last executing test programs: 7.126833576s ago: executing program 3 (id=4): openat(0xffffffffffffff9c, 0x0, 0x105042, 0x1db) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = add_key$user(0x0, &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000480), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r3, 0x0, r3}, 0x0, 0x0, &(0x7f0000000000)={0x0}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$kcm(0x2b, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000300)='scsi_dispatch_cmd_start\x00'}, 0x18) r4 = syz_open_dev$sg(0x0, 0x0, 0x401) ioctl$SG_IO(r4, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x3, 0x0, @scatter={0x0, 0x3, 0x0}, &(0x7f0000000240)="a28d7a", 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000b98bc2c900000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x16, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x2000000, 0x0, 0x0, &(0x7f0000000380), 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) 6.026503842s ago: executing program 3 (id=5): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0103000000a555daf27d16cc9692b569a7a6cac600000000004e0000000e0001006e657464657673696d0000000f"], 0x34}}, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000954dc3febb5485393114380ceadb65bb"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x2}, 0x94) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f00000000c0)={'mpc624\x00', [0x8001, 0x4, 0x1, 0x5, 0x2000067, 0xcc7, 0x8, 0x7, 0x80000000, 0x4, 0xfffffffe, 0x1, 0x820, 0x1, 0x6, 0xfffffeff, 0x979d, 0x1a44d, 0xf7ffffe3, 0x40000003, 0x89, 0x2, 0xf27, 0x20001e58, 0xfffffbff, 0x4, 0x3c, 0x8, 0x9, 0x10000, 0xfffffff8]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5}, 0x10) open(&(0x7f0000000200)='./file0\x00', 0xc0, 0x0) unlinkat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000380)='./file2\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x1, 0x121b, &(0x7f00000006c0)="$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") open(&(0x7f0000000080)='./bus\x00', 0x147c7c, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r7 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) pwritev2(r7, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x1e) setresuid(0x0, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000300)='logon\x00', 0x0, &(0x7f0000000380)='fscrypt:', 0x0) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x10000, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) 5.516302941s ago: executing program 0 (id=1): syz_usb_connect(0x2, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000005", 0x24) 5.419572789s ago: executing program 1 (id=2): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0xa, 0x5, 0x7, 0xc1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r0, &(0x7f0000000000), 0x0}, 0x20) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x5, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1a}}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="180000007000"/24], 0x18}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="98f4809588189a7ceedf8dd603de58f8128937c25c9868a7d0b9d98801ee6755b29ce89c63e541883df9f2911ec5ffc3f425e896209a28bffb62126112949607b9a41599c33b27a56765dde9676ba488231e7f6542032df074d8f1c264f06d073e2e8cfbb156fff2ea59f8a0a36f04817c073beb42c6e0252d7833051d2a22516e835819e9", @ANYRES32, @ANYRESHEX, @ANYRES16=r1], 0x48) r3 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000000)=0x60) recvmsg(r3, &(0x7f0000000580)={&(0x7f00000003c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000c00)=""/144, 0x90}, {&(0x7f0000000cc0)=""/226, 0xe2}, {&(0x7f0000000dc0)=""/182, 0xb6}, {&(0x7f0000000180)=""/3, 0x3}, {&(0x7f0000000e80)=""/204, 0xcc}], 0x5, &(0x7f0000000300)=""/39, 0x27}, 0x40000000) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001080), r4) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000001180)={&(0x7f0000001040), 0xc, &(0x7f0000001140)={&(0x7f00000010c0)={0x80, r5, 0x0, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3ae}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x20, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x40}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000fc0)=@o_path={&(0x7f0000000f80)='./file0\x00', 0x0, 0x0, r2}, 0x18) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000000c0)='kmem_cache_free\x00', r7}, 0x18) r8 = socket(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f0000000200)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@nodelalloc}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000600)="$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") eventfd(0x4) connect$netlink(r8, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000240), 0x1, 0x4bf, &(0x7f0000000540)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000280)={0x100000000007, 0x4, 0x800077, 0x8, 0x6, 0x6, 0x1000, 0xf67, 0xfffffffc}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r9, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3400000012000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="000000000000000014003517f8ed0e4d0077673000"/33], 0x34}}, 0x0) 5.15025824s ago: executing program 2 (id=3): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40840}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x30, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1000000}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0xefffffff]}]}]}, 0x30}}, 0x0) 4.539821317s ago: executing program 2 (id=6): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x491, 0x0, 0x7fffffff}]}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0xfffe, 0x0, @empty, 0x4}, {0xa, 0x0, 0x0, @loopback, 0xfffffffc}, r4, 0x400}}, 0x48) write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f0000000d40)={0x16, 0x98, 0xfa00, {0x0, 0x2, r4, 0x30, 0x1, @ib={0x1b, 0x8000, 0x3, {"3f8c0d6cf777eaa6ace6d3ec00ed4771"}, 0x500e, 0x0, 0xf}}}, 0xa0) r5 = syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000002c0)={[{}]}, 0x1, 0x232, &(0x7f0000000000)="$eJzKKC4sZmdgYPj7sSaZgUGAAQRYGEQYLjAwMrAwMDDIM4KFGD4yQeipUPomlGaDyl+B0r5Q8XYo/de8KiKKgYExU+meGdMB8RRFRgEGHpGvpx4wJDPwxzJYzvNecykoc8pVobdL94PUe4VWbmJgVE/hXzRnwwSnmbxgYxkjo5DNYT4gM4sDZBADA8PkPxH3HrBIMoggmSXK8U/sVMvyVWad9xlmdExLY2A0mMXBwMCgd0R3pp0BbzcT1MziyqrsxJyc1KLiAwyo5k9m3M+kyAhSd+bv1eAHjHYM3bEMjAxyG/zVFn/7I1W5cVN95PSqiJqp3U03l66PY9im//eKidT7iRlh/x8cEtSyyMv/ME9G6fvmhjkfauqemDh2NirP5W+9/Pfd+5ja4gQ1psfiXYVs/AluWjWfnJ3cLB/PTa9u31KsuCArzWXisakX/yYcX8vAMPnCE1t9BgaGDSDnulXOjbnrFi/ItUz9fN2bFwwHoz5PZGBkZGBgYmCYGbZzD7K/yhugkcHAzMDAoMIAUsTCkJaZk2rgwcDIwMzAws6ADGCqmRg4wKr0kvNzUtoZGMFJAKxtOQML3AzDxwys/CDlII7RYwZWuIyxRQPMyHYorQKlPaD0cij9GErLoyUbFrAJ/VCeRgMDAxtDReJ//iJDNgYGhorEkpIiQ4hYSUmREVzMSABuMxPU1rlMqJ47zsQwCkbBKBgFo2AUjIJRMApGwSgYBSMZAAIAAP//kpC1eQ==") syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006325a640402000207265970000010902240001000000000904000002214c6a0009050702000000da000905"], 0x0) r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x1fc) getdents(r6, &(0x7f0000001fc0)=""/184, 0xb8) ioctl$PPPIOCSMRU1(r6, 0x40047452, &(0x7f0000000300)=0x8) r7 = syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) syz_usb_control_io(r7, 0x0, &(0x7f0000001200)={0x84, &(0x7f0000000e00)={0x0, 0x0, 