last executing test programs: 43.950346336s ago: executing program 2 (id=87): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = syz_mount_image$btrfs(&(0x7f0000000200), &(0x7f0000005600)='./file0\x00', 0x800, &(0x7f00000004c0), 0x0, 0x559e, &(0x7f0000005680)="$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") ioctl$BTRFS_IOC_SEND(r0, 0xd0009411, 0x0) 41.485644499s ago: executing program 2 (id=99): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x0, 0x1000000, 0x0, 0x2, 0x0, &(0x7f0000000280)="f880"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 41.24119576s ago: executing program 2 (id=100): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = add_key$user(&(0x7f0000000200), 0x0, 0x0, 0x0, 0xfffffffffffffffd) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000200), 0x0, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) ioctl$DRM_IOCTL_MODE_GETENCODER(r5, 0xc01464a6, &(0x7f0000000180)={r6}) keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) keyctl$dh_compute(0x17, &(0x7f0000000380)={r2}, 0x0, 0x0, 0x0) socket(0x1d, 0x2, 0x6) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x4403, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6e, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x28, 0x0, 0x0, 0xffffefff}, {0x6, 0x0, 0x0, 0x6}]}, 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) 38.55865131s ago: executing program 2 (id=110): r0 = socket(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd21, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x4}, {}, {0xfff2, 0xffe2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 37.661957719s ago: executing program 2 (id=113): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x35, 0xff, 0xaa, 0x20, 0xccd, 0x10af, 0x384e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x59, 0x2, 0x1, 0x9b, 0x1e, 0x2a, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x0, 0x14}, 0x0, 0x0, 0x0, 0x0}) 36.649251674s ago: executing program 2 (id=117): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0xfffffffc, @loopback, 0xfffffffa}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) io_uring_setup(0x31fa, &(0x7f00000001c0)={0x0, 0x6a93, 0x40, 0x2, 0xd1}) socket(0xa, 0x3, 0x3a) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x44840) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x30040043}, 0x240008c4) 21.052617851s ago: executing program 32 (id=117): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0xfffffffc, @loopback, 0xfffffffa}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) io_uring_setup(0x31fa, &(0x7f00000001c0)={0x0, 0x6a93, 0x40, 0x2, 0xd1}) socket(0xa, 0x3, 0x3a) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x44840) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x30040043}, 0x240008c4) 19.784976334s ago: executing program 4 (id=153): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x400, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) io_setup(0x8, &(0x7f0000000600)=0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r2, 0x1, &(0x7f0000000080)=[0x0]) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@bridge_newvlan={0x24, 0x76, 0x709, 0x0, 0x0, {0x7, 0x2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x2}}]}, 0x24}, 0x1, 0x5502000000000000}, 0x23f58e5b666a3f02) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000080)=0xa) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000440)={@local, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, 0x200003, 0x5, 0x0, 0x400, 0xfc8, 0x20c200a3}) 17.416291634s ago: executing program 4 (id=158): syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300"], 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) 14.526506203s ago: executing program 4 (id=169): syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x800000, &(0x7f00000002c0)=ANY=[], 0x0, 0x7ec, &(0x7f0000001580)="$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") mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(0x0) mount$9p_unix(&(0x7f0000002600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='.\x00', 0x0, 0x1b03088, 0x0) 13.892761633s ago: executing program 4 (id=174): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4d, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x200080, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe4) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) socket$key(0xf, 0x3, 0x2) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0xbe) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01}, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x404c080) open_tree(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x100) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f00000002c0)) 9.352501093s ago: executing program 4 (id=180): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180100001100000000000000000000001812", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) 9.067186562s ago: executing program 4 (id=181): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1818e58, &(0x7f00000003c0), 0x22, 0x63f, &(0x7f0000000d80)="$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") r2 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x100) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x69, 0x0, 0xffffffffffffffff, 0xe, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x2}, 0x50) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x14, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x6, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}}}, &(0x7f0000000140)='syzkaller\x00', 0x101, 0x1000, &(0x7f00000013c0)=""/4096, 0x41000, 0x43, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x1, 0xa, 0x1ff, 0xfff}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000440)=[{0x3, 0x2, 0x5, 0x7}, {0x0, 0x4, 0xe, 0xb}, {0x2, 0x2, 0x6, 0x1}, {0x4, 0x5, 0x6, 0x3}, {0x0, 0x5, 0x7, 0x2}], 0x10, 0xfffffff8}, 0x94) 8.347584558s ago: executing program 3 (id=186): r0 = socket(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd21, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x4}, {}, {0xfff2, 0xffe2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 7.558864585s ago: executing program 0 (id=188): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x18) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@quota}]}, 0x1, 0x53a, &(0x7f0000000c80)="$eJzs3c9vI1cdAPDvOPHmR7NNCj0AArqUwoJW6yTeNqp6YXsBoaoSouLEYRsSN4pir6PYK5qwh+yReyVW4gT8B9w4IPXEgRs3kDj0Ug5IC6xADRIHoxlPEjexE7dJ7ST+fKTJzHszO9/34n3veV5kvwBG1o2I2I2IaxHxdkTM5vlJvsXd9pZe99HThyt7Tx+uJNFqvfXPJDuf5kXHv0k9k99zMiJ++L2InyTH4za2dzaWq9XKVp6eb9Y25xvbO7fXC3lOeWlxaeHVO6+Uz62uL9R+++S762/86Pe/+8qHf9r99s/SYs38/Hp2rrMeh4pnjpnk95npyBuPiDfOfOeLYzz//8Plk7a2z0XEi1n7n42x7NUEAK6yVms2WrOdaQDgqkuf/2ciKZTyuYCZKBRKpfYc3vMxXajWG81bs/UH91cjm8Oai2LhnfVqZSGfK5yLYpKmF7Pjw3T5Y+n3Knci4rmIeG9iKjtfWqlXV4f5xgcARtgzR8b//0y0x/9OZ/8rGABw4UwOuwAAwMB1jP9zwywHADA4nv8BYPR8gvHfpwMB4Irw/A8Ao8f4DwCj59Tx/9FgygEADMQP3nwz3Vp77e+/3v+m7turlcZGqfZgpbRS39osrdXra9VKaaXVOu1+1Xp9c/Hlg2Rje+derf7gfvPeem15rXKv4rsEAGD4nnvh/b+kg/7ua1PZFh1rORir4WorDLsAwNCMDbsAwND4PA+Mrj6e8U0DwBXXZYnetnyCIOl1wWOLv8JldfOL5v9hVJ1l/t/cAVxun27+/zvnXg5g8IzhMLparcSa/wAwYszxAz3//p/r+RUhj/u4+d1PXh4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4DGayLSmUsrXAd9OfhVIp4npEzEUxeWe9WlmIiGcj4s8TxYk0vTjsQgMAZ1T4e5Kv/3Vz9qWZo2evJf+dyPYR8dNfvvWLd5ebza3FNP9fB/nNx2n+VHOrfG0YFQAAOu2vu/nBYVY2fpfzfceD/EdPH67sb4Ms4pPXI2JyKou/l2/tM+Mxnu0noxgR0/9O8nRb+n5l7Bzi7z6KiC/s138y3u2IMJPNgbRXPj0aP419/dzjd/7+j8YvfKy+hexcui9mv4vPx5HCAad6//V2P5m3vbSJ5+2vEDeyfff2P5n1UGeX9n9pc9071v8VDvq/sWPxk6zN3zhIn1ySJy//4fvHMluz7XOPIr403i1+chA/6d7/Fl/qs44ffPmrL/Y61/pVxM2u9d9fkbqWdbPzzdrmfGN75/Z6bXmtsla5Xy4vLS4tvHrnlfJ8Nkfd/vnHbjH+8dqtZ3vFT+s/3SP+5Mn1j2/0Wf9f/+/tH3/thPjf+nr31//5E+KnY+I3+4y/PH235/LdafzVHvU/5fWPW33G//BvO6t9XgoADEBje2djuVqtbJ1ykL7XPO0aB/0fpM/2F6AY2UHsRpzXDbNJiYjoek36jvpiVPmzOkiGFv03533DYfdMwGftsNH3vuavgywQAAAAAAAAAAAAAABwTGN7Z2Oi+6e1zu1g2HUEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg6vp/AAAA//9W1cZQ") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) chown(&(0x7f0000000200)='./file0\x00', 0x0, 0xffffffffffffffff) 7.169554705s ago: executing program 0 (id=189): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000002840), 0xffffffffffffffff) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000380)={0xc}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xb, &(0x7f00000009c0)=@framed={{}, [@printk={@p, {0x3, 0x0, 0x6, 0xa, 0x1, 0xfff8, 0xa1}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0xca}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.947451192s ago: executing program 0 (id=191): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180100001100000000000000000000001812", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) 6.721351688s ago: executing program 0 (id=192): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_wakeup_irq', 0x0, 0xb) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r2, 0x0, 0x8, &(0x7f0000000340)=ANY=[@ANYRES32], 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x2, r3}) r5 = socket(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x4c, &(0x7f0000000000)=0x3, 0x4) ioctl(r5, 0x8916, &(0x7f0000000000)) ioctl(r5, 0x8936, &(0x7f0000000000)) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000200), &(0x7f0000000300)={'enc=', 'oaep', ' hash=', {'tgr160\x00'}}, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$vsock_stream(0x28, 0x1, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r6, &(0x7f00000000c0)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r6, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x76, 0x0, 0x0) 6.262077414s ago: executing program 3 (id=193): socket(0x18, 0x4, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) gettid() r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb8}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb8}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002300)=@updpolicy={0x210, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8, 0x0, 0x3ff}, {0x0, 0x8}}, [@user_kmaddress={0x2c, 0x13, {@in=@rand_addr=0x64010101, @in6=@empty, 0x0, 0x2}}, @offload={0xc, 0x1c, {0x0, 0x1}}, @migrate={0x9c, 0x11, [{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@multicast1, @in=@broadcast, @in6=@remote, 0x3c, 0x1, 0x0, 0x3507, 0xa}, {@in6=@mcast1, @in=@empty, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@empty, 0x0, 0x2, 0x0, 0x3505, 0x2, 0x2}]}, @lastused={0xc, 0xf, 0x4}, @etimer_thresh={0x8, 0xc, 0xffff}, @lastused={0xc, 0xf, 0x2}, @replay_esn_val={0x30, 0x17, {0x5, 0x70bd2b, 0x70bd26, 0x70bd2d, 0x70bd26, 0xa, [0x5, 0xae8, 0x3, 0x5, 0x1000]}}, @offload={0xc, 0x1c, {0x0, 0x2}}, @user_kmaddress={0x2c, 0x13, {@in6=@dev={0xfe, 0x80, '\x00', 0x21}, @in=@rand_addr=0x64010102, 0x0, 