last executing test programs: 6m25.328517343s ago: executing program 32 (id=411): ioctl$EXT4_IOC_SETFSUUID(0xffffffffffffffff, 0x4008662c, 0x0) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c1000003d0007010000000005000000017c00000400fc80041001"], 0x101c}}, 0x4010) 6m7.936741536s ago: executing program 33 (id=547): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0xd}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x24, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x81}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40005}, 0x8010) 6m0.096515327s ago: executing program 2 (id=587): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = gettid() r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000700)="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", 0x118) setsockopt$inet6_opts(r1, 0x29, 0x37, 0x0, 0x78) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x4e23, 0x8020000c, @loopback, 0xffffffff}, 0x1c) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x4008014) 5m59.060488346s ago: executing program 2 (id=594): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x3c, 0x3e9, 0x400, 0x70bd2a, 0x25dfdbfe, {0x1, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x7, 0xb8f6, 0x0, 0x0, 0x4}}, 0x3c}}, 0x48000) 5m58.812890098s ago: executing program 2 (id=597): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', 0x1}) write$tun(r0, &(0x7f0000000180)={@val={0x0, 0x805}, @void, @ipv4=@udp={{0x5, 0x4, 0x3, 0x7, 0x1c, 0x67, 0x0, 0x9, 0x11, 0x0, @multicast2}, {0x4e20, 0x4e22, 0x8}}}, 0x20) 5m57.556498897s ago: executing program 2 (id=600): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x800714, &(0x7f00000000c0), 0x1, 0x4c0, &(0x7f00000006c0)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 5m56.560481894s ago: executing program 34 (id=598): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ed) r0 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./proc/net/rpc/auth.unix.ip/content\x00', 0x0, 0x0) lseek(r0, 0x11, 0x1) 5m56.519494566s ago: executing program 2 (id=603): r0 = socket$igmp(0x2, 0x3, 0x2) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x97, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x2, 0x10, 0x4, 0x64, 0x2, 0x5, 0x4b, 0xa7, @loopback, @dev={0xac, 0x14, 0x14, 0x35}}}}}}}, 0x0) 5m55.404394079s ago: executing program 2 (id=607): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000000002}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x12e6, &(0x7f00000000c0)={0x0, 0xa982, 0x10000, 0x0, 0x2aa}, 0x0, &(0x7f0000000180), 0x0) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x68, 0x2, 0x6, 0x1, 0x0, 0x0, {0x7}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffaf}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x9a}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x68}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000810010000000000095000000000000"], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) 5m55.012064678s ago: executing program 35 (id=607): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000000002}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x12e6, &(0x7f00000000c0)={0x0, 0xa982, 0x10000, 0x0, 0x2aa}, 0x0, &(0x7f0000000180), 0x0) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x68, 0x2, 0x6, 0x1, 0x0, 0x0, {0x7}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffaf}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x9a}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x68}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000810010000000000095000000000000"], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) 5m50.772464028s ago: executing program 0 (id=617): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000700)=0x2000008, 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000021c0)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x4000804}, 0x44001) recvfrom(r2, 0x0, 0x0, 0x4100, 0x0, 0x0) 5m49.577987664s ago: executing program 0 (id=618): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x210000, &(0x7f0000000340)={[{@nobarrier}, {@dioread_lock}, {@dioread_nolock}, {@resgid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@lazytime}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@noblock_validity}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x24, &(0x7f00000004c0)={0x20, 0x3, 0x4, 0xb}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x20, 0x0}) 5m48.976167803s ago: executing program 0 (id=619): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x96, 0x0, 0x3}, 0x28) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000170000005400068014000300313233343536373839303132333435363c0004"], 0x68}}, 0x0) 5m48.711495336s ago: executing program 0 (id=621): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x800714, &(0x7f00000000c0), 0x1, 0x4c0, &(0x7f00000006c0)="$eJzs3M1rXFUfAODfnXz0K23y9u3b923fVqNVLH4kTfphFy5UFAQVBF3UZUzSWjttpInQlqBRpK4L7sWl4NKVOzeiLsQ/QMGlFIoGoakgRO5XOklm0nx22szzwGTOuffce86595zJmXvm3gBaVm/6J4noioifI6I7j85P0Ju/zUxPDt+anhxOYnb29d+TLN3N6cnhMmm53Y4icrgSUfk4iWeTxfmOX75ybqhaHb1YxPsnzr/bP375ylNnzw+dGT0zemHw5MljRweePjF4fN52dXa1yLY6y9J63dz//tiBfS+9ee3V4VPX3vr+y3Rfew/m62vrcUe3FpXi5XrJetOj9sdsZuG6R5ed2f1hZ004aW9iQViRtohIT1dH1v+7oy1un7zuePGjphYO2FDp/6YtjVdPzQKbWBLNLgHQHOU/+vT7b/mKv+/S4OMecOO5iM4iPDM9OTwzdx2gPSrF8o4NzL83Ik5N/fVZ+oqVXocAAFiFbGzz5ILxX6YSe7P3fK5jVzGH0hMR/4qI3RHx74jYExH/icjS/jci/pdvPNu9zPx7F8QXj38q1+uWeZ2k479nasZ+MzX1L9562orYzqz+Hcnps9XRI8UxORwdW9L4wBJ5fPNCZ8N1teO/9JXmX44FiwJcb88v0M3tZGRoYmi9DsKNDyP2t9erfzI3E5C2gH0RsX9lu95VBs4+/sWBRonuXP8lrMM80+znEY/l538qFtS/lDSYn0zb+InB4/1bozp6pL9sFYv98NPV1xrlv6b6r4P0/G+f3/4XpOj+M8nnazuiWh29OL7yPK7+8knD7zQraP9z0vbfmbyRzVn/+Ha+7NLQxMTFgYjO5JUsXnSWrZEuH7y97aUiXqZP63/4UP3+v7vYJq3//yMibcQHI3Y9EBEPFmV/KCIejohDS9T/u+cfeWeJ+ieRRFPP/0jdz7+59t+T1M7XryLQdu7brxvN2y/v/B+LqeyzNpd9/t3Bcgu4xsMHAAAA94VKRHRFUunLw71dUan09eW/4d8T2yvVsfGJJ06PvXdhJL9HoCc6KuWVru6a66EDyVSxxzw+WFwrLtcfLa4bf9q2LYv3DY9VR5pcd2h1O+b3/yj7f+q3tmaXDthwjefRlrg1ANgUFvb/SpPKAdx9y/kdje8CsDnV6f/1nqEBbEKe1wKtq17//2BBfNH43wgBNoXF/f/XOo+sAzYj439oXfo/tC79H1rSWu7rX32gvFlgycRlEeum2brsO/xbJVA+HmYj89oWt5dEJQt0xT1Q99UEupeTOCK+WnNebetQ5rTH3N3jU/PAIQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgPvYPwEAAP//O47fqw==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) pwrite64(r0, 0x0, 0x0, 0xe7c) 5m47.660507956s ago: executing program 0 (id=626): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt(r0, 0x0, 0xffffffff, 0x0, 0x0) 5m45.368713644s ago: executing program 5 (id=634): r0 = mq_open(&(0x7f00000004c0)='bata`\xde_sla\x00\x00_1\x00x!\x98\x842\x01\xa3y=\x10\xec\xb9\xfa\xc8\x96\x8d\xd1\xde\x95\x8a\"B\xbdRE\x95jl\\\xcd\r\x13\x05\x9c\x1c\b\xf5\x9d\f\xf0\x99^x.\x0f\xc3l\x9a\x9e\xdd\xca\t\x91v\x9a\xc9\'O\xcf\xb2(\xe3\x89|\xf4;\r\xa999\fzM\xb0.wy\xd8\xe4\xa35q[(\xf2)\x02.\xc5\x960x0}) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x2040000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x60203}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 5m41.615249291s ago: executing program 37 (id=644): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x2040000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x60203}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 5m40.140745251s ago: executing program 7 (id=649): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x44) close(r0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @empty}], 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1}, 0x1) r2 = socket$tipc(0x1e, 0x5, 0x0) listen(r2, 0x7) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 5m39.157468548s ago: executing program 7 (id=651): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001140)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000300)="fe464792f1", 0x5}], 0x1}}], 0x1, 0x8020) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000600)={0x0, 0xfa78}, 0x8) 5m38.952426377s ago: executing program 7 (id=652): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x208205, &(0x7f0000000280)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000000}}, {@errors_remount}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@lazytime}]}, 0x81, 0x63d, &(0x7f0000000600)="$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") openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) 5m38.619163153s ago: executing program 7 (id=654): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x800714, &(0x7f00000000c0), 0x1, 0x4c0, &(0x7f00000006c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) pwrite64(r0, &(0x7f0000000140), 0x0, 0xe7c) 5m37.776639863s ago: executing program 7 (id=659): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x804000, &(0x7f0000000000), 0x2, 0xbc6, &(0x7f00000027c0)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0xbe, 0x0, &(0x7f00000007c0)) rename(&(0x7f0000000340)='./bus\x00', &(0x7f0000000040)='./file0\x00') 5m37.451562589s ago: executing program 7 (id=660): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000b8d000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000010"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 5m37.159848523s ago: executing program 38 (id=660): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000b8d000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000010"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 5m27.472862191s ago: executing program 6 (id=708): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000000500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xb, 0x0, &(0x7f0000000740)="d8188619b95d02ff428486", 0x0, 0x8001ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5m27.382095055s ago: executing program 6 (id=710): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_clone(0x80141000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) writev(0xffffffffffffffff, 0x0, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0xfff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000045c0), 0x1012e, 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, 0x0, 0xa400, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r2, 0x0, 0x8000) 5m24.327662939s ago: executing program 6 (id=717): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000000500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xd, 0x0, &(0x7f0000000740)="d8188619b95d02ff4284860188", 0x0, 0x8001ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5m24.098772921s ago: executing program 6 (id=718): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r0, 0x0, &(0x7f0000000080)=""/193}, 0x20) 5m24.000406015s ago: executing program 6 (id=719): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/class/net/bond0/bonding/slaves\x00', 0x1, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000040)={0x3, 0x2b, 0x4000007, 0x10, 0x4, 0x100, 0x0, 0xba, 0x1}) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) 5m23.724515718s ago: executing program 6 (id=721): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x44) close(r0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @empty}], 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1}, 0x1) listen(0xffffffffffffffff, 0x7) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX]) 5m8.532197577s ago: executing program 39 (id=721): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x44) close(r0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @empty}], 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1}, 0x1) listen(0xffffffffffffffff, 0x7) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX]) 1m42.585658443s ago: executing program 3 (id=1502): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0x400) r1 = syz_open_procfs$namespace(0x0, 0x0) ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) 1m42.181050423s ago: executing program 3 (id=1504): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f00000007c0)={0x28, 0x5, 0x0, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x1004000}) 1m40.98903109s ago: executing program 3 (id=1505): syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) bind$inet6(0xffffffffffffffff, &(0x7f0000019340)={0xa, 0xe24, 0x7, @mcast2, 0x2}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000080000000a"], 0x48) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000608)="0900000004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32=r1, @ANYBLOB="000000000000000018420000060000000000000000000000b703000000000000b70400000000000085000000a4000000b7000000000000009500000000000000b7000000000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x100000, &(0x7f0000000700)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) pipe(0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) 1m34.348053753s ago: executing program 3 (id=1513): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f00000007c0)={0x28, 0x5, 0x0, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x1004000}) 1m33.161956259s ago: executing program 3 (id=1514): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(r3, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) r4 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000000c0)='secret\x00', &(0x7f0000000100)='IQAA7A/AA//+/++\xa5\xd3\x17\xf1AAAAAAAABAAAAAy\xda\xee|\xd9\x0f\aU', 0x0) 1m30.82323203s ago: executing program 3 (id=1517): syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="756e686964652c637275667400696f636861727365743d6d6163637972696c6c69632c757466382c73657373696f6e3d3078303030303030303030303030303036322c696f636861727365743d6370383639416d61703d61636f726e2c696f636861727365743d69736f383835392d322c6d61703d6f66662c696f636861727365743d757466382c6d61703d6f66662c6769643d3ea41a240503ed82774661b070183166022f206a34c0303b86d8556933c235a2c02865831548e6494183eaaedc88c357122e422f165cebd5fdf2069e96984ad91985f5a610dc993adf269bc7575d57c495dddd9ddf1061eec1a6922315c2da20d123020b732beebfa13c49f386fecffb4473d84847a8869094e8274bc860c5b39d8157ed41e7d6192e5c012825614a1a26078396c0fcab4f5d48480b63a6c563f8f8f80b60e88fffc2058d5e89c20ae87c210b6a8b257703f8172c3d94d384ecbc735b984a20823b75f017aa7fd45039d6b970dd25d366ceedafddf3b90764c0753a4f36b0dd1a944923cf8303e58edd9db814fe1353bd429215bb9ca2e236ad595d952dbe1fe273488973db7c22d111fdae971e0110d508002a1b01bdb7bd3e5c7038406b4e441bbe32fd7c5862b606820430eab7206a1ffa884990a0503c51e7cc5d3fd727ec7b", @ANYRESHEX=0x0, @ANYBLOB="2c736d61636b6673726f6f743d2d5c7f402d832c66736d616769633d3078303030303030303030303030303030302c00"], 0xfa, 0x6b6, &(0x7f0000000840)="$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") sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, 0x0, 0x80c0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYBLOB], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x27, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x100000, @loopback}, 0x1c) r2 = syz_open_dev$usbmon(&(0x7f0000000b40), 0xffff, 0x100) ioctl$MON_IOCG_STATS(r2, 0x80089203, &(0x7f0000000b80)) 1m13.815471803s ago: executing program 40 (id=1517): syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="756e686964652c637275667400696f636861727365743d6d6163637972696c6c69632c757466382c73657373696f6e3d3078303030303030303030303030303036322c696f636861727365743d6370383639416d61703d61636f726e2c696f636861727365743d69736f383835392d322c6d61703d6f66662c696f636861727365743d757466382c6d61703d6f66662c6769643d3ea41a240503ed82774661b070183166022f206a34c0303b86d8556933c235a2c02865831548e6494183eaaedc88c357122e422f165cebd5fdf2069e96984ad91985f5a610dc993adf269bc7575d57c495dddd9ddf1061eec1a6922315c2da20d123020b732beebfa13c49f386fecffb4473d84847a8869094e8274bc860c5b39d8157ed41e7d6192e5c012825614a1a26078396c0fcab4f5d48480b63a6c563f8f8f80b60e88fffc2058d5e89c20ae87c210b6a8b257703f8172c3d94d384ecbc735b984a20823b75f017aa7fd45039d6b970dd25d366ceedafddf3b90764c0753a4f36b0dd1a944923cf8303e58edd9db814fe1353bd429215bb9ca2e236ad595d952dbe1fe273488973db7c22d111fdae971e0110d508002a1b01bdb7bd3e5c7038406b4e441bbe32fd7c5862b606820430eab7206a1ffa884990a0503c51e7cc5d3fd727ec7b", @ANYRESHEX=0x0, @ANYBLOB="2c736d61636b6673726f6f743d2d5c7f402d832c66736d616769633d3078303030303030303030303030303030302c00"], 0xfa, 0x6b6, &(0x7f0000000840)="$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") sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, 0x0, 0x80c0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYBLOB], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x27, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x100000, @loopback}, 0x1c) r2 = syz_open_dev$usbmon(&(0x7f0000000b40), 0xffff, 0x100) ioctl$MON_IOCG_STATS(r2, 