0x4, "d49332e8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000014007bf1480000000000690046000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a80000000060a0b0400000000000000000200000054000480500001800a000100696e6e657200000040000280080002400000001a0800034000000007080004400000000f08000140000000001c000580091401006d657461000000000c00028008000240000000040900010073797a30000000000900020073797a32"], 0xa8}}, 0x0) close(0xffffffffffffffff) ioctl$FICLONERANGE(r6, 0x4020940d, &(0x7f00000003c0)={{r5}, 0x8ce, 0xffffffff, 0x1ff}) syz_emit_ethernet(0x3c, &(0x7f0000000680)={@local, @random="d8be17d19221", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x24, 0x2e, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x2, 0x0, 0xe7}, {"c06712ba6d7e"}}}}}}, 0x0) 4.232205581s ago: executing program 1 (id=7): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001000010700000000e9ffffff0a0000000c0002"], 0x20}, 0x1, 0x0, 0x0, 0x4046014}, 0x400c0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}}, 0x0) socket(0x18, 0x2, 0x5) r2 = socket$rxrpc(0x21, 0x2, 0xa) r3 = socket$rxrpc(0x21, 0x2, 0xa) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000000)='./bus\x00', 0x300000a, &(0x7f0000000080)={[{@nodatacow}, {@thread_pool={'thread_pool', 0x3d, 0x3}}, {@nodiscard}, {@clear_cache}, {@ssd_spread}, {@clear_cache}, {@nobarrier}, {@thread_pool={'thread_pool', 0x3d, 0x8}}, {@nospace_cache}, {@enospc_debug}, {@ssd_spread}, {@nossd}]}, 0x3, 0x55a3, &(0x7f000000e0c0)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r4, 0x0, 0x0, 0x88ffff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff) ioctl$BTRFS_IOC_BALANCE_V2(r5, 0xc4009420, &(0x7f0000000b80)={0x2, 0x1, {0x3ff, @struct={0xe, 0x3ff}, 0x0, 0x1, 0x5c9, 0x2, 0xffffffffffffff99, 0x6bd, 0x21, @struct={0x733, 0x2}, 0x0, 0xb83c, [0xfffffffffffffd6e, 0x20000000, 0x2, 0x0, 0x6, 0x7]}, {0x7fff, @usage=0x7189, 0x0, 0x3, 0xffffffff, 0xcc, 0xb, 0x4, 0x20, @usage=0x400000000000004, 0x9, 0x372f2380, [0x4, 0x10001, 0xd, 0x1d52b6d3, 0x7e, 0x5]}, {0x4000000000000, @usage=0xfff, 0x0, 0x80000000000629, 0x6, 0x0, 0x80008, 0x8, 0x300, @struct={0x0, 0x3}, 0xb31, 0x1, [0xffffffffffffffd1, 0xa, 0x7, 0xe9, 0x9, 0x1]}, {0x2, 0x745, 0x9}}) connect$rxrpc(r3, &(0x7f0000000080)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) connect$rxrpc(r2, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x400000000000235, 0x0) 3.98836455s ago: executing program 3 (id=8): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f27, 0x5, 0x2, 0x401, 0xfffffffd, 0xcc7, 0xff7, 0x5c95239c, 0x1, 0x3ff, 0x6, 0x1600, 0x1, 0x1, 0x9, 0xe1cb, 0x6, 0x4, 0x10, 0x395, 0x8000008b, 0xfffffffe, 0xb, 0xfffffffe, 0xffffeadb, 0x0, 0x3c, 0x0, 0x4, 0x2, 0xdffffffa]}) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000340)='sourc\x89L\xb2\xa2@n\xef\xb4\xb5\x87\x05\\\xff\x88\xc2\x00\x00X\a\xe6\xef\xfc\xbf\x1eE\xc9\x8d\xd2\x8c\xea\x8fi\x83\xc5\xb9N\xfa9\x1b\x9f\xa0\xf6\xbb\x97;\xf5\xea\xee\a\x00\x00\x00\x00\x00\x00\x00\x88v\v,\xf1\xe5\xb6\x9f\xf4\xcd\xf1e\xc6l\xb9\xe0;\xf03\x11\x8b3\x95\xd9\xa3\xbc\x96\x96\xad\x811\xa7\xcel\xb2^{\xbd\xfb\xe9n\x8d\x1bd\x86l3\t\xbf\x98\x83.\xcf\xd2H\x9ebP>\xf5G\x9b\x17\x92\x03\xfd\a\x82B\x16\x86\xf1=\xeaR\xf8d\xa6\b\x9a\xd8@\x10\xa2K4\xd7\a\xc8\x0e\xcf\xac\xc9D6\x1eH\xf7 \x1f\xcd\xb2\x18\xd1IA\xc3Bo\x8cc\x11\xdc\x17\xc1\xc2\x19\x92>\xa2.\x8f\xd0)\xe4\x87\'\x05\x00\x00\x00\x00\x00\x00\x00w\xc9\xee9\x91\x9d\x9d~2|+\xf4_\f\x00'/221, &(0x7f0000000540)='c:::\x00\xc9,\xfe$l\n\xfb%J/\xe1\xcc\x8a\x1f\x9b\xc8\x15\xd0\xa7~\x9a\xbb\xc8\x8e\xa7\xd5_\xa1\x8b\xdf\x05\xc7\xce\x93>\xfd\xa2\x11\x81O\xa9\x96*8\'9q\x1f\x02ItP(\xd4\xcf\xe4\xe0/Ht\x0en\x008v\x9b\x89%j\b\x8f\x1f\x04\xda(\x926c\x181\xcb&\xc22\x98\xe2%\x8a\x90\x9b\vzh\x9e\x98!I!V\xbe\xba\x91\xd9\xe7L\xd4\x91\x9a\xd8\xb9J\x8b:\xd4@\x18] \x03\x91\x9aBGT\xbd\x04\xbf\x95\xa4\xd3\x1aW\x026\xae\xc4\x96\xb9\xc8n\x91\"\':\xbd5\xa7G\b\x97`;\xe42-iB\xdb\xbc\x9f\\[\xdf\xadc\x96\f7\x14\xd1\x0e\x14\xe3\x00\x1cn\x9b\x10\xe6\xafE-\bm\x06\xea\x03\xa4\a\xd8~J}c\xa9\xb0\xdaB\xab\xbe\xc25]i\x11V}h', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r8 = socket$inet(0x2, 0xa, 0x7e0c) ioctl$sock_inet_SIOCSARP(r8, 0x8954, 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000880)='\xf5\xfc\xd2\xec]\x95zx8*\xa2d\x11\xb5\xb1\x01\x00\x00\x00\xe49{\x8a{\x81s\xea$\xdfg\xb1\x03DY!\x97\xadM\xd7\xff\x8a\xcd[>\x12e\xc3]d8\xba\x8ec\x00\x00\x00\x00\x00\x00\x00\xa0\xe2\xd5y\xec\x90\x00\x98Y\x91\x19\x16\x89\xd0\x1a\xad\xcd\xd6\xd0\xc6\xb9\xeb\x95\xd3\x9cl\x9cu#\xb4\xee\xe5\x9d\t\fV\xd4\xda\xfc`2?\x15P\xba\x14b\x1c\xcc\xd5\xb9jA$s\xb9g3\x15M\xd9\xb9 \xca[\xc7\xec\xa9;\xee\x01\xc9\xc4\x1f\xc3\xe4\xfa\xd3fU\x0e\x86\xc8\xa7\xaf\xaf\x04p\xa3\x8bb\xbf\\\xdb\x83\x00\x96sy\x14\x1eo\xcc9&\x946\xf9\xf5v\xee\xb5m$;\x01\xb8\xeau\x00\xd1S=\x920H\xc2z\xb5\xbe\x95\xef\xeb\xd1\xc8\xa1\xba\xach\xbef\xa8\x86\xc2\x18\x9cC\x15\x9c^\xcf\xe9\xbcp\xb4Ff\x00\x9d>p\"\x19\xd8}|~\xae\xdb\a59f\xb8?\xba\xf2\x8e\xa5y\\\xf0\fkd??-\x983\xf3\x19\xc7\xc0/\xe9\x1a\x80=\xa72)\xd2\x00'/277, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) prctl$PR_SET_MM_MAP(0x3c, 0xe, 0x0, 0x42) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 1.954516828s ago: executing program 3 (id=9): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000002ac0)={0x3, &(0x7f0000000080)=[{0x15, 0x0, 0x1, 0xfc004000}, {0x24, 0xff}, {0x6, 0x0, 0x0, 0x2b}]}) ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(r0, 0x40044104, &(0x7f0000000040)=0xf) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) prctl$PR_SET_PTRACER(0x59616d61, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000100)={0x3, &(0x7f0000000280)=[{0x6c, 0x2}, {0x1, 0x0, 0x6}, {0x6, 0x6c, 0x5, 0x44ac}]}) 1.5381495s ago: executing program 0 (id=10): socket(0x10, 0x3, 0x0) userfaultfd(0x80800) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x7c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x7}]}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0xf3}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x2b2}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$tipc(0x1e, 0x5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x2000000, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = userfaultfd(0x80801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) r5 = syz_open_dev$usbmon(&(0x7f0000000080), 0x7, 0x100) ioctl$MON_IOCX_GET(r5, 0x400c9206, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x64) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/zoneinfo\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f00000004c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x2}, @l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}}}}, 0xf) 61.230925ms ago: executing program 1 (id=11): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRES8=r0], 0x2c}, 0x1, 0x0, 0x0, 0x42812}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x6}, {0x66, 0x0, 0x0, 0x80ffffff}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 0s ago: executing program 2 (id=12): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x54, r0, 0x8de13c6b70ae92c3, 0x41003, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0xfffffe62, 0x5, 0xe}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa3}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x34}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.214' (ED25519) to the list of known hosts. [ 56.470513][ T5748] cgroup: Unknown subsys name 'net' [ 56.628910][ T5748] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 58.027831][ T5748] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 60.044035][ T5769] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 60.063250][ T5769] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 60.068675][ T5766] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 60.082021][ T5767] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 60.089800][ T5769] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 60.090514][ T5767] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 60.105476][ T5769] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 60.105644][ T5766] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 60.113375][ T5769] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 60.123935][ T5766] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 60.127753][ T5769] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 60.134076][ T5766] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 60.141226][ T5769] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 60.147727][ T5766] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 60.154671][ T5769] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 60.163633][ T5766] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 60.182030][ T5766] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 60.189382][ T5766] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 60.197222][ T5769] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 60.209980][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 60.224112][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 60.238342][ T5766] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 60.255285][ T5766] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 60.270838][ T5766] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 60.565695][ T5759] chnl_net:caif_netlink_parms(): no params data found [ 60.633892][ T5761] chnl_net:caif_netlink_parms(): no params data found [ 60.747920][ T5758] chnl_net:caif_netlink_parms(): no params data found [ 60.795140][ T5761] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.802442][ T5761] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.810142][ T5761] bridge_slave_0: entered allmulticast mode [ 60.817547][ T5761] bridge_slave_0: entered promiscuous mode [ 60.825966][ T5759] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.833111][ T5759] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.840238][ T5759] bridge_slave_0: entered allmulticast mode [ 60.848058][ T5759] bridge_slave_0: entered promiscuous mode [ 60.890215][ T5761] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.897370][ T5761] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.904809][ T5761] bridge_slave_1: entered allmulticast mode [ 60.911370][ T5761] bridge_slave_1: entered promiscuous mode [ 60.918381][ T5759] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.925698][ T5759] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.933151][ T5759] bridge_slave_1: entered allmulticast mode [ 60.939731][ T5759] bridge_slave_1: entered promiscuous mode [ 61.033214][ T5761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.046100][ T5759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.055717][ T5768] chnl_net:caif_netlink_parms(): no params data found [ 61.066786][ T5758] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.074020][ T5758] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.081112][ T5758] bridge_slave_0: entered allmulticast mode [ 61.087996][ T5758] bridge_slave_0: entered promiscuous mode [ 61.096179][ T5758] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.103538][ T5758] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.110765][ T5758] bridge_slave_1: entered allmulticast mode [ 61.117939][ T5758] bridge_slave_1: entered promiscuous mode [ 61.126773][ T5761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.147627][ T5759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.219537][ T5759] team0: Port device team_slave_0 added [ 61.228738][ T5758] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.240722][ T5758] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.251866][ T5761] team0: Port device team_slave_0 added [ 61.260486][ T5761] team0: Port device team_slave_1 added [ 61.280737][ T5759] team0: Port device team_slave_1 added [ 61.351692][ T5759] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.358852][ T5759] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.384791][ T5759] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.399036][ T5758] team0: Port device team_slave_0 added [ 61.407805][ T5758] team0: Port device team_slave_1 added [ 61.414204][ T5761] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.421141][ T5761] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.447451][ T5761] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.460276][ T5761] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.468733][ T5761] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.494833][ T5761] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.515509][ T5759] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.522457][ T5759] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.548691][ T5759] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.593162][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.600507][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.607938][ T5768] bridge_slave_0: entered allmulticast mode [ 61.614567][ T5768] bridge_slave_0: entered promiscuous mode [ 61.631939][ T5758] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.638974][ T5758] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.665218][ T5758] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.679158][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.686540][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.693712][ T5768] bridge_slave_1: entered allmulticast mode [ 61.700610][ T5768] bridge_slave_1: entered promiscuous mode [ 61.717908][ T5758] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.724988][ T5758] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.751000][ T5758] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.818332][ T5761] hsr_slave_0: entered promiscuous mode [ 61.824724][ T5761] hsr_slave_1: entered promiscuous mode [ 61.836308][ T5759] hsr_slave_0: entered promiscuous mode [ 61.842442][ T5759] hsr_slave_1: entered promiscuous mode [ 61.848638][ T5759] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.856830][ T5759] Cannot create hsr debugfs directory [ 61.875657][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.887533][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.968673][ T5768] team0: Port device team_slave_0 added [ 61.978173][ T5768] team0: Port device team_slave_1 added [ 62.012248][ T5758] hsr_slave_0: entered promiscuous mode [ 62.019261][ T5758] hsr_slave_1: entered promiscuous mode [ 62.025599][ T5758] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.033399][ T5758] Cannot create hsr debugfs directory [ 