: Using ep0 maxpacket: 8 [ 230.411705][ T5825] usb 3-1: device descriptor read/all, error -71 [ 231.083209][ T6185] loop3: detected capacity change from 0 to 32768 [ 231.206351][ T6185] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 231.502903][ T6202] loop1: detected capacity change from 0 to 64 [ 231.638834][ T6203] loop4: detected capacity change from 0 to 64 [ 232.299913][ T6207] faux_driver vgem: [drm] Unknown color mode 9; guessing buffer size. [ 234.399383][ T6142] udevd[6142]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 234.795143][ T6185] XFS (loop3): Ending clean mount [ 234.865513][ T6185] XFS (loop3): Quotacheck needed: Please wait. [ 235.071147][ T6185] XFS (loop3): Quotacheck: Done. [ 235.129259][ T6215] netlink: 'syz.4.74': attribute type 3 has an invalid length. [ 235.181648][ T5781] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 235.190809][ T6215] netlink: 8 bytes leftover after parsing attributes in process `syz.4.74'. [ 235.446374][ T6217] loop2: detected capacity change from 0 to 1024 [ 235.575521][ T6217] EXT4-fs: Ignoring removed orlov option [ 235.820911][ T6217] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.444441][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.480431][ T5825] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 236.709862][ T5825] usb 5-1: Using ep0 maxpacket: 8 [ 236.751174][ T5825] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 236.829847][ T5825] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 236.839150][ T5825] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.847580][ T6227] loop3: detected capacity change from 0 to 1024 [ 236.900949][ T5825] usb 5-1: config 0 descriptor?? [ 237.013138][ T5825] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 237.022771][ T6227] EXT4-fs: Ignoring removed orlov option [ 237.197881][ T6227] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.579140][ T5781] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.680186][ T5825] gspca_vc032x: reg_r err -32 [ 237.696146][ T5825] vc032x 5-1:0.0: probe with driver vc032x failed with error -32 [ 238.184904][ T6244] loop3: detected capacity change from 0 to 64 [ 240.379679][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 240.480292][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 240.583255][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 241.516908][ T5825] usb 5-1: USB disconnect, device number 2 [ 244.871240][ T6264] ======================================================= [ 244.871240][ T6264] WARNING: The mand mount option has been deprecated and [ 244.871240][ T6264] and is ignored by this kernel. Remove the mand [ 244.871240][ T6264] option from the mount to silence this warning. [ 244.871240][ T6264] ======================================================= [ 245.003049][ T6268] loop4: detected capacity change from 0 to 256 [ 245.344638][ T6268] FAT-fs (loop4): Directory bread(block 64) failed [ 245.379827][ T6268] FAT-fs (loop4): Directory bread(block 65) failed [ 245.420047][ T6268] FAT-fs (loop4): Directory bread(block 66) failed [ 245.460331][ T6268] FAT-fs (loop4): Directory bread(block 67) failed [ 245.467274][ T6268] FAT-fs (loop4): Directory bread(block 68) failed [ 245.514987][ T6268] FAT-fs (loop4): Directory bread(block 69) failed [ 245.550340][ T6268] FAT-fs (loop4): Directory bread(block 70) failed [ 245.557083][ T6268] FAT-fs (loop4): Directory bread(block 71) failed [ 245.585433][ T6268] FAT-fs (loop4): Directory bread(block 72) failed [ 245.614519][ T6273] loop2: detected capacity change from 0 to 1024 [ 245.627298][ T6268] FAT-fs (loop4): Directory bread(block 73) failed [ 245.713542][ T6273] EXT4-fs: Ignoring removed orlov option [ 245.770967][ T6273] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 245.856682][ T6280] loop3: detected capacity change from 0 to 64 [ 246.401904][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.736475][ T6302] fuse: Bad value for 'fd' [ 252.529802][ T6298] loop2: detected capacity change from 0 to 40427 [ 252.591214][ T6298] F2FS-fs (loop2): invalid crc value [ 252.998552][ T6298] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 253.029247][ T6298] F2FS-fs (loop2): Start checkpoint disabled! [ 253.110678][ T6298] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0 [ 253.135905][ T6298] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 255.680378][ T34] kworker/u8:2: attempt to access beyond end of device [ 255.680378][ T34] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 255.980890][ T34] CPU: 1 UID: 0 PID: 34 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) [ 255.980982][ T34] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 255.981063][ T34] Workqueue: writeback wb_workfn (flush-7:2) [ 255.981195][ T34] Call Trace: [ 255.981226][ T34] [ 255.981257][ T34] __dump_stack+0x26/0x30 [ 255.981358][ T34] dump_stack_lvl+0x14c/0x1c0 [ 255.981461][ T34] dump_stack+0x1e/0x25 [ 255.981547][ T34] f2fs_handle_critical_error+0xa6f/0xc20 [ 255.981682][ T34] f2fs_stop_checkpoint+0x65/0x80 [ 255.981765][ T34] f2fs_write_end_io+0x12e6/0x2560 [ 255.981884][ T34] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 255.981967][ T34] bio_endio+0x1006/0x1160 [ 255.982057][ T34] submit_bio_noacct+0x533/0x2960 [ 255.982178][ T34] submit_bio+0x57a/0x620 [ 255.982271][ T34] f2fs_submit_write_bio+0x115/0x350 [ 255.982389][ T34] __submit_merged_bio+0x16f/0x780 [ 255.982504][ T34] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 255.982627][ T34] __submit_merged_write_cond+0x4ba/0xae0 [ 255.982755][ T34] f2fs_write_data_pages+0x5073/0x5e10 [ 255.982918][ T34] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 255.983039][ T34] ? __update_load_avg_cfs_rq+0xd80/0x1060 [ 255.983155][ T34] ? kmsan_get_metadata+0xf1/0x160 [ 255.983265][ T34] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 255.983386][ T34] ? kmsan_get_metadata+0xf1/0x160 [ 255.983502][ T34] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 255.983618][ T34] ? kmsan_get_metadata+0xf1/0x160 [ 255.983728][ T34] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 255.983842][ T34] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 255.983925][ T34] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 255.984006][ T34] do_writepages+0x3f2/0x860 [ 255.984089][ T34] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 255.984208][ T34] ? writeback_sb_inodes+0x1/0x1d90 [ 255.984309][ T34] ? kmsan_get_metadata+0xf1/0x160 [ 255.984433][ T34] __writeback_single_inode+0xfc/0x1440 [ 255.984548][ T34] ? kmsan_get_metadata+0xf1/0x160 [ 255.984668][ T34] writeback_sb_inodes+0xb3b/0x1d90 [ 255.984842][ T34] ? kmsan_get_metadata+0xf1/0x160 [ 255.984953][ T34] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 255.985074][ T34] wb_writeback+0x4f1/0xcd0 [ 255.985191][ T34] ? queue_io+0x411/0x800 [ 255.985292][ T34] wb_workfn+0x3b9/0x19b0 [ 255.985382][ T34] ? kmsan_get_metadata+0xf1/0x160 [ 255.985513][ T34] ? __pfx_wb_workfn+0x10/0x10 [ 255.985601][ T34] process_scheduled_works+0xb82/0x1e80 [ 255.985734][ T34] worker_thread+0xee4/0x1590 [ 255.985847][ T34] kthread+0x53f/0x600 [ 255.985957][ T34] ? __pfx_worker_thread+0x10/0x10 [ 255.986055][ T34] ? __pfx_kthread+0x10/0x10 [ 255.986152][ T34] ret_from_fork+0x20f/0x910 [ 255.986242][ T34] ? __switch_to+0x51c/0x750 [ 255.986351][ T34] ? __pfx_kthread+0x10/0x10 [ 255.986457][ T34] ret_from_fork_asm+0x1a/0x30 [ 255.986579][ T34] [ 255.986612][ T34] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 257.749034][ T6331] loop0: detected capacity change from 0 to 64 [ 259.729842][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 263.275661][ T6336] loop3: detected capacity change from 0 to 256 [ 265.381874][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.388895][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 266.591391][ T6336] FAT-fs (loop3): Directory bread(block 64) failed [ 266.632721][ T6336] FAT-fs (loop3): Directory bread(block 65) failed [ 266.656097][ T6336] FAT-fs (loop3): Directory bread(block 66) failed [ 266.698838][ T6336] FAT-fs (loop3): Directory bread(block 67) failed [ 266.745526][ T6336] FAT-fs (loop3): Directory bread(block 68) failed [ 266.779915][ T6336] FAT-fs (loop3): Directory bread(block 69) failed [ 266.822933][ T6336] FAT-fs (loop3): Directory bread(block 70) failed [ 266.843867][ T6336] FAT-fs (loop3): Directory bread(block 71) failed [ 266.879297][ T6336] FAT-fs (loop3): Directory bread(block 72) failed [ 266.934036][ T6336] FAT-fs (loop3): Directory bread(block 73) failed [ 267.575693][ T6356] netlink: 'syz.1.117': attribute type 1 has an invalid length. [ 267.979961][ T5825] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 268.163690][ T5825] usb 1-1: Using ep0 maxpacket: 8 [ 268.196242][ T5825] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 268.254456][ T5825] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 268.290039][ T5825] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.327833][ T5825] usb 