last executing test programs: 11.840582323s ago: executing program 0 (id=206): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x20, 0xcf, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff034}, {0x6, 0x0, 0x0, 0x4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x10008095, 0x0, 0x0) 11.579915872s ago: executing program 0 (id=207): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r0, &(0x7f00000006c0)=0x4) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r4 = socket(0x1e, 0x4, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f0000003240), 0x4000000000000e4, 0x0) 9.815040168s ago: executing program 0 (id=209): write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0x19, 0x1, {0x148, {0x2, 0x2, 0x100}, 0x8b, 0x0, 0x0, 0xfb, 0x1, 0x4000084, 0xbf43, 0x20000008000007, 0xa, 0x400000000008, 0x5, 0x2, 0xfffffffffffffffe, 0x4, 0x8, 0x8000000000408, 0xfffffffffffffff7, 0xfffffffffffffff7}}, 0xa0) r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x2) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r0, 0x5393, &(0x7f00000001c0)) 9.695536282s ago: executing program 0 (id=212): mkdirat(0xffffffffffffff9c, 0x0, 0x10) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000180)={[{@acl}, {@heartbeat_none}, {@dir_resv_level={'dir_resv_level', 0x3d, 0x3}}, {@coherency_full}, {@coherency_full}, {@localflocks}, {@coherency_full}, {@inode64}, {@err_cont}, {@journal_async_commit}]}, 0x1, 0x4426, &(0x7f0000008940)="$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") fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) mkdir(&(0x7f0000000ac0)='./file0\x00', 0x18b) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x2200040, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1d7) readahead(0xffffffffffffffff, 0x0, 0x0) 8.671879884s ago: executing program 0 (id=219): mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSBRKP(r4, 0x5425, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r5, 0x5408, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x2, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf"}) ioctl$TIOCGPGRP(r4, 0x5437, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x2) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) 7.441381863s ago: executing program 0 (id=227): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r1, 0x2) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="3800000040000701feffffff00000000037c2000040042801c0001800600060088470000100015"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc004) r3 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f00000000c0)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r4, 0xc0506617, &(0x7f0000000580)={@desc={0x1, 0x0, @desc1}, 0x40, 0x0, '\x00', @b}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r3, 0xc0506617, &(0x7f0000000140)={@desc, 0x40, 0x0, '\x00', @a}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r3, 0xc0406619, &(0x7f0000002240)={@desc={0x1, 0x0, @desc1}}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) clock_nanosleep(0x2, 0x0, &(0x7f0000000300)={r5, r6+60000000}, &(0x7f0000000340)) write$rfkill(0xffffffffffffffff, &(0x7f0000000140)={0x8, 0x6, 0x2}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b) syz_emit_ethernet(0x42, &(0x7f0000000280)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210104, @local, {[@timestamp_addr={0x44, 0x4, 0x4a}, @generic={0x7, 0x7, "04030e004b"}]}}, {{0x0, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0x0, 0x0, 0xfffe}}}}}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r7, 0x0) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc00000003010102000000000000000002000004dc0002800c00028005000100840000002c00018014000300fe80000000000000000000000000002f14000400000000000000000000000000000000011400018008000100ac1e010108000200ac1414aa0c00028005000100060000001400018008000100ffffffff08000200000000001400018008000100ac1414bb080002000a0101022c000180140003000000000000000000000000000000000114000400ff0100000000000000000000000000010c000280050001008800000006000340000400000c00028005000100060000000c00028005000100010000000c00198008000200", @ANYRES32=r0], 0xfc}, 0x1, 0x0, 0x0, 0x4050}, 0x40080c0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x150, 0x168, 0x9, 0x0, 0xb, 0x380, 0x250, 0x250, 0x380, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0x0, 0xff000000, 0xffffffff, 0xff000000], @ipv6=@private1, [0x0, 0x1fffffeff, 0xff000000, 0xffffff00], 0x4d6, 0x0, 0x0, 0x0, 0x10, 0x2}, {@ipv4=@remote, [0xff000000, 0xffffff00, 0xffffff00, 0xff], @ipv6=@local, [0x7f, 0xff000000, 0xffffff00, 0xff], 0x4d4, 0x34ff, 0x6c, 0x0, 0x12, 0x4}, {@ipv6=@mcast1, [0xffffffff, 0xffffffff, 0xffffffff, 0xff], @ipv6=@mcast2, [0xffffff00, 0x0, 0xffff00, 0xff000000], 0x4d2, 0x0, 0x0, 0x1, 0x0, 0xd}, {@ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}, [0xffffffff, 0xffffff00], @ipv4=@rand_addr=0x64010100, [0xffffffff, 0xffffff00, 0xffffffff], 0x4d4, 0x3502, 0x32, 0x0, 0x0, 0x6}], 0xa, 0x4}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) io_uring_setup(0x89a, &(0x7f0000000040)={0x0, 0x3cb1, 0x2, 0xa, 0x20002f3}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) capset(&(0x7f00000002c0)={0x20071026}, &(0x7f0000000380)={0x200, 0x7fff, 0x0, 0x0, 0x9, 0x2}) 7.126738783s ago: executing program 32 (id=227): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r1, 0x2) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="3800000040000701feffffff00000000037c2000040042801c0001800600060088470000100015"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc004) r3 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f00000000c0)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r4, 0xc0506617, &(0x7f0000000580)={@desc={0x1, 0x0, @desc1}, 0x40, 0x0, '\x00', @b}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r3, 0xc0506617, &(0x7f0000000140)={@desc, 0x40, 0x0, '\x00', @a}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r3, 0xc0406619, &(0x7f0000002240)={@desc={0x1, 0x0, @desc1}}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) clock_nanosleep(0x2, 0x0, &(0x7f0000000300)={r5, r6+60000000}, &(0x7f0000000340)) write$rfkill(0xffffffffffffffff, &(0x7f0000000140)={0x8, 0x6, 0x2}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b) syz_emit_ethernet(0x42, &(0x7f0000000280)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210104, @local, {[@timestamp_addr={0x44, 0x4, 0x4a}, @generic={0x7, 0x7, "04030e004b"}]}}, {{0x0, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0x0, 0x0, 0xfffe}}}}}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r7, 0x0) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc00000003010102000000000000000002000004dc0002800c00028005000100840000002c00018014000300fe80000000000000000000000000002f14000400000000000000000000000000000000011400018008000100ac1e010108000200ac1414aa0c00028005000100060000001400018008000100ffffffff08000200000000001400018008000100ac1414bb080002000a0101022c000180140003000000000000000000000000000000000114000400ff0100000000000000000000000000010c000280050001008800000006000340000400000c00028005000100060000000c00028005000100010000000c00198008000200", @ANYRES32=r0], 0xfc}, 0x1, 0x0, 0x0, 0x4050}, 0x40080c0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x150, 0x168, 0x9, 0x0, 0xb, 0x380, 0x250, 0x250, 0x380, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0x0, 0xff000000, 0xffffffff, 0xff000000], @ipv6=@private1, [0x0, 0x1fffffeff, 0xff000000, 0xffffff00], 0x4d6, 0x0, 0x0, 0x0, 0x10, 0x2}, {@ipv4=@remote, [0xff000000, 0xffffff00, 0xffffff00, 0xff], @ipv6=@local, [0x7f, 0xff000000, 0xffffff00, 0xff], 0x4d4, 0x34ff, 0x6c, 0x0, 0x12, 0x4}, {@ipv6=@mcast1, [0xffffffff, 0xffffffff, 0xffffffff, 0xff], @ipv6=@mcast2, [0xffffff00, 0x0, 0xffff00, 0xff000000], 0x4d2, 0x0, 0x0, 0x1, 0x0, 0xd}, {@ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}, [0xffffffff, 0xffffff00], @ipv4=@rand_addr=0x64010100, [0xffffffff, 0xffffff00, 0xffffffff], 0x4d4, 0x3502, 0x32, 0x0, 0x0, 0x6}], 0xa, 0x4}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) io_uring_setup(0x89a, &(0x7f0000000040)={0x0, 0x3cb1, 0x2, 0xa, 0x20002f3}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) capset(&(0x7f00000002c0)={0x20071026}, &(0x7f0000000380)={0x200, 0x7fff, 0x0, 0x0, 0x9, 0x2}) 6.576823271s ago: executing program 3 (id=236): mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSBRKP(r4, 0x5425, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r5, 0x5408, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x2, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf"}) ioctl$TIOCGPGRP(r4, 0x5437, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x2) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) 5.196466415s ago: executing program 3 (id=238): r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x2) getdents64(r0, &(0x7f0000000140)=""/46, 0x2e) getdents64(r0, 0xfffffffffffffffe, 0x29) 4.859629335s ago: executing program 2 (id=239): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls}, 0x43) 4.059387631s ago: executing program 1 (id=240): r0 = socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000000)=""/19) 3.995244023s ago: executing program 2 (id=241): syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f00000002c0)={[{@datacow}, {@rescan_uuid_tree}, {@compress_force}, {@space_cache_v2}, {@ssd}, {}, {@clear_cache}, {@nodiscard}]}, 0xfb, 0x50f9, &(0x7f0000005140)="$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") r0 = open$dir(&(0x7f0000000100)='./file1\x00', 0x0, 0x146) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000000)={0x50d015, 0x0, '\x00', 0x1, 0x0}) 2.803925471s ago: executing program 3 (id=242): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002880)=@delchain={0x440, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x414, 0x2, [@TCA_BPF_POLICE={0x410, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8000, 0x7a6, 0x9, 0x40, 0x59dc, 0xfffffff9, 0xfffffffa, 0x8, 0x0, 0x5, 0x5, 0xb5a2, 0x1, 0xf1, 0x4, 0x4, 0x0, 0xfffffff3, 0xc, 0xfffffffa, 0x2, 0x3, 0x2, 0x825e, 0xfffffffd, 0x4, 0x5, 0xecd5, 0x99, 0xfffffffa, 0xd125, 0x7, 0x47a, 0x5, 0x5, 0x3, 0x4, 0x6839, 0x2, 0x3, 0x0, 0xb, 0x5, 0x2, 0x4, 0x4, 0x2108, 0x81, 0x7, 0x100000, 0x9, 0x9, 0x2, 0x7ff, 0x6, 0x8, 0x4, 0x6, 0x0, 0xfffffff7, 0xd22, 0xb, 0x1e600000, 0x10000, 0xece6, 0x401, 0x9, 0x6, 0xa, 0x3, 0x7fff, 0x2dde, 0x10, 0x6, 0x3, 0x1, 0xffffffff, 0x19, 0x1, 0x7f, 0x6, 0x2, 0x10000, 0xb, 0x7, 0x0, 0x2, 0x1, 0x9000000, 0x7fffffff, 0x2, 0x0, 0x6, 0x0, 0x7, 0x80000001, 0xd05, 0x3, 0xcfd, 0x5, 0xa, 0x5, 0x6, 0x4, 0x6, 0x8, 0x3, 0x426, 0x7, 0x1, 0xfffffff7, 0x40, 0x10000, 0x5, 0x2, 0xe, 0x375, 0xd, 0x5b0, 0xb, 0x7402, 0x665, 0x7, 0xffff, 0x6, 0x37c, 0xffff, 0x0, 0x7, 0x0, 0x16, 0x7, 0x2, 0xd3, 0x0, 0x7, 0xffffff81, 0x9, 0x53e30bc1, 0x6, 0x3, 0xfffffffe, 0x5, 0x9, 0x2, 0x6, 0xe, 0x4, 0x5, 0x1, 0x8, 0x7, 0x5, 0x1, 0x401, 0x800, 0x7, 0x4, 0x2add, 0x6, 0xb9, 0x0, 0xffff, 0x0, 0x238, 0x1, 0x8001, 0xa0, 0x100, 0x6, 0xbc, 0x7, 0x8, 0x9, 0x9, 0x0, 0x1, 0xfffffff6, 0x0, 0xffffff9e, 0x100, 0x2, 0x8, 0x2, 0x7, 0x8, 0xc, 0xffffffff, 