0x80089203, &(0x7f0000000b80)) 27.699990392s ago: executing program 9 (id=1592): syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0, @ANYBLOB="2c736d61636b6673726f6f743d2d5c7f402d832c66736d616769633d3078303030303030303030303030303030302c00"], 0xfa, 0x6b6, &(0x7f0000000840)="$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") sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, 0x0, 0x80c0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYBLOB], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000080), 0x1) sendto$inet6(r2, &(0x7f0000000040), 0x27, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x100000, @loopback}, 0x1c) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f00000003c0)={0x0, 0x230, 0x0, [0x2, 0x40, 0x0, 0x2, 0xa36b], [0x1, 0x7, 0x8, 0x7ff, 0x0, 0xc, 0x3b, 0x3, 0x2, 0x7, 0x4, 0x2, 0x4, 0x6, 0xffffffffffffffc0, 0x80000001, 0x0, 0x6, 0x5, 0xd34855a, 0x100000000, 0x4, 0x6, 0x8000, 0x5, 0x80000001, 0x83f, 0xee73, 0x1, 0x4, 0xfffffffffffffffa, 0x7, 0x6, 0x9, 0x7fff, 0x8, 0x4, 0x6, 0xffffffff, 0x4, 0x2, 0x0, 0xfffffffffffffffa, 0x698c, 0x0, 0xd51, 0x8, 0x3, 0x30000000000, 0x0, 0x100000000, 0x2203, 0x2, 0xdc16, 0xa75, 0xb0, 0x6, 0x5, 0x4, 0x10001, 0x6, 0x6, 0xd78e, 0xa6, 0x7ac, 0x4, 0x1, 0x1, 0x5, 0x667, 0x7, 0x5, 0x2, 0x7, 0xf2, 0x7, 0x7, 0x400, 0x1, 0x7bb, 0xe, 0x9, 0x3, 0x5, 0x6, 0x0, 0x3, 0x1, 0x8000000000000001, 0x9, 0x8, 0x7, 0x8, 0x3, 0x81, 0xb, 0x7, 0x6, 0x3, 0x6, 0x2, 0x5, 0x5, 0x8, 0x400, 0x5d8e, 0x800, 0xffffffffffffffff, 0x1000, 0x6, 0x5, 0x1, 0x7fffffffffffffff, 0x101, 0xfff, 0x5, 0x7, 0x400, 0x0, 0x4, 0x3]}) syz_open_dev$usbmon(&(0x7f0000000b40), 0xffff, 0x100) wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0) r3 = socket(0x18, 0x6, 0x90) recvmmsg(r3, &(0x7f0000001400)=[{{&(0x7f0000000180)=@ieee802154, 0x80, &(0x7f0000001300)=[{&(0x7f0000000f00)=""/246, 0xf6}, {&(0x7f0000001240)=""/35, 0x23}, {&(0x7f0000001280)=""/79, 0x4f}], 0x3, &(0x7f0000001340)=""/161, 0xa1}, 0x6}], 0x1, 0x0, &(0x7f0000001440)={0x77359400}) 26.082210728s ago: executing program 9 (id=1594): syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) bind$inet6(0xffffffffffffffff, &(0x7f0000019340)={0xa, 0xe24, 0x7, @mcast2, 0x2}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000080000000a"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000608)="0900000004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32=r1, @ANYBLOB="000000000000000018420000060000000000000000000000b703000000000000b70400000000000085000000a4000000b7000000000000009500000000000000b7000000000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x100000, &(0x7f0000000700)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) fanotify_init(0x200, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) 21.979694942s ago: executing program 8 (id=1597): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f00000007c0)={0x28, 0x5, 0x0, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x1004000}) 21.951333903s ago: executing program 4 (id=1598): socket$inet(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2136dbec, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee6, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setaffinity(r1, 0x2, &(0x7f0000000000)=0x80000000000003) pselect6(0x40, &(0x7f0000000100)={0x9, 0x2, 0xfffffffffffffffe, 0x1, 0x8, 0x0, 0x20000000000000}, 0x0, 0x0, 0x0, 0x0) fanotify_init(0x40, 0x40000) r2 = syz_open_dev$video(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x2}) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)=@userptr={0x0, 0x2, 0x2c, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000001000)}, 0x400000}) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000080)={0x1, 0x1, 0x2}) ioctl$VIDIOC_STREAMON(r2, 0x40045612, &(0x7f00000001c0)=0x2) 21.912885865s ago: executing program 9 (id=1599): syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) bind$inet6(0xffffffffffffffff, &(0x7f0000019340)={0xa, 0xe24, 0x7, @mcast2, 0x2}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000080000000a"], 0x48) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28) close(0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000608)="0900000004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32=r1, @ANYBLOB="000000000000000018420000060000000000000000000000b703000000000000b70400000000000085000000a4000000b7000000000000009500000000000000b7000000000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x100000, &(0x7f0000000700)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) fanotify_init(0x200, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) 21.012491928s ago: executing program 8 (id=1600): socket$inet(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2136dbec, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee6, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) pselect6(0x40, &(0x7f0000000100)={0x9, 0x2, 0xfffffffffffffffe, 0x1, 0x8, 0x0, 0x20000000000000}, 0x0, 0x0, 0x0, 0x0) r2 = syz_create_resource$binfmt(&(0x7f0000000000)='./file1\x00') r3 = syz_open_dev$video(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x2}) ioctl$VIDIOC_QBUF(r3, 0xc058560f, &(0x7f00000000c0)=@userptr={0x0, 0x2, 0x2c, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000001000)}, 0x400000}) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000080)={0x1, 0x1, 0x2}) openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) 16.822170676s ago: executing program 4 (id=1601): r0 = syz_open_dev$dri(0x0, 0x1ff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(r3, 0x0, 0x0, 0x2400c042) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={0x0}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r4 = open(0x0, 0x8000, 0x14b) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r4, 0x800c6613, &(0x7f0000000000)=@v1={0x0, @adiantum, 0x4, @desc4}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0) writev(r6, 0x0, 0x0) 16.821816416s ago: executing program 9 (id=1602): syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="756e686964652c637275667400696f636861727365743d6d6163637972696c6c69632c757466382c73657373696f6e3d3078303030303030303030303030303036322c696f636861727365743d6370383639416d61703d61636f726e2c696f636861727365743d69736f383835392d322c6d61703d6f66662c696f636861727365743d757466382c6d61703d6f66662c6769643d3ea41a240503ed82774661b070183166022f206a34c0303b86d8556933c235a2c02865831548e6494183eaaedc88c357122e422f165cebd5fdf2069e96984ad91985f5a610dc993adf269bc7575d57c495dddd9ddf1061eec1a6922315c2da20d123020b732beebfa13c49f386fecffb4473d84847a8869094e8274bc860c5b39d8157ed41e7d6192e5c012825614a1a26078396c0fcab4f5d48480b63a6c563f8f8f80b60e88fffc2058d5e89c20ae87c210b6a8b257703f8172c3d94d384ecbc735b984a20823b75f017aa7fd45039d6b970dd25d366ceedafddf3b90764c0753a4f36b0dd1a944923cf8303e58edd9db814fe1353bd429215bb9ca2e236ad595d952dbe1fe273488973db7c22d111fdae971e0110d508002a1b01bdb7bd3e5c7038406b4e441bbe32fd7c5862b606820430eab7206a1ffa884990a0503c51e7cc5d3fd727ec7b", @ANYRESHEX=0x0, @ANYBLOB="2c736d61636b6673726f6f743d2d5c7f402d832c66736d616769633d3078303030303030303030303030303030302c00"], 0xfa, 0x6b6, &(0x7f0000000840)="$eJzs3c9v2+Ydx/EP5R+S3SErtqEIgvx4kqyAg2WKJDcOjAxoOYqyuUmiQMqDDQwrssYugsjplnTA4kvny34AHbDzbr3ssNv+gWE997/YbQOK7TZgPWggKcqSJUp2rTjt+n4ZiaiHXz7Pl6TCb2iJlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCynWiqVLdW95ta2yeZUA78xYX7S24JuJRO3po4rWdEfFQq6mDRd/NbR7Neiv27ocvLssgrRQ0EHr7z26v1vzufS5Sck9HnotB0+e37w+EGns/v0BLFzOnX3L5NyJwjacJte6HsNe8M1Xuib9bW10p3NWmhqXt0Nd8K22zBO4ObafmBWnFumvL6+atzijr/V3KjadTdtvPfdSqm0Zn6QT3a0pGLobHr1utfciGOi2VHMPfPhj5MA124Ys/eos7s6LckoqJw1MzcQVJnWU6VUqZTLlUp57e763Xul0vxIQylilfo0EjHzFy2+ZGZ38AbOKBfV/79bUl0FNbWlbZmxP46qCuSrkTG/J63/r99xJ447WP/TKn9RerM3+5Li+n81eXY1q/5n5GJk4gXGzbEy2k/3sxBnZPRMz3Wgx3qgjjra1dMZ9G1krs2kl1n+5Ma3b8hVU55C+fLUkB23mF6L0brWtKaS3tamagplVJOnulyF2lGottz4FeUokCtbbfkKZLQiR7dkVNa61rUqI1dF7cjXlpraUFW2/tPtdvf0KN7uqxNyVxpUzgjIDwZVJvSUVf9/+kHyOu3V/xL1/6sqeR3kk4dPJsUAXwB/iw5bZeu0i117MdkAAAAAAIAXwYp/+27F791fkdRVzau7pewFFs8zOwAAAAAAMAuWunldlhWd/0u6Iqubn3j+DwAAAAAAvnSs+Bo7S9Jy/KF+6+hKqJP8EmDuHFIEAAAAAABnFF/5f3VR6sY3rbgma/D8/ycvOz0AAAAAADADvx24x/58eo/dbvq2fk5S2Mpbf/1XXsGCddja/ra1b0dz7P25XBwy8gmAdu2SFf4huVFvfL/eRUnxM8e9bPVG690Es3/fwU/3pt3r3wqOJbA4N9jBsQQu9Ja2opHX5nvP9KGuvzkU+/Agp3hOMspyzau7Rcev3y/Lti/k2u52+xdPHv1SCvrrufeos1t8573OwziXw6jpcD/K44M0nb8s9jbdcC7xQz+Xz7oJ6crYNV5SLR3yd83GshWPW0rXf072fu5oH2Wu//CY+rVuJPvsxnISu3zQv+N+tP6FaP3LxXiXHa391xVt+6MsysfXfNyOyMiiEGdxM4m5uXIzeUjzi/rJWYXvzEmV4ug+GMqiMpjF9G1h/XtkW0zKorctVqMsPo46yshi9XRZjOwRAHhZ9uK7/sRX/sU3MR+pu2l5SA9qn6vuTK/ubw1X9/f/GFXG5L8X8733JiaOUlB0RF+x4jq0qPjAOn9p5Iiero19oaCMI3rpDNUtGuvPR9+B1Et7JIv/drvd++V43N8fq6ofRQt8lIy7MDpuWE82+533938W3wA/8u7uu7tPKpXVtdIbpdLdihbi1eg9zInaAwAYMf07dqZGWG/oehJx/eE/X0+mhireN/ofKSjqHb2njh5qIf0KgWvje10e+BjC7eSsVQNnrea1V+8vScdjy7qdeVYX19KB2Eo/dkHpIsOV+ih29QXvBQAAzteNKXV4fP0vDNX/21pJIlYujT3vHq7lvbPj/il9Vmx5evJvzXprAADw1eAGn1rL7d9YQeC13i6vr5ft9qZrAt/5oQm86oZrvGbbDZxNu7nhmlbgt33Hr5tWoLxXdUMTbrVaftA2NT8wLT/0tuNvfje9r34P3YbdbHtO2Kq7dugax2+2badtql7omNbW9+teuOkG8cJhy3W8mufYbc9vmtDfChy3aEzougOBXtVttr2aF002TSvwGnawY37k17carqm6oRN4rbafdJiO5TVrftCIuy2qe+ovOgQA4P/Rs+cHjx90OrtPj08sRafmScuhMmJGJxbHdMg9ggAA+II5KtenWKjQn/q4+0KyAgAAAAAAAAAAAAAAAAAAAAAAg6Zf0nfKiYVxFwtK/ZafX+i16Fc6usRwpB9LM0xsqbeyJ14qd9oh0ksiDh5/MiF4qd+Sbv7BmMOzrulnJw3+x9ekV+IWJS3z44IL2f1Y0/NZmrBzTzgxF22gkwZ/by/ZopkxmS+AfH9fzM/+n0M08eRPGbO63W538uL54W24OGkFhyfmJT1dPMMuON/jEIDz978AAAD//6rDOgE=") sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, 0x0, 0x80c0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYBLOB], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, &(0x7f0000000080), 0x1) sendto$inet6(r4, &(0x7f0000000040), 0x27, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x100000, @loopback}, 0x1c) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f00000003c0)={0x0, 0x230, 0x0, [0x2, 0x40, 0x0, 0x2, 0xa36b], [0x1, 0x7, 0x8, 0x7ff, 0x0, 0xc, 0x3b, 0x3, 0x2, 0x7, 0x4, 0x2, 0x4, 0x6, 0xffffffffffffffc0, 0x80000001, 0x0, 0x6, 0x5, 0xd34855a, 0x100000000, 0x4, 0x6, 0x8000, 0x5, 0x80000001, 0x83f, 0xee73, 0x1, 0x4, 0xfffffffffffffffa, 0x7, 0x6, 0x9, 0x7fff, 0x8, 0x4, 0x6, 0xffffffff, 0x4, 0x2, 0x0, 0xfffffffffffffffa, 0x698c, 0x0, 0xd51, 0x8, 0x3, 0x30000000000, 0x0, 0x100000000, 0x2203, 0x2, 0xdc16, 0xa75, 0xb0, 0x6, 0x5, 0x4, 0x10001, 0x6, 0x6, 0xd78e, 0xa6, 0x7ac, 0x4, 0x1, 0x1, 0x5, 0x667, 0x7, 0x5, 0x2, 0x7, 0xf2, 0x7, 0x7, 0x400, 0x1, 0x7bb, 0xe, 0x9, 0x3, 0x5, 0x6, 0x0, 0x3, 0x1, 0x8000000000000001, 0x9, 0x8, 0x7, 0x8, 0x3, 0x81, 0xb, 0x7, 0x6, 0x3, 0x6, 0x2, 0x5, 0x5, 0x8, 0x400, 0x5d8e, 0x800, 0xffffffffffffffff, 0x1000, 0x6, 0x5, 0x1, 0x7fffffffffffffff, 0x101, 0xfff, 0x5, 0x7, 0x400, 0x0, 0x4, 0x3]}) syz_open_dev$usbmon(&(0x7f0000000b40), 0xffff, 0x100) wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0) r5 = socket(0x18, 0x6, 0x90) recvmmsg(r5, &(0x7f0000001400)=[{{&(0x7f0000000180)=@ieee802154, 0x80, &(0x7f0000001300)=[{&(0x7f0000000f00)=""/246, 0xf6}, {&(0x7f0000001240)=""/35, 0x23}, {&(0x7f0000001280)=""/79, 0x4f}], 0x3, &(0x7f0000001340)=""/161, 0xa1}, 0x6}], 0x1, 0x0, &(0x7f0000001440)={0x77359400}) 16.820998446s ago: executing program 8 (id=1609): socket$inet(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2136dbec, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee6, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setaffinity(r1, 0x2, &(0x7f0000000000)=0x80000000000003) pselect6(0x40, &(0x7f0000000100)={0x9, 0x2, 0xfffffffffffffffe, 0x1, 0x8, 0x0, 0x20000000000000}, 0x0, 0x0, 0x0, 0x0) fanotify_init(0x40, 0x40000) r2 = syz_open_dev$video(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x2}) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)=@userptr={0x0, 0x2, 0x2c, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000001000)}, 0x400000}) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000080)={0x1, 0x1, 0x2}) ioctl$VIDIOC_STREAMON(r2, 0x40045612, &(0x7f00000001c0)=0x2) 15.723997708s ago: executing program 8 (id=1603): socket$inet(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2136dbec, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee6, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) pselect6(0x40, &(0x7f0000000100)={0x9, 0x2, 0xfffffffffffffffe, 0x1, 0x8, 0x0, 0x20000000000000}, 0x0, 0x0, 0x0, 0x0) r3 = syz_create_resource$binfmt(&(0x7f0000000000)='./file1\x00') r4 = syz_open_dev$video(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x2}) ioctl$VIDIOC_QBUF(r4, 0xc058560f, &(0x7f00000000c0)=@userptr={0x0, 0x2, 0x2c, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000001000)}, 0x400000}) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000080)={0x1, 0x1, 0x2}) openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) 14.950432894s ago: executing program 9 (id=1604): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) add_key$fscrypt_v1(0x0, 0x0, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f00000012c0)=""/41, 0x29}], 0x1) write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) 14.949116794s ago: executing program 1 (id=1613): syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) bind$inet6(0xffffffffffffffff, &(0x7f0000019340)={0xa, 0xe24, 0x7, @mcast2, 0x2}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000080000000a"], 0x48) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28) close(0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000608)="0900000004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32=r1, @ANYBLOB="000000000000000018420000060000000000000000000000b703000000000000b70400000000000085000000a4000000b7000000000000009500000000000000b7000000000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x100000, &(0x7f0000000700)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) 13.521322492s ago: executing program 9 (id=1605): syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) bind$inet6(0xffffffffffffffff, &(0x7f0000019340)={0xa, 0xe24, 0x7, @mcast2, 0x2}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000080000000a"], 0x48) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28) close(0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000608)="0900000004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32=r1, @ANYBLOB="000000000000000018420000060000000000000000000000b703000000000000b70400000000000085000000a4000000b7000000000000009500000000000000b7000000000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x100000, &(0x7f0000000700)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) 13.501372663s ago: executing program 1 (id=1606): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r4, 0x0, {}, 0xfd}, 0x18) connect$can_j1939(r3, &(0x7f0000000080)={0x1d, r4, 0x0, {0x0, 0x0, 0x2}, 0xfe}, 0x18) sendmsg$can_j1939(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0xfe) 11.763462594s ago: executing program 1 (id=1607): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8010}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x21, &(0x7f0000000040), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) process_madvise(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x2, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) sendmmsg(r1, &(0x7f0000005280), 0x4000000000001cd, 0x1008c811) 11.752819405s ago: executing program 4 (id=1617): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r4, 0x0, {}, 0xfd}, 0x18) connect$can_j1939(r3, &(0x7f0000000080)={0x1d, r4, 0x0, {0x0, 0x0, 0x2}, 0xfe}, 0x18) sendmsg$can_j1939(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0xfe) 9.75068516s ago: executing program 4 (id=1608): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f00000007c0)={0x28, 0x5, 0x0, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x1004000}) 8.498818559s ago: executing program 1 (id=1610): socket$inet(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2136dbec, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee6, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) pselect6(0x40, &(0x7f0000000100)={0x9, 0x2, 0xfffffffffffffffe, 0x1, 0x8, 0x0, 0x20000000000000}, 0x0, 0x0, 0x0, 0x0) r2 = syz_create_resource$binfmt(&(0x7f0000000000)='./file1\x00') r3 = syz_open_dev$video(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x2}) ioctl$VIDIOC_QBUF(r3, 0xc058560f, &(0x7f00000000c0)=@userptr={0x0, 0x2, 0x2c, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000001000)}, 0x400000}) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000080)={0x1, 0x1, 