62.101627][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.108608][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.135399][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.173883][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.180828][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.207107][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.213459][ T5766] Bluetooth: hci2: command tx timeout [ 62.283132][ T5766] Bluetooth: hci0: command tx timeout [ 62.288847][ T5080] Bluetooth: hci1: command tx timeout [ 62.321224][ T5768] hsr_slave_0: entered promiscuous mode [ 62.328242][ T5768] hsr_slave_1: entered promiscuous mode [ 62.334761][ T5768] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.342315][ T5768] Cannot create hsr debugfs directory [ 62.363182][ T5080] Bluetooth: hci3: command tx timeout [ 62.467610][ T5759] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 62.484572][ T5759] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 62.508182][ T5759] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 62.518896][ T5759] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 62.590636][ T5761] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.601411][ T5761] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.628622][ T5761] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.654005][ T5761] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.686635][ T5758] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.700901][ T5758] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.730537][ T5758] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.761244][ T5758] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.818540][ T5768] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 62.828118][ T5768] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 62.838048][ T5768] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 62.849283][ T5768] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 62.957876][ T5759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.972569][ T5761] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.994393][ T5758] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.036310][ T5761] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.047816][ T5759] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.062033][ T1133] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.069420][ T1133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.087918][ T1133] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.095002][ T1133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.118852][ T5758] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.136107][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.143266][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.155156][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.162231][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.195177][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.202273][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.212529][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.219625][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.342173][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.403774][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.437741][ T1133] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.444892][ T1133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.519268][ T1133] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.526497][ T1133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.641917][ T5759] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.739264][ T5759] veth0_vlan: entered promiscuous mode [ 63.787557][ T5758] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.808177][ T5759] veth1_vlan: entered promiscuous mode [ 63.834653][ T5761] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.924222][ T5759] veth0_macvtap: entered promiscuous mode [ 63.953222][ T5759] veth1_macvtap: entered promiscuous mode [ 63.971079][ T5761] veth0_vlan: entered promiscuous mode [ 63.978470][ T5758] veth0_vlan: entered promiscuous mode [ 64.004631][ T5758] veth1_vlan: entered promiscuous mode [ 64.011363][ T5761] veth1_vlan: entered promiscuous mode [ 64.019991][ T5759] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.039847][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.057541][ T5759] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.070257][ T5759] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.079804][ T5759] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.088669][ T5759] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.097574][ T5759] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.178732][ T5761] veth0_macvtap: entered promiscuous mode [ 64.224461][ T5761] veth1_macvtap: entered promiscuous mode [ 64.247888][ T5768] veth0_vlan: entered promiscuous mode [ 64.263624][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.272387][ T5758] veth0_macvtap: entered promiscuous mode [ 64.278712][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.297036][ T5080] Bluetooth: hci2: command tx timeout [ 64.318545][ T5758] veth1_macvtap: entered promiscuous mode [ 64.323024][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.329998][ T5768] veth1_vlan: entered promiscuous mode [ 64.339761][ T5761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.344146][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.351183][ T5761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.367709][ T5080] Bluetooth: hci1: command tx timeout [ 64.367916][ T5080] Bluetooth: hci0: command tx timeout [ 64.381045][ T5761] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.406441][ T5761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.416980][ T5761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.428326][ T5761] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.440462][ T5761] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.450109][ T5761] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.459617][ T5766] Bluetooth: hci3: command tx timeout [ 64.462733][ T5761] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.474097][ T5761] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.502431][ T5758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.517883][ T5758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.529234][ T5758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.539880][ T5758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.551675][ T5758] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.581408][ T5758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.622370][ T5758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.633963][ T5758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.644828][ T5758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.656359][ T5758] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.711715][ T5758] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.728625][ T5758] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.742162][ T5758] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.755340][ T5758] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.769933][ T5768] veth0_macvtap: entered promiscuous mode [ 64.827144][ T5768] veth1_macvtap: entered promiscuous mode [ 