0x6, 0xd7e2, 0xa, 0x10, 0x4, 0xffffffff, 0xbda5, 0x6, 0x1, 0x6, 0x4, 0x1, 0xda, 0x53e280ba, 0x6, 0x8, 0x7ff, 0xfd7, 0xfffffffd, 0x3, 0x8, 0x7, 0x3, 0x17, 0x3, 0xffffffff, 0x0, 0xd3e8b765, 0x0, 0xf1, 0x7, 0xdde, 0xe, 0x142b, 0x10bf, 0x0, 0xeac5, 0x4, 0x6, 0x2, 0x5945, 0x40, 0x405, 0x9, 0x200, 0xfffffffb, 0x3, 0x1ea000, 0x0, 0x7, 0x2, 0xfffffff9, 0x3, 0x8, 0x4, 0x6, 0x1, 0x5, 0x1b0, 0xfef, 0x0, 0x5, 0x73, 0x4, 0xfffffff5, 0x10, 0x7fffffff, 0x4]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}]}]}}]}, 0x440}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 2.586536587s ago: executing program 2 (id=243): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x5) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, 0x0, 0x0, 0x48040, &(0x7f00000001c0)={0x11, 0x7, r3, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) 2.429591992s ago: executing program 1 (id=244): syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x6}, @hci_ev_le_phy_update_complete={{}, {0xe, 0xc9, 0x0, 0xcc}}}}, 0x9) 2.328018946s ago: executing program 3 (id=245): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002780)={0x2020}, 0x2020) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x51dc65f4d21e3dc) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000240)={0x80000001, 0x3, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x7fffffffffffffff, 0x6}) quotactl_fd$Q_GETFMT(r3, 0xffffffff80000400, r4, &(0x7f0000000280)) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000480)=[{{&(0x7f0000000200)={0xa, 0x4e24, 0x8001, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xa06}, 0x1c, 0x0}}], 0x1, 0x8044) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="0218000014000000000000000000000005000500000000000a00ffff00000000fe8000000000000000000000000000aa0000000000000000080012000000000003000000000000002600000000000000000000000000000002000002000000000000000000000000fc010000000000000000000000000000050006"], 0xa0}}, 0x0) 2.216461619s ago: executing program 1 (id=246): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x406, r0) setuid(0xee01) write$tun(r1, 0x0, 0xa2) 1.318554768s ago: executing program 1 (id=247): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xeb, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f0000000300)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback={0x0, 0xffffac1414aa}, [], "1e520b4c951ee12e"}}}}}}}, 0x0) 1.318029668s ago: executing program 2 (id=248): munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000000)={&(0x7f0000000400), 0x0}) r2 = dup3(r0, r1, 0x0) ioctl$MON_IOCX_GETX(r2, 0x4018920a, &(0x7f00000001c0)={&(0x7f00000012c0), &(0x7f0000002940)=""/4083, 0xff3}) 1.284045009s ago: executing program 3 (id=249): r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x2) getdents64(r0, &(0x7f0000000140)=""/46, 0x2e) getdents64(r0, 0xfffffffffffffffe, 0x29) 1.167830593s ago: executing program 1 (id=250): r0 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'comedi_parport\x00', [0x294, 0x2, 0x7fffffff, 0x8, 0x2f, 0x2006, 0xf1, 0x8, 0x80ffa, 0x2, 0x0, 0x8500, 0x1003, 0x1000004, 0xf, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ff, 0x200009ea, 0x20000010, 0x40000, 0x8, 0x4008, 0x746f, 0x8, 0x5, 0x8, 0x7a2e6ff0, 0x4, 0x7ffd]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) ioctl$COMEDI_CMD(r0, 0x80406409, 0x0) syz_usb_connect(0x6, 0x139, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x62, 0x23, 0x50, 0x40, 0x19d2, 0xff8c, 0x9a6e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x127, 0x1, 0x66, 0x2, 0x80, 0x40, "", [{{0x9, 0x4, 0xb2, 0x6, 0x3, 0xff, 0xff, 0xff, 0x9, [], [{{0x9, 0x5, 0x7, 0xc, 0x40, 0x43, 0x1, 0x9, [@generic={0x12, 0x21, "a9f46d7902442e520510350c60456f3e"}]}}, {{0x9, 0x5, 0x6, 0x11, 0x0, 0x7f, 0x1, 0x8, [@generic={0xe8, 0x24, "a5379586236e472d212076f1fe9bcf346247ce727bcf4fab89121e530892ff33615a52505fb3a302187e50f62a1c075facbba4c4e5ac744a53f6290ccff432fa8d871970ea868b81eb49c1506cb937302cd945c3b64d159785a436c505484d7d38534aad2c8543ffeca8bb757a0a515460124d9c9b4b9b9850d9c78994b7583a3662575fe01deb7571222935b52ea4a63d26294c8225379f6db49c1c15b06f9e1973be3a008b43f4d3d7a92d517fc2733d408dd6dcaedab228a96503fb57858335e71e6dc9746651ef90e792ce69e04fd885a4a38cb93050ee51bd6075f6b0b131139b032e89"}]}}, {{0x9, 0x5, 0x8, 0x8, 0x10, 0x2, 0xf, 0x6}}]}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x110, 0x0, 0x7f, 0x3, 0x10, 0x49}, 0x5, &(0x7f0000000380)={0x5, 0xf, 0x5}, 0x7, [{0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x2001}}, {0xa7, &(0x7f0000000440)=@string={0xa7, 0x3, "1eec03dd6ad98fe753f0270f25ce939401a891e14ee9ded1bd45980a32fe6b90734f4d692b0846f80553ca2094038ea916af359f4f3c18cd2bbc0f65116720e0cb189cfc1404654672ae778f46d5d7cc17918b8b60fa82f53d3e7fa0391ef5167569668f5e4e5fcb7093af5d529438a79b41fdae626739e1a4f26912dad9499eb55f3b93dc9ed208e77285d22638dc7abe9743c83594239f6de60904a6fd287c19a0332fd5"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x807}}, {0xcf, &(0x7f0000000540)=@string={0xcf, 0x3, "6b4c976d2457a9290335628ca02597a2e04237b3296984ec2bbc63db8584b3714939762b4a4b5abfcbd4c919378be9d152a22385e724f7a5c41db46434c72a9517e6569e75cb3c7c00daf3fa2930f830894dc5beb4a1a2fde3a324ec0259389261704164efb8762b32ef8977e8ed58274c59e3c743a649bfefa9bb092c5b3420bf17f58b8f5554c91e3cf338d53020a35a854e4e120e7719596fb1e33dba95715f8d8bda3da1da42f54c61a038abd9d3249c15c0737f684b69a38f6e3121b0c48056b93f1502f1eb85a1e49eaf"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x80a}}, {0x1c, &(0x7f0000000680)=@string={0x1c, 0x3, "6b73cc2eca0d53414c78d0f422eade412fce77daaafe5907bec0"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x2c01}}]}) 1.111187935s ago: executing program 2 (id=251): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$eJzs3T9oM2UcB/DvXRJf+75BXnURxD8gIloor5vg8rooFKQUEUGFioiL0gq1xa1xcnHQWaWTSxE3q6N0KS6K4FS1Q10ELQ4WBx0iybVS24ja1Jz0Ph+43l3vee73HLnvkyyXBGisq0muJ2klmU7SSVIcb3B3tVw93F2f2l5I+v0nfiqG7ar9ylG/K0l6SR5KslUWeamdrG4+s/fLzmP3vbnSuff9zaenJnqRh/b3dh8/eG/ujY9mH1z94qsf5opcT/dP13X+ihH/axfJLf9Fsf+Jol33CPgn5l/78OtB7m9Ncs8w/52UqV68t5Zv2OrkgXf/qu/bP355+yTHCpy/fr8zeA/s9YHGKZN0U5QzSartspyZqT7Df9O6XL68tPzq9ItLK4sv1D1TAeelm+w++smlj6+cyP/3rSr/wMU1yP+T8xvfDrYPWnWPBpiIO6rVIP/Tz63dH/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmHC6xztNEbeVj+obnkH5pL/qG5jucfAGiW/qW6n0AG6lL3/AMAAAAAAAAAAAAAAAAAAJy2PrW9cLRMquZn7yT7jyRpj6rfGv4ecXLj8O/ln4tBsz8UVbexPHvXmCcY0wc1P31903f11v/8znrrry0mvdeTXGu3T99/xeH9d3Y3/83xzvNjFviXihP7Dz812fon/bZRb/3ZneTTwfxzbdT8U+a24Xr0/NM9/hXLZ/TKr2OeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIn5PQAA//8PK23M") r0 = open$dir(&(0x7f0000000540)='./file1\x00', 0x441, 0x3d) fallocate(0xffffffffffffffff, 0x10, 0x6, 0x10001) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000040)=@v1={0x0, @aes128, 0x0, @desc3}) 1.061774436s ago: executing program 3 (id=252): openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x185042, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000040)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000180)={[{@init_itable}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@nodiscard}]}, 0x3, 0x466, &(0x7f0000000800)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2c60a, 0x0, 0xbe, 0x0, &(0x7f00000007c0)) socket$inet(0xa, 0x801, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x80580, 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e681cdb9e581a38ebb0ddd5f307e56", r7}) close_range(r4, r5, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 929.904291ms ago: executing program 2 (id=253): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$int_in(r3, 0x5421, &(0x7f0000000440)=0x6) connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x6}, 0xa) close(r3) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000005c0)) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f00000007c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0xfec00000}) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYRESDEC], 0x0) r4 = syz_usb_connect(0x0, 0x5f, &(0x7f0000000500)={{0x12, 0x1, 0x310, 0x41, 0x5, 0x3f, 0xff, 0xf11, 0x1032, 0xa780, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4d, 0x1, 0x57, 0x8, 0x10, 0x0, "", [{{0x9, 0x4, 0x9d, 0x4b, 0x1, 0x6a, 0x98, 0xb0, 0x7, [@generic={0x2, 0x5}], [{{0x9, 0x5, 0x4, 0x3, 0x40, 0x9, 0x5, 0x1, [@generic={0x29, 0x3, "da369f06131045da1081ea0056a0413fdadab1f33ff90b0298baaceb70cf9ff9db032a5c9009db"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x8}]}}]}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) 0s ago: executing program 1 (id=254): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x6, 0xfe, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x7fff, 0x2, 0x9, 0x5, 0x2, 0x0, 0x6, 0x3, 0x7, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x5, 0x9, 0x9, 0x1, 0xfffff801, 0x7, 0xe261, 0x7fff, 0x4000b, 0x3, 0x7f7f, 0x4c74, 0x1, 0x200000c, 0xffffffff, 0xe, 0x0, 0x71, 0x2, 0x6, 0x3, 0x50, 0x5, 0x7fff, 0x8f, 0x4b, 0x6, 0x5, 0x623280, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x401, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0x0, 0x3, 0xd, 0x2bf, 0xffffffff, 0xffe, 0xfffffffc, 0x334000, 0x0, 0x7, 0x85, 0x2b, 0x5a04, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0xbda4, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x2003, 0x1, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0xff0c, 0x1, 0x3, 0x4, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x7], [0x6, 0x6, 0x80000003, 0x0, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x3, 0x5, 0x348, 0x0, 0xa3d, 0xfffffffd, 0x2, 0x83, 0x1, 0x3, 0x3e7, 0x7, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xfffffff6, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0x3, 0xc0, 0x10003, 0x403, 0x7fd, 0x3, 0x0, 0xfffffffc, 0xffff, 0x5, 0x2, 0x1c, 0x120000, 0x3, 0x6, 0xaaf1, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0xffffffff, 0x80ce7, 0x100001ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000001, 0x3, 0xc, 0xc8, 0xee1, 0x0, 0xffff, 0x7, 0x7f, 0x100, 0x9602, 0x5, 0x2, 0xffff, 0x6, 0x2, 0x10080, 0x6, 0xb, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x0, 0x5, 0xb1c, 0x1, 0x20000200, 0xffff3441, 0xfff]}, 0x45c) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x38f9, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) r5 = request_key(&(0x7f00000001c0)='dns_resolver\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000100)='/d%v\xff\x00\xd4\xcd/snd/midiC#D#\x00', 0x0) keyctl$dh_compute(0x17, &(0x7f0000000280)={0x0, 0x0, r5}, &(0x7f0000000300)=""/71, 0x47, 0x0) setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x4) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) pselect6(0x40, &(0x7f0000000880)={0xfffffffffffffffc, 0xa000000, 0x1fe, 0x3ff, 0x603, 0x400000000001, 0xfffffffffa86cde8, 0x4}, 0x0, &(0x7f00000002c0)={0x5, 0x7fff, 0xfffffffffbffffff, 0x9, 0x0, 0x4}, 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x11, 0x3, 0xd, 0x8000, 0x2, "70e6de6caaad1cbaa511ec16a8c99b346b9137", 0xffff0000, 0x41}) r6 = syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r6, 0xc0305602, &(0x7f0000000140)={0x0, 0x3, 0x100c, 