0x2}) openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) 8.496694289s ago: executing program 8 (id=1620): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(r3, 0xc0105502, 0x0) r4 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000000c0)='secret\x00', &(0x7f0000000100)='IQAA7A/AA//+/++\xa5\xd3\x17\xf1AAAAAAAABAAAAAy\xda\xee|\xd9\x0f\aU', 0x0) 7.580753752s ago: executing program 4 (id=1611): socket$inet(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2136dbec, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee6, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) pselect6(0x40, &(0x7f0000000100)={0x9, 0x2, 0xfffffffffffffffe, 0x1, 0x8, 0x0, 0x20000000000000}, 0x0, 0x0, 0x0, 0x0) r3 = syz_create_resource$binfmt(&(0x7f0000000000)='./file1\x00') r4 = syz_open_dev$video(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x2}) ioctl$VIDIOC_QBUF(r4, 0xc058560f, &(0x7f00000000c0)=@userptr={0x0, 0x2, 0x2c, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000001000)}, 0x400000}) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000080)={0x1, 0x1, 0x2}) openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) 5.228013813s ago: executing program 1 (id=1612): socket$inet(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2136dbec, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee6, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x2, &(0x7f0000000000)=0x80000000000003) pselect6(0x40, &(0x7f0000000100)={0x9, 0x2, 0xfffffffffffffffe, 0x1, 0x8, 0x0, 0x20000000000000}, 0x0, 0x0, 0x0, 0x0) fanotify_init(0x40, 0x40000) r2 = syz_open_dev$video(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x2}) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)=@userptr={0x0, 0x2, 0x2c, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000001000)}, 0x400000}) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000080)={0x1, 0x1, 0x2}) ioctl$VIDIOC_STREAMON(r2, 0x40045612, &(0x7f00000001c0)=0x2) 3.219884738s ago: executing program 4 (id=1614): syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0, @ANYBLOB="2c736d61636b6673726f6f743d2d5c7f402d832c66736d616769633d3078303030303030303030303030303030302c00"], 0xfa, 0x6b6, &(0x7f0000000840)="$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") sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, 0x0, 0x80c0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYBLOB], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, &(0x7f0000000080), 0x1) sendto$inet6(r4, &(0x7f0000000040), 0x27, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x100000, @loopback}, 0x1c) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f00000003c0)={0x0, 0x230, 0x0, [0x2, 0x40, 0x0, 0x2, 0xa36b], [0x1, 0x7, 0x8, 0x7ff, 0x0, 0xc, 0x3b, 0x3, 0x2, 0x7, 0x4, 0x2, 0x4, 0x6, 0xffffffffffffffc0, 0x80000001, 0x0, 0x6, 0x5, 0xd34855a, 0x100000000, 0x4, 0x6, 0x8000, 0x5, 0x80000001, 0x83f, 0xee73, 0x1, 0x4, 0xfffffffffffffffa, 0x7, 0x6, 0x9, 0x7fff, 0x8, 0x4, 0x6, 0xffffffff, 0x4, 0x2, 0x0, 0xfffffffffffffffa, 0x698c, 0x0, 0xd51, 0x8, 0x3, 0x30000000000, 0x0, 0x100000000, 0x2203, 0x2, 0xdc16, 0xa75, 0xb0, 0x6, 0x5, 0x4, 0x10001, 0x6, 0x6, 0xd78e, 0xa6, 0x7ac, 0x4, 0x1, 0x1, 0x5, 0x667, 0x7, 0x5, 0x2, 0x7, 0xf2, 0x7, 0x7, 0x400, 0x1, 0x7bb, 0xe, 0x9, 0x3, 0x5, 0x6, 0x0, 0x3, 0x1, 0x8000000000000001, 0x9, 0x8, 0x7, 0x8, 0x3, 0x81, 0xb, 0x7, 0x6, 0x3, 0x6, 0x2, 0x5, 0x5, 0x8, 0x400, 0x5d8e, 0x800, 0xffffffffffffffff, 0x1000, 0x6, 0x5, 0x1, 0x7fffffffffffffff, 0x101, 0xfff, 0x5, 0x7, 0x400, 0x0, 0x4, 0x3]}) syz_open_dev$usbmon(&(0x7f0000000b40), 0xffff, 0x100) wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0) r5 = socket(0x18, 0x6, 0x90) recvmmsg(r5, &(0x7f0000001400)=[{{&(0x7f0000000180)=@ieee802154, 0x80, &(0x7f0000001300)=[{&(0x7f0000000f00)=""/246, 0xf6}, {&(0x7f0000001240)=""/35, 0x23}, {&(0x7f0000001280)=""/79, 0x4f}], 0x3, &(0x7f0000001340)=""/161, 0xa1}, 0x6}], 0x1, 0x0, &(0x7f0000001440)={0x77359400}) 1.441182442s ago: executing program 1 (id=1615): openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() getrlimit(0x1, &(0x7f0000000180)) sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) futex(0x0, 0xd, 0x2, 0x0, 0x0, 0x400000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x6, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="b70200000a000000732ac0ff00000000180200000a0000010000000000000000180200000a0000020000000000008000bfa200000000000007020000c0ffffffb703000040000000b704000081000000850000004500000095"], &(0x7f00000011c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r4, 0x0, 0xe, 0x0, &(0x7f0000002280)="0011223344550011223344560800", 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 8 (id=1616): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) add_key$fscrypt_v1(0x0, 0x0, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f00000012c0)=""/41, 0x29}], 0x1) write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) kernel console output (not intermixed with test programs): 2.047963][ T8302] RIP: 0033:0x7f22c3b9e159 [ 192.052380][ T8302] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.072015][ T8302] RSP: 002b:00007f22c49e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 192.080433][ T8302] RAX: ffffffffffffffda RBX: 00007f22c3e25fa0 RCX: 00007f22c3b9e159 [ 192.088430][ T8302] RDX: 000000000000001a RSI: 0000000000000001 RDI: 0000000000000003 [ 192.096496][ T8302] RBP: 00007f22c3c3503b R08: 0000000000000010 R09: 0000000000000000 [ 192.104555][ T8302] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 192.112525][ T8302] R13: 00007f22c3e26038 R14: 00007f22c3e25fa0 R15: 00007ffc4c0283d8 [ 192.120526][ T8302] [ 192.164248][ T8293] EXT4-fs (loop8): failed to initialize system zone (-117) [ 192.171865][ T8293] EXT4-fs (loop8): mount failed [ 192.334417][ T5777] Bluetooth: hci2: command 0x0c1a tx timeout [ 192.603128][ T8315] loop8: detected capacity change from 0 to 512 [ 192.616454][ T8315] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 192.736904][ T8315] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 193.250054][ T8328] loop8: detected capacity change from 0 to 164 [ 193.283906][ T5777] Bluetooth: hci1: command 0x0c1a tx timeout [ 193.364189][ T5777] Bluetooth: hci0: command 0x0c1a tx timeout [ 193.524670][ T5777] Bluetooth: hci3: command 0x0c1a tx timeout [ 193.684784][ T8341] netlink: 64 bytes leftover after parsing attributes in process `syz.3.770'. [ 193.857482][ T8343] loop9: detected capacity change from 0 to 512 [ 193.894296][ T8343] EXT4-fs: Ignoring removed bh option [ 193.932990][ T8348] netlink: 'syz.8.772': attribute type 1 has an invalid length. [ 193.933023][ T8343] EXT4-fs (loop9): bad geometry: first data block 1 is beyond end of filesystem (0) [ 194.096216][ T8339] xt_hashlimit: size too large, truncated to 1048576 [ 194.140084][ T8348] 8021q: adding VLAN 0 to HW filter on device bond1 [ 194.227466][ T8353] loop3: detected capacity change from 0 to 164 [ 194.407894][ T5777] Bluetooth: hci2: command 0x0c1a tx timeout [ 194.418982][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.442764][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.964730][ T8367] FAULT_INJECTION: forcing a failure. [ 194.964730][ T8367] name failslab, interval 1, probability 0, space 0, times 0 [ 195.036320][ T8367] CPU: 1 PID: 8367 Comm: syz.8.778 Not tainted syzkaller #0 [ 195.043761][ T8367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 195.053847][ T8367] Call Trace: [ 195.057166][ T8367] [ 195.060120][ T8367] dump_stack_lvl+0x18c/0x250 [ 195.064838][ T8367] ? show_regs_print_info+0x20/0x20 [ 195.070176][ T8367] ? load_image+0x420/0x420 [ 195.074715][ T8367] ? __might_sleep+0xe0/0xe0 [ 195.079337][ T8367] ? __lock_acquire+0x7d80/0x7d80 [ 195.084396][ T8367] should_fail_ex+0x394/0x4c0 [ 195.089111][ T8367] should_failslab+0x9/0x20 [ 195.093646][ T8367] slab_pre_alloc_hook+0x59/0x300 [ 195.098701][ T8367] kmem_cache_alloc+0x5a/0x2c0 [ 195.103511][ T8367] ? radix_tree_node_alloc+0x7e/0x3a0 [ 195.108893][ T8367] radix_tree_node_alloc+0x7e/0x3a0 [ 195.114119][ T8367] idr_get_free+0x28f/0xa10 [ 195.118651][ T8367] idr_alloc_u32+0x18b/0x330 [ 195.123260][ T8367] ? __fprop_add_percpu_max+0x200/0x200 [ 195.128828][ T8367] ? net_generic+0x1e/0x240 [ 195.133337][ T8367] tcf_idr_check_alloc+0x629/0x7f0 [ 195.138453][ T8367] ? tcf_idr_check_alloc+0xc9/0x7f0 [ 195.143652][ T8367] ? tcf_idr_cleanup+0x70/0x70 [ 195.148424][ T8367] ? __nla_parse+0x40/0x50 [ 195.152870][ T8367] tcf_ctinfo_init+0x634/0xda0 [ 195.157643][ T8367] ? tcf_ctinfo_cleanup+0x60/0x60 [ 195.162677][ T8367] ? nla_memcpy+0x59/0xb0 [ 195.167020][ T8367] tcf_action_init_1+0x458/0x6d0 [ 195.171963][ T8367] ? tc_action_load_ops+0x540/0x540 [ 195.177165][ T8367] ? _raw_read_unlock+0x28/0x40 [ 195.182011][ T8367] ? tc_action_load_ops+0x233/0x540 [ 195.187222][ T8367] ? __skb_flow_dissect+0x1eb/0x6e70 [ 195.192511][ T8367] ? __nla_parse+0x40/0x50 [ 195.196933][ T8367] tcf_action_init+0x287/0x970 [ 195.201705][ T8367] ? tcf_action_init_1+0x6d0/0x6d0 [ 195.206833][ T8367] ? __nla_validate+0x50/0x50 [ 195.211540][ T8367] tc_ctl_action+0x43f/0xbc0 [ 195.216141][ T8367] ? tca_get_fill+0x550/0x550 [ 195.220821][ T8367] ? trace_raw_output_contention_end+0xd0/0xd0 [ 195.227002][ T8367] ? tca_get_fill+0x550/0x550 [ 195.231675][ T8367] rtnetlink_rcv_msg+0x843/0xf90 [ 195.236612][ T8367] ? rtnetlink_rcv_msg+0x220/0xf90 [ 195.241727][ T8367] ? rtnetlink_bind+0x80/0x80 [ 195.246422][ T8367] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 195.252408][ T8367] ? lock_chain_count+0x20/0x20 [ 195.257264][ T8367] ? __local_bh_enable_ip+0x13a/0x1c0 [ 195.262639][ T8367] ? lockdep_hardirqs_on+0x98/0x150 [ 195.267928][ T8367] ? __local_bh_enable_ip+0x13a/0x1c0 [ 195.273299][ T8367] ? _local_bh_enable+0xa0/0xa0 [ 195.278177][ T8367] ? __dev_queue_xmit+0x272/0x37e0 [ 195.283295][ T8367] ? __dev_queue_xmit+0x1329/0x37e0 [ 195.288504][ T8367] ? __dev_queue_xmit+0x272/0x37e0 [ 195.293635][ T8367] ? ref_tracker_free+0x686/0x830 [ 195.298682][ T8367] netlink_rcv_skb+0x235/0x4c0 [ 195.303446][ T8367] ? rtnetlink_bind+0x80/0x80 [ 195.308126][ T8367] ? netlink_ack+0x1160/0x1160 [ 195.312899][ T8367] ? __lock_acquire+0x7d80/0x7d80 [ 195.317928][ T8367] ? netlink_deliver_tap+0x2e/0x1b0 [ 195.323128][ T8367] netlink_unicast+0x7b1/0x930 [ 195.327904][ T8367] netlink_sendmsg+0x8d0/0xbf0 [ 195.332675][ T8367] ? netlink_getsockopt+0x590/0x590 [ 195.337900][ T8367] ? apparmor_socket_sendmsg+0x8e/0x330 [ 195.343452][ T8367] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 195.348741][ T8367] ? security_socket_sendmsg+0x80/0xa0 [ 195.354199][ T8367] ? netlink_getsockopt+0x590/0x590 [ 195.359417][ T8367] ____sys_sendmsg+0x61b/0x980 [ 195.364191][ T8367] ? __asan_memset+0x22/0x40 [ 195.368783][ T8367] ? __sys_sendmsg_sock+0x30/0x30 [ 195.373810][ T8367] ? __import_iovec+0x5f2/0x850 [ 195.378673][ T8367] ? import_iovec+0x73/0xa0 [ 195.383228][ T8367] ___sys_sendmsg+0x2a6/0x360 [ 195.387973][ T8367] ? __sys_sendmsg+0x2b0/0x2b0 [ 195.392798][ T8367] __se_sys_sendmsg+0x1d0/0x2c0 [ 195.397663][ T8367] ? __x64_sys_sendmsg+0x80/0x80 [ 195.402646][ T8367] ? lockdep_hardirqs_on+0x98/0x150 [ 195.407952][ T8367] do_syscall_64+0x55/0xb0 [ 195.412379][ T8367] ? clear_bhb_loop+0x40/0x90 [ 195.417088][ T8367] ? clear_bhb_loop+0x40/0x90 [ 195.421769][ T8367] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 195.427680][ T8367] RIP: 0033:0x7fe6b579e159 [ 195.432105][ T8367] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.451741][ T8367] RSP: 002b:00007fe6b65eb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 195.460161][ T8367] RAX: ffffffffffffffda RBX: 00007fe6b5a25fa0 RCX: 00007fe6b579e159 [ 195.468449][ T8367] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000005 [ 195.476474][ T8367] RBP: 00007fe6b583503b R08: 0000000000000000 R09: 0000000000000000 [ 195.484563][ T8367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 195.492625][ T8367] R13: 00007fe6b5a26038 R14: 00007fe6b5a25fa0 R15: 00007ffe8f1b7f48 [ 195.500635][ T8367] [ 195.604514][ T5777] Bluetooth: hci1: command 0x0c1a tx timeout [ 195.610629][ T5777] Bluetooth: hci0: command 0x0c1a tx timeout [ 195.617299][ T5777] Bluetooth: hci3: command 0x0c1a tx timeout [ 196.314354][ T8381] netlink: 165 bytes leftover after parsing attributes in process `syz.3.782'. [ 196.547517][ T8386] xt_hashlimit: max too large, truncated to 1048576 [ 197.036706][ T8397] loop8: detected capacity change from 0 to 164 [ 197.536964][ T8406] loop8: detected capacity change from 0 to 164 [ 197.567197][ T8406] isofs_fill_super: bread failed, dev=loop8, iso_blknum=41, block=82 [ 197.591324][ T8411] loop3: detected capacity change from 0 to 1024 [ 197.637066][ T8411] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 197.707302][ T8411] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 197.804149][ T8411] EXT4-fs (loop3): invalid journal inode [ 197.864504][ T8411] EXT4-fs (loop3): can't get journal size [ 197.897108][ T8411] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a800e11c, mo2=0002] [ 198.195917][ T8411] EXT4-fs error (device loop3): ext4_protect_reserved_inode:182: inode #2: comm syz.3.788: blocks 48-48 from inode overlap system zone [ 198.603846][ T8411] EXT4-fs (loop3): failed to initialize system zone (-117) [ 198.611259][ T8411] EXT4-fs (loop3): mount failed [ 199.709152][ T8439] loop8: detected capacity change from 0 to 512 [ 199.802196][ T8439] EXT4-fs error (device loop8): mb_free_blocks:1970: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 199.895753][ T8439] EXT4-fs error (device loop8): ext4_do_update_inode:5256: inode #11: comm syz.8.794: corrupted inode contents [ 199.957644][ T8439] EXT4-fs error (device loop8): ext4_dirty_inode:6144: inode #11: comm syz.8.794: mark_inode_dirty error [ 199.992703][ T8439] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #11: comm syz.8.794: invalid indirect mapped block 1 (level 1) [ 200.040974][ T8439] EXT4-fs error (device loop8): ext4_do_update_inode:5256: inode #11: comm syz.8.794: corrupted inode contents [ 200.100392][ T8439] EXT4-fs error (device loop8) in ext4_orphan_del:303: Corrupt filesystem [ 200.156808][ T8439] EXT4-fs error (device loop8): ext4_do_update_inode:5256: inode #11: comm syz.8.794: corrupted inode contents [ 200.214302][ T8439] EXT4-fs error (device loop8): ext4_truncate:4302: inode #11: comm syz.8.794: mark_inode_dirty error [ 200.254112][ T8439] EXT4-fs error (device loop8) in ext4_process_orphan:345: Corrupt filesystem [ 200.277430][ T8439] EXT4-fs (loop8): 1 truncate cleaned up [ 200.295960][ T8439] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.348636][ T8439] EXT4-fs error (device loop8): ext4_find_dest_de:2115: inode #2: block 13: comm syz.8.794: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 200.511575][ T8456] netlink: 8 bytes leftover after parsing attributes in process `syz.9.797'. [ 200.530377][ T7784] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.780625][ T8462] loop8: detected capacity change from 0 to 164 [ 200.877484][ T8462] rock: directory entry would overflow storage [ 200.894122][ T8462] rock: sig=0x66, size=4, remaining=3 [ 200.941051][ T8462] device-mapper: ioctl: Invalid ioctl structure: name m, dev f800 [ 201.212918][ T8475] netlink: 20 bytes leftover after parsing attributes in process `syz.3.802'. [ 201.570232][ T5777] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 201.581229][ T5777] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 201.589629][ T5777] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 201.602888][ T5777] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 201.618510][ T5777] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 201.632777][ T5777] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 201.896825][ T8500] loop9: detected capacity change from 0 to 164 [ 201.964863][ T8502] loop3: detected capacity change from 0 to 164 [ 201.988591][ T8502] rock: directory entry would overflow storage [ 202.003895][ T8502] rock: sig=0x66, size=4, remaining=3 [ 202.054292][ T8502] device-mapper: ioctl: populate_table: target parameters not NUL-terminated [ 202.338382][ T60] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.652754][ T60] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.826461][ T60] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.018406][ T60] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.339955][ T8489] chnl_net:caif_netlink_parms(): no params data found [ 203.487921][ T8558] loop9: detected capacity change from 0 to 164 [ 203.579640][ T8558] rock: directory entry would overflow storage [ 203.614016][ T8558] rock: sig=0x66, size=4, remaining=3 [ 203.668150][ T8558] device-mapper: ioctl: populate_table: target parameters not NUL-terminated [ 203.685780][ T5781] Bluetooth: hci4: command tx timeout [ 203.763372][ T8489] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.771278][ T8489] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.787965][ T8489] bridge_slave_0: entered allmulticast mode [ 203.804872][ T8489] bridge_slave_0: entered promiscuous mode [ 203.815656][ T8489] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.822900][ T8489] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.837373][ T8489] bridge_slave_1: entered allmulticast mode [ 203.845427][ T8571] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 203.855852][ T8489] bridge_slave_1: entered promiscuous mode [ 204.145365][ T8489] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.158107][ T8582] loop8: detected capacity change from 0 to 164 [ 204.252347][ T8489] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.405394][ T8591] netlink: 28 bytes leftover after parsing attributes in process `syz.8.829'. [ 204.436670][ T8591] netlink: 28 bytes leftover after parsing attributes in process `syz.8.829'. [ 204.480029][ T8582] netlink: 28 bytes leftover after parsing attributes in process `syz.8.829'. [ 204.491263][ T8582] netlink: 28 bytes leftover after parsing attributes in process `syz.8.829'. [ 204.680281][ T8489] team0: Port device team_slave_0 added [ 204.718068][ T8489] team0: Port device team_slave_1 added [ 204.879481][ T8600] loop8: detected capacity change from 0 to 1764 [ 205.434428][ T8489] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.441423][ T8489] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.568984][ T8489] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.744873][ T8489] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.751865][ T8489] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.784408][ T5781] Bluetooth: hci4: command tx timeout [ 205.883734][ T8489] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.117425][ T8489] hsr_slave_0: entered promiscuous mode [ 206.157695][ T8489] hsr_slave_1: entered promiscuous mode [ 206.184294][ T8489] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 206.191911][ T8489] Cannot create hsr debugfs directory [ 207.152304][ T60] hsr_slave_0: left promiscuous mode [ 207.175735][ T60] hsr_slave_1: left promiscuous mode [ 207.216474][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.243744][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 207.253964][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.261432][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.305842][ T60] bridge_slave_1: left allmulticast mode [ 207.311563][ T60] bridge_slave_1: left promiscuous mode [ 207.343955][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.360751][ T60] bridge_slave_0: left allmulticast mode [ 207.378085][ T60] bridge_slave_0: left promiscuous mode [ 207.403943][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.512153][ T60] veth1_macvtap: left promiscuous mode [ 207.517838][ T60] veth0_macvtap: left promiscuous mode [ 207.523489][ T60] veth1_vlan: left promiscuous mode [ 207.543916][ T60] veth0_vlan: left promiscuous mode [ 207.848218][ T5781] Bluetooth: hci4: command tx timeout [ 208.827397][ T60] team0 (unregistering): Port device team_slave_1 removed [ 208.869427][ T60] team0 (unregistering): Port device team_slave_0 removed [ 208.917681][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 208.963510][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 209.292600][ T60] bond0 (unregistering): Released all slaves [ 209.886667][ T8489] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 209.901342][ T8489] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 209.913305][ T8489] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 209.924391][ T5781] Bluetooth: hci4: command tx timeout [ 209.924540][ T8489] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 210.032170][ T8489] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.062682][ T8489] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.105549][ T4441] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.112722][ T4441] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.139003][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.146271][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.459581][ T8489] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.791413][ T8489] veth0_vlan: entered promiscuous mode [ 210.812264][ T8489] veth1_vlan: entered promiscuous mode [ 210.867166][ T8489] veth0_macvtap: entered promiscuous mode [ 210.882549][ T8489] veth1_macvtap: entered promiscuous mode [ 210.913580][ T8489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.929156][ T8489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.941505][ T8489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.959189][ T8489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.969531][ T8489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.984667][ T8489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.001000][ T8489] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 211.021553][ T8489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.032218][ T8489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.043189][ T8489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.055749][ T8489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.065926][ T8489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.076784][ T8489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.088423][ T8489] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 211.102617][ T8489] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.113523][ T8489] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.122776][ T8489] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.140482][ T8489] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.241216][ T4441] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.273712][ T4441] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.317027][ T2903] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.328494][ T2903] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.567878][ T8699] loop9: detected capacity change from 0 to 164 [ 211.603053][ T8699] isofs_fill_super: bread failed, dev=loop9, iso_blknum=41, block=82 [ 211.701931][ T8707] loop4: detected capacity change from 0 to 164 [ 211.782594][ T8707] rock: directory entry would overflow storage [ 211.831297][ T8707] rock: sig=0x66, size=4, remaining=3 [ 211.945437][ T8707] device-mapper: ioctl: populate_table: target parameters not NUL-terminated [ 212.955139][ T8726] loop8: detected capacity change from 0 to 164 [ 212.997267][ T8726] netlink: 28 bytes leftover after parsing attributes in process `syz.8.841'. [ 213.030033][ T8726] netlink: 28 bytes leftover after parsing attributes in process `syz.8.841'. [ 213.085140][ T8726] netlink: 28 bytes leftover after parsing attributes in process `syz.8.841'. [ 213.117342][ T8726] netlink: 28 bytes leftover after parsing attributes in process `syz.8.841'. [ 213.312469][ T8735] loop3: detected capacity change from 0 to 512 [ 213.431417][ T8735] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.506306][ T8735] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 213.815796][ T7923] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.120281][ T8758] loop3: detected capacity change from 0 to 164 [ 214.199325][ T8758] isofs_fill_super: bread failed, dev=loop3, iso_blknum=41, block=82 [ 215.329934][ T8777] loop8: detected capacity change from 0 to 164 [ 215.400489][ T8777] netlink: 28 bytes leftover after parsing attributes in process `syz.8.858'. [ 215.456337][ T8777] netlink: 28 bytes leftover after parsing attributes in process `syz.8.858'. [ 215.506052][ T8785] netlink: 28 bytes leftover after parsing attributes in process `syz.8.858'. [ 215.545838][ T8785] netlink: 28 bytes leftover after parsing attributes in process `syz.8.858'. [ 216.217448][ T8822] loop9: detected capacity change from 0 to 164 [ 216.358940][ T8829] loop3: detected capacity change from 0 to 164 [ 216.469143][ T5762] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 216.535510][ T8837] loop4: detected capacity change from 0 to 164 [ 216.649472][ T8837] isofs_fill_super: bread failed, dev=loop4, iso_blknum=41, block=82 [ 217.539357][ T8844] loop8: detected capacity change from 0 to 164 [ 217.639437][ T8844] netlink: 28 bytes leftover after parsing attributes in process `syz.8.875'. [ 217.699444][ T8844] netlink: 28 bytes leftover after parsing attributes in process `syz.8.875'. [ 217.971931][ T8853] loop8: detected capacity change from 0 to 512 [ 218.047322][ T8853] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 218.120561][ T8853] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 218.190229][ T8853] EXT4-fs (loop8): orphan cleanup on readonly fs [ 218.240045][ T8853] EXT4-fs error (device loop8): ext4_orphan_get:1434: comm syz.8.878: bad orphan inode 3 [ 218.299901][ T8853] EXT4-fs (loop8): Remounting filesystem read-only [ 218.315015][ T8853] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 218.365991][ T8853] EXT4-fs warning (device loop8): dx_probe:893: inode #2: comm syz.8.878: dx entry: limit 0 != root limit 125 [ 218.393077][ T8853] EXT4-fs warning (device loop8): dx_probe:966: inode #2: comm syz.8.878: Corrupt directory, running e2fsck is recommended [ 218.941970][ T7784] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 219.203330][ T8876] tipc: Started in network mode [ 219.212670][ T8872] loop4: detected capacity change from 0 to 164 [ 219.227852][ T8876] tipc: Node identity ca1f080f5c77, cluster identity 4711 [ 219.256697][ T8876] tipc: Enabled bearer , priority 0 [ 219.287756][ T8883] syzkaller0: entered promiscuous mode [ 219.294731][ T8872] isofs_fill_super: bread failed, dev=loop4, iso_blknum=41, block=82 [ 219.316893][ T8883] syzkaller0: entered allmulticast mode [ 219.318217][ T8884] loop3: detected capacity change from 0 to 164 [ 219.419166][ T8875] tipc: Resetting bearer [ 219.493300][ T8887] loop8: detected capacity change from 0 to 164 [ 220.275503][ T8875] tipc: Disabling bearer [ 220.312774][ T8895] device-mapper: table: 248:0: zero-length target [ 220.319501][ T8895] device-mapper: ioctl: error adding target to table [ 220.401649][ T8887] __nla_validate_parse: 2 callbacks suppressed [ 220.401666][ T8887] netlink: 28 bytes leftover after parsing attributes in process `syz.8.887'. [ 220.450584][ T8887] netlink: 28 bytes leftover after parsing attributes in process `syz.8.887'. [ 220.461403][ T8893] netlink: 28 bytes leftover after parsing attributes in process `syz.8.887'. [ 220.494546][ T8893] netlink: 28 bytes leftover after parsing attributes in process `syz.8.887'. [ 220.533998][ T5853] tipc: Node number set to 2523400207 [ 220.655393][ T8900] loop4: detected capacity change from 0 to 164 [ 220.804231][ T8900] isofs_fill_super: bread failed, dev=loop4, iso_blknum=41, block=82 [ 221.915743][ T8930] loop4: detected capacity change from 0 to 164 [ 222.020858][ T8932] device-mapper: table: 248:0: zero-length target [ 222.058459][ T8932] device-mapper: ioctl: error adding target to table [ 222.472704][ T8944] loop3: detected capacity change from 0 to 164 [ 222.586303][ T8944] netlink: 28 bytes leftover after parsing attributes in process `syz.3.900'. [ 222.620632][ T8944] netlink: 28 bytes leftover after parsing attributes in process `syz.3.900'. [ 222.643245][ T8944] netlink: 28 bytes leftover after parsing attributes in process `syz.3.900'. [ 222.652540][ T8944] netlink: 28 bytes leftover after parsing attributes in process `syz.3.900'. [ 224.149673][ T8976] loop8: detected capacity change from 0 to 164 [ 224.183519][ T8983] device-mapper: table: 248:0: zero-length target [ 224.199362][ T8984] loop4: detected capacity change from 0 to 164 [ 224.205153][ T8983] device-mapper: ioctl: error adding target to table [ 224.230164][ T8976] isofs_fill_super: bread failed, dev=loop8, iso_blknum=41, block=82 [ 224.253336][ T8984] netlink: 28 bytes leftover after parsing attributes in process `syz.4.911'. [ 224.303422][ T8984] netlink: 28 bytes leftover after parsing attributes in process `syz.4.911'. [ 224.414760][ T8989] rtc_cmos 00:00: Alarms can be up to one day in the future [ 225.306683][ T9005] sg_write: data in/out 323328/136 bytes for SCSI command 0x0-- guessing data in; [ 225.306683][ T9005] program syz.9.916 not setting count and/or reply_len properly [ 225.328885][ T9004] syzkaller0: entered promiscuous mode [ 225.360161][ T9004] syzkaller0: entered allmulticast mode [ 225.890099][ T9025] loop8: detected capacity change from 0 to 164 [ 225.932050][ T9025] rock: directory entry would overflow storage [ 225.948554][ T9025] rock: sig=0x66, size=4, remaining=3 [ 225.995223][ T9029] loop4: detected capacity change from 0 to 164 [ 226.099598][ T9029] __nla_validate_parse: 2 callbacks suppressed [ 226.099614][ T9029] netlink: 28 bytes leftover after parsing attributes in process `syz.4.924'. [ 226.144262][ T9029] netlink: 28 bytes leftover after parsing attributes in process `syz.4.924'. [ 226.233111][ T9029] netlink: 28 bytes leftover after parsing attributes in process `syz.4.924'. [ 226.281323][ T9029] netlink: 28 bytes leftover after parsing attributes in process `syz.4.924'. [ 226.978947][ T9062] loop8: detected capacity change from 0 to 164 [ 227.059412][ T9062] rock: directory entry would overflow storage [ 227.084038][ T9062] rock: sig=0x66, size=4, remaining=3 [ 227.301848][ T9073] loop4: detected capacity change from 0 to 164 [ 227.350345][ T9073] netlink: 28 bytes leftover after parsing attributes in process `syz.4.938'. [ 227.378457][ T9073] netlink: 'syz.4.938': attribute type 6 has an invalid length. [ 227.423894][ T9073] netlink: 28 bytes leftover after parsing attributes in process `syz.4.938'. [ 227.451803][ T9078] netlink: 28 bytes leftover after parsing attributes in process `syz.4.938'. [ 227.486461][ T9078] netlink: 'syz.4.938': attribute type 6 has an invalid length. [ 227.512512][ T9078] netlink: 28 bytes leftover after parsing attributes in process `syz.4.938'. [ 227.721688][ T9089] loop9: detected capacity change from 0 to 164 [ 227.888566][ T9095] loop4: detected capacity change from 0 to 1024 [ 227.920856][ T9099] loop3: detected capacity change from 0 to 164 [ 228.002517][ T9099] rock: directory entry would overflow storage [ 228.050777][ T9099] rock: sig=0x66, size=4, remaining=3 [ 228.275560][ T9105] loop8: detected capacity change from 0 to 164 [ 228.312841][ T9095] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 228.449220][ T9095] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 228.535535][ T9095] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.944: bg 0: block 112: padding at end of block bitmap is not set [ 228.571383][ T9095] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 228.591391][ T9095] EXT4-fs (loop4): This should not happen!! Data will be lost [ 228.591391][ T9095] [ 228.604447][ T9105] isofs_fill_super: bread failed, dev=loop8, iso_blknum=41, block=82 [ 228.623773][ T9095] EXT4-fs (loop4): Total free blocks count 0 [ 228.639746][ T9095] EXT4-fs (loop4): Free/Dirty block details [ 228.675502][ T9095] EXT4-fs (loop4): free_blocks=0 [ 228.683992][ T9095] EXT4-fs (loop4): dirty_blocks=64 [ 228.742691][ T9095] EXT4-fs (loop4): Block reservation details [ 228.752370][ T9095] EXT4-fs (loop4): i_reserved_data_blocks=4 [ 229.352290][ T8489] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 229.487635][ T9129] loop9: detected capacity change from 0 to 164 [ 229.552752][ T9129] netlink: 28 bytes leftover after parsing attributes in process `syz.9.953'. [ 229.596603][ T9129] netlink: 'syz.9.953': attribute type 6 has an invalid length. [ 229.629371][ T9129] netlink: 28 bytes leftover after parsing attributes in process `syz.9.953'. [ 229.697896][ T9136] netlink: 'syz.9.953': attribute type 6 has an invalid length. [ 229.752176][ T9141] loop4: detected capacity change from 0 to 164 [ 229.805763][ T9141] rock: directory entry would overflow