0xa}}]}, 0x210}}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000800)=ANY=[], &(0x7f0000000340)='GPL\x00'}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000280)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000040}, 0x48090) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) 3.733790502s ago: executing program 3 (id=194): syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) 3.342176771s ago: executing program 1 (id=196): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000f00)={'dummy0\x00', &(0x7f0000000540)=@ethtool_perm_addr={0x4b, 0x15, "43720700000000004786b89e6fb2940acfbe4c3f97"}}) 3.024938958s ago: executing program 0 (id=197): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x35, 0xff, 0xaa, 0x20, 0xccd, 0x10af, 0x384e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x59, 0x2, 0x1, 0x9b, 0x1e, 0x2a, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x0, 0x14}, 0x0, 0x0, 0x0, 0x0}) 2.304191459s ago: executing program 3 (id=198): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0xa1}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xe0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 2.225472482s ago: executing program 3 (id=199): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x400, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) io_setup(0x8, &(0x7f0000000600)=0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r2, 0x1, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x1, 0x0, r3, 0x0}]) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@bridge_newvlan={0x24, 0x76, 0x709, 0x0, 0x0, {0x7, 0x2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x2}}]}, 0x24}, 0x1, 0x5502000000000000}, 0x23f58e5b666a3f02) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000080)=0xa) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000440)={@local, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, 0x200003, 0x5, 0x0, 0x400, 0xfc8, 0x20c200a3}) 2.087510687s ago: executing program 1 (id=200): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x18) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@quota}]}, 0x1, 0x53a, &(0x7f0000000c80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) chown(&(0x7f0000000200)='./file0\x00', 0x0, 0xffffffffffffffff) 1.927735553s ago: executing program 1 (id=201): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x8000000, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x1, 0x0, 0xb2, 0xe9, 0x8, 0x2}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0xffe6, 0xb}, {0xb, 0xc}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4000000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.205290498s ago: executing program 1 (id=202): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000002840), 0xffffffffffffffff) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000380)={0xc}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xb, &(0x7f00000009c0)=@framed={{}, [@printk={@p, {0x3, 0x0, 0x6, 0xa, 0x1, 0xfff8, 0xa1}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0xca}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 851.079132ms ago: executing program 1 (id=203): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000002840), 0xffffffffffffffff) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f00000003c0)={0x48, 0x2, r3}) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000140)={0xc}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xb, &(0x7f00000009c0)=@framed={{}, [@printk={@p, {0x3, 0x0, 0x6, 0xa, 0x1, 0xfff8, 0xa1}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0xca}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, 0x0) ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x1) r4 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r4, &(0x7f0000001c40)={0x2, 0xff, @multicast2}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x1a}, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffff8}, {0x0, 0x0, 0x40000000000000}}}, 0xb8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x0, 0x9}) 564.463763ms ago: executing program 1 (id=204): socket(0x18, 0x4, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) gettid() r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb8}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb8}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002300)=@updpolicy={0x210, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8, 0x0, 0x3ff}, {0x0, 0x8}}, [@user_kmaddress={0x2c, 0x13, {@in=@rand_addr=0x64010101, @in6=@empty, 0x0, 0x2}}, @offload={0xc, 0x1c, {0x0, 0x1}}, @migrate={0x9c, 0x11, [{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@multicast1, @in=@broadcast, @in6=@remote, 0x3c, 0x1, 0x0, 0x3507, 0xa}, {@in6=@mcast1, @in=@empty, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@empty, 0x0, 0x2, 0x0, 0x3505, 0x2, 0x2}]}, @lastused={0xc, 0xf, 0x4}, @etimer_thresh={0x8, 0xc, 0xffff}, @lastused={0xc, 0xf, 0x2}, @replay_esn_val={0x30, 0x17, {0x5, 0x70bd2b, 0x70bd26, 0x70bd2d, 0x70bd26, 0xa, [0x5, 0xae8, 0x3, 0x5, 0x1000]}}, @offload={0xc, 0x1c, {0x0, 0x2}}, @user_kmaddress={0x2c, 0x13, {@in6=@dev={0xfe, 0x80, '\x00', 0x21}, @in=@rand_addr=0x64010102, 0x0, 0xa}}]}, 0x210}}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000800)=ANY=[], &(0x7f0000000340)='GPL\x00'}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000280)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000040}, 0x48090) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) 448.271358ms ago: executing program 0 (id=205): bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4d, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x200080, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) socket$key(0xf, 0x3, 0x2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0xbe) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x404c080) open_tree(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x100) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000002c0)) 0s ago: executing program 3 (id=206): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000100)=""/141, 0x1a, 0x8d, 0x1, 0x7}, 0x28) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="000000000000000040001280"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.17' (ED25519) to the list of known hosts. [ 87.005275][ T5849] cgroup: Unknown subsys name 'net' [ 87.120717][ T5849] cgroup: Unknown subsys name 'cpuset' [ 87.132511][ T5849] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 88.818979][ T5849] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 91.610934][ T5872] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.619335][ T5872] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 91.640180][ T5879] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.659554][ T5879] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 91.661255][ T5874] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 91.667441][ T5879] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 91.683245][ T5874] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.690873][ T5874] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 91.698986][ T5874] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 91.701499][ T5879] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.706736][ T5874] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 91.717907][ T5876] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 91.723393][ T5881] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 91.728598][ T5879] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.743081][ T5876] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 91.752663][ T5879] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 91.766077][ T5183] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 91.774722][ T5879] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 91.786555][ T5879] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 91.795305][ T5879] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 91.795750][ T5874] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 91.803095][ T5879] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 91.814364][ T5874] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 91.818072][ T5879] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 91.830618][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 92.578632][ T5861] chnl_net:caif_netlink_parms(): no params data found [ 92.604450][ T5871] chnl_net:caif_netlink_parms(): no params data found [ 92.631049][ T5862] chnl_net:caif_netlink_parms(): no params data found [ 92.816229][ T5870] chnl_net:caif_netlink_parms(): no params data found [ 92.845612][ T5863] chnl_net:caif_netlink_parms(): no params data found [ 92.934433][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.941783][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.949793][ T5861] bridge_slave_0: entered allmulticast mode [ 92.957213][ T5861] bridge_slave_0: entered promiscuous mode [ 93.019569][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.026885][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.034623][ T5861] bridge_slave_1: entered allmulticast mode [ 93.042551][ T5861] bridge_slave_1: entered promiscuous mode [ 93.101268][ T5871] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.108480][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.115805][ T5871] bridge_slave_0: entered allmulticast mode [ 93.123086][ T5871] bridge_slave_0: entered promiscuous mode [ 93.169788][ T5871] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.179127][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.186423][ T5871] bridge_slave_1: entered allmulticast mode [ 93.194547][ T5871] bridge_slave_1: entered promiscuous mode [ 93.202527][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.209795][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.216980][ T5862] bridge_slave_0: entered allmulticast mode [ 93.224441][ T5862] bridge_slave_0: entered promiscuous mode [ 93.267835][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.292055][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.300335][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.307518][ T5862] bridge_slave_1: entered allmulticast mode [ 93.315730][ T5862] bridge_slave_1: entered promiscuous mode [ 93.348611][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.355975][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.363443][ T5863] bridge_slave_0: entered allmulticast mode [ 93.371520][ T5863] bridge_slave_0: entered promiscuous mode [ 93.382936][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.448586][ T5870] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.456038][ T5870] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.464646][ T5870] bridge_slave_0: entered allmulticast mode [ 93.471952][ T5870] bridge_slave_0: entered promiscuous mode [ 93.480918][ T5870] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.488156][ T5870] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.495416][ T5870] bridge_slave_1: entered allmulticast mode [ 93.503129][ T5870] bridge_slave_1: entered promiscuous mode [ 93.511366][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.518500][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.525731][ T5863] bridge_slave_1: entered allmulticast mode [ 93.533580][ T5863] bridge_slave_1: entered promiscuous mode [ 93.555876][ T5871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.567743][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.581395][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.632451][ T5861] team0: Port device team_slave_0 added [ 93.656367][ T5871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.683802][ T5870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.695334][ T5861] team0: Port device team_slave_1 added [ 93.703971][ T5863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.718109][ T5863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.778058][ T5870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.828752][ T5871] team0: Port device team_slave_0 added [ 93.830010][ T5869] Bluetooth: hci0: command tx timeout [ 93.843288][ T5862] team0: Port device team_slave_0 added [ 93.852689][ T5862] team0: Port device team_slave_1 added [ 93.900843][ T5871] team0: Port device team_slave_1 added [ 93.909739][ T5863] team0: Port device team_slave_0 added [ 93.913524][ T5869] Bluetooth: hci4: command tx timeout [ 93.921298][ T5872] Bluetooth: hci3: command tx timeout [ 93.921306][ T5867] Bluetooth: hci1: command tx timeout [ 93.933013][ T5879] Bluetooth: hci2: command tx timeout [ 93.943007][ T5870] team0: Port device team_slave_0 added [ 93.950678][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.957653][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.984255][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.997699][ T5863] team0: Port device team_slave_1 added [ 94.046266][ T5870] team0: Port device team_slave_1 added [ 94.067605][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.075127][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.101207][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.147461][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.154899][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.181067][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.194705][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.201833][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.227840][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.253730][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.260848][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.286928][ T5870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.300574][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.307549][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.333969][ T5863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.346934][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.354131][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.380711][ T5863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.392591][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.399967][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.425977][ T5871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.444896][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.452564][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.479134][ T5870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.497236][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.504472][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.530852][ T5871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.659140][ T5861] hsr_slave_0: entered promiscuous mode [ 94.665963][ T5861] hsr_slave_1: entered promiscuous mode [ 94.681951][ T5871] hsr_slave_0: entered promiscuous mode [ 94.688381][ T5871] hsr_slave_1: entered promiscuous mode [ 94.695236][ T5871] debugfs: 'hsr0' already exists in 'hsr' [ 94.701203][ T5871] Cannot create hsr debugfs directory [ 94.713707][ T5862] hsr_slave_0: entered promiscuous mode [ 94.720334][ T5862] hsr_slave_1: entered promiscuous mode [ 94.726497][ T5862] debugfs: 'hsr0' already exists in 'hsr' [ 94.732502][ T5862] Cannot create hsr debugfs directory [ 94.833061][ T5870] hsr_slave_0: entered promiscuous mode [ 94.839779][ T5870] hsr_slave_1: entered promiscuous mode [ 94.846004][ T5870] debugfs: 'hsr0' already exists in 'hsr' [ 94.852185][ T5870] Cannot create hsr debugfs directory [ 94.890172][ T5863] hsr_slave_0: entered promiscuous mode [ 94.896796][ T5863] hsr_slave_1: entered promiscuous mode [ 94.903331][ T5863] debugfs: 'hsr0' already exists in 'hsr' [ 94.909173][ T5863] Cannot create hsr debugfs directory [ 95.501775][ T5871] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 95.516546][ T5871] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 95.534769][ T5871] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 95.547346][ T5871] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 95.635211][ T5862] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 95.646822][ T5862] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 95.657808][ T5862] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 95.684398][ T5862] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 95.764148][ T5861] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 95.790417][ T5861] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 95.801416][ T5861] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 95.813991][ T5861] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 95.911289][ T5872] Bluetooth: hci0: command tx timeout [ 95.926753][ T5870] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.984351][ T5870] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.990232][ T5872] Bluetooth: hci3: command tx timeout [ 95.994783][ T5879] Bluetooth: hci2: command tx timeout [ 95.996492][ T5869] Bluetooth: hci4: command tx timeout [ 96.006175][ T5867] Bluetooth: hci1: command tx timeout [ 96.016629][ T5870] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.053986][ T5870] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.097197][ T5863] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 96.115839][ T5871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.128845][ T5863] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 96.160091][ T5863] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 96.173671][ T5863] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 96.205893][ T5871] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.247841][ T3016] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.255189][ T3016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.281505][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.293120][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.300321][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.366124][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.412711][ T5862] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.443310][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.450520][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.498541][ T5870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.513123][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.520328][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.566376][ T5861] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.626854][ T5870] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.674438][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.681814][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.698763][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.706001][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.720240][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.727935][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.774728][ T1109] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.782354][ T1109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.954784][ T5871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.994267][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.083251][ T5863] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.111774][ T3016] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.119012][ T3016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.187383][ T3016] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.194710][ T3016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.284518][ T10] cfg80211: failed to load regulatory.db [ 97.338386][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.547903][ T5862] veth0_vlan: entered promiscuous mode [ 97.621403][ T5862] veth1_vlan: entered promiscuous mode [ 97.692534][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.787828][ T5862] veth0_macvtap: entered promiscuous mode [ 97.816814][ T5870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.831910][ T5862] veth1_macvtap: entered promiscuous mode [ 97.881779][ T5871] veth0_vlan: entered promiscuous mode [ 97.902830][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.921811][ T5871] veth1_vlan: entered promiscuous mode [ 97.943727][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.990318][ T5867] Bluetooth: hci0: command tx timeout [ 98.008503][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.045282][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.055708][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.065588][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.074609][ T5867] Bluetooth: hci1: command tx timeout [ 98.080137][ T5879] Bluetooth: hci2: command tx timeout [ 98.085598][ T5879] Bluetooth: hci4: command tx timeout [ 98.091928][ T5869] Bluetooth: hci3: command tx timeout [ 98.118649][ T5861] veth0_vlan: entered promiscuous mode [ 98.127325][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.137400][ T5870] veth0_vlan: entered promiscuous mode [ 98.156108][ T5871] veth0_macvtap: entered promiscuous mode [ 98.174250][ T5861] veth1_vlan: entered promiscuous mode [ 98.201776][ T5871] veth1_macvtap: entered promiscuous mode [ 98.217112][ T5870] veth1_vlan: entered promiscuous mode [ 98.265486][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.281378][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.329256][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.361343][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.365767][ T5861] veth0_macvtap: entered promiscuous mode [ 98.377904][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.386259][ T5861] veth1_macvtap: entered promiscuous mode [ 98.399594][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.444804][ T1109] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.455110][ T1109] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.487227][ T5870] veth0_macvtap: entered promiscuous mode [ 98.504382][ T1109] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.520671][ T5862] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 98.536903][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.555066][ T1109] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.567401][ T5870] veth1_macvtap: entered promiscuous mode [ 98.593322][ T5863] veth0_vlan: entered promiscuous mode [ 98.607317][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.646617][ T5863] veth1_vlan: entered promiscuous mode [ 98.786851][ T50] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.796642][ T50] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.856066][ T50] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.884329][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.917944][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.950957][ T50] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.962849][ T5984] loop3: detected capacity change from 0 to 32768 [ 99.115696][ T5984] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,str_hash=crc32c,noacl,usrquota,grpquota,nojournal_transaction_names,allocator_stuck_timeout=256 [ 99.115726][ T5984] allowing incompatible features above 0.0: (unknown version) [ 99.115740][ T5984] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 99.159020][ T5984] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0 [ 99.167424][ T5984] bcachefs (loop3): initializing new filesystem [ 99.183697][ T50] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.185388][ T5984] bcachefs (loop3): going read-write [ 99.208003][ T3016] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.221365][ T5984] bcachefs (loop3): marking superblocks [ 99.240291][ T5984] bcachefs (loop3): initializing freespace [ 99.252682][ T5984] bcachefs (loop3): done initializing freespace [ 99.262706][ T5984] bcachefs (loop3): reading snapshots table [ 99.268741][ T5984] bcachefs (loop3): reading snapshots done [ 99.303132][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.317438][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.340473][ T3016] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.350032][ T5984] bcachefs (loop3): done starting filesystem [ 99.415097][ T5863] veth0_macvtap: entered promiscuous mode [ 99.436326][ T5984] syz.3.4 (5984) used greatest stack depth: 16360 bytes left [ 99.445000][ T3016] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.515771][ T5862] bcachefs (loop3): shutting down [ 99.524104][ T5862] bcachefs (loop3): going read-only [ 99.528777][ T5863] veth1_macvtap: entered promiscuous mode [ 99.531140][ T5862] bcachefs (loop3): finished waiting for writes to stop [ 99.549877][ T5862] bcachefs (loop3): flushing journal and stopping allocators, journal seq 2 [ 99.562257][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.589825][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.625554][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.634839][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.649954][ T5862] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 3 [ 99.662253][ T5862] bcachefs (loop3): clean shutdown complete, journal seq 4 [ 99.676117][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.680517][ T5862] bcachefs (loop3): marking filesystem clean [ 99.695201][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.744152][ T1109] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.763836][ T5862] bcachefs (loop3): shutdown complete [ 99.777755][ T1109] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.820617][ T1109] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.834684][ T1109] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.852861][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.895511][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.976584][ T1109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.992055][ T1109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.069739][ T5867] Bluetooth: hci0: command tx timeout [ 100.149810][ T5872] Bluetooth: hci3: command tx timeout [ 100.155279][ T5872] Bluetooth: hci2: command tx timeout [ 100.160818][ T5879] Bluetooth: hci1: command tx timeout [ 100.166315][ T5867] Bluetooth: hci4: command tx timeout [ 100.194565][ T5999] loop1: detected capacity change from 0 to 8 [ 100.265927][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.287232][ T3016] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.290655][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.330114][ T3016] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.406974][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 100.509375][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 100.611722][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 100.639885][ T5997] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 100.714578][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 100.816428][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 100.825180][ T1109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.834266][ T1109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.919279][ T0] NOHZ tick-stop error: local softirq work is pending, handler #342!!! [ 100.950401][ T5997] usb 5-1: Using ep0 maxpacket: 8 [ 101.018027][ T5997] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 101.064063][ T5997] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 101.080825][ T5997] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 101.091138][ T5997] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 101.149327][ T5997] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 101.186160][ T5997] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.510057][ T5997] usb 5-1: GET_CAPABILITIES returned 0 [ 101.515781][ T5997] usbtmc 5-1:16.0: can't read capabilities [ 101.596716][ T6012] loop2: detected capacity change from 0 to 128 [ 101.663161][ T6012] ======================================================= [ 101.663161][ T6012] WARNING: The mand mount option has been deprecated and [ 101.663161][ T6012] and is ignored by this kernel. Remove the mand [ 101.663161][ T6012] option from the mount to silence this warning. [ 101.663161][ T6012] ======================================================= [ 102.386910][ T6001] usbtmc 5-1:16.0: usbtmc488_ioctl_trigger returned -90 [ 102.425295][ T5997] usb 5-1: USB disconnect, device number 2 [ 103.462960][ T6022] loop4: detected capacity change from 0 to 32768 [ 103.570598][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 103.670402][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 104.983159][ T6022] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 104.983185][ T6022] allowing incompatible features above 0.0: (unknown version) [ 104.983195][ T6022] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 105.029865][ T6022] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0 [ 105.038107][ T6022] bcachefs (loop4): initializing new filesystem [ 105.055082][ T6022] bcachefs (loop4): going read-write [ 105.066100][ T6022] bcachefs (loop4): marking superblocks [ 105.084887][ T6022] bcachefs (loop4): initializing freespace [ 105.093407][ T6022] bcachefs (loop4): done initializing freespace [ 105.101642][ T6022] bcachefs (loop4): reading snapshots table [ 105.107591][ T6022] bcachefs (loop4): reading snapshots done [ 105.117701][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 105.213821][ T6022] bcachefs (loop4): done starting filesystem [ 105.349237][ T5926] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 105.431869][ T5871] bcachefs (loop4): shutting down [ 105.436977][ T5871] bcachefs (loop4): going read-only [ 105.472574][ T5871] bcachefs (loop4): finished waiting for writes to stop [ 105.496249][ T5871] bcachefs (loop4): flushing journal and stopping allocators, journal seq 2 [ 105.533411][ T5926] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.563408][ T5926] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 105.574201][ T5926] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 105.575399][ T5871] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 3 [ 105.584397][ T5926] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.594531][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 105.618130][ T5926] usb 1-1: config 0 descriptor?? [ 105.636645][ T6051] netlink: 'syz.3.6': attribute type 1 has an invalid length. [ 105.653516][ T5926] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 105.676428][ T5871] bcachefs (loop4): clean shutdown complete, journal seq 4 [ 105.695950][ T5926] dvb-usb: bulk message failed: -22 (3/0) [ 105.722727][ T5871] bcachefs (loop4): marking filesystem clean [ 105.763607][ T6051] netlink: 'syz.3.6': attribute type 1 has an invalid length. [ 105.782979][ T5926] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 105.823211][ T5926] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 105.884656][ T5926] usb 1-1: media controller created [ 105.897114][ T6038] dvb-usb: bulk message failed: -22 (2/0) [ 105.899422][ T5926] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 105.924383][ T5871] bcachefs (loop4): shutdown complete [ 105.953499][ T5926] dvb-usb: bulk message failed: -22 (6/0) [ 105.986198][ T5926] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 106.010440][ T5926] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input5 [ 106.044248][ T5926] dvb-usb: schedule remote query interval to 150 msecs. [ 106.089134][ T5926] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 106.148746][ T5926] usb 1-1: USB disconnect, device number 2 [ 106.254869][ T5926] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 106.288713][ T6058] loop1: detected capacity change from 0 to 1024 [ 106.692664][ T6058] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.099195][ T6068] loop0: detected capacity change from 0 to 8 [ 107.388309][ T5861] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.475733][ T6070] process 'syz.0.21' launched './file1' with NULL argv: empty string added [ 107.490641][ T6070] SQUASHFS error: Failed to read block 0x8f: -5 [ 108.645814][ T6089] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 108.944239][ T6096] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 112.044576][ T6112] loop4: detected