0x1}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x9) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000000301010100000000000000000a000015080008400000000608001a4074d90006080003"], 0x2c}, 0x1, 0x0, 0x0, 0x20004814}, 0x20000040) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.41' (ED25519) to the list of known hosts. [ 62.474817][ T5762] cgroup: Unknown subsys name 'net' [ 62.612307][ T5762] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 64.022636][ T5762] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 65.911612][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 65.920104][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 65.927815][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 65.935973][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 65.938181][ T5777] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 65.943650][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 65.956443][ T5777] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 65.958154][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 65.964668][ T5777] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 65.981546][ T5777] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 65.989710][ T5777] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 65.997645][ T5777] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 66.086654][ T5775] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 66.095400][ T5775] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 66.103129][ T5775] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 66.105382][ T5089] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 66.119421][ T5775] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 66.127706][ T5089] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 66.134920][ T5775] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 66.142333][ T5089] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 66.150316][ T5775] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 66.157633][ T5775] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 66.165756][ T5775] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 66.173150][ T5775] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 66.378290][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 66.521906][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.529769][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.537557][ T5776] bridge_slave_0: entered allmulticast mode [ 66.544287][ T5776] bridge_slave_0: entered promiscuous mode [ 66.557359][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 66.577768][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.584927][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.592391][ T5776] bridge_slave_1: entered allmulticast mode [ 66.599204][ T5776] bridge_slave_1: entered promiscuous mode [ 66.651789][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.680625][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.775118][ T5776] team0: Port device team_slave_0 added [ 66.787869][ T5776] team0: Port device team_slave_1 added [ 66.793851][ T5782] chnl_net:caif_netlink_parms(): no params data found [ 66.838573][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.845725][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.852986][ T5773] bridge_slave_0: entered allmulticast mode [ 66.859753][ T5773] bridge_slave_0: entered promiscuous mode [ 66.868472][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.875421][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.901827][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.913613][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 66.930645][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.938803][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.946057][ T5773] bridge_slave_1: entered allmulticast mode [ 66.953215][ T5773] bridge_slave_1: entered promiscuous mode [ 66.960310][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.967345][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.993384][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.080693][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.111002][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.158068][ T5776] hsr_slave_0: entered promiscuous mode [ 67.164320][ T5776] hsr_slave_1: entered promiscuous mode [ 67.189064][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.196301][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.203425][ T5782] bridge_slave_0: entered allmulticast mode [ 67.210328][ T5782] bridge_slave_0: entered promiscuous mode [ 67.226304][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.233430][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.240983][ T5780] bridge_slave_0: entered allmulticast mode [ 67.248497][ T5780] bridge_slave_0: entered promiscuous mode [ 67.255600][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.262962][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.270247][ T5782] bridge_slave_1: entered allmulticast mode [ 67.277759][ T5782] bridge_slave_1: entered promiscuous mode [ 67.302202][ T5773] team0: Port device team_slave_0 added [ 67.310980][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.318198][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.325524][ T5780] bridge_slave_1: entered allmulticast mode [ 67.332323][ T5780] bridge_slave_1: entered promiscuous mode [ 67.342319][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.354936][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.380686][ T5773] team0: Port device team_slave_1 added [ 67.474592][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.489266][ T5782] team0: Port device team_slave_0 added [ 67.495748][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.502991][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.529742][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.546198][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.553159][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.579103][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.592332][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.608011][ T5782] team0: Port device team_slave_1 added [ 67.663623][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.670891][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.697138][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.711124][ T5780] team0: Port device team_slave_0 added [ 67.735140][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.742341][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.769022][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.791837][ T5780] team0: Port device team_slave_1 added [ 67.848774][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.855762][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.884497][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.900764][ T5773] hsr_slave_0: entered promiscuous mode [ 67.907727][ T5773] hsr_slave_1: entered promiscuous mode [ 67.914072][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.921968][ T5773] Cannot create hsr debugfs directory [ 67.939010][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.948198][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.974819][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.017068][ T51] Bluetooth: hci0: command tx timeout [ 68.030342][ T5782] hsr_slave_0: entered promiscuous mode [ 68.037213][ T5782] hsr_slave_1: entered promiscuous mode [ 68.043290][ T5782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.051891][ T5782] Cannot create hsr debugfs directory [ 68.079319][ T5780] hsr_slave_0: entered promiscuous mode [ 68.085587][ T5780] hsr_slave_1: entered promiscuous mode [ 68.091900][ T5780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.099576][ T51] Bluetooth: hci1: command tx timeout [ 68.105012][ T5780] Cannot create hsr debugfs directory [ 68.176092][ T51] Bluetooth: hci2: command tx timeout [ 68.256071][ T51] Bluetooth: hci3: command tx timeout [ 68.262575][ T5776] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.296677][ T5776] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.307340][ T5776] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.320961][ T5776] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.502855][ T5773] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 68.513875][ T5773] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 68.546338][ T5773] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 68.566636][ T5773] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 68.609802][ T5782] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 68.622356][ T5782] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 68.642117][ T5782] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 68.651758][ T5782] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 68.693690][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.737107][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.753899][ T5780] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 68.775239][ T5780] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 68.794121][ T5780] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 68.814993][ T5780] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 68.829257][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.836651][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.848059][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.855227][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.003091][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.030037][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.060393][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.079067][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.103922][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.111067][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.128505][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.135670][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.151987][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.159193][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.211108][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.218293][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.238978][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.354263][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.389722][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.396902][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.420568][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.445223][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.452417][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.602703][ T5776] veth0_vlan: entered promiscuous mode [ 69.651800][ T5776] veth1_vlan: entered promiscuous mode [ 69.682279][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.781294][ T5776] veth0_macvtap: entered promiscuous mode [ 69.795325][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.851983][ T5776] veth1_macvtap: entered promiscuous mode [ 69.878052][ T5773] veth0_vlan: entered promiscuous mode [ 69.905066][ T5773] veth1_vlan: entered promiscuous mode [ 69.927063][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.950272][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.977129][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.994571][ T5776] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.004424][ T5776] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.013316][ T5776] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.029229][ T5776] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.074868][ T5773] veth0_macvtap: entered promiscuous mode [ 70.085157][ T5773] veth1_macvtap: entered promiscuous mode [ 70.098082][ T51] Bluetooth: hci0: command tx timeout [ 70.103724][ T5782] veth0_vlan: entered promiscuous mode [ 70.177003][ T51] Bluetooth: hci1: command tx timeout [ 70.190034][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.203349][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.214951][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.223231][ T5782] veth1_vlan: entered promiscuous mode [ 70.257144][ T51] Bluetooth: hci2: command tx timeout [ 70.267983][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.282565][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.295126][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.312181][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.317604][ T5780] veth0_vlan: entered promiscuous mode [ 70.330803][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.346609][ T51] Bluetooth: hci3: command tx timeout [ 70.357789][ T5773] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.368163][ T5773] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.377210][ T5773] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.386082][ T5773] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.430256][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.433888][ T5782] veth0_macvtap: entered promiscuous mode [ 70.444221][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.448651][ T5780] veth1_vlan: entered promiscuous mode [ 70.481706][ T5782] veth1_macvtap: entered promiscuous mode [ 70.560451][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.574640][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.588298][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.598820][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.610958][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.623386][ T5780] veth0_macvtap: entered promiscuous mode [ 70.649115][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.685892][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.695745][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.711508][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.724458][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.729609][ T5835] syz.0.1[5835]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 70.879638][ T5780] veth1_macvtap: entered promiscuous mode [ 70.943661][ T5782] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.959303][ T5782] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.972215][ T5782] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.984791][ T5782] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.012198][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.051933][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.108579][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.132010][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.153153][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.165240][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.181480][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.193402][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.210348][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.279004][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.293271][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.310034][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.322612][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.339493][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.353678][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.374059][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.401191][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.443635][ T5780] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.464335][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.490036][ T5780] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.499466][ T5780] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.514050][ T5780] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.543908][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.551454][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.695851][ C0] sched: RT throttling activated [ 71.720898][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.769622][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.778120][ T5835] loop0: detected capacity change from 0 to 131072 [ 71.807194][ T5835] F2FS-fs (loop0): invalid crc value [ 71.830479][ T5835] F2FS-fs (loop0): Found nat_bits in checkpoint [ 71.890729][ T5835] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 71.984396][ T2935] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.996165][ T2935] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.011347][ T3460] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.057905][ T3460] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.158184][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.178895][ T51] Bluetooth: hci0: command tx timeout [ 72.196722][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.308165][ T51] Bluetooth: hci1: command tx timeout [ 72.337539][ T51] Bluetooth: hci2: command tx timeout [ 72.443716][ T51] Bluetooth: hci3: command tx timeout [ 74.221747][ T5860] syz.1.8 (5860): /proc/5857/oom_adj is deprecated, please use /proc/5857/oom_score_adj instead. [ 75.753090][ T51] Bluetooth: hci0: command tx timeout [ 75.758665][ T5775] Bluetooth: hci1: command tx timeout [ 75.758736][ T5777] Bluetooth: hci3: command tx timeout [ 75.770069][ T5089] Bluetooth: hci2: command tx timeout [ 77.105332][ T5871] loop3: detected capacity change from 0 to 131072 [ 77.190377][ T5871] F2FS-fs (loop3): invalid crc value [ 77.289246][ T5871] F2FS-fs (loop3): Found nat_bits in checkpoint [ 77.366173][ T5871] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 79.046095][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 80.110682][ T5888] loop1: detected capacity change from 0 to 256 [ 80.157873][ T5888] exfat: Deprecated parameter 'utf8' [ 80.209082][ T5888] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 80.355191][ T27] audit: type=1800 audit(1780997790.473:2): pid=5888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.16" name="file1" dev="loop1" ino=1048592 res=0 errno=0 [ 80.647100][ T5891] loop0: detected capacity change from 0 to 1024 [ 80.789660][ T5891] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.816486][ T5900] kAFS: unable to lookup cell '' [ 81.013666][ T5904] loop1: detected capacity change from 0 to 512 [ 81.034557][ T5904] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 81.060314][ T5904] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 81.069103][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.091716][ T5904] EXT4-fs error (device loop1): ext4_orphan_get:1430: comm syz.1.21: bad orphan inode 131083 [ 81.110925][ T5904] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.227897][ T5904] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21'. [ 81.992952][ T9] cfg80211: failed to load regulatory.db [ 82.019442][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.074360][ T27] audit: type=1804 audit(1780997792.203:3): pid=5913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.23" name="bus" dev="ramfs" ino=7788 res=1 errno=0 [ 82.151376][ T27] audit: type=1804 audit(1780997792.243:4): pid=5913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.23" name="bus" dev="ramfs" ino=7788 res=1 errno=0 [ 83.058443][ T5922] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 83.097078][ T5902] loop2: detected capacity change from 0 to 32768 [ 83.227618][ T5902] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.20 (5902) [ 83.288000][ T5902] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 83.313034][ T5902] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 83.322706][ T5902] BTRFS info (device loop2): using free space tree [ 83.444972][ T5935] loop1: detected capacity change from 0 to 256 [ 83.455370][ T5935] exfat: Deprecated parameter 'utf8' [ 83.549754][ T5941] loop0: detected capacity change from 0 to 256 [ 83.595173][ T5935] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 83.600175][ T5941] FAT-fs (loop0): Directory bread(block 1285) failed [ 83.614935][ T5941] FAT-fs (loop0): Directory bread(block 1286) failed [ 83.635509][ T5941] FAT-fs (loop0): Directory bread(block 1287) failed [ 83.646380][ T5941] FAT-fs (loop0): Directory bread(block 1288) failed [ 83.691046][ T5902] BTRFS info (device loop2): enabling ssd optimizations [ 83.702234][ T5941] FAT-fs (loop0): FAT read failed (blocknr 1281) [ 83.715529][ T5902] BTRFS info (device loop2): auto enabling async discard [ 83.725823][ T27] audit: type=1800 audit(1780997793.853:5): pid=5935 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.26" name="file1" dev="loop1" ino=1048593 res=0 errno=0 [ 83.876276][ T5810] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 83.946842][ T5948] loop1: detected capacity change from 0 to 1764 [ 84.065982][ T5810] usb 4-1: Using ep0 maxpacket: 32 [ 84.101961][ T5810] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 84.142151][ T5810] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 84.155512][ T5810] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 84.155791][ T5954] capability: warning: `syz.1.29' uses 32-bit capabilities (legacy support in use) [ 84.165334][ T5810] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.219585][ T5810] usb 4-1: config 0 descriptor?? [ 84.269474][ T5810] hub 4-1:0.0: bad descriptor, ignoring hub [ 84.275730][ T5810] hub: probe of 4-1:0.0 failed with error -5 [ 84.335348][ T5810] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 84.738766][ T5780] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 85.621503][ T27] audit: type=1804 audit(1780997795.753:6): pid=5964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.33" name="bus" dev="ramfs" ino=6876 res=1 errno=0 [ 86.316370][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 86.726005][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 87.225467][ T27] audit: type=1804 audit(1780997795.773:7): pid=5964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.33" name="bus" dev="ramfs" ino=6876 res=1 errno=0 [ 87.358074][ T5966] loop3: detected capacity change from 0 to 4096 [ 87.416758][ T786] usb 4-1: USB disconnect, device number 2 [ 87.446433][ T5968] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 88.756630][ T5985] loop0: detected capacity change from 0 to 64 [ 88.871274][ T27] audit: type=1800 audit(1780997799.003:8): pid=5985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.39" name="file1" dev="loop0" ino=21 res=0 errno=0 [ 90.196174][ T27] audit: type=1804 audit(1780997799.333:9): pid=5991 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.42" name="bus" dev="ramfs" ino=6910 res=1 errno=0 [ 90.296065][ T27] audit: type=1804 audit(1780997799.333:10): pid=5991 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.42" name="bus" dev="ramfs" ino=6910 res=1 errno=0 [ 90.392547][ T5983] loop2: detected capacity change from 0 to 32768 [ 90.551989][ T5983] JBD2: Ignoring recovery information on journal [ 90.580916][ T5998] loop1: detected capacity change from 0 to 128 [ 90.627224][ T5998] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 90.638646][ T6002] loop0: detected capacity change from 0 to 16 [ 90.651309][ T6002] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 90.692591][ T6002] netlink: 16 bytes leftover after parsing attributes in process `syz.0.46'. [ 90.701700][ T5998] ext4 filesystem being mounted at /18/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 90.725159][ T5983] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 90.739700][ T6002] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 91.578463][ T5773] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 91.768588][ T5983] syz.2.38 (5983) used greatest stack depth: 17672 bytes left [ 91.981273][ T5780] ocfs2: Unmounting device (7,2) on (node local) [ 92.016313][ T6019] ======================================================= [ 92.016313][ T6019] WARNING: The mand mount option has been deprecated and [ 92.016313][ T6019] and is ignored by this kernel. Remove the mand [ 92.016313][ T6019] option from the mount to silence this warning. [ 92.016313][ T6019] ======================================================= [ 92.046872][ T6021] overlayfs: missing 'lowerdir' [ 92.097329][ T5810] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 92.265135][ T6023] loop1: detected capacity change from 0 to 4096 [ 92.326801][ T5810] usb 4-1: Using ep0 maxpacket: 32 [ 92.461485][ T5810] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 92.554580][ T5810] usb 4-1: config 0 has no interface number 0 [ 92.623513][ T6031] Zero length message leads to an empty skb [ 92.657454][ T6031] netlink: 68 bytes leftover after parsing attributes in process `syz.0.54'. [ 93.012422][ T5810] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 93.112286][ T5810] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.146240][ T5810] usb 4-1: Product: syz [ 93.152497][ T5810] usb 4-1: Manufacturer: syz [ 93.175928][ T6034] loop2: detected capacity change from 0 to 164 [ 93.192168][ T6034] rock: directory entry would overflow storage [ 93.203338][ T5810] usb 4-1: SerialNumber: syz [ 93.214532][ T6034] rock: sig=0x4543, size=28, remaining=18 [ 93.258586][ T5810] usb 4-1: config 0 descriptor?? [ 93.299096][ T5810] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 93.300423][ T6034] comedi: valid board names for 8255 driver are: [ 93.327796][ T6023] ntfs3: loop1: Failed to initialize $Extend/$ObjId. [ 93.376023][ T6034] 8255 [ 93.378850][ T6034] comedi: valid board names for vmk80xx driver are: [ 93.411563][ T6034] vmk80xx [ 93.414649][ T6034] comedi: valid board names for usbduxsigma driver are: [ 93.425113][ T6036] loop0: detected capacity change from 0 to 512 [ 93.476336][ T6034] usbduxsigma [ 93.476351][ T6034] comedi: valid board names for usbduxfast driver are: [ 93.476361][ T6034] usbduxfast [ 93.476369][ T6034] comedi: valid board names for usbdux driver are: [ 93.476378][ T6034] usbdux [ 93.476385][ T6034] comedi: valid board names for ni6501 driver are: [ 93.476394][ T6034] ni6501 [ 93.476402][ T6034] comedi: valid board names for dt9812 driver are: [ 93.476410][ T6034] dt9812 [ 93.476417][ T6034] comedi: valid board names for ni_labpc_cs driver are: [ 93.476426][ T6034] ni_labpc_cs [ 93.476433][ T6034] comedi: valid board names for ni_daq_700 driver are: [ 93.476443][ T6034] ni_daq_700 [ 93.476449][ T6034] comedi: valid board names for labpc_pci driver are: [ 93.476458][ T6034] labpc_pci [ 93.476465][ T6034] comedi: valid board names for adl_pci9118 driver are: [ 93.476474][ T6034] pci9118dg [ 93.476481][ T6034] pci9118hg [ 93.476487][ T6034] pci9118hr [ 93.476494][ T6034] comedi: valid board names for 8255_pci driver are: [ 93.476502][ T6034] 8255_pci [ 93.476509][ T6034] comedi: valid board names for s526 driver are: [ 93.476517][ T6034] s526 [ 93.476524][ T6034] comedi: valid board names for multiq3 driver are: [ 93.476533][ T6034] multiq3 [ 93.476539][ T6034] comedi: valid board names for pcmuio driver are: [ 93.476547][ T6034] pcmuio48 [ 93.476554][ T6034] pcmuio96 [ 93.476561][ T6034] comedi: valid board names for pcmmio driver are: [ 93.476570][ T6034] pcmmio [ 93.476576][ T6034] comedi: valid board names for pcmda12 driver are: [ 93.476585][ T6034] pcmda12 [ 93.476592][ T6034] comedi: valid board names for pcmad driver are: [ 93.476600][ T6034] pcmad12 [ 93.476607][ T6034] pcmad16 [ 93.476613][ T6034] comedi: valid board names for ni_labpc driver are: [ 93.476622][ T6034] lab-pc-1200 [ 93.476628][ T6034] lab-pc-1200ai [ 93.476635][ T6034] lab-pc+ [ 93.476642][ T6034] comedi: valid board names for atmio16 driver are: [ 93.476650][ T6034] atmio16 [ 93.476657][ T6034] atmio16d [ 93.476664][ T6034] comedi: valid board names for ni_at_ao driver are: [ 93.476672][ T6034] at-ao-6 [ 93.476679][ T6034] at-ao-10 [ 93.476686][ T6034] comedi: valid board names for ni_at_a2150 driver are: [ 93.476694][ T6034] ni_at_a2150 [ 93.476701][ T6034] comedi: valid board names for adq12b driver are: [ 93.476709][ T6034] adq12b [ 93.476715][ T6034] comedi: valid board names for mpc624 driver are: [ 93.476724][ T6034] mpc624 [ 93.476731][ T6034] comedi: valid board names for c6xdigio driver are: [ 93.476739][ T6034] c6xdigio [ 93.476746][ T6034] comedi: valid board names for aio_iiro_16 driver are: [ 93.476754][ T6034] aio_iiro_16 [ 93.476761][ T6034] comedi: valid board names for aio_aio12_8 driver are: [ 93.476770][ T6034] aio_aio12_8 [ 93.476777][ T6034] aio_ai12_8 [ 93.476782][ T6034] aio_ao12_4 [ 93.476789][ T6034] comedi: valid board names for fl512 driver are: [ 93.476798][ T6034] fl512 [ 93.476804][ T6034] comedi: valid board names for dmm32at driver are: [ 93.476813][ T6034] dmm32at [ 93.476819][ T6034] comedi: valid board names for dt282x driver are: [ 93.476828][ T6034] dt2821 [ 93.476835][ T6034] dt2821-f [ 93.476841][ T6034] dt2821-g [ 93.476848][ T6034] dt2823 [ 93.476855][ T6034] dt2824-pgh [ 93.476861][ T6034] dt2824-pgl [ 93.476867][ T6034] dt2825 [ 93.476873][ T6034] dt2827 [ 93.476879][ T6034] dt2828 [ 93.476894][ T6034] dt2829 [ 93.476901][ T6034] dt21-ez [ 93.476907][ T6034] dt23-ez [ 93.476914][ T6034] dt24-ez [ 93.476921][ T6034] dt24-ez-pgl [ 93.476928][ T6034] comedi: valid board names for dt2817 driver are: [ 93.476937][ T6034] dt2817 [ 93.476943][ T6034] comedi: valid board names for dt2815 driver are: [ 93.476952][ T6034] dt2815 [ 93.476959][ T6034] comedi: valid board names for dt2814 driver are: [ 93.476968][ T6034] dt2814 [ 93.476974][ T6034] comedi: valid board names for dt2811 driver are: [ 93.476983][ T6034] dt2811-pgh [ 93.476990][ T6034] dt2811-pgl [ 93.476996][ T6034] comedi: valid board names for dt2801 driver are: [ 93.477003][ T6034] dt2801 [ 93.477010][ T6034] comedi: valid board names for das6402 driver are: [ 93.477018][ T6034] das6402-12 [ 93.477025][ T6034] das6402-16 [ 93.477032][ T6034] comedi: valid board names for das1800 driver are: [ 93.477040][ T6034] das-1701st [ 93.477047][ T6034] das-1701st-da [ 93.477054][ T6034] das-1702st [ 93.477060][ T6034] das-1702st-da [ 93.477067][ T6034] das-1702hr [ 93.477074][ T6034] das-1702hr-da [ 93.477081][ T6034] das-1701ao [ 93.477088][ T6034] das-1702ao [ 93.477095][ T6034] das-1801st [ 93.477102][ T6034] das-1801st-da [ 93.477109][ T6034] das-1802st [ 93.477115][ T6034] das-1802st-da [ 93.477122][ T6034] das-1802hr [ 93.477129][ T6034] das-1802hr-da [ 93.477135][ T6034] das-1801hc [ 93.477142][ T6034] das-1802hc [ 93.477148][ T6034] das-1801ao [ 93.477155][ T6034] das-1802ao [ 93.477162][ T6034] comedi: valid board names for das800 driver are: [ 93.477171][ T6034] das-800 [ 93.477177][ T6034] cio-das800 [ 93.477184][ T6034] das-801 [ 93.477191][ T6034] cio-das801 [ 93.477197][ T6034] das-802 [ 93.477204][ T6034] cio-das802 [ 93.477211][ T6034] cio-das802/16 [ 93.477218][ T6034] comedi: valid board names for isa-das08 driver are: [ 93.477227][ T6034] isa-das08 [ 93.477234][ T6034] das08-pgm [ 93.477240][ T6034] das08-pgh [ 93.477247][ T6034] das08-pgl [ 93.477253][ T6034] das08-aoh [ 93.477260][ T6034] das08-aol [ 93.477267][ T6034] das08-aom [ 93.477274][ T6034] das08/jr-ao [ 93.477281][ T6034] das08jr-16-ao [ 93.477287][ T6034] pc104-das08 [ 93.477294][ T6034] das08jr/16 [ 93.477301][ T6034] comedi: valid board names for das16m1 driver are: [ 93.477310][ T6034] das16m1 [ 93.477316][ T6034] comedi: valid board names for dac02 driver are: [ 93.477324][ T6034] dac02 [ 93.477331][ T6034] comedi: valid board names for rti802 driver are: [ 93.477340][ T6034] rti802 [ 93.477346][ T6034] comedi: valid board names for rti800 driver are: [ 93.477355][ T6034] rti800 [ 93.477361][ T6034] rti815 [ 93.477368][ T6034] comedi: valid board names for pcm3724 driver are: [ 93.477376][ T6034] pcm3724 [ 93.477382][ T6034] comedi: valid board names for pcl818 driver are: [ 93.477390][ T6034] pcl818l [ 93.477397][ T6034] pcl818h [ 93.477403][ T6034] pcl818hd [ 93.477409][ T6034] pcl818hg [ 93.477416][ T6034] pcl818 [ 93.477422][ T6034] pcl718 [ 93.477429][ T6034] pcm3718 [ 93.477436][ T6034] comedi: valid board names for pcl816 driver are: [ 93.477444][ T6034] pcl816 [ 93.477451][ T6034] pcl814b [ 93.477457][ T6034] comedi: valid board names for pcl812 driver are: [ 93.477465][ T6034] pcl812 [ 93.477472][ T6034] pcl812pg [ 93.477479][ T6034] acl8112pg [ 93.477485][ T6034] acl8112dg [ 93.477492][ T6034] acl8112hg [ 93.477499][ T6034] a821pgl [ 93.477505][ T6034] a821pglnda [ 93.477512][ T6034] a821pgh [ 93.477519][ T6034] a822pgl [ 93.477525][ T6034] a822pgh [ 93.477532][ T6034] a823pgl [ 93.477539][ T6034] a823pgh [ 93.477545][ T6034] pcl813 [ 93.477552][ T6034] pcl813b [ 93.477558][ T6034] acl8113 [ 93.477565][ T6034] iso813 [ 93.477572][ T6034] acl8216 [ 93.477578][ T6034] a826pg [ 93.477585][ T6034] comedi: valid board names for pcl730 driver are: [ 93.477593][ T6034] pcl730 [ 93.477600][ T6034] iso730 [ 93.477606][ T6034] acl7130 [ 93.477613][ T6034] pcm3730 [ 93.477619][ T6034] pcl725 [ 93.477626][ T6034] p8r8dio [ 93.477633][ T6034] acl7225b [ 93.477639][ T6034] p16r16dio [ 93.477646][ T6034] pcl733 [ 93.477652][ T6034] pcl734 [ 