65.553797][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.577447][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.593492][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.603985][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.614248][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.624747][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.636392][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.662309][ T1133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.673850][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.688438][ T1133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.697173][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.707679][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.718141][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.729546][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.740190][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.751445][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.774431][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.782273][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.819750][ T5768] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.828906][ T5768] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.838074][ T5768] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.846924][ T5768] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.876992][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.895827][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.899103][ T1323] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.929102][ T1323] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.974196][ T5853] syz.3.5[5853]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 66.037719][ T1323] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.050042][ T5853] loop3: detected capacity change from 0 to 8192 [ 66.065775][ T1323] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.080616][ T5853] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 66.107104][ T27] audit: type=1800 audit(1765635381.781:2): pid=5853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5" name="bus" dev="loop3" ino=1048586 res=0 errno=0 [ 66.237132][ T1133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.275342][ T1133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.372856][ T5766] Bluetooth: hci2: command tx timeout [ 66.442899][ T5766] Bluetooth: hci0: command tx timeout [ 66.448395][ T5080] Bluetooth: hci1: command tx timeout [ 66.471515][ T5857] loop1: detected capacity change from 0 to 1024 [ 66.479765][ T5857] ======================================================= [ 66.479765][ T5857] WARNING: The mand mount option has been deprecated and [ 66.479765][ T5857] and is ignored by this kernel. Remove the mand [ 66.479765][ T5857] option from the mount to silence this warning. [ 66.479765][ T5857] ======================================================= [ 66.528648][ T51] Bluetooth: hci3: command tx timeout [ 66.534031][ T5855] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 66.534108][ T5855] bridge_slave_1: left allmulticast mode [ 66.534124][ T5855] bridge_slave_1: left promiscuous mode [ 66.535056][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.564168][ T5857] EXT4-fs: Ignoring removed bh option [ 66.570246][ T5857] EXT4-fs: inline encryption not supported [ 66.611450][ T5857] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 66.687870][ T5855] bridge_slave_0: left allmulticast mode [ 66.704596][ T5855] bridge_slave_0: left promiscuous mode [ 66.710529][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.813669][ T5857] EXT4-fs error (device loop1): ext4_map_blocks:608: inode #3: block 2: comm syz.1.2: lblock 2 mapped to illegal pblock 2 (length 1) [ 66.864492][ T5857] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 66.874764][ T5857] EXT4-fs error (device loop1): ext4_map_blocks:608: inode #3: block 48: comm syz.1.2: lblock 0 mapped to illegal pblock 48 (length 1) [ 66.892211][ T5857] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 66.905782][ T5857] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.2: Failed to acquire dquot type 0 [ 66.920401][ T5857] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5916: Corrupt filesystem [ 66.959131][ T5857] EXT4-fs error (device loop1): ext4_evict_inode:252: inode #11: comm syz.1.2: mark_inode_dirty error [ 66.986643][ T5857] EXT4-fs warning (device loop1): ext4_evict_inode:255: couldn't mark inode dirty (err -117) [ 67.013238][ T5857] EXT4-fs (loop1): 1 orphan inode deleted [ 67.051457][ T5857] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.073427][ T60] EXT4-fs error (device loop1): ext4_map_blocks:608: inode #3: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 67.120330][ T60] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 67.139760][ T60] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u4:4: Failed to release dquot type 0 [ 67.298264][ T5864] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 67.308130][ T5857] EXT4-fs error (device loop1): ext4_map_blocks:608: inode #2: block 16: comm syz.1.2: lblock 0 mapped to illegal pblock 16 (length 1) [ 67.325460][ T1133] EXT4-fs error (device loop1): ext4_map_blocks:608: inode #3: block 2: comm kworker/u4:5: lblock 2 mapped to illegal pblock 2 (length 1) [ 67.374914][ T1133] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 67.385913][ T1133] EXT4-fs error (device loop1): ext4_write_dquot:6913: comm kworker/u4:5: Failed to commit dquot type 0 [ 67.408206][ T1133] Quota error (device loop1): dquot_write_dquot: Can't write quota structure (error -117). Quota may get out of sync! [ 67.477401][ T5864] loop2: detected capacity change from 0 to 8 [ 67.528028][ T5758] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.537909][ T5864] SQUASHFS error: xz decompression failed, data probably corrupt [ 67.550831][ T5864] SQUASHFS error: Failed to read block 0x108: -5 [ 67.560869][ T5758] EXT4-fs error (device loop1): __ext4_get_inode_loc:4489: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 67.561438][ T5864] SQUASHFS error: Unable to read metadata cache entry [106] [ 67.591662][ T5864] SQUASHFS error: Unable to read inode 0x11f [ 67.604173][ T5758] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5916: Corrupt filesystem [ 67.633067][ T5758] EXT4-fs error (device loop1): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 67.759086][ T5759] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 67.769423][ T5759] FAT-fs (loop3): Filesystem has been set read-only [ 68.446688][ T5874] syz.3.8 uses obsolete (PF_INET,SOCK_PACKET) [ 68.763327][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 68.842884][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 68.843015][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 68.851745][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 69.671861][ T51] Bluetooth: hci2: command tx timeout [ 69.678164][ T51] Bluetooth: hci1: command tx timeout [ 69.731594][ T5080] Bluetooth: hci0: command tx timeout [ 69.737114][ T5766] Bluetooth: hci3: command tx timeout [ 69.752325][ T5825] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 69.997851][ T5825] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 70.018931][ T5825] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 