storage [ 229.830981][ T9141] rock: sig=0x66, size=4, remaining=3 [ 230.014445][ T9146] tc action pedit offset must be on 32 bit boundaries [ 230.021716][ T9146] tc action pedit offset must be on 32 bit boundaries [ 230.028571][ T9146] tc action pedit offset must be on 32 bit boundaries [ 230.035431][ T9146] tc action pedit offset must be on 32 bit boundaries [ 230.042229][ T9146] tc action pedit offset must be on 32 bit boundaries [ 230.049060][ T9146] tc action pedit offset must be on 32 bit boundaries [ 230.055907][ T9146] tc action pedit offset must be on 32 bit boundaries [ 230.062676][ T9146] tc action pedit offset must be on 32 bit boundaries [ 230.069523][ T9146] tc action pedit offset must be on 32 bit boundaries [ 230.076348][ T9146] tc action pedit offset must be on 32 bit boundaries [ 230.083150][ T9146] 0: reclassify loop, rule prio 0, protocol 800 [ 230.140472][ T9155] loop8: detected capacity change from 0 to 164 [ 230.209306][ T9155] isofs_fill_super: bread failed, dev=loop8, iso_blknum=41, block=82 [ 230.239416][ T9154] loop4: detected capacity change from 0 to 164 [ 230.286683][ T9154] isofs_fill_super: bread failed, dev=loop4, iso_blknum=41, block=82 [ 230.591049][ T6946] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 231.349717][ T9170] loop3: detected capacity change from 0 to 164 [ 231.611818][ T9174] netlink: 'syz.4.963': attribute type 83 has an invalid length. [ 232.340763][ T9192] loop4: detected capacity change from 0 to 164 [ 232.396443][ T9192] __nla_validate_parse: 2 callbacks suppressed [ 232.396459][ T9192] netlink: 28 bytes leftover after parsing attributes in process `syz.4.968'. [ 232.420260][ T9194] loop3: detected capacity change from 0 to 164 [ 232.443394][ T9192] netlink: 'syz.4.968': attribute type 6 has an invalid length. [ 232.471577][ T9192] netlink: 28 bytes leftover after parsing attributes in process `syz.4.968'. [ 232.490620][ T9194] rock: directory entry would overflow storage [ 232.514416][ T9201] netlink: 28 bytes leftover after parsing attributes in process `syz.4.968'. [ 232.518947][ T9194] rock: sig=0x66, size=4, remaining=3 [ 232.535504][ T9201] netlink: 'syz.4.968': attribute type 6 has an invalid length. [ 232.561434][ T9201] netlink: 28 bytes leftover after parsing attributes in process `syz.4.968'. [ 232.770652][ T9208] loop9: detected capacity change from 0 to 164 [ 232.786925][ T9206] loop8: detected capacity change from 0 to 164 [ 232.836495][ T9206] isofs_fill_super: bread failed, dev=loop8, iso_blknum=41, block=82 [ 234.020084][ T9233] loop3: detected capacity change from 0 to 164 [ 234.179315][ T9231] isofs_fill_super: bread failed, dev=loop4, iso_blknum=41, block=82 [ 234.196141][ T9239] rock: directory entry would overflow storage [ 234.224343][ T9239] rock: sig=0x66, size=4, remaining=3 [ 234.730092][ T9247] set_capacity_and_notify: 2 callbacks suppressed [ 234.730134][ T9247] loop3: detected capacity change from 0 to 164 [ 234.965159][ T9247] netlink: 28 bytes leftover after parsing attributes in process `syz.3.984'. [ 235.036765][ T9247] netlink: 28 bytes leftover after parsing attributes in process `syz.3.984'. [ 235.112896][ T9257] netlink: 28 bytes leftover after parsing attributes in process `syz.3.984'. [ 235.147962][ T9255] loop8: detected capacity change from 0 to 164 [ 235.156052][ T9257] netlink: 28 bytes leftover after parsing attributes in process `syz.3.984'. [ 235.253623][ T9255] isofs_fill_super: bread failed, dev=loop8, iso_blknum=41, block=82 [ 235.512780][ T9263] loop4: detected capacity change from 0 to 164 [ 235.769913][ T9263] isofs_fill_super: bread failed, dev=loop4, iso_blknum=41, block=82 [ 236.716810][ T9280] loop8: detected capacity change from 0 to 164 [ 236.784387][ T9280] rock: directory entry would overflow storage [ 236.833447][ T9280] rock: sig=0x66, size=4, remaining=3 [ 237.121196][ T9293] loop9: detected capacity change from 0 to 164 [ 237.158760][ T9293] netlink: 28 bytes leftover after parsing attributes in process `syz.9.998'. [ 237.188391][ T9293] netlink: 28 bytes leftover after parsing attributes in process `syz.9.998'. [ 237.204117][ T9292] loop3: detected capacity change from 0 to 164 [ 237.256901][ T9292] isofs_fill_super: bread failed, dev=loop3, iso_blknum=41, block=82 [ 237.469759][ T6424] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 237.667411][ T6424] usb 5-1: Using ep0 maxpacket: 16 [ 237.734872][ T6424] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 238.078003][ T6424] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 238.175126][ T9307] FAULT_INJECTION: forcing a failure. [ 238.175126][ T9307] name failslab, interval 1, probability 0, space 0, times 0 [ 238.187925][ T9307] CPU: 0 PID: 9307 Comm: syz.8.1001 Not tainted syzkaller #0 [ 238.195344][ T9307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 238.203825][ T6424] usb 5-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 238.205406][ T9307] Call Trace: [ 238.217752][ T9307] [ 238.220699][ T9307] dump_stack_lvl+0x18c/0x250 [ 238.225411][ T9307] ? show_regs_print_info+0x20/0x20 [ 238.230649][ T9307] ? load_image+0x420/0x420 [ 238.235212][ T9307] ? __might_sleep+0xe0/0xe0 [ 238.239844][ T9307] ? __lock_acquire+0x7d80/0x7d80 [ 238.244894][ T9307] should_fail_ex+0x394/0x4c0 [ 238.249609][ T9307] should_failslab+0x9/0x20 [ 238.254120][ T9307] slab_pre_alloc_hook+0x59/0x300 [ 238.259155][ T9307] ? __lock_acquire+0x7d80/0x7d80 [ 238.264283][ T9307] ? dummy_alloc_request+0x7f/0x130 [ 238.269478][ T9307] __kmem_cache_alloc_node+0x53/0x250 [ 238.274883][ T9307] ? dummy_alloc_request+0x7f/0x130 [ 238.280259][ T9307] kmalloc_trace+0x2a/0xe0 [ 238.284718][ T9307] dummy_alloc_request+0x7f/0x130 [ 238.289862][ T9307] usb_ep_alloc_request+0x61/0x250 [ 238.294995][ T9307] gadget_bind+0xec/0x5b0 [ 238.299341][ T9307] ? kernfs_put+0x309/0x360 [ 238.303880][ T9307] ? gadget_disconnect+0x10/0x10 [ 238.308821][ T9307] gadget_bind_driver+0x2b3/0x770 [ 238.313954][ T9307] ? gadget_match_driver+0x130/0x130 [ 238.319422][ T9307] really_probe+0x247/0xae0 [ 238.324012][ T9307] ? pm_runtime_barrier+0x14b/0x1c0 [ 238.329233][ T9307] __driver_probe_device+0x1f5/0x390 [ 238.334525][ T9307] driver_probe_device+0x4f/0x420 [ 238.339553][ T9307] __driver_attach+0x444/0x6d0 [ 238.344329][ T9307] bus_for_each_dev+0x235/0x2b0 [ 238.349185][ T9307] ? driver_attach+0x50/0x50 [ 238.353956][ T9307] ? bus_remove_file+0x140/0x140 [ 238.358900][ T9307] ? do_raw_spin_unlock+0x121/0x230 [ 238.364118][ T9307] bus_add_driver+0x340/0x630 [ 238.368805][ T9307] driver_register+0x23a/0x310 [ 238.373573][ T9307] usb_gadget_register_driver_owner+0xf9/0x270 [ 238.379746][ T9307] raw_ioctl+0x1613/0x3d80 [ 238.384184][ T9307] ? tomoyo_path_number_perm+0x56b/0x5e0 [ 238.389824][ T9307] ? tomoyo_path_number_perm+0x217/0x5e0 [ 238.395460][ T9307] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 238.400924][ T9307] ? make_qualifier+0x260/0x260 [ 238.405819][ T9307] ? __fget_files+0x28/0x460 [ 238.410420][ T9307] ? bpf_lsm_file_ioctl+0x9/0x10 [ 238.415380][ T9307] ? security_file_ioctl+0x80/0xa0 [ 238.420514][ T9307] ? make_qualifier+0x260/0x260 [ 238.425366][ T9307] __se_sys_ioctl+0xfd/0x170 [ 238.429965][ T9307] do_syscall_64+0x55/0xb0 [ 238.434405][ T9307] ? clear_bhb_loop+0x40/0x90 [ 238.439089][ T9307] ? clear_bhb_loop+0x40/0x90 [ 238.443772][ T9307] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 238.449668][ T9307] RIP: 0033:0x7fe6b579ddeb [ 238.454082][ T9307] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 238.473694][ T9307] RSP: 002b:00007fe6b65e8f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 238.482123][ T9307] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007fe6b579ddeb [ 238.490111][ T9307] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 238.498083][ T9307] RBP: 00007fe6b65e9fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 238.506062][ T9307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 238.514054][ T9307] R13: 0000200000000000 R14: 0000000000000000 R15: 0000000000000000 [ 238.522044][ T9307] [ 238.548568][ T9307] raw-gadget.1 gadget.8: usb_ep_alloc_request failed [ 238.557848][ T6424] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.574936][ T9307] udc dummy_udc.8: failed to start USB Raw Gadget: -12 [ 238.581853][ T9307] raw-gadget.1: probe of gadget.8 failed with error -12 [ 238.616758][ T6424] usb 5-1: config 0 descriptor?? [ 238.639563][ T9307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.674799][ T9307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.732468][ T9317] loop9: detected capacity change from 0 to 164 [ 238.857150][ T6424] usbhid 5-1:0.0: can't add hid device: -71 [ 238.866059][ T9323] loop3: detected capacity change from 0 to 164 [ 238.880075][ T6424] usbhid: probe of 5-1:0.0 failed with error -71 [ 238.919295][ T6424] usb 5-1: USB disconnect, device number 2 [ 239.740319][ T9332] loop8: detected capacity change from 0 to 164 [ 239.777059][ T9332] rock: directory entry would overflow storage [ 239.783273][ T9332] rock: sig=0x66, size=4, remaining=3 [ 240.089077][ T9344] loop8: detected capacity change from 0 to 512 [ 240.124297][ T9344] EXT4-fs: Ignoring removed mblk_io_submit option [ 240.222309][ T9344] EXT4-fs error (device loop8): ext4_iget_extra_inode:4740: inode #15: comm syz.8.1007: corrupted in-inode xattr: e_value size too large [ 240.310702][ T9344] EXT4-fs error (device loop8): ext4_orphan_get:1413: comm syz.8.1007: couldn't read orphan inode 15 (err -117) [ 240.331291][ T9358] loop9: detected capacity change from 0 to 164 [ 240.378004][ T9344] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.416537][ T9358] __nla_validate_parse: 2 callbacks suppressed [ 240.416551][ T9358] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1009'. [ 240.468298][ T9358] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1009'. [ 240.535177][ T9358] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1009'. [ 240.566597][ T9358] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1009'. [ 240.583554][ T7784] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.003529][ T9374] loop4: detected capacity change from 0 to 164 [ 241.015171][ T9372] syzkaller0: entered promiscuous mode [ 241.033951][ T9372] syzkaller0: entered allmulticast mode [ 241.106615][ T9374] isofs_fill_super: bread failed, dev=loop4, iso_blknum=41, block=82 [ 241.509579][ T9382] loop3: detected capacity change from 0 to 164 [ 241.565032][ T9382] rock: directory entry would overflow storage [ 241.604685][ T9382] rock: sig=0x66, size=4, remaining=3 [ 241.917669][ T9391] loop8: detected capacity change from 0 to 164 [ 242.303021][ T9402] loop4: detected capacity change from 0 to 164 [ 242.529609][ T9401] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1021'. [ 242.615379][ T9401] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1021'. [ 242.668779][ T9401] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1021'. [ 242.783740][ T9401] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1021'. [ 242.998322][ T9413] loop3: detected capacity change from 0 to 164 [ 243.428988][ T9426] loop8: detected capacity change from 0 to 164 [ 243.537836][ T9426] rock: directory entry would overflow storage [ 243.550719][ T9426] rock: sig=0x66, size=4, remaining=3 [ 243.857004][ T9431] loop4: detected capacity change from 0 to 256 [ 245.170948][ T9449] netlink: 620 bytes leftover after parsing attributes in process `syz.4.1033'. [ 245.750537][ T9467] set_capacity_and_notify: 1 callbacks suppressed [ 245.750552][ T9467] loop4: detected capacity change from 0 to 164 [ 245.796252][ T9467] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1038'. [ 245.822866][ T9467] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1038'. [ 245.853218][ T9470] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1038'. [ 245.877181][ T9470] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1038'. [ 246.003181][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805c246000: rx timeout, send abort [ 246.013162][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805c246000: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 246.515156][ T9487] loop3: detected capacity change from 0 to 164 [ 246.561797][ T9487] isofs_fill_super: bread failed, dev=loop3, iso_blknum=41, block=82 [ 246.708606][ T9498] loop8: detected capacity change from 0 to 164 [ 246.718694][ T9497] loop4: detected capacity change from 0 to 164 [ 246.824704][ T9497] isofs_fill_super: bread failed, dev=loop4, iso_blknum=41, block=82 [ 247.568537][ T9506] loop3: detected capacity change from 0 to 164 [ 247.668911][ T9506] rock: directory entry would overflow storage [ 247.724148][ T9506] rock: sig=0x66, size=4, remaining=3 [ 248.261247][ T9513] loop4: detected capacity change from 0 to 164 [ 248.328297][ T9513] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1048'. [ 248.350466][ T9513] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1048'. [ 248.391942][ T9515] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1048'. [ 248.432844][ T9515] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1048'. [ 248.684750][ T9520] loop5: detected capacity change from 0 to 7 [ 248.764079][ T9520] Dev loop5: unable to read RDB block 7 [ 248.783742][ T9520] loop5: unable to read partition table [ 248.833968][ T9520] loop5: partition table beyond EOD, truncated [ 248.870126][ T9520] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 249.700314][ T9543] loop3: detected capacity change from 0 to 164 [ 249.793251][ T9543] isofs_fill_super: bread failed, dev=loop3, iso_blknum=41, block=82 [ 250.131006][ C0] vcan0: j1939_tp_rxtimer: 0xffff888018700400: rx timeout, send abort [ 250.143732][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888018700400: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 250.895097][ T9559] loop4: detected capacity change from 0 to 164 [ 250.944315][ T9559] isofs_fill_super: bread failed, dev=loop4, iso_blknum=41, block=82 [ 251.535907][ T9566] loop8: detected capacity change from 0 to 164 [ 251.586106][ T9566] rock: directory entry would overflow storage [ 251.597518][ T9566] rock: sig=0x66, size=4, remaining=3 [ 251.624175][ T9570] loop3: detected capacity change from 0 to 164 [ 251.748204][ T9570] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1060'. [ 252.382819][ T9594] loop4: detected capacity change from 0 to 164 [ 252.833539][ T9605] loop8: detected capacity change from 0 to 164 [ 253.033526][ T9605] isofs_fill_super: bread failed, dev=loop8, iso_blknum=41, block=82 [ 253.365450][ T9396] Set syz0 is full, maxelem 65536 reached [ 253.381057][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880303d8800: rx timeout, send abort [ 253.393748][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880303d8800: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 253.881863][ T9614] loop3: detected capacity change from 0 to 164 [ 253.910155][ T9619] loop9: detected capacity change from 0 to 164 [ 253.938331][ T9614] isofs_fill_super: bread failed, dev=loop3, iso_blknum=41, block=82 [ 253.957636][ T9619] rock: directory entry would overflow storage [ 253.964395][ T9621] FAULT_INJECTION: forcing a failure. [ 253.964395][ T9621] name fail_futex, interval 1, probability 0, space 0, times 0 [ 253.975209][ T9619] rock: sig=0x66, size=4, remaining=3 [ 254.013762][ T9621] CPU: 0 PID: 9621 Comm: syz.8.1073 Not tainted syzkaller #0 [ 254.021201][ T9621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 254.031280][ T9621] Call Trace: [ 254.034591][ T9621] [ 254.037541][ T9621] dump_stack_lvl+0x18c/0x250 [ 254.042253][ T9621] ? show_regs_print_info+0x20/0x20 [ 254.047487][ T9621] ? load_image+0x420/0x420 [ 254.052013][ T9621] ? __lock_acquire+0x1336/0x7d80 [ 254.057072][ T9621] should_fail_ex+0x394/0x4c0 [ 254.061778][ T9621] get_futex_key+0x136/0x1030 [ 254.066482][ T9621] ? futex_setup_timer+0xc0/0xc0 [ 254.071456][ T9621] futex_wake+0x127/0x4f0 [ 254.075812][ T9621] ? futex_wake_mark+0x150/0x150 [ 254.080782][ T9621] do_futex+0x35d/0x3e0 [ 254.084960][ T9621] ? __might_fault+0xaa/0x120 [ 254.089663][ T9621] ? __ia32_sys_get_robust_list+0x110/0x110 [ 254.095578][ T9621] ? __might_fault+0xc6/0x120 [ 254.100278][ T9621] mm_release+0x184/0x3a0 [ 254.104629][ T9621] ? exit_mm_release+0x30/0x30 [ 254.109480][ T9621] ? lockdep_hardirqs_on+0x98/0x150 [ 254.114715][ T9621] exit_mm+0xa4/0x340 [ 