capacity change from 0 to 128 [ 112.089278][ T6112] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 112.109908][ T6112] System zones: 1-3, 19-19, 35-36 [ 112.180528][ T6112] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 112.345095][ T6112] ext4 filesystem being mounted at /4/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 112.377016][ C0] vkms_vblank_simulate: vblank timer overrun [ 112.473880][ T5871] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 112.729033][ T1220] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 113.583551][ T1220] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 113.617995][ T1220] usb 4-1: config 179 has no interface number 0 [ 113.652906][ T1220] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 113.682249][ T1220] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 113.694077][ T1220] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 113.844670][ T1220] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 113.858889][ T1220] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 113.868332][ T1220] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.654976][ T6116] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 114.950097][ T1220] usb 4-1: USB disconnect, device number 2 [ 115.545859][ T6150] Zero length message leads to an empty skb [ 116.294900][ T6165] netlink: 40 bytes leftover after parsing attributes in process `syz.3.47'. [ 116.575430][ T6169] loop1: detected capacity change from 0 to 128 [ 116.648640][ T6169] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 116.809230][ T6169] System zones: 1-3, 19-19, 35-36 [ 116.841273][ T6169] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 116.869401][ T5940] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 116.897772][ T6169] ext4 filesystem being mounted at /8/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 117.053403][ T5940] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 117.067707][ T5940] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 117.084312][ T5940] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 117.103209][ T5940] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 117.113566][ T5940] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.114356][ T5861] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 117.133870][ T5940] usb 5-1: Product: syz [ 117.138271][ T5940] usb 5-1: Manufacturer: syz [ 117.143312][ T5940] usb 5-1: SerialNumber: syz [ 117.208655][ T5940] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 117.255517][ T5940] cdc_ncm 5-1:1.0: bind() failure [ 117.837309][ T5997] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 117.868760][ T6187] netlink: 'syz.1.57': attribute type 1 has an invalid length. [ 117.876571][ T6187] netlink: 'syz.1.57': attribute type 1 has an invalid length. [ 118.089952][ T5997] usb 4-1: Using ep0 maxpacket: 8 [ 118.102917][ T5997] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 118.120831][ T5997] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 118.146850][ T5997] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 118.171378][ T5997] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 118.184884][ T5997] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 118.194277][ T5997] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.551685][ T5997] usb 4-1: GET_CAPABILITIES returned 0 [ 118.557432][ T5997] usbtmc 4-1:16.0: can't read capabilities [ 119.263864][ T5997] usb 4-1: USB disconnect, device number 3 [ 119.723013][ T5997] usb 5-1: USB disconnect, device number 3 [ 120.974374][ T6236] netlink: 'syz.1.72': attribute type 1 has an invalid length. [ 120.982253][ T6236] netlink: 'syz.1.72': attribute type 1 has an invalid length. [ 122.410686][ T5851] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 123.360618][ T5851] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 123.375413][ T5851] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 123.454062][ T6224] loop0: detected capacity change from 0 to 32768 [ 123.459051][ T5997] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 123.466468][ T6224] btrfs: Deprecated parameter 'usebackuproot' [ 123.474432][ T6224] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 123.498209][ T5851] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 123.499838][ T6224] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.68 (6224) [ 123.547772][ T6224] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 123.561905][ T5851] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.566732][ T6224] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm [ 123.607336][ T6224] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 123.608734][ T6224] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 123.650171][ T6224] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 123.655075][ T5851] usb 4-1: Product: syz [ 123.689924][ T5997] usb 2-1: Using ep0 maxpacket: 8 [ 123.698390][ T6266] loop4: detected capacity change from 0 to 128 [ 123.699296][ T6224] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 123.722345][ T6224] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 123.741955][ T5997] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 123.777685][ T5851] usb 4-1: Manufacturer: syz [ 123.807973][ T5851] usb 4-1: SerialNumber: syz [ 123.816080][ T6224] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 123.819993][ T6224] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 123.862078][ T5997] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 123.885341][ T5851] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 123.909977][ T6224] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 123.910350][ T6224] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 123.929047][ T5851] cdc_ncm 4-1:1.0: bind() failure [ 123.944472][ T6224] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 123.947442][ T6224] BTRFS error (device loop0): open_ctree failed: -12 [ 123.983080][ T5997] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 124.033833][ T5997] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 124.081323][ T5997] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 124.146154][ T5997] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.417914][ T5997] usb 2-1: GET_CAPABILITIES returned 0 [ 124.434620][ T5997] usbtmc 2-1:16.0: can't read capabilities [ 124.622960][ T5997] usb 2-1: USB disconnect, device number 2 [ 125.759500][ T5997] usb 4-1: USB disconnect, device number 4 [ 125.983388][ T6305] loop4: detected capacity change from 0 to 128 [ 126.218706][ T6310] loop0: detected capacity change from 0 to 128 [ 127.448133][ T6329] loop4: detected capacity change from 0 to 128 [ 127.498006][ T6329] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 127.514477][ T6329] System zones: 1-3, 19-19, 35-36 [ 127.671715][ T6329] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 127.718105][ T6333] loop1: detected capacity change from 0 to 512 [ 127.731679][ T6329] ext4 filesystem being mounted at /19/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 127.763795][ C0] vkms_vblank_simulate: vblank timer overrun [ 127.884142][ T6333] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.934171][ T6333] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.206398][ T5871] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 128.587850][ T5861] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.701386][ T43] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 128.785832][ T6345] loop1: detected capacity change from 0 to 256 [ 128.899080][ T43] usb 5-1: Using ep0 maxpacket: 8 [ 128.947037][ T43] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 128.963836][ T43] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 129.024559][ T6345] loop1: detected capacity change from 0 to 2048 [ 129.033283][ T43] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 129.072748][ T43] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 129.137406][ T6345] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=18576, location=18576 [ 129.155260][ T43] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 129.205970][ T6345] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 129.220584][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.996928][ T43] usb 5-1: GET_CAPABILITIES returned 0 [ 130.005993][ T43] usbtmc 5-1:16.0: can't read capabilities [ 130.201251][ T1220] usb 5-1: USB disconnect, device number 4 [ 130.290416][ T6353] loop1: detected capacity change from 0 to 128 [ 130.548162][ T6355] loop3: detected capacity change from 0 to 128 [ 130.946713][ T6363] loop3: detected capacity change from 0 to 128 [ 131.267561][ T6372] syz.3.108: attempt to access beyond end of device [ 131.267561][ T6372] loop3: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 131.588704][ T6368] loop0: detected capacity change from 0 to 128 [ 131.643291][ T6372] syz.3.108: attempt to access beyond end of device [ 131.643291][ T6372] loop3: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 131.665826][ T6368] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 131.704834][ T6368] System zones: 1-3, 19-19, 35-36 [ 131.784382][ T6372] syz.3.108: attempt to access beyond end of device [ 131.784382][ T6372] loop3: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 131.798010][ T6372] syz.3.108: attempt to access beyond end of device [ 131.798010][ T6372] loop3: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 131.819184][ T6368] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 131.832007][ T6372] syz.3.108: attempt to access beyond end of device [ 131.832007][ T6372] loop3: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 131.832134][ T6372] syz.3.108: attempt to access beyond end of device [ 131.832134][ T6372] loop3: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 131.832251][ T6372] syz.3.108: attempt to access beyond end of device [ 131.832251][ T6372] loop3: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 131.832368][ T6372] syz.3.108: attempt to access beyond end of device [ 131.832368][ T6372] loop3: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 131.832500][ T6372] syz.3.108: attempt to access beyond end of device [ 131.832500][ T6372] loop3: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 131.832610][ T6372] syz.3.108: attempt to access beyond end of device [ 131.832610][ T6372] loop3: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 132.058290][ T6368] ext4 filesystem being mounted at /20/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 132.090242][ C0] vkms_vblank_simulate: vblank timer overrun [ 132.246232][ T5870] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 