70.044773][ T5825] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 33119, setting to 1024 [ 70.066761][ T5825] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 70.094479][ T5825] usb 3-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 70.112948][ T5825] usb 3-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 70.131553][ T5825] usb 3-1: Manufacturer: syz [ 70.155474][ T5825] usb 3-1: config 0 descriptor?? [ 70.189491][ T5864] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 70.226706][ T5825] smsusb:smsusb_probe: board id=9, interface number 0 [ 70.256203][ T5825] smsusb:siano_media_device_register: media controller created [ 70.275249][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 70.282766][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 70.290088][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 70.297347][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 70.304589][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 70.311829][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 70.321505][ T5871] loop1: detected capacity change from 0 to 32768 [ 70.329521][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 70.329605][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 70.329673][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 70.329743][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 70.329806][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 70.329868][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 70.375208][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 70.382510][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 70.389789][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 70.397069][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 70.404361][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 70.411642][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 70.419649][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 70.471844][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 70.479157][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 70.486432][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 70.493697][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 70.501141][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 70.510260][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 70.550711][ T5883] bond_slave_0: entered promiscuous mode [ 70.556600][ T5883] bond_slave_1: entered promiscuous mode [ 70.566094][ T5883] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 70.577318][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 70.584614][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 70.644788][ T5871] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.7 (5871) [ 70.657614][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 70.664931][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 70.672589][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 70.694028][ T5080] Bluetooth: Frame is too long (len 10, expected len 6) [ 70.707972][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 70.715277][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 70.723909][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 70.731173][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 70.738402][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 70.746164][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 70.753461][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 70.760740][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 70.768018][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 70.775293][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 70.827645][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 70.835130][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 70.845093][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 70.852542][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 70.861102][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 70.868522][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 70.876846][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 70.884840][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 70.893852][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 70.901134][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 70.908393][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 70.915652][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 70.922908][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 70.931948][ T5883] bond_slave_0: left promiscuous mode [ 70.938118][ T5883] bond_slave_1: left promiscuous mode [ 70.978647][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 70.985942][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 70.993210][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 71.000477][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 71.007750][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 71.156996][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 71.202915][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 71.210241][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 71.217527][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 71.272449][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 71.280897][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 71.288219][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 71.367022][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 71.385319][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 71.424463][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 71.431777][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 71.439062][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 71.474256][ T5825] smsmdtv:smscore_sendrequest_and_wait: sendrequest returned error -22 [ 71.474330][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 71.493394][ T5825] smsmdtv:smscore_set_device_mode: mode detect failed -22 [ 71.508904][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.517338][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 71.524636][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 71.529812][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.531887][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 71.545649][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 71.552926][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 71.562539][ T5825] smsmdtv:smscore_start_device: set device mode failed , rc -22 [ 71.573383][ T5825] smsusb:smsusb_init_device: smscore_start_device(...) failed [ 71.584441][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 71.591754][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 71.599042][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 71.608920][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 71.616215][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 71.623498][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 71.630781][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 71.638066][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 71.645353][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 71.652636][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 