254.118731][ T9621] ? sysctl_delayacct+0x220/0x220 [ 254.123771][ T9621] ? do_exit+0x2530/0x2530 [ 254.128214][ T9621] ? tty_audit_exit+0x14d/0x1f0 [ 254.133086][ T9621] do_exit+0x909/0x2530 [ 254.137276][ T9621] ? put_task_struct+0xc0/0xc0 [ 254.142067][ T9621] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 254.148072][ T9621] ? get_signal+0x100e/0x1390 [ 254.152771][ T9621] ? lock_chain_count+0x20/0x20 [ 254.157650][ T9621] ? _raw_spin_lock_irq+0xbb/0xf0 [ 254.162695][ T9621] do_group_exit+0x22d/0x2f0 [ 254.167320][ T9621] ? lockdep_hardirqs_on+0x98/0x150 [ 254.172551][ T9621] get_signal+0x12a6/0x1390 [ 254.177107][ T9621] arch_do_signal_or_restart+0xc2/0x7b0 [ 254.182682][ T9621] ? __ia32_sys_get_robust_list+0x110/0x110 [ 254.188605][ T9621] ? get_sigframe_size+0x20/0x20 [ 254.193551][ T9621] ? exit_to_user_mode_loop+0x3b/0x110 [ 254.199030][ T9621] exit_to_user_mode_loop+0x70/0x110 [ 254.204363][ T9621] exit_to_user_mode_prepare+0xee/0x180 [ 254.209946][ T9621] syscall_exit_to_user_mode+0x1a/0x50 [ 254.215438][ T9621] do_syscall_64+0x61/0xb0 [ 254.219885][ T9621] ? clear_bhb_loop+0x40/0x90 [ 254.224586][ T9621] ? clear_bhb_loop+0x40/0x90 [ 254.229287][ T9621] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 254.235250][ T9621] RIP: 0033:0x7fe6b579e159 [ 254.235565][ T9624] loop4: detected capacity change from 0 to 164 [ 254.239675][ T9621] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 254.265531][ T9621] RSP: 002b:00007fe6b65eb0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 254.273976][ T9621] RAX: fffffffffffffe00 RBX: 00007fe6b5a25fa8 RCX: 00007fe6b579e159 [ 254.281977][ T9621] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe6b5a25fa8 [ 254.289984][ T9621] RBP: 00007fe6b5a25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 254.297974][ T9621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 254.305956][ T9621] R13: 00007fe6b5a26038 R14: 00007ffe8f1b7e60 R15: 00007ffe8f1b7f48 [ 254.313938][ T9621] [ 254.716016][ T9624] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1074'. [ 254.792464][ T9624] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1074'. [ 255.371198][ T9644] loop9: detected capacity change from 0 to 164 [ 255.403060][ T9644] isofs_fill_super: bread failed, dev=loop9, iso_blknum=41, block=82 [ 255.637394][ T9651] loop3: detected capacity change from 0 to 164 [ 255.702582][ T9651] isofs_fill_super: bread failed, dev=loop3, iso_blknum=41, block=82 [ 255.874704][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.881682][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.472665][ T9666] loop9: detected capacity change from 0 to 164 [ 256.493057][ C1] vcan0: j1939_tp_rxtimer: 0xffff888064a9e000: rx timeout, send abort [ 256.501723][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888064a9e000: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 256.559056][ T9666] rock: directory entry would overflow storage [ 256.589553][ T9666] rock: sig=0x66, size=4, remaining=3 [ 256.920239][ T9682] loop9: detected capacity change from 0 to 164 [ 256.953859][ T9682] isofs_fill_super: bread failed, dev=loop9, iso_blknum=41, block=82 [ 257.055696][ T9686] loop4: detected capacity change from 0 to 164 [ 257.112617][ T9686] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1088'. [ 257.183069][ T9686] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1088'. [ 258.388213][ T9697] loop8: detected capacity change from 0 to 164 [ 258.412061][ T9707] loop4: detected capacity change from 0 to 164 [ 258.441990][ T9697] isofs_fill_super: bread failed, dev=loop8, iso_blknum=41, block=82 [ 258.553006][ T9711] loop9: detected capacity change from 0 to 164 [ 259.217451][ T9707] isofs_fill_super: bread failed, dev=loop4, iso_blknum=41, block=82 [ 259.239443][ T9715] loop3: detected capacity change from 0 to 164 [ 259.318258][ T9715] rock: directory entry would overflow storage [ 259.341042][ T9715] rock: sig=0x66, size=4, remaining=3 [ 260.189307][ T9732] loop4: detected capacity change from 0 to 164 [ 260.203317][ T9727] loop3: detected capacity change from 0 to 164 [ 260.245344][ T9732] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1099'. [ 260.304884][ T9732] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1099'. [ 260.317014][ T9727] isofs_fill_super: bread failed, dev=loop3, iso_blknum=41, block=82 [ 261.811553][ T9759] loop4: detected capacity change from 0 to 164 [ 262.437793][ T9761] loop9: detected capacity change from 0 to 164 [ 262.498550][ T9761] rock: directory entry would overflow storage [ 262.533792][ T9761] rock: sig=0x66, size=4, remaining=3 [ 262.612485][ T9765] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1107'. [ 262.847688][ T9770] loop3: detected capacity change from 0 to 164 [ 262.899963][ T9770] isofs_fill_super: bread failed, dev=loop3, iso_blknum=41, block=82 [ 263.010083][ T9777] loop4: detected capacity change from 0 to 164 [ 263.185360][ T9777] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1111'. [ 263.496263][ T9777] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1111'. [ 263.914659][ T9] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 264.133922][ T9] usb 10-1: Using ep0 maxpacket: 16 [ 264.159018][ T9] usb 10-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 264.206505][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.241049][ T9796] loop4: detected capacity change from 0 to 164 [ 264.258555][ T9] usb 10-1: Product: syz [ 264.262861][ T9] usb 10-1: Manufacturer: syz [ 264.272943][ T9799] loop3: detected capacity change from 0 to 164 [ 264.312159][ T9] usb 10-1: SerialNumber: syz [ 264.326310][ T9796] rock: directory entry would overflow storage [ 264.332520][ T9796] rock: sig=0x66, size=4, remaining=3 [ 264.440452][ T9802] loop8: detected capacity change from 0 to 164 [ 264.482910][ T9799] isofs_fill_super: bread failed, dev=loop3, iso_blknum=41, block=82 [ 265.225361][ T9] usb 10-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 265.247736][ T9] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 265.264304][ T9] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 265.273203][ T9] usb 10-1: media controller created [ 265.388403][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 265.545261][ T9812] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1120'. [ 265.643922][ T9816] loop8: detected capacity change from 0 to 164 [ 265.698553][ T9] dvb_usb_gl861: probe of 10-1:157.0 failed with error -5 [ 265.736593][ T9816] netlink: 104 bytes leftover after parsing attributes in process `syz.8.1121'. [ 265.755466][ T9] usb 10-1: USB disconnect, device number 2 [ 265.804790][ T9821] netlink: 104 bytes leftover after parsing attributes in process `syz.8.1121'. [ 266.238918][ T9822] loop4: detected capacity change from 0 to 164 [ 266.346568][ T9822] isofs_fill_super: bread failed, dev=loop4, iso_blknum=41, block=82 [ 267.377537][ T9841] loop9: detected capacity change from 0 to 164 [ 267.426705][ T9841] rock: directory entry would overflow storage [ 267.432933][ T9841] rock: sig=0x66, size=4, remaining=3 [ 267.491336][ T9843] loop8: detected capacity change from 0 to 164 [ 267.742756][ T9843] isofs_fill_super: bread failed, dev=loop8, iso_blknum=41, block=82 [ 267.855391][ T9851] loop4: detected capacity change from 0 to 164 [ 268.897194][ T9853] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1131'. [ 269.338246][ T9864] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1132'. [ 269.375434][ T9864] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1132'. [ 269.629136][ T27] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 269.649964][ T9883] loop3: detected capacity change from 0 to 164 [ 270.030380][ T27] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 270.043814][ T27] usb 9-1: config 0 has no interface number 0 [ 270.055669][ T27] usb 9-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 270.073715][ T27] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.081792][ T27] usb 9-1: Product: syz [ 270.098334][ T27] usb 9-1: Manufacturer: syz [ 270.103001][ T27] usb 9-1: SerialNumber: syz [ 270.120667][ T9897] loop9: detected capacity change from 0 to 164 [ 270.127923][ T9893] loop4: detected capacity change from 0 to 164 [ 270.152046][ T27] usb 9-1: config 0 descriptor?? [ 270.168631][ T9893] isofs_fill_super: bread failed, dev=loop4, iso_blknum=41, block=82 [ 270.186469][ T27] usb 9-1: selecting invalid altsetting 1 [ 270.201901][ T9897] rock: directory entry would overflow storage [ 270.283722][ T9897] rock: sig=0x66, size=4, remaining=3 [ 270.410200][ T27] dvb_ttusb_budget: ttusb_init_controller: error [ 270.418948][ T27] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 271.057732][ T27] DVB: Unable to find symbol stv0299_attach() [ 271.255577][ T27] DVB: Unable to find symbol tda8083_attach() [ 271.278685][ T27] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 271.292914][ T27] usb 9-1: USB disconnect, device number 2 [ 271.452067][ T9918] loop8: detected capacity change from 0 to 164 [ 271.525396][ T5773] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 271.616292][ T9920] loop4: detected capacity change from 0 to 164 [ 271.744210][ T5773] usb 10-1: Using ep0 maxpacket: 16 [ 271.930568][ T5773] usb 10-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 272.041745][ T9918] isofs_fill_super: bread failed, dev=loop8, iso_blknum=41, block=82 [ 272.143765][ T5773] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.222101][ T5773] usb 10-1: Product: syz [ 272.253049][ T5773] usb 10-1: Manufacturer: syz [ 272.307938][ T5773] usb 10-1: SerialNumber: syz [ 272.459313][ T9928] loop4: detected capacity change from 0 to 164 [ 272.602614][ T9928] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1145'. [ 272.678780][ T9928] netlink: 'syz.4.1145': attribute type 5 has an invalid length. [ 272.745616][ T9935] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1145'. [ 272.797570][ T9935] netlink: 'syz.4.1145': attribute type 5 has an invalid length. [ 272.895289][ T5773] usb 10-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 272.912769][ T5773] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 272.923379][ T5773] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 272.931980][ T5773] usb 10-1: media controller created [ 272.974600][ T5773] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 273.152240][ T5773] dvb_usb_gl861: probe of 10-1:157.0 failed with error -5 [ 273.208859][ T9947] loop3: detected capacity change from 0 to 164 [ 273.262913][ T23] usb 10-1: USB disconnect, device number 3 [ 273.324902][ T9947] rock: directory entry would overflow storage [ 273.351834][ T9947] rock: sig=0x66, size=4, remaining=3 [ 273.438728][ T9953] loop8: detected capacity change from 0 to 164 [ 273.546209][ T9958] loop4: detected capacity change from 0 to 164 [ 273.650050][ T9962] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1152'. [ 274.655459][ T9979] loop9: detected capacity change from 0 to 164 [ 275.225748][ T9982] loop3: detected capacity change from 0 to 164 [ 275.432521][ T9989] loop9: detected capacity change from 0 to 164 [ 275.505945][ T9989] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1157'. [ 275.544184][ T9989] netlink: 'syz.9.1157': attribute type 5 has an invalid length. [ 275.660065][ T9989] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1157'. [ 275.718045][ T9989] netlink: 'syz.9.1157': attribute type 5 has an invalid length. [ 276.352499][T10006] loop3: detected capacity change from 0 to 164 [ 276.401755][T10006] rock: directory entry would overflow storage [ 276.419426][T10006] rock: sig=0x66, size=4, remaining=3 [ 276.495943][T10009] netlink: 84 bytes leftover after parsing attributes in process `syz.8.1162'. [ 276.580728][T10015] loop9: detected capacity change from 0 to 164 [ 276.641120][T10015] isofs_fill_super: bread failed, dev=loop9, iso_blknum=41, block=82 [ 276.805587][ T5773] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 277.307742][T10025] loop3: detected capacity change from 0 to 164 [ 277.354985][ T5773] usb 5-1: Using ep0 maxpacket: 16 [ 277.627815][ T5773] usb 5-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 277.868456][ T5773] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.916818][ T5773] usb 5-1: Product: syz [ 277.952892][ T5773] usb 5-1: Manufacturer: syz [ 277.966477][ T5773] usb 5-1: SerialNumber: syz [ 278.147153][T10035] loop8: detected capacity change from 0 to 164 [ 278.202833][T10035] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1169'. [ 278.235198][ T5773] usb 5-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 278.248723][T10035] netlink: 52 bytes leftover after parsing attributes in process `syz.8.1169'. [ 278.270665][ T5773] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 278.310551][T10035] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1169'. [ 278.320848][ T5773] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 278.335918][T10035] netlink: 52 bytes leftover after parsing attributes in process `syz.8.1169'. [ 278.345177][ T5773] usb 5-1: media controller created [ 278.402805][ T5773] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 278.618201][T10050] loop8: detected capacity change from 0 to 164 [ 278.680650][T10050] isofs_fill_super: bread failed, dev=loop8, iso_blknum=41, block=82 [ 278.695336][T10055] loop9: detected capacity change from 0 to 164 [ 278.705374][ T5773] zl10353_read_register: readreg error (reg=127, ret==-71) [ 278.811822][T10057] loop3: detected capacity change from 0 to 164 [ 278.829088][ T5773] dvb_usb_gl861: probe of 5-1:157.0 failed with error -5 [ 278.913733][T10057] rock: directory entry would overflow storage [ 278.937286][T10057] rock: sig=0x66, size=4, remaining=3 [ 278.957547][ T5773] usb 5-1: USB disconnect, device number 3 [ 278.967364][T10055] isofs_fill_super: bread failed, dev=loop9, iso_blknum=41, block=82 [ 279.721298][T10068] netlink: 84 bytes leftover after parsing attributes in process `syz.8.1176'. [ 279.877904][T10074] loop3: detected capacity change from 0 to 164 [ 279.950693][T10074] isofs_fill_super: bread failed, dev=loop3, iso_blknum=41, block=82 [ 280.150206][T10082] loop9: detected capacity change from 0 to 164 [ 281.329389][T10090] loop9: detected capacity change from 0 to 164 [ 281.510346][T10098] loop8: detected capacity change from 0 to 164 [ 281.556496][T10098] rock: directory entry would overflow storage [ 281.579171][T10098] rock: sig=0x66, size=4, remaining=3 [ 281.763789][ T27] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 281.811671][T10107] loop8: detected capacity change from 0 to 164 [ 281.839309][T10107] isofs_fill_super: bread failed, dev=loop8, iso_blknum=41, block=82 [ 281.848233][T10090] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1182'. [ 281.867110][T10090] netlink: 52 bytes leftover after parsing attributes in process `syz.9.1182'. [ 281.914333][T10100] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1182'. [ 281.964402][T10100] netlink: 52 bytes leftover after parsing attributes in process `syz.9.1182'. [ 282.095396][ T27] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 282.104828][ T27] usb 4-1: config 0 has no interface number 0 [ 282.113523][ T27] usb 4-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 282.134664][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.149491][ T27] usb 4-1: Product: syz [ 282.163015][ T27] usb 4-1: Manufacturer: syz [ 282.173351][T10114] loop4: detected capacity change from 0 to 164 [ 282.173707][ T27] usb 4-1: SerialNumber: syz [ 282.204849][ T27] usb 4-1: config 0 descriptor?? [ 282.232590][T10114] isofs_fill_super: bread failed, dev=loop4, iso_blknum=41, block=82 [ 282.254033][ T27] usb 4-1: selecting invalid altsetting 1 [ 282.272161][ T27] dvb_ttusb_budget: ttusb_init_controller: error [ 282.294361][ T27] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 282.762166][ T27] DVB: Unable to find symbol stv0299_attach() [ 282.878947][T10128] netlink: 84 bytes leftover after parsing attributes in process `syz.8.1190'. [ 282.972871][ T27] DVB: Unable to find symbol tda8083_attach() [ 282.999896][ T27] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 283.197352][ T27] usb 4-1: USB disconnect, device number 2 [ 283.425185][T10138] loop9: detected capacity change from 0 to 164 [ 283.945736][T10142] loop8: detected capacity change from 0 to 164 [ 