93.477659][ T6034] opmm-1616-xt [ 93.477666][ T6034] pearl-mm-p [ 93.477673][ T6034] ir104-pbf [ 93.477680][ T6034] comedi: valid board names for pcl726 driver are: [ 93.477688][ T6034] pcl726 [ 93.477695][ T6034] pcl727 [ 93.477701][ T6034] pcl728 [ 93.477708][ T6034] acl6126 [ 93.477714][ T6034] acl6128 [ 93.477721][ T6034] comedi: valid board names for pcl724 driver are: [ 93.477730][ T6034] pcl724 [ 93.477736][ T6034] pcl722 [ 93.477743][ T6034] pcl731 [ 93.477749][ T6034] acl7122 [ 93.477756][ T6034] acl7124 [ 93.477762][ T6034] pet48dio [ 93.477769][ T6034] pcmio48 [ 93.477775][ T6034] onyx-mm-dio [ 93.477782][ T6034] comedi: valid board names for pcl711 driver are: [ 93.477791][ T6034] pcl711 [ 93.477798][ T6034] pcl711b [ 93.477804][ T6034] acl8112hg [ 93.477811][ T6034] acl8112dg [ 93.477818][ T6034] comedi: valid board names for amplc_pc263 driver are: [ 93.477827][ T6034] pc263 [ 93.477834][ T6034] comedi: valid board names for amplc_pc236 driver are: [ 93.477842][ T6034] pc36at [ 93.477849][ T6034] comedi: valid board names for amplc_dio200 driver are: [ 93.477858][ T6034] pc212e [ 93.477864][ T6034] pc214e [ 93.477871][ T6034] pc215e [ 93.477878][ T6034] pc218e [ 93.477891][ T6034] pc272e [ 93.477899][ T6034] comedi: valid board names for comedi_parport driver are: [ 93.477909][ T6034] comedi_parport [ 93.477916][ T6034] comedi: valid board names for comedi_test driver are: [ 93.477925][ T6034] comedi_test [ 93.477932][ T6034] comedi: valid board names for comedi_bond driver are: [ 93.477940][ T6034] comedi_bond [ 93.494236][ T6036] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.494348][ T6036] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.530105][ T5810] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 93.605950][ T5810] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 93.633398][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.886764][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 94.518114][ C1] vkms_vblank_simulate: vblank timer overrun [ 94.533843][ T5810] usb 4-1: USB disconnect, device number 3 [ 94.611531][ T5810] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 94.627609][ T5810] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 94.640996][ T5810] quatech2 4-1:0.51: device disconnected [ 95.426472][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 96.075040][ T6055] autofs4:pid:6055:autofs_fill_super: called with bogus options [ 96.136707][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 96.149873][ T9] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.172176][ T9] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.229814][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 96.261703][ T9] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 96.287661][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.309728][ T9] usb 3-1: config 0 descriptor?? [ 96.715494][ T6072] random: crng reseeded on system resumption [ 97.596055][ T6074] input: syz0 as /devices/virtual/input/input5 [ 98.780420][ T9] nzxt-smart2 0003:1E71:2009.0001: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 98.931902][ T9] usb 3-1: USB disconnect, device number 2 [ 99.116362][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 99.878443][ T6076] fido_id[6076]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 100.384183][ T6085] loop2: detected capacity change from 0 to 32768 [ 100.400423][ T6085] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.70 (6085) [ 100.429563][ T6085] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 100.439822][ T6085] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 100.449164][ T6085] BTRFS info (device loop2): metadata ratio 0 [ 100.455284][ T6085] BTRFS info (device loop2): turning on sync discard [ 100.462020][ T6085] BTRFS info (device loop2): using free space tree [ 100.765927][ T8] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 101.452094][ T6085] BTRFS info (device loop2): enabling ssd optimizations [ 101.666480][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 101.834290][ T8] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 101.849587][ T27] audit: type=1800 audit(1780997811.883:11): pid=6117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.70" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 101.898766][ T8] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 102.166008][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.210391][ T8] usb 1-1: config 0 descriptor?? [ 102.245074][ T6092] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 102.307511][ T8] hub 1-1:0.0: bad descriptor, ignoring hub [ 102.314460][ T8] hub: probe of 1-1:0.0 failed with error -5 [ 102.352054][ T8] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 102.383727][ T5780] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 102.586079][ T5810] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 102.590854][ T5766] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop2 scanned by udevd (5766) [ 102.798408][ T5810] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 102.814821][ T5810] usb 2-1: config 0 has no interface number 0 [ 102.821661][ T5810] usb 2-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 102.836128][ T5810] usb 2-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.846223][ T5810] usb 2-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 102.859986][ T5810] usb 2-1: config 0 interface 1 has no altsetting 0 [ 102.873520][ T5810] usb 2-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 102.883255][ T5810] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.926842][ T5810] usb 2-1: config 0 descriptor?? [ 103.715887][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 103.815894][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 104.445882][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 104.646000][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 104.695882][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 104.885884][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 105.129563][ T5810] uclogic 0003:145F:0212.0002: failed retrieving string descriptor #100: -71 [ 105.166530][ T5810] uclogic 0003:145F:0212.0002: failed retrieving pen parameters: -71 [ 105.174690][ T5810] uclogic 0003:145F:0212.0002: pen probing failed: -71 [ 105.218182][ T5810] uclogic 0003:145F:0212.0002: failed probing parameters: -71 [ 105.247286][ T5810] uclogic: probe of 0003:145F:0212.0002 failed with error -71 [ 105.306191][ T5810] usb 2-1: USB disconnect, device number 2 [ 105.366253][ T5837] usb 1-1: USB disconnect, device number 2 [ 105.594395][ T6154] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 105.738117][ T6159] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.746957][ T6159] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.829195][ T6162] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.836485][ T6162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.844948][ T6162] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.852189][ T6162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.877000][ T6162] bridge0: entered promiscuous mode [ 105.910939][ T6162] bridge0: entered allmulticast mode [ 106.262576][ T6171] loop2: detected capacity change from 0 to 2048 [ 106.345984][ T6171] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 106.373027][ T6171] NILFS (loop2): mounting unchecked fs [ 106.379300][ T5766] udevd[5766]: incorrect nilfs2 checksum on /dev/loop2 [ 107.302767][ T6171] NILFS (loop2): recovery complete [ 107.349063][ T6180] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 107.662623][ T6182] loop0: detected capacity change from 0 to 64 [ 107.747498][ T27] audit: type=1800 audit(1780997817.883:12): pid=6182 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.93" name="file1" dev="loop0" ino=21 res=0 errno=0 [ 107.778176][ T6182] syz.0.93: attempt to access beyond end of device [ 107.778176][ T6182] loop0: rw=34817, sector=39, nr_sectors = 122 limit=64 [ 108.022296][ T6175] loop3: detected capacity change from 0 to 32768 [ 108.087973][ T6175] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.82 (6175) [ 108.160982][ T6175] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 108.191193][ T6175] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 108.225964][ T6175] BTRFS info (device loop3): setting nodatasum [ 108.232825][ T6175] BTRFS info (device loop3): force zlib compression, level 3 [ 108.276177][ T6175] BTRFS info (device loop3): use zlib compression, level 3 [ 108.283451][ T6175] BTRFS info (device loop3): turning on flush-on-commit [ 108.316004][ T6175] BTRFS info (device loop3): enabling auto defrag [ 108.344870][ T6175] BTRFS info (device loop3): max_inline at 4096 [ 108.371987][ T6175] BTRFS info (device loop3): using free space tree [ 108.470877][ T6203] loop0: detected capacity change from 0 to 128 [ 108.536464][ T6175] BTRFS info (device loop3): enabling ssd optimizations [ 108.555730][ T6203] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 108.612472][ T6203] ext4 filesystem being mounted at /24/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 108.659988][ T6216] loop1: detected capacity change from 0 to 512 [ 108.709190][ T6216] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 108.738608][ T5776] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 108.759461][ T6216] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.100: invalid indirect mapped block 9 (level 0) [ 108.830980][ T5782] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 108.853723][ T6216] EXT4-fs (loop1): 1 truncate cleaned up [ 108.870829][ T6219] loop2: detected capacity change from 0 to 1024 [ 108.892675][ T6216] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.111580][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 109.796607][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.174403][ T6238] xt_TCPMSS: Only works on TCP SYN packets [ 110.946578][ T6248] syzkaller0: entered promiscuous mode [ 110.952126][ T6248] syzkaller0: entered allmulticast mode [ 112.428488][ T6265] process 'syz.0.116' launched './file0' with NULL argv: empty string added [ 112.898731][ T6250] loop3: detected capacity change from 0 to 32768 [ 112.927157][ T6250] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.111 (6250) [ 113.068230][ T6250] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 113.145219][ T6279] xt_TCPMSS: Only works on TCP SYN packets [ 113.167426][ T6250] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 113.212067][ T6250] BTRFS info (device loop3): setting nodatasum [ 113.307775][ T6250] BTRFS info (device loop3): force zlib compression, level 3 [ 113.471319][ T6250] BTRFS info (device loop3): use zlib compression, level 3 [ 113.617405][ T6250] BTRFS info (device loop3): turning on flush-on-commit [ 113.653456][ T6250] BTRFS info (device loop3): enabling auto defrag [ 113.661102][ T6250] BTRFS info (device loop3): max_inline at 4096 [ 113.667562][ T6250] BTRFS info (device loop3): using