71.670849][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 71.678170][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 71.685458][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 71.692741][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 71.700004][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 71.707269][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 71.714535][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 71.724344][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 71.731629][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 71.738899][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 71.746154][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 71.753381][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 71.760595][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 71.767809][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 71.775766][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 71.783051][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 71.790312][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 71.797575][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 71.804833][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 71.812086][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 71.819341][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 71.828073][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 71.835350][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 71.842610][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 71.849865][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 71.858520][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 71.865805][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 71.873062][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 71.880331][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 71.887850][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 71.888934][ T5894] Zero length message leads to an empty skb [ 71.895096][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 71.895146][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 71.895195][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 71.895483][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 71.930088][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 71.931960][ T5895] netlink: 48 bytes leftover after parsing attributes in process `syz.2.12'. [ 71.937331][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 71.937387][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 71.961720][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 71.968989][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 71.976213][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 71.983428][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 71.991545][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 71.998815][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 72.006074][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 72.013323][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 72.021584][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 72.028856][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 72.036121][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 72.043382][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 72.051153][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 72.058431][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 72.065677][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 72.072909][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 72.080140][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 72.089521][ T5825] ------------[ cut here ]------------ [ 72.095102][ T5825] ODEBUG: free active (active state 0) object: ffff8880263d4688 object type: work_struct hint: do_submit_urb+0x0/0x360 [ 72.107986][ T5825] WARNING: CPU: 0 PID: 5825 at lib/debugobjects.c:518 debug_check_no_obj_freed+0x446/0x540 [ 72.118063][ T5825] Modules linked in: [ 72.123013][ T5825] CPU: 0 PID: 5825 Comm: kworker/0:5 Not tainted syzkaller #0 [ 72.131119][ T5825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 72.141757][ T5825] Workqueue: usb_hub_wq hub_event [ 72.146890][ T5825] RIP: 0010:debug_check_no_obj_freed+0x446/0x540 [ 72.153312][ T5825] Code: 4c 8b 4d 00 48 c7 c7 40 79 fc 8a 48 c7 c6 a0 75 fc 8a 48 c7 c2 c0 7a fc 8a 8b 0c 24 4d 89 f8 41 55 e8 3e b9 29 fd 48 83 c4 08 <0f> 0b 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc ff df ff 05 43 02 24 [ 72.173050][ T5825] RSP: 0018:ffffc90005106b38 EFLAGS: 00010282 [ 72.179144][ T5825] RAX: 2d2bac2a4f6f7100 RBX: ffffffff9708f1f8 RCX: 0000000000100000 [ 72.187199][ T5825] RDX: ffffc90017fba000 RSI: 00000000000b125f RDI: 00000000000b1260 [ 72.195257][ T5825] RBP: ffffffff8aa9ea40 R08: ffffc90005106727 R09: 1ffff92000a20ce4 [ 72.203334][ T5825] R10: dffffc0000000000 R11: fffff52000a20ce5 R12: ffff8880263d5000 [ 72.211328][ T5825] R13: ffffffff870c45f0 R14: ffff8880263d4000 R15: ffff8880263d4688 [ 72.219391][ T5825] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 72.222729][ T27] audit: type=1326 audit(1765635387.871:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5891 comm="syz.3.9" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f773798f749 code=0x0 [ 72.229310][ T5825] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 72.256491][ T5825] CR2: 00007f3bfffb6ad8 CR3: 000000000cb30000 CR4: 00000000003506f0 [ 72.264582][ T5825] Call Trace: [ 72.267886][ T5825] [ 72.270856][ T5825] slab_free_freelist_hook+0xd2/0x1b0 [ 72.276321][ T5825] ? smsusb_term_device+0x1ac/0x220 [ 72.281549][ T5825] __kmem_cache_free+0xba/0x1f0 [ 72.286585][ T5825] smsusb_term_device+0x1ac/0x220 [ 72.291657][ T5825] smsusb_probe+0x1708/0x1da0 [ 72.296475][ T5825] ? s2255_print_cfg+0x1b0/0x1b0 [ 72.301449][ T5825] ? smsusb1_detectmode+0x260/0x260 [ 72.306764][ T5825] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 72.312738][ T5825] ? pm_runtime_enable+0x192/0x2a0 [ 72.317876][ T5825] ? __pm_runtime_set_status+0x8ab/0xb80 [ 72.323672][ T5825] usb_probe_interface+0x5a4/0xb00 [ 72.329848][ T5825] ? usb_register_driver+0x3d0/0x3d0 [ 72.335366][ T5825] really_probe+0x25b/0xb40 [ 72.339899][ T5825] ? pm_runtime_barrier+0x14b/0x1c0 [ 72.345179][ T5825] __driver_probe_device+0x18c/0x330 [ 72.350492][ T5825] driver_probe_device+0x4f/0x420 [ 72.355647][ T5825] __device_attach_driver+0x2ca/0x520 [ 72.361050][ T5825] bus_for_each_drv+0x24b/0x2d0 [ 72.366260][ T5825] ? coredump_store+0x90/0x90 [ 72.370335][ T27] audit: type=1326 audit(1765635387.881:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5891 comm="syz.3.9" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f773798f749 code=0x0 [ 72.370944][ T5825] ? bus_find_device+0x320/0x320 [ 72.397416][ T5825] __device_attach+0x2b5/0x400 [ 72.402201][ T5825] ? device_attach+0x20/0x20 [ 72.406885][ T5825] ? __kmem_cache_free+0xba/0x1f0 [ 72.411936][ T5825] ? do_raw_spin_unlock+0x121/0x230 [ 72.417240][ T5825] bus_probe_device+0x180/0x260 [ 72.422110][ T5825] device_add+0x85b/0xc20 [ 72.427510][ T5825] usb_set_configuration+0x1a79/0x20c0 [ 72.433216][ T5825] usb_generic_driver_probe+0x8d/0x150 [ 72.438710][ T5825] usb_probe_device+0x13d/0x280 [ 72.443696][ T5825] ? usb_register_device_driver+0x230/0x230 [ 72.449616][ T5825] really_probe+0x25b/0xb40 [ 72.454198][ T5825] ? pm_runtime_barrier+0x14b/0x1c0 [ 72.459426][ T5825] __driver_probe_device+0x18c/0x330 [ 72.464806][ T5825] driver_probe_device+0x4f/0x420 [ 72.469864][ T5825] __device_attach_driver+0x2ca/0x520 [ 72.475318][ T5825] bus_for_each_drv+0x24b/0x2d0 [ 72.480193][ T5825] ? coredump_store+0x90/0x90 [ 72.484956][ T5825] ? bus_find_device+0x320/0x320 [ 72.489924][ T5825] __device_attach+0x2b5/0x400 [ 72.494755][ T5825] ? device_attach+0x20/0x20 [ 72.499366][ T5825] ? __kmem_cache_free+0xba/0x1f0 [ 72.504490][ T5825] ? do_raw_spin_unlock+0x121/0x230 [ 72.509720][ T5825] bus_probe_device+0x180/0x260 [ 72.514654][ T5825] device_add+0x85b/0xc20 [ 72.519014][ T5825] usb_new_device+0xa31/0x1630 [ 72.523901][ T5825] ? usb_disconnect+0x8a0/0x8a0 [ 72.529541][ T5825] ? _raw_spin_unlock_irq+0x23/0x50 [ 72.535233][ T5825] ? lockdep_hardirqs_on+0x98/0x150 [ 72.540465][ T5825] hub_event+0x2962/0x49c0 [ 72.545074][ T5825] ? hub_post_resume+0x120/0x120 [ 72.550039][ T5825] ? read_lock_is_recursive+0x20/0x20 [ 72.555482][ T5825] ? _raw_spin_unlock_irq+0x23/0x50 [ 72.560699][ T5825] ? process_scheduled_works+0x957/0x15b0 [ 72.566521][ T5825] ? process_scheduled_works+0x957/0x15b0 [ 72.572257][ T5825] process_scheduled_works+0xa45/0x15b0 [ 72.577935][ T5825] ? assign_work+0x400/0x400 [ 72.582551][ T5825] ? assign_work+0x39e/0x400 [ 72.587235][ T5825] worker_thread+0xa55/0xfc0 [ 72.591876][ T5825] kthread+0x2fa/0x390 [ 72.596023][ T5825] ? pr_cont_work+0x560/0x560 [ 72.600725][ T5825] ? kthread_blkcg+0xd0/0xd0 [ 72.605407][ T5825] ret_from_fork+0x48/0x80 [ 72.609841][ T5825] ? kthread_blkcg+0xd0/0xd0 [ 72.614929][ T5825] ret_from_fork_asm+0x11/0x20 [ 72.619736][ T5825] [ 72.622843][ T5825] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 72.630127][ T5825] CPU: 0 PID: 5825 Comm: kworker/0:5 Not tainted syzkaller #0 [ 72.637589][ T5825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 72.647653][ T5825] Workqueue: usb_hub_wq hub_event [ 72.652692][ T5825] Call Trace: [ 72.655972][ T5825] [ 72.658908][ T5825] dump_stack_lvl+0x16c/0x230 [ 72.663602][ T5825] ? show_regs_print_info+0x20/0x20 [ 72.668819][ T5825] ? load_image+0x3b0/0x3b0 [ 72.673347][ T5825] panic+0x2c0/0x710 [ 72.677263][ T5825] ? bpf_jit_dump+0xd0/0xd0 [ 72.681789][ T5825] ? ret_from_fork_asm+0x11/0x20 [ 72.686744][ T5825] __warn+0x2e0/0x470 [ 72.690722][ T5825] ? debug_check_no_obj_freed+0x446/0x540 [ 72.696432][ T5825] ? debug_check_no_obj_freed+0x446/0x540 [ 72.702139][ T5825] report_bug+0x2be/0x4f0 [ 72.706457][ T5825] ? debug_check_no_obj_freed+0x446/0x540 [ 72.712165][ T5825] ? debug_check_no_obj_freed+0x446/0x540 [ 72.717871][ T5825] ? debug_check_no_obj_freed+0x448/0x540 [ 72.723577][ T5825] handle_bug+0xcf/0x120 [ 72.727809][ T5825] exc_invalid_op+0x1a/0x50 [ 72.732297][ T5825] asm_exc_invalid_op+0x1a/0x20 [ 72.737138][ T5825] RIP: 0010:debug_check_no_obj_freed+0x446/0x540 [ 72.743459][ T5825] Code: 4c 8b 4d 00 48 c7 c7 40 79 fc 8a 48 c7 c6 a0 75 fc 8a 48 c7 c2 c0 7a fc 8a 8b 0c 24 4d 89 f8 41 55 e8 3e b9 29 fd 48 83 c4 08 <0f> 0b 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc ff df ff 05 43 02 24 [ 72.763052][ T5825] RSP: 0018:ffffc90005106b38 EFLAGS: 00010282 [ 72.769108][ T5825] RAX: 2d2bac2a4f6f7100 RBX: ffffffff9708f1f8 RCX: 0000000000100000 [ 72.777067][ T5825] RDX: ffffc90017fba000 RSI: 00000000000b125f RDI: 00000000000b1260 [ 72.785024][ T5825] RBP: ffffffff8aa9ea40 R08: ffffc90005106727 R09: 1ffff92000a20ce4 [ 72.792979][ T5825] R10: dffffc0000000000 R11: fffff52000a20ce5 R12: ffff8880263d5000 [ 72.800938][ T5825] R13: ffffffff870c45f0 R14: ffff8880263d4000 R15: ffff8880263d4688 [ 72.808895][ T5825] ? smsusb_onresponse+0x890/0x890 [ 72.814008][ T5825] ? smsusb_onresponse+0x890/0x890 [ 72.819113][ T5825] slab_free_freelist_hook+0xd2/0x1b0 [ 72.824479][ T5825] ? smsusb_term_device+0x1ac/0x220 [ 72.829666][ T5825] __kmem_cache_free+0xba/0x1f0 [ 72.834509][ T5825] smsusb_term_device+0x1ac/0x220 [ 72.839528][ T5825] smsusb_probe+0x1708/0x1da0 [ 72.844210][ T5825] ? s2255_print_cfg+0x1b0/0x1b0 [ 72.849136][ T5825] ? smsusb1_detectmode+0x260/0x260 [ 72.854324][ T5825] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 72.860206][ T5825] ? pm_runtime_enable+0x192/0x2a0 [ 72.865305][ T5825] ? __pm_runtime_set_status+0x8ab/0xb80 [ 72.870931][ T5825] usb_probe_interface+0x5a4/0xb00 [ 72.876041][ T5825] ? usb_register_driver+0x3d0/0x3d0 [ 72.881314][ T5825] really_probe+0x25b/0xb40 [ 72.885809][ T5825] ? pm_runtime_barrier+0x14b/0x1c0 [ 72.890992][ T5825] __driver_probe_device+0x18c/0x330 [ 72.896265][ T5825] driver_probe_device+0x4f/0x420 [ 72.901279][ T5825] __device_attach_driver+0x2ca/0x520 [ 72.906641][ T5825] bus_for_each_drv+0x24b/0x2d0 [ 72.911475][ T5825] ? coredump_store+0x90/0x90 [ 72.916137][ T5825] ? bus_find_device+0x320/0x320 [ 72.921068][ T5825] __device_attach+0x2b5/0x400 [ 72.925819][ T5825] ? device_attach+0x20/0x20 [ 72.930393][ T5825] ? __kmem_cache_free+0xba/0x1f0 [ 72.935414][ T5825] ? do_raw_spin_unlock+0x121/0x230 [ 72.940607][ T5825] bus_probe_device+0x180/0x260 [ 72.945448][ T5825] device_add+0x85b/0xc20 [ 72.949770][ T5825] usb_set_configuration+0x1a79/0x20c0 [ 72.955236][ T5825] usb_generic_driver_probe+0x8d/0x150 [ 72.960687][ T5825] usb_probe_device+0x13d/0x280 [ 72.965552][ T5825] ? usb_register_device_driver+0x230/0x230 [ 72.971454][ T5825] really_probe+0x25b/0xb40 [ 72.975954][ T5825] ? pm_runtime_barrier+0x14b/0x1c0 [ 72.981143][ T5825] __driver_probe_device+0x18c/0x330 [ 72.986424][ T5825] driver_probe_device+0x4f/0x420 [ 72.991446][ T5825] __device_attach_driver+0x2ca/0x520 [ 72.996813][ T5825] bus_for_each_drv+0x24b/0x2d0 [ 73.001653][ T5825] ? coredump_store+0x90/0x90 [ 73.006318][ T5825] ? bus_find_device+0x320/0x320 [ 73.011249][ T5825] __device_attach+0x2b5/0x400 [ 73.016003][ T5825] ? device_attach+0x20/0x20 [ 73.020581][ T5825] ? __kmem_cache_free+0xba/0x1f0 [ 73.025601][ T5825] ? do_raw_spin_unlock+0x121/0x230 [ 73.030804][ T5825] bus_probe_device+0x180/0x260 [ 73.035650][ T5825] device_add+0x85b/0xc20 [ 73.039974][ T5825] usb_new_device+0xa31/0x1630 [ 73.044755][ T5825] ? usb_disconnect+0x8a0/0x8a0 [ 73.049599][ T5825] ? _raw_spin_unlock_irq+0x23/0x50 [ 73.054788][ T5825] ? lockdep_hardirqs_on+0x98/0x150 [ 73.059980][ T5825] hub_event+0x2962/0x49c0 [ 73.064423][ T5825] ? hub_post_resume+0x120/0x120 [ 73.069349][ T5825] ? read_lock_is_recursive+0x20/0x20 [ 73.074714][ T5825] ? _raw_spin_unlock_irq+0x23/0x50 [ 73.079901][ T5825] ? process_scheduled_works+0x957/0x15b0 [ 73.085614][ T5825] ? process_scheduled_works+0x957/0x15b0 [ 73.091323][ T5825] process_scheduled_works+0xa45/0x15b0 [ 73.096878][ T5825] ? assign_work+0x400/0x400 [ 73.101462][ T5825] ? assign_work+0x39e/0x400 [ 73.106044][ T5825] worker_thread+0xa55/0xfc0 [ 73.110645][ T5825] kthread+0x2fa/0x390 [ 73.114701][ T5825] ? pr_cont_work+0x560/0x560 [ 73.119368][ T5825] ? kthread_blkcg+0xd0/0xd0 [ 73.123946][ T5825] ret_from_fork+0x48/0x80 [ 73.128353][ T5825] ? kthread_blkcg+0xd0/0xd0 [ 73.132930][ T5825] ret_from_fork_asm+0x11/0x20 [ 73.137697][ T5825] [ 73.140992][ T5825] Kernel Offset: disabled [ 73.145346][ T5825] Rebooting in 86400 seconds..