283.992087][T10135] loop4: detected capacity change from 0 to 164 [ 284.002712][T10142] rock: directory entry would overflow storage [ 284.053827][T10142] rock: sig=0x66, size=4, remaining=3 [ 284.141437][T10135] isofs_fill_super: bread failed, dev=loop4, iso_blknum=41, block=82 [ 284.387016][T10152] loop8: detected capacity change from 0 to 164 [ 284.893853][ T23] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 285.094209][ T23] usb 4-1: Using ep0 maxpacket: 16 [ 285.115273][ T23] usb 4-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 285.135476][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.146362][ T23] usb 4-1: Product: syz [ 285.150658][ T23] usb 4-1: Manufacturer: syz [ 285.157089][ T23] usb 4-1: SerialNumber: syz [ 285.219549][T10152] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1197'. [ 285.231035][T10152] netlink: 52 bytes leftover after parsing attributes in process `syz.8.1197'. [ 285.242058][T10157] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1197'. [ 285.253820][T10157] netlink: 52 bytes leftover after parsing attributes in process `syz.8.1197'. [ 285.371639][T10167] loop4: detected capacity change from 0 to 164 [ 285.410976][ T23] usb 4-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 285.472869][ T23] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 285.505293][ T23] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 285.525382][ T23] usb 4-1: media controller created [ 285.582704][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 285.585461][T10176] loop9: detected capacity change from 0 to 164 [ 285.702410][T10176] isofs_fill_super: bread failed, dev=loop9, iso_blknum=41, block=82 [ 285.904098][T10182] netlink: 84 bytes leftover after parsing attributes in process `syz.8.1202'. [ 286.056153][ T23] zl10353_read_register: readreg error (reg=127, ret==-71) [ 286.101892][ T23] dvb_usb_gl861: probe of 4-1:157.0 failed with error -5 [ 286.126947][ T23] usb 4-1: USB disconnect, device number 3 [ 286.783069][T10198] loop8: detected capacity change from 0 to 164 [ 286.909641][T10198] rock: directory entry would overflow storage [ 286.973782][T10203] loop4: detected capacity change from 0 to 164 [ 287.031846][T10198] rock: sig=0x66, size=4, remaining=3 [ 287.669759][T10208] loop3: detected capacity change from 0 to 164 [ 287.680502][T10206] loop9: detected capacity change from 0 to 164 [ 287.779062][T10208] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1209'. [ 287.819651][T10208] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1209'. [ 287.841097][T10206] isofs_fill_super: bread failed, dev=loop9, iso_blknum=41, block=82 [ 287.887047][T10217] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1209'. [ 287.963944][T10217] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1209'. [ 288.880503][T10238] loop3: detected capacity change from 0 to 164 [ 288.937342][T10242] loop9: detected capacity change from 0 to 164 [ 288.980094][T10242] isofs_fill_super: bread failed, dev=loop9, iso_blknum=41, block=82 [ 289.785117][ T1200] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 289.994816][ T1200] usb 5-1: Using ep0 maxpacket: 16 [ 290.030145][ T1200] usb 5-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 290.053753][ T1200] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.072221][ T1200] usb 5-1: Product: syz [ 290.081117][ T1200] usb 5-1: Manufacturer: syz [ 290.090424][ T1200] usb 5-1: SerialNumber: syz [ 290.214220][T10270] loop8: detected capacity change from 0 to 164 [ 290.228074][T10270] rock: directory entry would overflow storage [ 290.327913][T10272] loop9: detected capacity change from 0 to 164 [ 290.343160][T10270] rock: sig=0x66, size=4, remaining=3 [ 291.018215][ T1200] usb 5-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 291.037285][ T1200] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 291.049184][ T1200] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 291.058417][ T1200] usb 5-1: media controller created [ 291.122721][ T1200] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 291.218648][ T1200] zl10353_read_register: readreg error (reg=127, ret==-32) [ 291.246647][T10278] loop8: detected capacity change from 0 to 164 [ 291.289090][T10278] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1222'. [ 291.354169][T10278] netlink: 44 bytes leftover after parsing attributes in process `syz.8.1222'. [ 291.363445][T10280] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1222'. [ 291.375347][ T1200] dvb_usb_gl861: probe of 5-1:157.0 failed with error -5 [ 291.405870][T10280] netlink: 44 bytes leftover after parsing attributes in process `syz.8.1222'. [ 291.436377][ T1200] usb 5-1: USB disconnect, device number 4 [ 291.718171][T10289] loop8: detected capacity change from 0 to 164 [ 291.766665][T10289] isofs_fill_super: bread failed, dev=loop8, iso_blknum=41, block=82 [ 292.626297][T10298] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(0.0.0), cmd(11) [ 292.852110][T10300] loop3: detected capacity change from 0 to 164 [ 292.934128][T10303] netlink: 84 bytes leftover after parsing attributes in process `syz.8.1228'. [ 292.964795][T10300] isofs_fill_super: bread failed, dev=loop3, iso_blknum=41, block=82 [ 294.064202][T10320] loop9: detected capacity change from 0 to 164 [ 294.298566][T10321] loop4: detected capacity change from 0 to 164 [ 294.384711][T10321] rock: directory entry would overflow storage [ 294.426245][T10321] rock: sig=0x66, size=4, remaining=3 [ 294.641804][T10327] loop3: detected capacity change from 0 to 164 [ 294.734089][T10327] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1232'. [ 294.743100][T10327] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1232'. [ 294.798183][T10327] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1232'. [ 294.809491][T10327] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1232'. [ 294.883528][T10339] loop4: detected capacity change from 0 to 164 [ 294.979643][T10342] loop8: detected capacity change from 0 to 164 [ 295.026876][T10342] isofs_fill_super: bread failed, dev=loop8, iso_blknum=41, block=82 [ 295.983736][ T9] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 296.056592][T10356] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(0.0.0), cmd(11) [ 296.215254][ T9] usb 10-1: Using ep0 maxpacket: 16 [ 296.231093][ T9] usb 10-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 296.247165][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.257381][ T9] usb 10-1: Product: syz [ 296.261705][ T9] usb 10-1: Manufacturer: syz [ 296.276751][ T9] usb 10-1: SerialNumber: syz [ 296.279730][T10361] loop4: detected capacity change from 0 to 164 [ 296.317877][T10361] isofs_fill_super: bread failed, dev=loop4, iso_blknum=41, block=82 [ 296.555576][ T9] usb 10-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 296.673550][ T9] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 296.731209][ T9] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 296.752028][T10366] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1242'. [ 296.767047][ T9] usb 10-1: media controller created [ 296.862475][ T1200] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 296.975554][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 297.026823][ T9] zl10353_read_register: readreg error (reg=127, ret==-71) [ 297.056372][ T1200] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 297.073716][ T1200] usb 9-1: config 0 has no interface number 0 [ 297.133244][ T9] dvb_usb_gl861: probe of 10-1:157.0 failed with error -5 [ 297.176486][ T9] usb 10-1: USB disconnect, device number 4 [ 297.276080][ T1200] usb 9-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 297.288392][ T1200] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.297012][ T1200] usb 9-1: Product: syz [ 297.301491][ T1200] usb 9-1: Manufacturer: syz [ 297.306224][ T1200] usb 9-1: SerialNumber: syz [ 297.314982][ T1200] usb 9-1: config 0 descriptor?? [ 297.324519][ T1200] usb 9-1: selecting invalid altsetting 1 [ 297.330419][ T1200] dvb_ttusb_budget: ttusb_init_controller: error [ 297.340769][ T1200] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 298.069201][ T1200] DVB: Unable to find symbol stv0299_attach() [ 298.094176][T10387] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(0.0.0), cmd(3) [ 298.117297][T10387] loop9: detected capacity change from 0 to 164 [ 298.136514][T10387] rock: directory entry would overflow storage [ 298.142729][T10387] rock: sig=0x66, size=4, remaining=3 [ 298.226442][ T1200] DVB: Unable to find symbol tda8083_attach() [ 298.254249][ T1200] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 298.301479][ T1200] usb 9-1: USB disconnect, device number 3 [ 298.371202][T10392] loop8: detected capacity change from 0 to 164 [ 298.476947][T10397] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(0.0.0), cmd(11) [ 298.481086][T10392] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1247'. [ 298.551606][T10392] netlink: 44 bytes leftover after parsing attributes in process `syz.8.1247'. [ 298.580972][T10399] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1247'. [ 298.613486][T10401] loop3: detected capacity change from 0 to 164 [ 298.651706][T10399] netlink: 44 bytes leftover after parsing attributes in process `syz.8.1247'. [ 298.670388][ C1] vcan0: j1939_tp_rxtimer: 0xffff888060dc9c00: rx timeout, send abort [ 298.679107][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888060dc9c00: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 298.882105][T10410] loop4: detected capacity change from 0 to 164 [ 298.904291][T10401] isofs_fill_super: bread failed, dev=loop3, iso_blknum=41, block=82 [ 299.170226][T10418] loop8: detected capacity change from 0 to 164 [ 299.910987][ T5762] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 300.174009][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 300.359937][T10433] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1254'. [ 300.383727][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 300.409623][ T9] usb 4-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 300.450070][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.489693][ T9] usb 4-1: Product: syz [ 300.496310][ T9] usb 4-1: Manufacturer: syz [ 300.504262][ T9] usb 4-1: SerialNumber: syz [ 300.759154][ T9] usb 4-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 300.770380][T10446] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(0.0.0), cmd(3) [ 300.793480][ T9] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 300.821065][T10446] loop4: detected capacity change from 0 to 164 [ 300.832577][ T9] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 300.851947][ T9] usb 4-1: media controller created [ 300.863073][T10446] rock: directory entry would overflow storage [ 300.888309][T10446] rock: sig=0x66, size=4, remaining=3 [ 300.934490][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 301.139027][T10459] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 301.246849][ T9] zl10353_read_register: readreg error (reg=127, ret==-71) [ 301.343745][ T7686] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 301.499488][ T9] dvb_usb_gl861: probe of 4-1:157.0 failed with error -5 [ 301.521404][ T9] usb 4-1: USB disconnect, device number 4 [ 302.193752][ T7686] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 302.201899][ T7686] usb 10-1: config 0 has no interface number 0 [ 302.212555][T10470] loop8: detected capacity change from 0 to 164 [ 302.226934][ T7686] usb 10-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 302.242983][ T7686] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.263196][ T7686] usb 10-1: Product: syz [ 302.273026][ T7686] usb 10-1: Manufacturer: syz [ 302.286932][ T7686] usb 10-1: SerialNumber: syz [ 302.296741][ T7686] usb 10-1: config 0 descriptor?? [ 302.316661][ T7686] usb 10-1: selecting invalid altsetting 1 [ 302.322631][ T7686] dvb_ttusb_budget: ttusb_init_controller: error [ 302.330632][T10470] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1261'. [ 302.353951][ T7686] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 302.362122][T10470] netlink: 44 bytes leftover after parsing attributes in process `syz.8.1261'. [ 302.397111][T10475] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1261'. [ 302.430380][T10475] netlink: 44 bytes leftover after parsing attributes in process `syz.8.1261'. [ 302.439919][ T7686] DVB: Unable to find symbol stv0299_attach() [ 302.566020][ T7686] DVB: Unable to find symbol tda8083_attach() [ 302.572148][ T7686] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 302.620309][ T7686] usb 10-1: USB disconnect, device number 5 [ 302.624134][T10480] loop3: detected capacity change from 0 to 164 [ 302.670544][T10480] isofs_fill_super: bread failed, dev=loop3, iso_blknum=41, block=82 [ 302.729136][ T6946] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 302.863526][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802c1b2000: rx timeout, send abort [ 302.872249][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802c1b2000: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 303.677475][T10496] loop4: detected capacity change from 0 to 164 [ 304.531391][T10519] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 304.696258][T10526] loop4: detected capacity change from 0 to 164 [ 304.826822][T10530] loop9: detected capacity change from 0 to 164 [ 304.889381][T10530] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1272'. [ 304.899879][T10535] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(0.0.0), cmd(3) [ 304.920658][T10535] loop8: detected capacity change from 0 to 164 [ 304.932226][T10535] rock: directory entry would overflow storage [ 304.963508][T10535] rock: sig=0x66, size=4, remaining=3 [ 304.973581][T10530] netlink: 44 bytes leftover after parsing attributes in process `syz.9.1272'. [ 304.983020][T10537] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1272'. [ 305.089583][T10537] netlink: 44 bytes leftover after parsing attributes in process `syz.9.1272'. [ 305.926412][T10552] loop9: detected capacity change from 0 to 164 [ 306.233742][ T9] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 306.455795][ T9] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 306.472064][ T9] usb 9-1: config 0 has no interface number 0 [ 306.514116][ T9] usb 9-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 306.859196][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802b903800: rx timeout, send abort [ 306.867724][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88802b903800: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 306.978935][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.987944][ T9] usb 9-1: Product: syz [ 306.992201][ T9] usb 9-1: Manufacturer: syz [ 306.998046][ T9] usb 9-1: SerialNumber: syz [ 307.005113][ T9] usb 9-1: config 0 descriptor?? [ 307.013395][ T9] usb 9-1: selecting invalid altsetting 1 [ 307.019340][ T9] dvb_ttusb_budget: ttusb_init_controller: error [ 307.025770][ T9] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 307.184964][ T9] DVB: Unable to find symbol stv0299_attach() [ 307.302028][ T9] DVB: Unable to find symbol tda8083_attach() [ 307.323716][ T9] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 307.352937][ T9] usb 9-1: USB disconnect, device number 4 [ 308.114262][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 308.609016][T10579] loop4: detected capacity change from 0 to 164 [ 308.678637][T10579] isofs_fill_super: bread failed, dev=loop4, iso_blknum=41, block=82 [ 309.062188][T10589] device-mapper: ioctl: name not supplied when creating device [ 309.074052][T10589] loop8: detected capacity change from 0 to 164 [ 309.149811][T10589] rock: directory entry would overflow storage [ 309.203398][T10589] rock: sig=0x66, size=4, remaining=3 [ 309.571618][T10598] loop4: detected capacity change from 0 to 164 [ 309.660876][T10600] loop9: detected capacity change from 0 to 164 [ 309.677817][T10598] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1284'. [ 309.704062][T10598] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1284'. [ 309.738849][T10598] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1284'. [ 309.769862][T10598] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1284'. [ 310.826068][T10612] loop4: detected capacity change from 0 to 164 [ 310.873340][T10614] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 