138.234634][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.422984][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 142.294126][ T6440] netlink: 84 bytes leftover after parsing attributes in process `syz.0.128'. [ 143.839987][ T6457] loop4: detected capacity change from 0 to 32768 [ 143.869479][ T6457] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.129 (6457) [ 143.890850][ T6457] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 143.901098][ T6457] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 143.909726][ T6457] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 143.989097][ T5851] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 144.159013][ T5851] usb 2-1: Using ep0 maxpacket: 8 [ 144.170781][ T5851] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 144.199895][ T5851] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 144.212304][ T5851] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 144.222693][ T5851] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 144.269087][ T5851] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 144.288624][ T5851] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.323194][ T6457] BTRFS info (device loop4): rebuilding free space tree [ 144.365877][ T6457] BTRFS info (device loop4): disabling free space tree [ 144.372957][ T6457] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 144.382868][ T6457] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 144.568605][ T5851] usb 2-1: GET_CAPABILITIES returned 0 [ 144.590133][ T6457] BTRFS info (device loop4): setting nodatasum [ 144.596367][ T6457] BTRFS info (device loop4): setting nodatacow [ 144.602677][ T6457] BTRFS info (device loop4): enabling ssd optimizations [ 144.609730][ T6457] BTRFS info (device loop4): using spread ssd allocation scheme [ 144.617395][ T6457] BTRFS info (device loop4): turning off barriers [ 144.623872][ T6457] BTRFS info (device loop4): enabling disk space caching [ 144.631144][ T6457] BTRFS info (device loop4): force clearing of disk cache [ 145.354729][ T5851] usbtmc 2-1:16.0: can't read capabilities [ 145.514241][ T5851] usb 2-1: USB disconnect, device number 3 [ 145.615744][ T5871] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 146.184633][ T6485] loop1: detected capacity change from 0 to 128 [ 146.222079][ T6485] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 146.309633][ T6485] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 146.376633][ T6485] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 146.423486][ T6487] syz.4.136 uses obsolete (PF_INET,SOCK_PACKET) [ 146.461496][ T6485] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 146.574305][ T6485] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 146.601067][ T6485] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 146.650636][ T6485] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 146.755311][ T6485] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 146.840648][ T6485] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 146.862908][ T6485] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1) [ 146.937692][ T6485] loop1: detected capacity change from 0 to 128 [ 147.077922][ T6485] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 147.123556][ T6492] loop0: detected capacity change from 0 to 256 [ 147.128679][ T6485] FAT-fs (loop1): Filesystem has been set read-only [ 147.517993][ T6495] loop4: detected capacity change from 0 to 32768 [ 147.650560][ T6492] loop0: detected capacity change from 0 to 2048 [ 147.730748][ T6492] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=18576, location=18576 [ 147.810925][ T6500] netlink: 8 bytes leftover after parsing attributes in process `syz.4.141'. [ 147.822349][ T6492] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 147.849444][ T6500] netlink: 8 bytes leftover after parsing attributes in process `syz.4.141'. [ 147.891344][ T6502] loop3: detected capacity change from 0 to 764 [ 147.990642][ T6502] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 148.400534][ T6502] overlay: Unknown parameter '/' [ 149.202962][ T6517] loop3: detected capacity change from 0 to 128 [ 149.252990][ T43] IPVS: starting estimator thread 0... [ 149.411318][ T6518] IPVS: using max 37 ests per chain, 88800 per kthread [ 149.878097][ T6523] loop3: detected capacity change from 0 to 32768 [ 150.489154][ T5851] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 150.713673][ T5851] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 150.755251][ T5851] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 150.823196][ T5851] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 150.838937][ T5851] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.866382][ T5851] usb 4-1: Product: syz [ 150.878527][ T5851] usb 4-1: Manufacturer: syz [ 150.918848][ T5851] usb 4-1: SerialNumber: syz [ 151.080998][ T5867] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 151.090376][ T5867] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 151.100048][ T5867] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 151.108831][ T5867] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 151.116744][ T5867] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 151.519134][ T6539] netlink: 8 bytes leftover after parsing attributes in process `syz.0.156'. [ 151.554445][ T6539] netlink: 8 bytes leftover after parsing attributes in process `syz.0.156'. [ 152.042908][ T5851] cdc_ncm 4-1:1.0: bind() failure [ 152.141506][ T5851] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 152.148389][ T5851] cdc_ncm 4-1:1.1: bind() failure [ 152.307315][ T5851] usb 4-1: USB disconnect, device number 5 [ 152.357905][ T6543] loop0: detected capacity change from 0 to 764 [ 152.426903][ T6543] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 152.470238][ T6543] overlay: Unknown parameter '/' [ 152.540645][ T6534] chnl_net:caif_netlink_parms(): no params data found [ 152.668359][ T9] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 152.684450][ T43] IPVS: starting estimator thread 0... [ 152.791436][ T6551] IPVS: using max 26 ests per chain, 62400 per kthread [ 153.047415][ T9] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 153.056127][ T9] usb 5-1: config 179 has no interface number 0 [ 153.063338][ T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 153.074699][ T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 153.085764][ T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 153.097227][ T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 153.176028][ T9] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 153.263635][ T5867] Bluetooth: hci5: command tx timeout [ 153.594838][ T9] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 153.725059][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.817412][ T6534] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.827907][ T6534] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.889275][ T6534] bridge_slave_0: entered allmulticast mode [ 153.938028][ T6534] bridge_slave_0: entered promiscuous mode [ 153.998137][ T6534] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.031692][ T6534] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.058688][ T6564] loop3: detected capacity change from 0 to 32768 [ 154.076707][ T6534] bridge_slave_1: entered allmulticast mode [ 154.089429][ T6546] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 154.101417][ T9] xpad 5-1:179.65: probe with driver xpad failed with error -5 [ 154.111907][ T6534] bridge_slave_1: entered promiscuous mode [ 154.278537][ T6534] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 154.326472][ T6534] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.373589][ T9] usb 5-1: USB disconnect, device number 5 [ 154.820802][ T6534] team0: Port device team_slave_0 added [ 154.863129][ T6534] team0: Port device team_slave_1 added [ 155.319248][ T6534] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 155.326271][ T6534] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.354247][ T5867] Bluetooth: hci5: command tx timeout [ 155.402387][ T6588] loop4: detected capacity change from 0 to 764 [ 155.419338][ T6534] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 155.492213][ T6534] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 155.513854][ T6534] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.515770][ T6588] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 155.614807][ T6534] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.017610][ T6534] hsr_slave_0: entered promiscuous mode [ 156.087667][ T6534] hsr_slave_1: entered promiscuous mode [ 156.107116][ T6534] debugfs: 'hsr0' already exists in 'hsr' [ 156.123972][ T6534] Cannot create hsr debugfs directory [ 156.472509][ T6396] Set syz1 is full, maxelem 65536 reached [ 156.480663][ T6597] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.585965][ T6602] netlink: 'syz.4.174': attribute type 10 has an invalid length. [ 156.711533][ T6597] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.836710][ T6597] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.845555][ T6597] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.456366][ T5867] Bluetooth: hci5: command tx timeout [ 157.787012][ T6602] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.796321][ T6602] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.840809][ T6602] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.848086][ T6602] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.856514][ T6602] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.863701][ T6602] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.888420][ T6602] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 158.456355][ T6624] netlink: 40 bytes leftover after parsing attributes in process `syz.3.177'. [ 158.867939][ T1162] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.875484][ T5867] Bluetooth: hci5: command tx timeout [ 159.924839][ T6534] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 159.975771][ T6534] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 160.180693][ T1162] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.240419][ T6534] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 160.278480][ T6534] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 160.400817][ T1162] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.664408][ T1162] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.770942][ T6638] loop4: detected capacity change from 0 to 1024 [ 160.825426][ T6638] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 160.959589][ T6638] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.181: Invalid block bitmap