free space tree [ 114.134550][ T6250] BTRFS error (device loop3): open_ctree failed: -4 [ 114.145366][ T6306] loop0: detected capacity change from 0 to 512 [ 114.165055][ T6306] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 114.225496][ T6306] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.126: invalid indirect mapped block 9 (level 0) [ 114.254889][ T6306] EXT4-fs (loop0): 1 truncate cleaned up [ 114.263767][ T6306] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.218184][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.390175][ T6324] xt_TCPMSS: Only works on TCP SYN packets [ 118.589923][ T6347] input: syz0 as /devices/virtual/input/input6 [ 118.836172][ T786] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 118.909831][ T6356] loop1: detected capacity change from 0 to 128 [ 118.950297][ T6356] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 118.954130][ T6342] loop3: detected capacity change from 0 to 32768 [ 119.007639][ T6356] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 119.017020][ T786] usb 1-1: device descriptor read/64, error -71 [ 119.023473][ T6342] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.139 (6342) [ 119.119076][ T6342] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 119.139637][ T6342] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 119.166112][ T6342] BTRFS info (device loop3): setting nodatasum [ 119.172353][ T6342] BTRFS info (device loop3): force zlib compression, level 3 [ 119.209332][ T6342] BTRFS info (device loop3): use zlib compression, level 3 [ 119.236212][ T6342] BTRFS info (device loop3): turning on flush-on-commit [ 119.246182][ T6342] BTRFS info (device loop3): enabling auto defrag [ 119.253506][ T6342] BTRFS info (device loop3): max_inline at 4096 [ 119.273729][ T6342] BTRFS info (device loop3): using free space tree [ 119.286108][ T786] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 119.425687][ T6342] BTRFS info (device loop3): enabling ssd optimizations [ 119.441508][ T6361] sd 0:0:1:0: PR command failed: 1026 [ 119.463866][ T6361] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 119.487377][ T6361] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 119.601691][ T5782] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 119.853524][ T786] usb 1-1: device descriptor read/64, error -71 [ 119.866615][ T5089] Bluetooth: hci3: command tx timeout [ 120.000199][ T786] usb usb1-port1: attempt power cycle [ 120.445749][ T6392] input: syz0 as /devices/virtual/input/input7 [ 120.560349][ T6390] loop0: detected capacity change from 0 to 256 [ 120.599257][ T6390] exfat: Deprecated parameter 'namecase' [ 120.646092][ T6390] exfat: Unknown parameter 'umaöpØ' [ 123.379472][ T6420] loop0: detected capacity change from 0 to 512 [ 124.279859][ T6420] EXT4-fs: Mount option(s) incompatible with ext2 [ 124.335983][ T5809] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 124.495976][ T5809] usb 4-1: device descriptor read/64, error -71 [ 124.853395][ T6428] overlayfs: metacopy with no lower data found - abort lookup (/file2) [ 124.862639][ T6428] overlayfs: failed to look up (file2) for ino (-5) [ 124.911139][ T5809] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 126.471933][ T6438] input: syz0 as /devices/virtual/input/input9 [ 128.942491][ T6455] loop1: detected capacity change from 0 to 512 [ 129.012809][ T6455] EXT4-fs: Mount option(s) incompatible with ext2 [ 129.617473][ T6457] loop0: detected capacity change from 0 to 131072 [ 129.683088][ T6457] F2FS-fs (loop0): invalid crc value [ 129.822160][ T6457] F2FS-fs (loop0): Found nat_bits in checkpoint [ 130.219482][ T6457] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 132.056137][ T6471] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 133.287840][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.294158][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.970491][ T6483] input: syz0 as /devices/virtual/input/input10 [ 136.299271][ T6496] loop0: detected capacity change from 0 to 16 [ 136.382001][ T5766] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 136.573397][ T6500] loop0: detected capacity change from 0 to 512 [ 136.608636][ T6500] EXT4-fs: Mount option(s) incompatible with ext2 [ 136.853875][ T6502] loop3: detected capacity change from 0 to 32768 [ 137.726743][ T6502] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 138.002957][ T6502] XFS (loop3): Ending clean mount [ 138.091450][ T6520] xt_TCPMSS: Only works on TCP SYN packets [ 138.147702][ T6502] XFS (loop3): Quotacheck needed: Please wait. [ 139.916689][ T6502] XFS (loop3): Quotacheck: Done. [ 140.010176][ T5782] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 141.457257][ T6534] warning: `syz.1.195' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 143.674747][ T6557] xt_TCPMSS: Only works on TCP SYN packets [ 143.687913][ T8] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 143.905976][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 143.919766][ T8] usb 2-1: config 0 interface 0 altsetting 15 endpoint 0x81 has an invalid bInterval 148, changing to 11 [ 143.993565][ T8] usb 2-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 1024 [ 144.010895][ T8] usb 2-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 144.026422][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 144.033698][ T8] usb 2-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 144.044952][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.067176][ T8] usb 2-1: config 0 descriptor?? [ 144.089517][ T6553] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 144.690852][ T8] kye 0003:0458:5015.0003: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 144.733739][ T8] kye 0003:0458:5015.0003: unknown main item tag 0x0 [ 144.754100][ T8] kye 0003:0458:5015.0003: unknown main item tag 0x0 [ 144.768281][ T8] kye 0003:0458:5015.0003: unknown main item tag 0x0 [ 144.780818][ T8] kye 0003:0458:5015.0003: unknown main item tag 0x0 [ 144.791986][ T8] kye 0003:0458:5015.0003: unknown main item tag 0x0 [ 144.801279][ T8] kye 0003:0458:5015.0003: unknown main item tag 0x0 [ 144.810543][ T8] kye 0003:0458:5015.0003: unknown main item tag 0x0 [ 144.819294][ T8] kye 0003:0458:5015.0003: unknown main item tag 0x0 [ 144.832596][ T8] kye 0003:0458:5015.0003: unknown main item tag 0x0 [ 144.845527][ T8] kye 0003:0458:5015.0003: unknown main item tag 0x0 [ 144.857105][ T8] kye 0003:0458:5015.0003: unknown main item tag 0x0 [ 144.863859][ T8] kye 0003:0458:5015.0003: unknown main item tag 0x0 [ 144.875594][ T8] kye 0003:0458:5015.0003: unknown main item tag 0x0 [ 144.895462][ T8] kye 0003:0458:5015.0003: unknown main item tag 0x0 [ 144.904778][ T8] kye 0003:0458:5015.0003: unknown main item tag 0x0 [ 144.915157][ T8] kye 0003:0458:5015.0003: unknown main item tag 0x0 [ 144.923652][ T8] kye 0003:0458:5015.0003: unknown main item tag 0x0 [ 144.934038][ T8] kye 0003:0458:5015.0003: unknown main item tag 0x0 [ 144.946724][ T8] kye 0003:0458:5015.0003: unknown main item tag 0x0 [ 144.967274][ T8] kye 0003:0458:5015.0003: unknown main item tag 0x0 [ 144.995927][ T8] kye 0003:0458:5015.0003: unknown main item tag 0x0 [ 145.002687][ T8] kye 0003:0458:5015.0003: unknown main item tag 0x0 [ 145.030168][ T8] kye 0003:0458:5015.0003: unknown main item tag 0x0 [ 145.047323][ T8] kye 0003:0458:5015.0003: unknown main item tag 0x0 [ 145.088845][ T8] kye 0003:0458:5015.0003: hidraw0: USB HID v0.0c Device [HID 0458:5015] on usb-dummy_hcd.1-1/input0 [ 145.110350][ T8] kye 0003:0458:5015.0003: tablet-enabling feature report not found [ 145.119075][ T8] kye 0003:0458:5015.0003: tablet enabling failed [ 145.140852][ T8] usb 2-1: USB disconnect, device number 3 [ 145.241659][ T6570] fido_id[6570]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 147.718660][ T6588] loop0: detected capacity change from 0 to 32768 [ 147.749834][ T6588] JBD2: Ignoring recovery information on journal [ 147.856222][ T6588] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 147.901223][ T6588] OCFS2: ERROR (device loop0): int ocfs2_xattr_find_entry(struct inode *, int, const char *, struct ocfs2_xattr_search *): corrupted xattr entries [ 147.901331][ T6588] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 147.930128][ T6588] OCFS2: Returning error to the calling process. [ 147.936697][ T6588] (syz.0.212,6588,0):ocfs2_setattr:1298 ERROR: status = -117 [ 147.955681][ T6598] OCFS2: ERROR (device loop0): int ocfs2_xattr_find_entry(struct inode *, int, const char *, struct ocfs2_xattr_search *): corrupted xattr entries [ 147.955746][ T6598] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 147.996652][ T6598] OCFS2: Returning error to the calling process. [ 148.011650][ T6598] (syz.0.212,6598,0):ocfs2_calc_xattr_init:638 ERROR: status = -117 [ 148.026063][ T6598] (syz.0.212,6598,0):ocfs2_mknod:334 ERROR: status = -117 [ 148.043890][ T6598] (syz.0.212,6598,0):ocfs2_mknod:502 ERROR: status = -117 [ 148.052573][ T6598] (syz.0.212,6598,0):ocfs2_mkdir:659 ERROR: status = -117 [ 148.343491][ T6151] ocfs2: Unmounting device (7,0) on (node local) [ 148.665413][ T6614] netlink: 4 bytes leftover after parsing attributes in process `syz.3.223'. [ 148.800215][ T6619] x_tables: unsorted underflow at hook 4 [ 149.302775][ T59] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.536818][ T59] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.644384][ T59] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.774251][ T59] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.079235][ T6639] loop1: detected capacity change from 0 to 128 [ 150.116393][ T6640] syz.2.234 uses obsolete (PF_INET,SOCK_PACKET) [ 151.705702][ T5777] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 151.717122][ T5777] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 151.726939][ T5777] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 151.857186][ T5777] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 151.865065][ T5777] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 151.872993][ T5777] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 153.717630][ T6650] chnl_net:caif_netlink_parms(): no params data found [ 154.028246][ T5777] Bluetooth: hci1: command tx timeout [ 154.393832][ T6650] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.435337][ T6650] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.476055][ T6650] bridge_slave_0: entered allmulticast mode [ 154.483374][ T6650] bridge_slave_0: entered promiscuous mode [ 154.560993][ T59] hsr_slave_0: left promiscuous mode [ 154.766638][ T59] hsr_slave_1: left promiscuous mode [ 154.784323][ T6701] sg_write: process 206 (syz.1.246) changed security contexts after opening file descriptor, this is not allowed. [ 154.798580][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.820602][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.084834][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.237524][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.476351][ T59] bridge_slave_1: left allmulticast mode [ 155.565974][ T59] bridge_slave_1: left promiscuous mode [ 155.594918][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.707814][ T59] bridge_slave_0: left allmulticast mode [ 155.713506][ T59] bridge_slave_0: left promiscuous mode [ 155.733106][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.898802][ T59] veth1_macvtap: left promiscuous mode [ 155.904793][ T59] veth0_macvtap: left promiscuous mode [ 155.921185][ T59] veth1_vlan: left promiscuous mode [ 155.925611][ T6723] loop3: detected capacity change from 0 to 512 [ 155.934145][ T59] veth0_vlan: left promiscuous mode [ 155.959253][ T6723] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 156.096327][ T5777] Bluetooth: hci1: command tx timeout [ 156.167372][ T6723] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.252: invalid indirect mapped block 9 (level 0) [ 156.210489][ T6723] EXT4-fs (loop3): 1 truncate cleaned up [ 156.237089][ T6723] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.147624][ T6736] ================================================================== [ 157.155739][ T6736] BUG: KASAN: slab-use-after-free in dvb_device_open+0xca/0x370 [ 157.163534][ T6736] Read of size 8 at addr ffff8880261e1618 by task syz.1.254/6736 [ 157.171290][ T6736] [ 157.173814][ T6736] CPU: 0 PID: 6736 Comm: syz.1.254 Not tainted syzkaller #0 [ 157.181113][ T6736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 157.191212][ T6736] Call Trace: [ 157.194513][ T6736] [ 157.197469][ T6736] dump_stack_lvl+0x18c/0x250 [ 157.202169][ T6736] ? __lock_acquire+0x7d40/0x7d40 [ 157.207228][ T6736] ? show_regs_print_info+0x20/0x20 [ 157.212452][ T6736] ? load_image+0x420/0x420 [ 157.216971][ T6736] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 157.222462][ T6736] ? __virt_addr_valid+0x18c/0x540 [ 157.227592][ T6736] ? __virt_addr_valid+0x469/0x540 [ 157.232721][ T6736] print_report+0xa8/0x210 [ 157.237154][ T6736] ? dvb_device_open+0xca/0x370 [ 157.242022][ T6736] kasan_report+0x117/0x150 [ 157.246543][ T6736] ? chrdev_open+0x3e3/0x6a0 [ 157.251147][ T6736] ? dvb_device_open+0xca/0x370 [ 157.256193][ T6736] dvb_device_open+0xca/0x370 [ 157.260986][ T6736] ? do_raw_spin_unlock+0x121/0x230 [ 157.266239][ T6736] chrdev_open+0x5cc/0x6a0 [ 157.270675][ T6736] ? cd_forget+0x160/0x160 [ 157.275107][ T6736] ? fsnotify_perm+0x3ed/0x5e0 [ 157.279886][ T6736] ? cd_forget+0x160/0x160 [ 157.284319][ T6736] do_dentry_open+0x8c6/0x1500 [ 157.289107][ T6736] path_openat+0x27f1/0x3230 [ 157.293717][ T6736] ? do_sys_openat2+0xda/0x1d0 [ 157.298497][ T6736] ? verify_lock_unused+0x140/0x140 [ 157.303719][ T6736] ? do_filp_open+0x430/0x430 [ 157.308412][ T6736] ? __virt_addr_valid+0x18c/0x540 [ 157.313558][ T6736] do_filp_open+0x1f5/0x430 [ 157.318167][ T6736] ? vfs_tmpfile+0x490/0x490 [ 157.322774][ T6736] ? _raw_spin_unlock+0x28/0x40 [ 157.327643][ T6736] ? alloc_fd+0x58f/0x630 [ 157.331998][ T6736] do_sys_openat2+0x134/0x1d0 [ 157.336790][ T6736] ? do_sys_open+0xe0/0xe0 [ 157.341221][ T6736] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 157.347227][ T6736] ? lock_chain_count+0x20/0x20 [ 157.352094][ T6736] __x64_sys_openat+0x139/0x160 [ 157.356964][ T6736] do_syscall_64+0x55/0xb0 [ 157.361392][ T6736] ? clear_bhb_loop+0x40/0x90 [ 157.366109][ T6736] ? clear_bhb_loop+0x40/0x90 [ 157.370798][ T6736] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 157.376715][ T6736] RIP: 0033:0x7f05f5f5d68e [ 157.381155][ T6736] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 157.400783][ T6736] RSP: 002b:00007f05f6da0b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 157.409218][ T6736] RAX: ffffffffffffffda RBX: 00007f05f6da16c0 RCX: 00007f05f5f5d68e [ 157.417202][ T6736] RDX: 0000000000040002 RSI: 00007f05f6da0c00 RDI: ffffffffffffff9c [ 157.425190][ T6736] RBP: 00007f05f6da0c00 R08: 0000000000000000 R09: 0000000000000000 [ 157.433174][ T6736] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 157.441166][ T6736] R13: 00007f05f6216218 R14: 00007f05f6216180 R15: 00007fffa2f4cf68 [ 157.449169][ T6736] [ 157.452194][ T6736] [ 157.454521][ T6736] Allocated by task 1: [ 157.458675][ T6736] kasan_set_track+0x4e/0x70 [ 157.463290][ T6736] __kasan_kmalloc+0x8f/0xa0 [ 157.467904][ T6736] dvb_register_device+0x2fd/0x2210 [ 157.473116][ T6736] dvb_register_frontend+0x649/0x930 [ 157.478671][ T6736] vidtv_bridge_probe+0x9ab/0xf80 [ 157.483963][ T6736] platform_probe+0x13b/0x1c0 [ 157.488655][ T6736] really_probe+0x25b/0xb20 [ 157.493170][ T6736] __driver_probe_device+0x1ef/0x390 [ 157.498464][ T6736] driver_probe_device+0x4f/0x420 [ 157.503504][ T6736] __driver_attach+0x451/0x6e0 [ 157.508295][ T6736] bus_for_each_dev+0x235/0x2b0 [ 157.513158][ T6736] bus_add_driver+0x340/0x630 [ 157.517845][ T6736] driver_register+0x23a/0x310 [ 157.522618][ T6736] vidtv_bridge_init+0x3d/0x70 [ 157.527394][ T6736] do_one_initcall+0x242/0x790 [ 157.532178][ T6736] do_initcall_level+0x137/0x1f0 [ 157.537135][ T6736] do_initcalls+0x69/0xd0 [ 157.541573][ T6736] kernel_init_freeable+0x3ed/0x580 [ 157.546788][ T6736] kernel_init+0x1d/0x1c0 [ 157.551124][ T6736] ret_from_fork+0x48/0x80 [ 157.555550][ T6736] ret_from_fork_asm+0x11/0x20 [ 157.560329][ T6736] [ 157.562668][ T6736] The buggy address belongs to the object at ffff8880261e1600 [ 157.562668][ T6736] which belongs to the cache kmalloc-256 of size 256 [ 157.576728][ T6736] The buggy address is located 24 bytes inside of [ 157.576728][ T6736] freed 256-byte region [ffff8880261e1600, ffff8880261e1700) [ 157.590456][ T6736] [ 157.592783][ T6736] The buggy address belongs to the physical page: [ 157.599206][ T6736] page:ffffea0000987800 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff8880261e1600 pfn:0x261e0 [ 157.610676][ T6736] head:ffffea0000987800 order:1 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 157.619613][ T6736] ksm flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 157.627960][ T6736] page_type: 0xffffffff() [ 157.632300][ T6736] raw: 00fff00000000840 ffff888017c41b40 ffffea0001e9dd00 0000000000000003 [ 157.640891][ T6736] raw: ffff8880261e1600 000000008010000f 00000001ffffffff 0000000000000000 [ 157.649479][ T6736] page dumped because: kasan: bad access detected [ 157.655910][ T6736] page_owner tracks the page as allocated [ 157.661716][ T6736] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 9512722909, free_ts 0 [ 157.681353][ T6736] post_alloc_hook+0x1c1/0x200 [ 157.686142][ T6736] get_page_from_freelist+0x1951/0x19e0 [ 157.691699][ T6736] __alloc_pages+0x1f0/0x460 [ 157.696300][ T6736] alloc_page_interleave+0x24/0x1e0 [ 157.701515][ T6736] alloc_slab_page+0x5d/0x160 [ 157.706214][ T6736] new_slab+0x87/0x2d0 [ 157.710298][ T6736] ___slab_alloc+0xc5d/0x12f0 [ 157.714989][ T6736] __kmem_cache_alloc_node+0x19e/0x250 [ 157.720461][ T6736] kmalloc_trace+0x2a/0xe0 [ 157.724893][ T6736] bus_add_driver+0x162/0x630 [ 157.729579][ T6736] driver_register+0x23a/0x310 [ 157.734362][ T6736] usb_register_driver+0x206/0x3d0 [ 157.739535][ T6736] do_one_initcall+0x242/0x790 [ 157.744325][ T6736] do_initcall_level+0x137/0x1f0 [ 157.749284][ T6736] do_initcalls+0x69/0xd0 [ 157.753628][ T6736] kernel_init_freeable+0x3ed/0x580 [ 157.758850][ T6736] page_owner free stack trace missing [ 157.764238][ T6736] [ 157.766573][ T6736] Memory state around the buggy address: [ 157.772202][ T6736] ffff8880261e1500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 157.780271][ T6736] ffff8880261e1580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 157.788339][ T6736] >ffff8880261e1600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 157.796412][ T6736] ^ [ 157.801259][ T6736] ffff8880261e1680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 157.809324][ T6736] ffff8880261e1700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 157.817385][ T6736] ================================================================== [ 157.826625][ T6736] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 157.833840][ T6736] CPU: 0 PID: 6736 Comm: syz.1.254 Not tainted syzkaller #0 [ 157.841133][ T6736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 157.851195][ T6736] Call Trace: [ 157.854486][ T6736] [ 157.857433][ T6736] dump_stack_lvl+0x18c/0x250 [ 157.862129][ T6736] ? show_regs_print_info+0x20/0x20 [ 157.867340][ T6736] ? load_image+0x420/0x420 [ 157.871864][ T6736] panic+0x2dc/0x730 [ 157.875776][ T6736] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 157.881948][ T6736] ? bpf_jit_dump+0xd0/0xd0 [ 157.886470][ T6736] ? _raw_spin_unlock_irqrestore+0x111/0x120 [ 157.892555][ T6736] ? _raw_spin_unlock+0x40/0x40 [ 157.897433][ T6736] ? dvb_device_open+0xca/0x370 [ 157.902297][ T6736] check_panic_on_warn+0x84/0xa0 [ 157.907254][ T6736] ? dvb_device_open+0xca/0x370 [ 157.912118][ T6736] end_report+0x6f/0x130 [ 157.916376][ T6736] kasan_report+0x128/0x150 [ 157.920898][ T6736] ? chrdev_open+0x3e3/0x6a0 [ 157.925502][ T6736] ? dvb_device_open+0xca/0x370 [ 157.930372][ T6736] dvb_device_open+0xca/0x370 [ 157.935070][ T6736] ? do_raw_spin_unlock+0x121/0x230 [ 157.940287][ T6736] chrdev_open+0x5cc/0x6a0 [ 157.944725][ T6736] ? cd_forget+0x160/0x160 [ 157.949166][ T6736] ? fsnotify_perm+0x3ed/0x5e0 [ 157.953938][ T6736] ? cd_forget+0x160/0x160 [ 157.958362][ T6736] do_dentry_open+0x8c6/0x1500 [ 157.963153][ T6736] path_openat+0x27f1/0x3230 [ 157.967761][ T6736] ? do_sys_openat2+0xda/0x1d0 [ 157.972534][ T6736] ? verify_lock_unused+0x140/0x140 [ 157.977744][ T6736] ? do_filp_open+0x430/0x430 [ 157.982433][ T6736] ? __virt_addr_valid+0x18c/0x540 [ 157.987561][ T6736] do_filp_open+0x1f5/0x430 [ 157.992073][ T6736] ? vfs_tmpfile+0x490/0x490 [ 157.996679][ T6736] ? _raw_spin_unlock+0x28/0x40 [ 158.001546][ T6736] ? alloc_fd+0x58f/0x630 [ 158.005888][ T6736] do_sys_openat2+0x134/0x1d0 [ 158.010580][ T6736] ? do_sys_open+0xe0/0xe0 [ 158.015011][ T6736] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 158.021003][ T6736] ? lock_chain_count+0x20/0x20 [ 158.025869][ T6736] __x64_sys_openat+0x139/0x160 [ 158.030736][ T6736] do_syscall_64+0x55/0xb0 [ 158.035162][ T6736] ? clear_bhb_loop+0x40/0x90 [ 158.039847][ T6736] ? clear_bhb_loop+0x40/0x90 [ 158.044543][ T6736] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 158.050461][ T6736] RIP: 0033:0x7f05f5f5d68e [ 158.054897][ T6736] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 158.074523][ T6736] RSP: 002b:00007f05f6da0b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 158.082962][ T6736] RAX: ffffffffffffffda RBX: 00007f05f6da16c0 RCX: 00007f05f5f5d68e [ 158.090948][ T6736] RDX: 0000000000040002 RSI: 00007f05f6da0c00 RDI: ffffffffffffff9c [ 158.098929][ T6736] RBP: 00007f05f6da0c00 R08: 0000000000000000 R09: 0000000000000000 [ 158.106907][ T6736] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 158.114884][ T6736] R13: 00007f05f6216218 R14: 00007f05f6216180 R15: 00007fffa2f4cf68 [ 158.122872][ T6736] [ 158.126149][ T6736] Kernel Offset: disabled [ 158.130468][ T6736] Rebooting in 86400 seconds..