1-1: config 0 descriptor?? [ 268.382934][ T5825] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 269.092894][ T5825] gspca_vc032x: reg_r err -32 [ 269.107829][ T5825] vc032x 1-1:0.0: probe with driver vc032x failed with error -32 [ 269.231218][ T6367] loop3: detected capacity change from 0 to 4096 [ 269.709914][ T6374] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 272.790459][ T5825] usb 1-1: USB disconnect, device number 5 [ 274.188513][ T6385] loop3: detected capacity change from 0 to 32768 [ 274.314375][ T6385] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 274.729226][ T6404] loop0: detected capacity change from 0 to 256 [ 274.780653][ T6385] XFS (loop3): Ending clean mount [ 274.824604][ T6385] XFS (loop3): Quotacheck needed: Please wait. [ 274.957530][ T6385] XFS (loop3): Quotacheck: Done. [ 277.847362][ T6404] FAT-fs (loop0): Directory bread(block 64) failed [ 277.969883][ T6404] FAT-fs (loop0): Directory bread(block 65) failed [ 277.976674][ T6404] FAT-fs (loop0): Directory bread(block 66) failed [ 278.040256][ T5781] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 278.111245][ T6404] FAT-fs (loop0): Directory bread(block 67) failed [ 278.153942][ T6404] FAT-fs (loop0): Directory bread(block 68) failed [ 278.276358][ T6404] FAT-fs (loop0): Directory bread(block 69) failed [ 278.301354][ T6404] FAT-fs (loop0): Directory bread(block 70) failed [ 278.350695][ T6404] FAT-fs (loop0): Directory bread(block 71) failed [ 278.377547][ T6404] FAT-fs (loop0): Directory bread(block 72) failed [ 278.411775][ T6404] FAT-fs (loop0): Directory bread(block 73) failed [ 282.098718][ T5825] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 282.260069][ T5825] usb 4-1: Using ep0 maxpacket: 8 [ 282.305478][ T5825] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 282.356828][ T5825] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 282.419875][ T5825] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.457951][ T5825] usb 4-1: config 0 descriptor?? [ 283.278474][ T6447] loop1: detected capacity change from 0 to 32768 [ 283.772685][ T6447] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 286.708805][ T5825] usb 4-1: can't set config #0, error -71 [ 286.760508][ T5825] usb 4-1: USB disconnect, device number 3 [ 286.838593][ T6447] XFS (loop1): Ending clean mount [ 286.858345][ T6447] XFS (loop1): Quotacheck needed: Please wait. [ 287.060351][ T6447] XFS (loop1): Quotacheck: Done. [ 287.218906][ T5784] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 287.299118][ T6467] loop3: detected capacity change from 0 to 256 [ 287.858590][ T6467] FAT-fs (loop3): Directory bread(block 64) failed [ 287.903965][ T6467] FAT-fs (loop3): Directory bread(block 65) failed [ 287.944500][ T6467] FAT-fs (loop3): Directory bread(block 66) failed [ 287.996233][ T6467] FAT-fs (loop3): Directory bread(block 67) failed [ 288.050127][ T6467] FAT-fs (loop3): Directory bread(block 68) failed [ 288.071049][ T6467] FAT-fs (loop3): Directory bread(block 69) failed [ 288.218595][ T6467] FAT-fs (loop3): Directory bread(block 70) failed [ 288.244904][ T6467] FAT-fs (loop3): Directory bread(block 71) failed [ 288.314807][ T6467] FAT-fs (loop3): Directory bread(block 72) failed [ 288.364411][ T6467] FAT-fs (loop3): Directory bread(block 73) failed [ 288.820695][ T5825] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 289.178173][ T5825] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 289.211211][ T5825] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.293293][ T5825] usb 2-1: Product: syz [ 289.355470][ T5825] usb 2-1: Manufacturer: syz [ 289.422813][ T5825] usb 2-1: SerialNumber: syz [ 292.752859][ T5825] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 292.770583][ T5825] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 292.839761][ T5825] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 292.855567][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 292.961079][ T5825] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 293.049846][ T2143] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 293.060505][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 293.138656][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 293.202477][ T5073] Bluetooth: hci2: command 0x0406 tx timeout [ 293.212038][ T5825] usb 2-1: USB disconnect, device number 3 [ 293.230603][ T5073] Bluetooth: hci1: command 0x0406 tx timeout [ 293.237741][ T6492] Bluetooth: hci3: command 0x0406 tx timeout [ 293.245941][ T5073] Bluetooth: hci0: command 0x0406 tx timeout [ 293.290673][ T10] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 293.351659][ T2143] usb 4-1: Using ep0 maxpacket: 8 [ 293.467845][ T2143] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 293.545974][ T10] usb 5-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 293.607275][ T6501] loop0: detected capacity change from 0 to 32768 [ 293.643076][ T2143] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 293.657961][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.683297][ T2143] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.704041][ T6501] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 293.707054][ T10] usb 5-1: Product: syz [ 293.740681][ T10] usb 5-1: Manufacturer: syz [ 293.745602][ T10] usb 5-1: SerialNumber: syz [ 293.780160][ T2143] usb 4-1: config 0 descriptor?? [ 293.815728][ T2143] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 294.123898][ T10] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 294.171657][ T10] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 294.470933][ T2143] gspca_vc032x: reg_r err -32 [ 294.476262][ T2143] vc032x 4-1:0.0: probe with driver vc032x failed with error -32 [ 294.558042][ T6501] XFS (loop0): Ending clean mount [ 294.576494][ T6501] XFS (loop0): Quotacheck needed: Please wait. [ 294.683595][ T6501] XFS (loop0): Quotacheck: Done. [ 298.257741][ T2143] usb 4-1: USB disconnect, device number 4 [ 298.281002][ T5775] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 298.930108][ T6527] loop1: detected capacity change from 0 to 256 [ 299.004023][ T6528] netlink: 12 bytes leftover after parsing attributes in process `syz.3.164'. [ 299.170982][ T10] usb 5-1: USB disconnect, device number 3 [ 299.907236][ T6527] FAT-fs (loop1): Directory bread(block 64) failed [ 299.950049][ T6527] FAT-fs (loop1): Directory bread(block 65) failed [ 299.965794][ T6142] udevd[6142]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 300.020010][ T6527] FAT-fs (loop1): Directory bread(block 66) failed [ 300.119997][ T6527] FAT-fs (loop1): Directory bread(block 67) failed [ 300.160416][ T6527] FAT-fs (loop1): Directory bread(block 68) failed [ 300.242578][ T6527] FAT-fs (loop1): Directory bread(block 69) failed [ 300.283384][ T6527] FAT-fs (loop1): Directory bread(block 70) failed [ 300.342495][ T6527] FAT-fs (loop1): Directory bread(block 71) failed [ 300.403010][ T6527] FAT-fs (loop1): Directory bread(block 72) failed [ 300.453223][ T6527] FAT-fs (loop1): Directory bread(block 73) failed [ 300.829214][ T6541] mmap: syz.4.168 (6541) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 301.123849][ T6534] delete_channel: no stack [ 301.583325][ T6544] netlink: 48 bytes leftover after parsing attributes in process `syz.0.163'. [ 302.783848][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 303.042170][ T10] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 303.070146][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.078386][ T10] usb 4-1: Product: syz [ 303.104409][ T10] usb 4-1: Manufacturer: syz [ 303.109214][ T10] usb 4-1: SerialNumber: syz [ 303.230363][ T2143] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 303.400906][ T2143] usb 2-1: device descriptor read/64, error -71 [ 303.552801][ T5886] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 303.669873][ T2143] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 303.730925][ T796] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 303.749763][ T5886] usb 1-1: Using ep0 maxpacket: 8 [ 303.767956][ T5886] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 303.780220][ T5886] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 303.789651][ T5886] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.799934][ T35] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 303.809996][ T2143] usb 2-1: device descriptor read/64, error -71 [ 303.818153][ T5886] usb 1-1: config 0 descriptor?? [ 303.854611][ T5886] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 303.900082][ T796] usb 5-1: Using ep0 maxpacket: 16 [ 303.913647][ T796] usb 5-1: unable to get BOS descriptor or descriptor too short [ 303.933062][ T796] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 303.933435][ T2143] usb usb2-port1: attempt power cycle [ 303.984067][ T796] usb 5-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 304.005726][ T35] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 304.016107][ T796] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.026414][ T35] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.053210][ T796] usb 5-1: Product: syz [ 304.066799][ T35] usb 3-1: config 0 descriptor?? [ 304.087656][ T796] usb 5-1: Manufacturer: syz [ 304.099387][ T796] usb 5-1: SerialNumber: syz [ 304.134495][ T35] cp210x 3-1:0.0: cp210x converter detected [ 304.320774][ T2143] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 304.354969][ T2143] usb 2-1: device descriptor read/8, error -71 [ 304.434071][ T796] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 304.444392][ T796] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 304.501477][ T5886] gspca_vc032x: reg_r err -32 [ 304.507155][ T5886] vc032x 1-1:0.0: probe with driver vc032x failed with error -32 [ 304.566037][ T35] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 304.613178][ T35] usb 3-1: cp210x converter now attached to ttyUSB0 [ 304.621023][ T2143] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 304.703060][ T2143] usb 2-1: device descriptor read/8, error -71 [ 304.781410][ T5825] usb 3-1: USB disconnect, device number 4 [ 304.845096][ T2143] usb usb2-port1: unable to enumerate USB device [ 304.866975][ T5825] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 304.959803][ T5825] cp210x 3-1:0.0: device disconnected [ 305.068622][ T796] usb 5-1: USB disconnect, device number 4 [ 305.088323][ T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 305.113290][ T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 305.127921][ T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 305.174777][ T10] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 305.231771][ T10] usb 4-1: USB disconnect, device number 5 [ 305.241020][ T6142] udevd[6142]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 306.170687][ T6576] loop4: detected capacity change from 0 to 256 [ 306.652594][ T6576] FAT-fs (loop4): Directory bread(block 64) failed [ 306.740517][ T6576] FAT-fs (loop4): Directory bread(block 65) failed [ 306.760484][ T6576] FAT-fs (loop4): Directory bread(block 66) failed [ 306.767243][ T6576] FAT-fs (loop4): Directory bread(block 67) failed [ 306.826090][ T6576] FAT-fs (loop4): Directory bread(block 68) failed [ 306.889155][ T6576] FAT-fs (loop4): Directory bread(block 69) failed [ 306.922567][ T6576] FAT-fs (loop4): Directory bread(block 70) failed [ 306.964850][ T6576] FAT-fs (loop4): Directory bread(block 71) failed [ 307.000026][ T6576] FAT-fs (loop4): Directory bread(block 72) failed [ 307.026947][ T6576] FAT-fs (loop4): Directory bread(block 73) failed [ 307.442929][ T796] usb 1-1: USB disconnect, device number 6 [ 308.014596][ T6586] netlink: 48 bytes leftover after parsing attributes in process `syz.3.185'. [ 308.736087][ T10] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 308.972861][ T10] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 308.987490][ T6597] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 309.037166][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.109048][ T10] usb 1-1: config 0 descriptor?? [ 309.152932][ T10] cp210x 1-1:0.0: cp210x converter detected [ 309.537630][ T10] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 309.629792][ T10] usb 1-1: cp210x converter now attached to ttyUSB0 [ 309.747061][ T796] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 309.788979][ T10] usb 1-1: USB disconnect, device number 7 [ 309.818721][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 309.900779][ T10] cp210x 1-1:0.0: device disconnected [ 309.909978][ T796] usb 5-1: device descriptor read/64, error -71 [ 310.189855][ T796] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 310.349865][ T796] usb 5-1: device descriptor read/64, error -71 [ 310.460990][ T796] usb usb5-port1: attempt power cycle [ 310.849955][ T796] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 310.906299][ T796] usb 5-1: device descriptor read/8, error -71 [ 311.217999][ T796] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 311.282185][ T796] usb 5-1: device descriptor read/8, error -71 [ 311.391917][ T796] usb usb5-port1: unable to enumerate USB device [ 311.561137][ T35] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 311.729893][ T35] usb 4-1: Using ep0 maxpacket: 8 [ 311.767697][ T35] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 311.815534][ T35] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 311.866158][ T35] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.928828][ T35] usb 4-1: config 0 descriptor?? [ 