block 0 in block_group 0 [ 161.007384][ T6638] Quota error (device loop4): write_blk: dquota write failed [ 161.048185][ T6638] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 161.089369][ T6638] EXT4-fs error (device loop4): ext4_acquire_dquot:6943: comm syz.4.181: Failed to acquire dquot type 0 [ 161.134417][ T6534] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.224272][ T6638] EXT4-fs error (device loop4): ext4_free_blocks:6696: comm syz.4.181: Freeing blocks not in datazone - block = 0, count = 4096 [ 161.246613][ T6534] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.289882][ T6638] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.181: Invalid inode bitmap blk 0 in block_group 0 [ 161.392093][ T1162] bridge_slave_1: left allmulticast mode [ 161.397916][ T1162] bridge_slave_1: left promiscuous mode [ 161.407485][ T60] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-7 [ 161.463674][ T1162] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.473929][ T60] EXT4-fs error (device loop4): ext4_release_dquot:6979: comm kworker/u8:4: Failed to release dquot type 0 [ 161.556315][ T6638] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 161.577596][ T6638] EXT4-fs (loop4): 1 orphan inode deleted [ 161.580281][ T1162] bridge_slave_0: left allmulticast mode [ 161.597862][ T6656] loop0: detected capacity change from 0 to 1024 [ 161.605429][ T6638] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.610637][ T1162] bridge_slave_0: left promiscuous mode [ 161.659242][ T1162] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.782444][ T6656] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.204878][ T5870] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.406240][ T6670] loop0: detected capacity change from 0 to 512 [ 162.463270][ T6670] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.476821][ T6670] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.566689][ T5870] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.843589][ T1162] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 162.855752][ T1162] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 162.891823][ T1162] bond0 (unregistering): Released all slaves [ 162.935712][ T1151] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.943086][ T1151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.982244][ T6681] netlink: 'syz.1.190': attribute type 10 has an invalid length. [ 163.103321][ T6681] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.112113][ T6681] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.196985][ T6681] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.204285][ T6681] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.211931][ T6681] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.219172][ T6681] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.235668][ T6681] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 163.340071][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.347233][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.665791][ T6695] netlink: 40 bytes leftover after parsing attributes in process `syz.3.193'. [ 164.455764][ T6534] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 164.625023][ T6638] infiniband syz2: set active [ 164.709101][ T6638] infiniband syz2: added bond0 [ 164.722008][ T6638] syz2: rxe_create_cq: returned err = -12 [ 164.769425][ T6638] infiniband syz2: Couldn't create ib_mad CQ [ 164.806199][ T6638] infiniband syz2: Couldn't open port 1 [ 165.028271][ T6638] RDS/IB: syz2: added [ 165.051210][ T6638] smc: adding ib device syz2 with port count 1 [ 165.084208][ T6638] smc: ib device syz2 port 1 has no pnetid [ 165.116097][ T1162] hsr_slave_0: left promiscuous mode [ 165.212309][ T1162] hsr_slave_1: left promiscuous mode [ 165.239986][ T1162] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.247485][ T1162] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.316591][ T1162] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.352317][ T1162] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.592858][ T1162] veth1_macvtap: left promiscuous mode [ 165.612667][ T1162] veth0_macvtap: left promiscuous mode [ 165.633515][ T1162] veth1_vlan: left promiscuous mode [ 165.660510][ T1162] veth0_vlan: left promiscuous mode [ 166.259050][ T5940] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 166.431469][ T5940] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 166.440383][ T5940] usb 4-1: config 179 has no interface number 0 [ 166.457368][ T5940] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 166.479809][ T5940] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 166.499830][ T5940] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 166.512369][ T5940] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 8 [ 166.528017][ T5940] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 166.545812][ T5940] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 166.561583][ T5940] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.589413][ T6714] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 166.599537][ T6714] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 166.830654][ T5940] usb 4-1: USB disconnect, device number 6 [ 166.830714][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 166.845038][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 166.993979][ T1162] team0 (unregistering): Port device team_slave_1 removed [ 167.028056][ T1162] team0 (unregistering): Port device team_slave_0 removed [ 167.031168][ T5926] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 167.199029][ T5926] usb 1-1: Using ep0 maxpacket: 32 [ 167.207798][ T5926] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 167.216688][ T5926] usb 1-1: config 0 has no interface number 0 [ 167.223978][ T5926] usb 1-1: config 0 interface 89 has no altsetting 0 [ 167.236473][ T5926] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 167.247067][ T5926] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.263152][ T5926] usb 1-1: Product: syz [ 167.267395][ T5926] usb 1-1: Manufacturer: syz [ 167.279116][ T5926] usb 1-1: SerialNumber: syz [ 167.288044][ T5926] usb 1-1: config 0 descriptor?? [ 167.304985][ T5926] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 167.314832][ T5926] em28xx 1-1:0.89: Video interface 89 found: bulk [ 167.574863][ T6534] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.051077][ T5926] em28xx 1-1:0.89: unknown em28xx chip ID (0) [ 168.669513][ T5926] em28xx 1-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 168.699364][ T5926] em28xx 1-1:0.89: board has no eeprom [ 168.789292][ T5926] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67) [ 168.820139][ T5926] em28xx 1-1:0.89: analog set to bulk mode. [ 168.826300][ T5851] em28xx 1-1:0.89: Registering V4L2 extension [ 168.890263][ T5926] usb 1-1: USB disconnect, device number 3 [ 168.937435][ T5926] em28xx 1-1:0.89: Disconnecting em28xx [ 169.046433][ T5851] em28xx 1-1:0.89: Config register raw data: 0xffffffed [ 169.109177][ T5851] em28xx 1-1:0.89: AC97 chip type couldn't be determined [ 169.137702][ T5851] em28xx 1-1:0.89: No AC97 audio processor [ 169.201297][ T5851] usb 1-1: Decoder not found [ 169.205980][ T5851] em28xx 1-1:0.89: failed to create media graph [ 169.255037][ T5851] em28xx 1-1:0.89: V4L2 device video103 deregistered [ 169.303391][ T6534] veth0_vlan: entered promiscuous mode [ 169.346280][ T5851] em28xx 1-1:0.89: Registering snapshot button... [ 169.383836][ T6534] veth1_vlan: entered promiscuous mode [ 169.419581][ T5851] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input6 [ 169.473603][ T6761] netlink: 40 bytes leftover after parsing attributes in process `syz.1.204'. [ 169.501532][ T5851] em28xx 1-1:0.89: Remote control support is not available for this card. [ 169.541607][ T5926] em28xx 1-1:0.89: Closing input extension [ 169.596400][ T5926] em28xx 1-1:0.89: Deregistering snapshot button [ 169.613522][ T6534] veth0_macvtap: entered promiscuous mode [ 169.643966][ T6767] netlink: 'syz.0.205': attribute type 10 has an invalid length. [ 169.706803][ T6534] veth1_macvtap: entered promiscuous mode [ 169.782255][ T5926] ================================================================== [ 169.790399][ T5926] BUG: KASAN: slab-use-after-free in media_devnode_unregister+0xe2/0xf0 [ 169.798764][ T5926] Read of size 4 at addr ffff8881413b84f0 by task kworker/0:4/5926 [ 169.806665][ T5926] [ 169.809012][ T5926] CPU: 0 UID: 0 PID: 5926 Comm: kworker/0:4 Not tainted syzkaller #0 PREEMPT(full) [ 169.809033][ T5926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 169.809046][ T5926] Workqueue: usb_hub_wq hub_event [ 169.809074][ T5926] Call Trace: [ 169.809082][ T5926] [ 169.809090][ T5926] dump_stack_lvl+0x189/0x250 [ 169.809112][ T5926] ? rcu_is_watching+0x15/0xb0 [ 169.809137][ T5926] ? __kasan_check_byte+0x12/0x40 [ 169.809168][ T5926] ? __pfx_dump_stack_lvl+0x10/0x10 [ 169.809186][ T5926] ? rcu_is_watching+0x15/0xb0 [ 169.809211][ T5926] ? lock_release+0x4b/0x3e0 [ 169.809235][ T5926] ? __virt_addr_valid+0x1c8/0x5c0 [ 169.809253][ T5926] ? __virt_addr_valid+0x4a5/0x5c0 [ 169.809273][ T5926] print_report+0xca/0x240 [ 169.809289][ T5926] ? media_devnode_unregister+0xe2/0xf0 [ 169.809312][ T5926] kasan_report+0x118/0x150 [ 169.809337][ T5926] ? media_devnode_unregister+0xe2/0xf0 [ 169.809363][ T5926] media_devnode_unregister+0xe2/0xf0 [ 169.809387][ T5926] media_device_unregister+0x37c/0x400 [ 169.809413][ T5926] em28xx_release_resources+0xac/0x240 [ 169.809442][ T5926] em28xx_usb_disconnect+0x19f/0x2f0 [ 169.809469][ T5926] usb_unbind_interface+0x26e/0x910 [ 169.809493][ T5926] ? __pfx_usb_unbind_interface+0x10/0x10 [ 169.809514][ T5926] device_release_driver_internal+0x4d9/0x800 [ 169.809545][ T5926] bus_remove_device+0x34d/0x410 [ 169.809568][ T5926] device_del+0x511/0x8e0 [ 169.809596][ T5926] ? __pfx_device_del+0x10/0x10 [ 169.809619][ T5926] ? kobject_put+0x446/0x480 [ 169.809640][ T5926] usb_disable_device+0x3e9/0x8a0 [ 169.809661][ T5926] usb_disconnect+0x330/0x950 [ 169.809680][ T5926] hub_event+0x1cf5/0x4a20 [ 169.809708][ T5926] ? do_raw_spin_lock+0x121/0x290 [ 169.809727][ T5926] ? register_lock_class+0x51/0x320 [ 169.809755][ T5926] ? __pfx_hub_event+0x10/0x10 [ 169.809773][ T5926] ? process_scheduled_works+0x9ef/0x17b0 [ 169.809800][ T5926] ? _raw_spin_unlock_irq+0x23/0x50 [ 169.809824][ T5926] ? process_scheduled_works+0x9ef/0x17b0 [ 169.809847][ T5926] ? process_scheduled_works+0x9ef/0x17b0 [ 169.809872][ T5926] process_scheduled_works+0xae1/0x17b0 [ 169.809908][ T5926] ? __pfx_process_scheduled_works+0x10/0x10 [ 169.809939][ T5926] worker_thread+0x8a0/0xda0 [ 169.809965][ T5926] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 169.809994][ T5926] ? __kthread_parkme+0x7b/0x200 [ 169.810012][ T5926] kthread+0x711/0x8a0 [ 169.810031][ T5926] ? __pfx_worker_thread+0x10/0x10 [ 169.810056][ T5926] ? __pfx_kthread+0x10/0x10 [ 169.810074][ T5926] ? _raw_spin_unlock_irq+0x23/0x50 [ 169.810097][ T5926] ? lockdep_hardirqs_on+0x9c/0x150 [ 169.810122][ T5926] ? __pfx_kthread+0x10/0x10 [ 169.810140][ T5926] ret_from_fork+0x47c/0x820 [ 169.810171][ T5926] ? __pfx_ret_from_fork+0x10/0x10 [ 169.810216][ T5926] ? __switch_to_asm+0x39/0x70 [ 169.810239][ T5926] ? __switch_to_asm+0x33/0x70 [ 169.810261][ T5926] ? __pfx_kthread+0x10/0x10 [ 169.810279][ T5926] ret_from_fork_asm+0x1a/0x30 [ 169.810311][ T5926] [ 169.810317][ T5926] [ 170.098862][ T5926] Allocated by task 5926: [ 170.103209][ T5926] kasan_save_track+0x3e/0x80 [ 170.107902][ T5926] __kasan_kmalloc+0x93/0xb0 [ 170.112521][ T5926] __kmalloc_cache_noprof+0x3d5/0x6f0 [ 170.117933][ T5926] __media_device_register+0x58/0x280 [ 170.123341][ T5926] em28xx_usb_probe+0x1764/0x2a20 [ 170.128383][ T5926] usb_probe_interface+0x665/0xc30 [ 170.133612][ T5926] really_probe+0x26d/0x9e0 [ 170.138142][ T5926] __driver_probe_device+0x18c/0x2f0 [ 170.143459][ T5926] driver_probe_device+0x4f/0x430 [ 170.148496][ T5926] __device_attach_driver+0x2ce/0x530 [ 170.153876][ T5926] bus_for_each_drv+0x24e/0x2e0 [ 170.158740][ T5926] __device_attach+0x2b8/0x400 [ 170.163518][ T5926] bus_probe_device+0x185/0x260 [ 170.168380][ T5926] device_add+0x7b6/0xb50 [ 170.172721][ T5926] usb_set_configuration+0x1a87/0x20e0 [ 170.178186][ T5926] usb_generic_driver_probe+0x8d/0x150 [ 170.183650][ T5926] usb_probe_device+0x1c1/0x390 [ 170.188505][ T5926] really_probe+0x26d/0x9e0 [ 170.193014][ T5926] __driver_probe_device+0x18c/0x2f0 [ 170.198313][ T5926] driver_probe_device+0x4f/0x430 [ 170.203338][ T5926] __device_attach_driver+0x2ce/0x530 [ 170.208711][ T5926] bus_for_each_drv+0x24e/0x2e0 [ 170.213566][ T5926] __device_attach+0x2b8/0x400 [ 170.218341][ T5926] bus_probe_device+0x185/0x260 [ 170.223237][ T5926] device_add+0x7b6/0xb50 [ 170.227575][ T5926] usb_new_device+0xa39/0x16f0 [ 170.232342][ T5926] hub_event+0x2958/0x4a20 [ 170.236759][ T5926] process_scheduled_works+0xae1/0x17b0 [ 170.242313][ T5926] worker_thread+0x8a0/0xda0 [ 170.246922][ T5926] kthread+0x711/0x8a0 [ 170.251001][ T5926] ret_from_fork+0x47c/0x820 [ 170.255606][ T5926] ret_from_fork_asm+0x1a/0x30 [ 170.260384][ T5926] [ 170.262713][ T5926] Freed by task 5926: [ 170.266703][ T5926] kasan_save_track+0x3e/0x80 [ 170.271391][ T5926] __kasan_save_free_info+0x46/0x50 [ 170.276600][ T5926] __kasan_slab_free+0x5b/0x80 [ 170.281379][ T5926] kfree+0x199/0x6d0 [ 170.285284][ T5926] media_devnode_release+0x61/0xa0 [ 170.290406][ T5926] device_release+0x99/0x1c0 [ 170.295001][ T5926] kobject_put+0x228/0x480 [ 170.299418][ T5926] media_devnode_unregister+0x6d/0xf0 [ 170.304800][ T5926] media_device_unregister+0x37c/0x400 [ 170.310268][ T5926] em28xx_release_resources+0xac/0x240 [ 170.315755][ T5926] em28xx_usb_disconnect+0x19f/0x2f0 [ 170.321069][ T5926] usb_unbind_interface+0x26e/0x910 [ 170.326301][ T5926] device_release_driver_internal+0x4d9/0x800 [ 170.332404][ T5926] bus_remove_device+0x34d/0x410 [ 170.337355][ T5926] device_del+0x511/0x8e0 [ 170.341707][ T5926] usb_disable_device+0x3e9/0x8a0 [ 170.346748][ T5926] usb_disconnect+0x330/0x950 [ 170.351441][ T5926] hub_event+0x1cf5/0x4a20 [ 170.355869][ T5926] process_scheduled_works+0xae1/0x17b0 [ 170.361429][ T5926] worker_thread+0x8a0/0xda0 [ 170.366039][ T5926] kthread+0x711/0x8a0 [ 170.370124][ T5926] ret_from_fork+0x47c/0x820 [ 170.374729][ T5926] ret_from_fork_asm+0x1a/0x30 [ 170.379508][ T5926] [ 170.381839][ T5926] The buggy address belongs to the object at ffff8881413b8000 [ 170.381839][ T5926] which belongs to the cache kmalloc-2k of size 2048 [ 170.395892][ T5926] The buggy address is located 1264 bytes inside of [ 170.395892][ T5926] freed 2048-byte region [ffff8881413b8000, ffff8881413b8800) [ 170.409868][ T5926] [ 170.412196][ T5926] The buggy address belongs to the physical page: [ 170.418624][ T5926] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1413b8 [ 170.427473][ T5926] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 170.435973][ T5926] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff) [ 170.443626][ T5926] page_type: f5(slab) [ 170.447622][ T5926] raw: 057ff00000000040 ffff88801a842000 dead000000000100 dead000000000122 [ 170.456217][ T5926] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 170.464823][ T5926] head: 057ff00000000040 ffff88801a842000 dead000000000100 dead000000000122 [ 170.473502][ T5926] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 170.482185][ T5926] head: 057ff00000000003 ffffea000504ee01 00000000ffffffff 00000000ffffffff [ 170.490859][ T5926] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 170.499550][ T5926] page dumped because: kasan: bad access detected [ 170.505974][ T5926] page_owner tracks the page as allocated [ 170.511683][ T5926] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 9137132622, free_ts 0 [ 170.531396][ T5926] post_alloc_hook+0x240/0x2a0 [ 170.536171][ T5926] get_page_from_freelist+0x21e4/0x22c0 [ 170.541724][ T5926] __alloc_frozen_pages_noprof+0x181/0x370 [ 170.547540][ T5926] alloc_pages_mpol+0x232/0x4a0 [ 170.552404][ T5926] allocate_slab+0x8a/0x330 [ 170.556909][ T5926] ___slab_alloc+0xbd1/0x13f0 [ 170.561617][ T5926] __slab_alloc+0x55/0xa0 [ 170.565982][ T5926] __kmalloc_cache_noprof+0x411/0x6f0 [ 170.571361][ T5926] acpi_ds_create_walk_state+0xd9/0x270 [ 170.578750][ T5926] acpi_ps_execute_method+0x220/0x7c0 [ 170.584149][ T5926] acpi_ns_evaluate+0x5a6/0xa20 [ 170.589009][ T5926] acpi_ut_evaluate_object+0x126/0x4c0 [ 170.594512][ T5926] acpi_rs_get_method_data+0x8f/0x110 [ 170.599897][ T5926] acpi_walk_resources+0x14b/0x4e0 [ 170.605017][ T5926] acpi_pci_link_get_current+0x1f4/0x430 [ 170.610751][ T5926] acpi_pci_link_set+0x62c/0xac0 [ 170.615693][ T5926] page_owner free stack trace missing [ 170.621058][ T5926] [ 170.623384][ T5926] Memory state around the buggy address: [ 170.629010][ T5926] ffff8881413b8380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 170.637071][ T5926] ffff8881413b8400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 170.645140][ T5926] >ffff8881413b8480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 170.653289][ T5926] ^ [ 170.661012][ T5926] ffff8881413b8500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 170.669084][ T5926] ffff8881413b8580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 170.677230][ T5926] ================================================================== [ 170.839415][ T6767] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.846925][ T6767] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.876251][ T6767] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.883539][ T6767] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.891015][ T6767] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.898150][ T6767] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.986303][ T6767] bond0: (slave bridge0): Enslaving as an active interface with an up link SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 171.440170][ T5926] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 171.447516][ T5926] CPU: 0 UID: 0 PID: 5926 Comm: kworker/0:4 Not tainted syzkaller #0 PREEMPT(full) [ 171.456918][ T5926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 171.466994][ T5926] Workqueue: usb_hub_wq hub_event [ 171.472039][ T5926] Call Trace: [ 171.475336][ T5926] [ 171.478268][ T5926] dump_stack_lvl+0x99/0x250 [ 171.482874][ T5926] ? __asan_memcpy+0x40/0x70 [ 171.487465][ T5926] ? __pfx_dump_stack_lvl+0x10/0x10 [ 171.492750][ T5926] ? __pfx__printk+0x10/0x10 [ 171.497412][ T5926] vpanic+0x237/0x6d0 [ 171.501394][ T5926] ? __pfx_vpanic+0x10/0x10 [ 171.505895][ T5926] ? preempt_schedule+0xae/0xc0 [ 171.510751][ T5926] ? __pfx_preempt_schedule+0x10/0x10 [ 171.516135][ T5926] panic+0xb9/0xc0 [ 171.519855][ T5926] ? __pfx_panic+0x10/0x10 [ 171.524315][ T5926] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 171.530212][ T5926] ? media_devnode_unregister+0xe2/0xf0 [ 171.535756][ T5926] check_panic_on_warn+0x89/0xb0 [ 171.540695][ T5926] ? media_devnode_unregister+0xe2/0xf0 [ 171.546248][ T5926] end_report+0x78/0x160 [ 171.550496][ T5926] kasan_report+0x129/0x150 [ 171.555088][ T5926] ? media_devnode_unregister+0xe2/0xf0 [ 171.560640][ T5926] media_devnode_unregister+0xe2/0xf0 [ 171.566047][ T5926] media_device_unregister+0x37c/0x400 [ 171.571503][ T5926] em28xx_release_resources+0xac/0x240 [ 171.576988][ T5926] em28xx_usb_disconnect+0x19f/0x2f0 [ 171.582387][ T5926] usb_unbind_interface+0x26e/0x910 [ 171.587593][ T5926] ? __pfx_usb_unbind_interface+0x10/0x10 [ 171.593319][ T5926] device_release_driver_internal+0x4d9/0x800 [ 171.599398][ T5926] bus_remove_device+0x34d/0x410 [ 171.604340][ T5926] device_del+0x511/0x8e0 [ 171.608671][ T5926] ? __pfx_device_del+0x10/0x10 [ 171.613543][ T5926] ? kobject_put+0x446/0x480 [ 171.618135][ T5926] usb_disable_device+0x3e9/0x8a0 [ 171.623175][ T5926] usb_disconnect+0x330/0x950 [ 171.627849][ T5926] hub_event+0x1cf5/0x4a20 [ 171.632271][ T5926] ? do_raw_spin_lock+0x121/0x290 [ 171.637315][ T5926] ? register_lock_class+0x51/0x320 [ 171.642525][ T5926] ? __pfx_hub_event+0x10/0x10 [ 171.647293][ T5926] ? process_scheduled_works+0x9ef/0x17b0 [ 171.653039][ T5926] ? _raw_spin_unlock_irq+0x23/0x50 [ 171.658248][ T5926] ? process_scheduled_works+0x9ef/0x17b0 [ 171.663992][ T5926] ? process_scheduled_works+0x9ef/0x17b0 [ 171.669731][ T5926] process_scheduled_works+0xae1/0x17b0 [ 171.675299][ T5926] ? __pfx_process_scheduled_works+0x10/0x10 [ 171.681323][ T5926] worker_thread+0x8a0/0xda0 [ 171.685937][ T5926] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 171.692282][ T5926] ? __kthread_parkme+0x7b/0x200 [ 171.697231][ T5926] kthread+0x711/0x8a0 [ 171.701310][ T5926] ? __pfx_worker_thread+0x10/0x10 [ 171.706431][ T5926] ? __pfx_kthread+0x10/0x10 [ 171.711053][ T5926] ? _raw_spin_unlock_irq+0x23/0x50 [ 171.716277][ T5926] ? lockdep_hardirqs_on+0x9c/0x150 [ 171.721504][ T5926] ? __pfx_kthread+0x10/0x10 [ 171.726095][ T5926] ret_from_fork+0x47c/0x820 [ 171.730693][ T5926] ? __pfx_ret_from_fork+0x10/0x10 [ 171.735810][ T5926] ? __switch_to_asm+0x39/0x70 [ 171.740579][ T5926] ? __switch_to_asm+0x33/0x70 [ 171.745347][ T5926] ? __pfx_kthread+0x10/0x10 [ 171.749965][ T5926] ret_from_fork_asm+0x1a/0x30 [ 171.754757][ T5926] [ 171.758056][ T5926] Kernel Offset: disabled [ 171.762389][ T5926] Rebooting in 86400 seconds..