311.991111][ T6620] netlink: 48 bytes leftover after parsing attributes in process `syz.2.198'. [ 312.002632][ T35] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 313.012902][ T35] gspca_vc032x: reg_r err -32 [ 313.017998][ T35] vc032x 4-1:0.0: probe with driver vc032x failed with error -32 [ 313.975751][ T10] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 314.157205][ T10] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 314.179919][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.251793][ T10] usb 5-1: config 0 descriptor?? [ 314.280549][ T10] cp210x 5-1:0.0: cp210x converter detected [ 314.682428][ T10] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 314.771818][ T10] usb 5-1: cp210x converter now attached to ttyUSB0 [ 314.933421][ T35] usb 5-1: USB disconnect, device number 9 [ 314.980727][ T10] usb 4-1: USB disconnect, device number 6 [ 315.015053][ T35] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 315.133719][ T35] cp210x 5-1:0.0: device disconnected [ 315.563079][ T6657] netlink: 40 bytes leftover after parsing attributes in process `syz.0.212'. [ 315.592604][ T10] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 315.809974][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 315.856893][ T10] usb 3-1: config 0 has no interfaces? [ 315.903744][ T10] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 315.932141][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.968279][ T10] usb 3-1: Product: syz [ 315.983887][ T10] usb 3-1: Manufacturer: syz [ 316.000092][ T10] usb 3-1: SerialNumber: syz [ 316.014130][ T10] usb 3-1: config 0 descriptor?? [ 316.141416][ T6659] loop4: detected capacity change from 0 to 1024 [ 316.999357][ T6668] loop3: detected capacity change from 0 to 1 [ 317.829709][ T35] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 317.966211][ T6690] netlink: 8 bytes leftover after parsing attributes in process `syz.0.223'. [ 318.012576][ T35] usb 4-1: Using ep0 maxpacket: 8 [ 318.040210][ T35] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 318.060295][ T35] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 318.079226][ T35] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.143494][ T35] usb 4-1: config 0 descriptor?? [ 318.196615][ T35] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 318.700276][ T796] usb 3-1: USB disconnect, device number 5 [ 318.921067][ T6697] netlink: 40 bytes leftover after parsing attributes in process `syz.1.225'. [ 319.202969][ T35] gspca_vc032x: reg_r err -32 [ 319.208094][ T35] vc032x 4-1:0.0: probe with driver vc032x failed with error -32 [ 319.901322][ T10] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 320.119926][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 320.161997][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 320.199934][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 320.238985][ T10] usb 5-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 320.269446][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.296873][ T10] usb 5-1: config 0 descriptor?? [ 320.361659][ T6713] loop2: detected capacity change from 0 to 4096 [ 320.537923][ T6716] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 320.775598][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 320.804980][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 320.855852][ T10] usb 5-1: USB disconnect, device number 10 [ 321.150938][ T35] usb 4-1: USB disconnect, device number 7 [ 321.691616][ T35] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 321.893766][ T35] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 321.935283][ T35] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 321.978510][ T35] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 322.109826][ T35] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 322.156854][ T35] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 322.265340][ T35] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 322.279723][ T35] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 322.301232][ T35] usb 4-1: Product: syz [ 322.305617][ T35] usb 4-1: Manufacturer: syz [ 322.638534][ T35] cdc_wdm 4-1:1.0: skipping garbage [ 322.664744][ T35] cdc_wdm 4-1:1.0: skipping garbage [ 322.804403][ T35] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 322.830363][ T35] cdc_wdm 4-1:1.0: Unknown control protocol [ 323.308234][ T6724] loop3: detected capacity change from 0 to 32768 [ 323.407827][ T6724] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.238 (6724) [ 323.441211][ T6724] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 323.451646][ T6724] BTRFS info (device loop3): using sha256 checksum algorithm [ 324.336507][ T6724] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 324.337066][ T6724] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 324.454720][ T6724] BTRFS error (device loop3): open_ctree failed: -12 [ 324.614138][ T35] usb 4-1: USB disconnect, device number 8 [ 327.032487][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 327.039113][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 327.132022][ T6755] netlink: 4 bytes leftover after parsing attributes in process `syz.3.241'. [ 328.486008][ T6756] netlink: 40 bytes leftover after parsing attributes in process `syz.1.243'. [ 329.960356][ T796] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 330.909041][ T796] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 331.047086][ T796] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 331.168341][ T796] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 331.372615][ T796] usb 5-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 331.400299][ T796] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.702986][ T796] usb 5-1: config 0 descriptor?? [ 333.110188][ T796] usb 5-1: can't set config #0, error -71 [ 333.178324][ T796] usb 5-1: USB disconnect, device number 11 [ 333.538518][ T6782] netlink: 8 bytes leftover after parsing attributes in process `syz.4.254'. [ 333.628415][ T6782] netlink: 4 bytes leftover after parsing attributes in process `syz.4.254'. [ 334.369286][ T6789] netlink: 4 bytes leftover after parsing attributes in process `syz.2.255'. [ 335.751548][ T5967] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 335.780829][ T6782] netlink: 8 bytes leftover after parsing attributes in process `syz.4.254'. [ 335.828607][ T6788] netlink: 40 bytes leftover after parsing attributes in process `syz.3.256'. [ 335.838270][ T5967] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 335.864288][ T6782] netlink: 4 bytes leftover after parsing attributes in process `syz.4.254'. [ 335.905530][ T5967] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 335.996275][ T5967] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 337.505724][ T6807] loop0: detected capacity change from 0 to 128 [ 337.658734][ T6807] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 337.711070][ T6807] ext4 filesystem being mounted at /58/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 338.103089][ T6800] delete_channel: no stack [ 338.708332][ T6805] loop4: detected capacity change from 0 to 4096 [ 339.407651][ T6816] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 339.416725][ T6816] ===================================================== [ 339.425011][ T6816] BUG: KMSAN: uninit-value in dvbdmx_release_ts_feed+0x198/0x290 [ 339.433020][ T6816] dvbdmx_release_ts_feed+0x198/0x290 [ 339.438565][ T6816] dvb_dmxdev_filter_start+0x1187/0x1af0 [ 339.444514][ T6816] dvb_dmxdev_pes_filter_set+0x810/0x860 [ 339.450485][ T6816] dvb_demux_do_ioctl+0x9a3/0xc80 [ 339.455652][ T6816] dvb_usercopy+0x263/0x500 [ 339.460500][ T6816] dvb_demux_ioctl+0x46/0x70 [ 339.465224][ T6816] __se_sys_ioctl+0x23c/0x400 [ 339.470143][ T6816] __x64_sys_ioctl+0x97/0xe0 [ 339.474897][ T6816] x64_sys_call+0x1975/0x3ea0 [ 339.479868][ T6816] do_syscall_64+0x134/0xf80 [ 339.485283][ T6816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.491441][ T6816] [ 339.493833][ T6816] Uninit was created at: [ 339.500740][ T6816] __alloc_frozen_pages_noprof+0x6f7/0x1020 [ 339.506833][ T6816] alloc_pages_mpol+0x328/0x860 [ 339.512957][ T6816] alloc_pages_noprof+0x101/0x280 [ 339.518202][ T6816] __vmalloc_node_range_noprof+0xa97/0x2d80 [ 339.524368][ T6816] __vmalloc_noprof+0x128/0x1f0 [ 339.529372][ T6816] vmalloc_array_noprof+0x48/0x80 [ 339.535996][ T6816] dvb_dmx_init+0x121/0x930 [ 339.540731][ T6816] vidtv_bridge_probe+0x1b1f/0x2690 [ 339.546124][ T6816] platform_probe+0x213/0x370 [ 339.551099][ T6816] really_probe+0x4d5/0xe40 [ 339.555730][ T6816] __driver_probe_device+0x25e/0x370 [ 339.561301][ T6816] driver_probe_device+0x70/0x8f0 [ 339.566457][ T6816] __driver_attach+0x53e/0xaa0 [ 339.572115][ T6816] bus_for_each_dev+0x33b/0x580 [ 339.577129][ T6816] driver_attach+0x51/0x70 [ 339.581834][ T6816] bus_add_driver+0x54f/0xdb0 [ 339.586675][ T6816] driver_register+0x42e/0x6a0 [ 339.591703][ T6816] __platform_driver_register+0x65/0x80 [ 339.597430][ T6816] vidtv_bridge_init+0x73/0x100 [ 339.605085][ T6816] do_one_initcall+0x237/0xbb0 [ 339.610873][ T6816] do_initcall_level+0x157/0x350 [ 339.615957][ T6816] do_initcalls+0x176/0x310 [ 339.620688][ T6816] do_basic_setup+0x1d/0x30 [ 339.625323][ T6816] kernel_init_freeable+0x213/0x460 [ 339.630859][ T6816] kernel_init+0x2f/0x5e0 [ 339.635357][ T6816] ret_from_fork+0x20f/0x910 [ 339.640197][ T6816] ret_from_fork_asm+0x1a/0x30 [ 339.645144][ T6816] [ 339.647578][ T6816] CPU: 0 UID: 0 PID: 6816 Comm: syz.0.264 Not tainted syzkaller #0 PREEMPT(full) [ 339.657114][ T6816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 339.667374][ T6816] ===================================================== [ 339.674479][ T6816] Disabling lock debugging due to kernel taint [ 339.695223][ T6816] Kernel panic - not syncing: kmsan.panic set ... [ 339.701815][ T6816] CPU: 0 UID: 0 PID: 6816 Comm: syz.0.264 Tainted: G B syzkaller #0 PREEMPT(full) [ 339.712766][ T6816] Tainted: [B]=BAD_PAGE [ 339.717011][ T6816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 339.727192][ T6816] Call Trace: [ 339.730554][ T6816] [ 339.733564][ T6816] __dump_stack+0x26/0x30 [ 339.738070][ T6816] dump_stack_lvl+0x50/0x1c0 [ 339.742826][ T6816] ? dump_stack+0x12/0x25 [ 339.747329][ T6816] dump_stack+0x1e/0x25 [ 339.751659][ T6816] vpanic+0x7b4/0x1430 [ 339.755930][ T6816] panic+0x15d/0x160 [ 339.760039][ T6816] kmsan_report+0x31a/0x320 [ 339.764748][ T6816] ? __msan_warning+0x1b/0x30 [ 339.769607][ T6816] ? dvbdmx_release_ts_feed+0x198/0x290 [ 339.775330][ T6816] ? dvb_dmxdev_filter_start+0x1187/0x1af0 [ 339.781319][ T6816] ? dvb_dmxdev_pes_filter_set+0x810/0x860 [ 339.787290][ T6816] ? dvb_demux_do_ioctl+0x9a3/0xc80 [ 339.792644][ T6816] ? dvb_usercopy+0x263/0x500 [ 339.797527][ T6816] ? dvb_demux_ioctl+0x46/0x70 [ 339.802435][ T6816] ? __se_sys_ioctl+0x23c/0x400 [ 339.807465][ T6816] ? __x64_sys_ioctl+0x97/0xe0 [ 339.812419][ T6816] ? x64_sys_call+0x1975/0x3ea0 [ 339.817461][ T6816] ? do_syscall_64+0x134/0xf80 [ 339.822395][ T6816] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.828627][ T6816] ? irqentry_exit+0x8f/0x6c0 [ 339.833467][ T6816] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 339.840002][ T6816] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 339.846268][ T6816] ? sysvec_apic_timer_interrupt+0x52/0x90 [ 339.852244][ T6816] ? kmsan_get_metadata+0xf1/0x160 [ 339.857563][ T6816] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 339.864097][ T6816] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 339.870379][ T6816] ? _raw_spin_unlock_irq+0x31/0x50 [ 339.875733][ T6816] ? kmsan_get_metadata+0x146/0x160 [ 339.881162][ T6816] __msan_warning+0x1b/0x30 [ 339.885850][ T6816] dvbdmx_release_ts_feed+0x198/0x290 [ 339.891418][ T6816] dvb_dmxdev_filter_start+0x1187/0x1af0 [ 339.897247][ T6816] ? __pfx_dvbdmx_release_ts_feed+0x10/0x10 [ 339.903339][ T6816] dvb_dmxdev_pes_filter_set+0x810/0x860 [ 339.909150][ T6816] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 339.915438][ T6816] dvb_demux_do_ioctl+0x9a3/0xc80 [ 339.920633][ T6816] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 339.926351][ T6816] dvb_usercopy+0x263/0x500 [ 339.931058][ T6816] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 339.936806][ T6816] ? kmsan_get_metadata+0xf1/0x160 [ 339.942137][ T6816] dvb_demux_ioctl+0x46/0x70 [ 339.946882][ T6816] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 339.952322][ T6816] __se_sys_ioctl+0x23c/0x400 [ 339.957199][ T6816] __x64_sys_ioctl+0x97/0xe0 [ 339.961990][ T6816] x64_sys_call+0x1975/0x3ea0 [ 339.966857][ T6816] do_syscall_64+0x134/0xf80 [ 339.971617][ T6816] ? clear_bhb_loop+0x50/0xa0 [ 339.976461][ T6816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.982534][ T6816] RIP: 0033:0x7f38ab99c799 [ 339.987071][ T6816] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 340.006838][ T6816] RSP: 002b:00007f38a9791028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 340.015417][ T6816] RAX: ffffffffffffffda RBX: 00007f38abc16270 RCX: 00007f38ab99c799 [ 340.023522][ T6816] RDX: 0000200000000000 RSI: 0000000040146f2c RDI: 0000000000000006 [ 340.031644][ T6816] RBP: 00007f38aba32c99 R08: 0000000000000000 R09: 0000000000000000 [ 340.039736][ T6816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 340.047825][ T6816] R13: 00007f38abc16308 R14: 00007f38abc16270 R15: 00007ffdfe9ea058 [ 340.055963][ T6816] [ 340.059389][ T6816] Kernel Offset: disabled [ 340.063770][ T6816] Rebooting in 86400 seconds..