311.319892][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805bbc7400: rx timeout, send abort [ 311.333732][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805bbc7400: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 311.731906][T10629] device-mapper: ioctl: name not supplied when creating device [ 311.756110][T10629] loop4: detected capacity change from 0 to 164 [ 312.614171][T10631] usb usb8: usbfs: process 10631 (syz.8.1292) did not claim interface 0 before use [ 312.851149][ T1200] usb 10-1: new full-speed USB device number 6 using dummy_hcd [ 312.870649][T10629] rock: directory entry would overflow storage [ 312.952148][T10629] rock: sig=0x66, size=4, remaining=3 [ 313.141889][ T1200] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 313.164854][ T1200] usb 10-1: config 0 has no interface number 0 [ 313.187474][ T1200] usb 10-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 313.198487][ T1200] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.222826][ T1200] usb 10-1: Product: syz [ 313.239408][ T1200] usb 10-1: Manufacturer: syz [ 313.257223][ T1200] usb 10-1: SerialNumber: syz [ 313.284714][ T1200] usb 10-1: config 0 descriptor?? [ 313.296126][ T1200] usb 10-1: selecting invalid altsetting 1 [ 313.302107][ T1200] dvb_ttusb_budget: ttusb_init_controller: error [ 313.355325][ T1200] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 313.410878][T10646] loop4: detected capacity change from 0 to 164 [ 313.547949][ T1200] DVB: Unable to find symbol stv0299_attach() [ 313.690990][ T1200] DVB: Unable to find symbol tda8083_attach() [ 313.709118][ T1200] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 313.751769][ T1200] usb 10-1: USB disconnect, device number 6 [ 313.759508][T10646] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1296'. [ 313.778533][T10646] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1296'. [ 313.818868][T10649] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1296'. [ 313.844390][T10649] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1296'. [ 313.976622][T10657] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 314.196961][T10662] loop4: detected capacity change from 0 to 164 [ 314.274139][T10662] isofs_fill_super: bread failed, dev=loop4, iso_blknum=41, block=82 [ 314.289887][T10670] loop8: detected capacity change from 0 to 164 [ 314.308297][T10670] isofs_fill_super: bread failed, dev=loop8, iso_blknum=41, block=82 [ 314.399988][ T5762] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 316.021182][T10688] loop4: detected capacity change from 0 to 164 [ 316.079184][T10691] device-mapper: ioctl: name not supplied when creating device [ 316.092988][T10691] loop3: detected capacity change from 0 to 164 [ 316.118950][T10688] isofs_fill_super: bread failed, dev=loop4, iso_blknum=41, block=82 [ 316.132143][T10691] rock: directory entry would overflow storage [ 316.154104][T10691] rock: sig=0x66, size=4, remaining=3 [ 316.372569][ C0] vcan0: j1939_tp_rxtimer: 0xffff888025d3fc00: rx timeout, send abort [ 316.381179][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888025d3fc00: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 317.685066][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.703693][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.074285][T10713] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 318.157667][T10715] loop4: detected capacity change from 0 to 164 [ 318.233875][T10715] isofs_fill_super: bread failed, dev=loop4, iso_blknum=41, block=82 [ 319.360205][T10734] device-mapper: ioctl: name not supplied when creating device [ 319.397707][T10734] loop8: detected capacity change from 0 to 164 [ 319.604573][ T9] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 319.627861][T10734] rock: directory entry would overflow storage [ 319.637583][T10734] rock: sig=0x66, size=4, remaining=3 [ 319.802951][ T9] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 319.977184][ T9] usb 5-1: config 0 has no interface number 0 [ 320.219504][ T9] usb 5-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 320.343867][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.382594][ T9] usb 5-1: Product: syz [ 320.415046][ T9] usb 5-1: Manufacturer: syz [ 320.419705][ T9] usb 5-1: SerialNumber: syz [ 320.458271][ T9] usb 5-1: config 0 descriptor?? [ 320.467592][ T9] usb 5-1: selecting invalid altsetting 1 [ 320.490956][ T9] dvb_ttusb_budget: ttusb_init_controller: error [ 320.509388][ T9] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 320.607878][ T9] DVB: Unable to find symbol stv0299_attach() [ 320.628798][T10763] loop9: detected capacity change from 0 to 164 [ 320.675064][T10763] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1307'. [ 320.695149][T10763] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1307'. [ 320.712911][T10763] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1307'. [ 320.722424][T10763] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1307'. [ 320.802683][ T9] DVB: Unable to find symbol tda8083_attach() [ 320.818136][ T9] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 320.843170][ T9] usb 5-1: USB disconnect, device number 5 [ 320.921244][T10769] loop9: detected capacity change from 0 to 164 [ 321.003324][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802baf5c00: rx timeout, send abort [ 321.011923][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802baf5c00: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 321.332082][T10773] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 321.550874][T10779] loop4: detected capacity change from 0 to 164 [ 322.694518][T10806] device-mapper: ioctl: name not supplied when creating device [ 322.737485][T10806] loop3: detected capacity change from 0 to 164 [ 322.742760][T10807] loop9: detected capacity change from 0 to 164 [ 322.803161][T10806] rock: directory entry would overflow storage [ 322.853705][T10806] rock: sig=0x66, size=4, remaining=3 [ 323.271847][T10823] loop8: detected capacity change from 0 to 164 [ 323.282879][T10821] device-mapper: ioctl: Invalid data size in the ioctl structure: 120 [ 324.252364][T10828] loop4: detected capacity change from 0 to 164 [ 324.486231][ T5777] Bluetooth: hci4: command 0x0406 tx timeout [ 324.633829][ T23] usb 10-1: new full-speed USB device number 7 using dummy_hcd [ 324.827341][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801aec9000: rx timeout, send abort [ 324.836172][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88801aec9000: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 324.955504][ T23] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 324.964836][ T23] usb 10-1: config 0 has no interface number 0 [ 324.968542][T10849] device-mapper: ioctl: name not supplied when creating device [ 324.984075][ T23] usb 10-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 325.015759][ T23] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.043983][ T23] usb 10-1: Product: syz [ 325.050307][T10849] loop3: detected capacity change from 0 to 164 [ 325.063819][ T23] usb 10-1: Manufacturer: syz [ 325.075301][ T23] usb 10-1: SerialNumber: syz [ 325.090398][ T23] usb 10-1: config 0 descriptor?? [ 325.116838][ T23] usb 10-1: selecting invalid altsetting 1 [ 325.122829][T10849] rock: directory entry would overflow storage [ 325.164869][T10849] rock: sig=0x66, size=4, remaining=3 [ 325.173874][ T23] dvb_ttusb_budget: ttusb_init_controller: error [ 325.200031][ T23] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 325.231465][T10856] loop8: detected capacity change from 0 to 164 [ 325.322217][T10856] isofs_fill_super: bread failed, dev=loop8, iso_blknum=41, block=82 [ 325.374215][ T23] DVB: Unable to find symbol stv0299_attach() [ 325.463309][ T5760] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 325.512940][ T23] DVB: Unable to find symbol tda8083_attach() [ 325.514381][T10865] device-mapper: ioctl: Invalid data size in the ioctl structure: 120 [ 325.543344][ T23] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 325.580786][ T23] usb 10-1: USB disconnect, device number 7 [ 325.924885][T10871] loop3: detected capacity change from 0 to 164 [ 326.317118][T10875] loop9: detected capacity change from 0 to 164 [ 326.386561][T10882] loop3: detected capacity change from 0 to 164 [ 326.395311][T10875] isofs_fill_super: bread failed, dev=loop9, iso_blknum=41, block=82 [ 327.343580][T10882] isofs_fill_super: bread failed, dev=loop3, iso_blknum=41, block=82 [ 328.901976][T10908] device-mapper: ioctl: name not supplied when creating device [ 328.935888][T10908] loop4: detected capacity change from 0 to 164 [ 328.983395][T10908] rock: directory entry would overflow storage [ 329.049597][T10908] rock: sig=0x66, size=4, remaining=3 [ 329.069918][T10911] device-mapper: ioctl: Invalid data size in the ioctl structure: 120 [ 329.373542][ C1] vcan0: j1939_tp_rxtimer: 0xffff888024d46400: rx timeout, send abort [ 329.382193][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888024d46400: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 329.597665][T10920] loop9: detected capacity change from 0 to 164 [ 329.703747][ T23] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 329.954952][ T23] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 329.994616][ T23] usb 4-1: config 0 has no interface number 0 [ 330.030448][ T23] usb 4-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 330.053382][T10925] loop4: detected capacity change from 0 to 164 [ 330.071325][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.098000][ T23] usb 4-1: Product: syz [ 330.102954][ T23] usb 4-1: Manufacturer: syz [ 330.108184][ T23] usb 4-1: SerialNumber: syz [ 330.137979][ T23] usb 4-1: config 0 descriptor?? [ 330.145365][ T23] usb 4-1: selecting invalid altsetting 1 [ 330.169335][ T23] dvb_ttusb_budget: ttusb_init_controller: error [ 330.192069][ T23] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 330.234233][T10925] isofs_fill_super: bread failed, dev=loop4, iso_blknum=41, block=82 [ 330.690388][ T23] DVB: Unable to find symbol stv0299_attach() [ 331.056435][ T23] DVB: Unable to find symbol tda8083_attach() [ 331.081170][T10943] loop9: detected capacity change from 0 to 164 [ 331.096834][ T23] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 331.163949][ T23] usb 4-1: USB disconnect, device number 5 [ 331.776829][T10958] device-mapper: ioctl: name not supplied when creating device [ 331.808425][T10958] loop3: detected capacity change from 0 to 164 [ 331.880075][T10958] rock: directory entry would overflow storage [ 331.889928][T10958] rock: sig=0x66, size=4, remaining=3 [ 332.986634][T10969] loop9: detected capacity change from 0 to 164 [ 333.386895][ C0] vcan0: j1939_tp_rxtimer: 0xffff888025276400: rx timeout, send abort [ 333.395776][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888025276400: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 333.557117][T10979] loop3: detected capacity change from 0 to 164 [ 333.712073][T10979] isofs_fill_super: bread failed, dev=loop3, iso_blknum=41, block=82 [ 333.855582][T10994] loop4: detected capacity change from 0 to 164 [ 334.371547][ T55] usb 10-1: new full-speed USB device number 8 using dummy_hcd [ 334.573706][ T55] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 334.613742][ T55] usb 10-1: config 0 has no interface number 0 [ 334.625748][ T55] usb 10-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 334.656384][ T55] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.693745][ T55] usb 10-1: Product: syz [ 334.698116][ T55] usb 10-1: Manufacturer: syz [ 334.736254][ T55] usb 10-1: SerialNumber: syz [ 334.768619][ T55] usb 10-1: config 0 descriptor?? [ 334.799756][ T55] usb 10-1: selecting invalid altsetting 1 [ 334.814712][T10994] isofs_fill_super: bread failed, dev=loop4, iso_blknum=41, block=82 [ 334.841944][ T55] dvb_ttusb_budget: ttusb_init_controller: error [ 334.850825][T11003] loop3: detected capacity change from 0 to 164 [ 334.874185][ T55] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 334.924432][T11003] isofs_fill_super: bread failed, dev=loop3, iso_blknum=41, block=82 [ 335.422676][ T55] DVB: Unable to find symbol stv0299_attach() [ 335.441489][T11009] device-mapper: ioctl: name not supplied when creating device [ 335.524088][T11015] loop8: detected capacity change from 0 to 164 [ 335.570386][ T55] DVB: Unable to find symbol tda8083_attach() [ 335.593821][ T55] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 335.612093][T11015] rock: directory entry would overflow storage [ 335.650899][ T55] usb 10-1: USB disconnect, device number 8 [ 335.724016][T11015] rock: sig=0x66, size=4, remaining=3 [ 336.178203][T11025] loop9: detected capacity change from 0 to 164 [ 337.300048][T11042] loop4: detected capacity change from 0 to 164 [ 337.435579][T11042] isofs_fill_super: bread failed, dev=loop4, iso_blknum=41, block=82 [ 337.923971][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880652f3800: rx timeout, send abort [ 337.932593][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880652f3800: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 338.155887][T11054] device-mapper: ioctl: name not supplied when creating device [ 338.207487][T11054] loop9: detected capacity change from 0 to 164 [ 338.276934][T11054] rock: directory entry would overflow storage [ 338.293778][T11054] rock: sig=0x66, size=4, remaining=3 [ 338.353766][ T7686] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 338.575596][ T7686] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 338.591378][T11063] loop9: detected capacity change from 0 to 164 [ 338.633449][ T7686] usb 9-1: config 0 has no interface number 0 [ 339.794461][ T7686] usb 9-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 339.842702][ T7686] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.867411][ T7686] usb 9-1: Product: syz [ 339.881890][ T7686] usb 9-1: Manufacturer: syz [ 339.892006][ T7686] usb 9-1: SerialNumber: syz [ 339.913480][ T7686] usb 9-1: config 0 descriptor?? [ 339.938516][ T7686] usb 9-1: selecting invalid altsetting 1 [ 339.965782][ T7686] dvb_ttusb_budget: ttusb_init_controller: error [ 340.004286][ T7686] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 341.535866][ T7686] DVB: Unable to find symbol stv0299_attach() [ 341.560622][T11089] loop8: detected capacity change from 0 to 164 [ 341.710707][ T7686] DVB: Unable to find symbol tda8083_attach() [ 341.775562][ T7686] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 341.853844][ T7686] usb 9-1: USB disconnect, device number 5 [ 343.127273][T11118] loop8: detected capacity change from 0 to 164 [ 343.244868][T11118] isofs_fill_super: bread failed, dev=loop8, iso_blknum=41, block=82 [ 343.675155][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805ce76800: rx timeout, send abort [ 343.683589][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805ce76800: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 343.877690][T11129] loop4: detected capacity change from 0 to 164 [ 343.964480][T11131] device-mapper: ioctl: name not supplied when creating device [ 343.987595][T11131] loop9: detected capacity change from 0 to 164 [ 344.039002][T11131] rock: directory entry would overflow storage [ 344.066836][T11131] rock: sig=0x66, size=4, remaining=3 [ 344.595494][T11145] loop3: detected capacity change from 0 to 164 [ 344.630512][T11145] isofs_fill_super: bread failed, dev=loop3, iso_blknum=41, block=82 [ 344.703915][ T9] usb 10-1: new full-speed USB device number 9 using dummy_hcd [ 345.644571][ T9] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 345.663043][ T9] usb 10-1: config 0 has no interface number 0 [ 345.692479][ T9] usb 10-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 345.723233][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.925819][ T9] usb 10-1: Product: syz [ 346.084252][ T9] usb 10-1: Manufacturer: syz [ 346.146687][ T9] usb 10-1: SerialNumber: syz [ 346.366039][ T9] usb 10-1: config 0 descriptor?? [ 346.377484][ T9] usb 10-1: selecting invalid altsetting 1 [ 346.394093][ T9] dvb_ttusb_budget: ttusb_init_controller: error [ 346.400630][ T9] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 346.599674][T11163] loop3: detected capacity change from 0 to 164 [ 346.618761][ T9] DVB: Unable to find symbol stv0299_attach() [ 347.729960][ T9] DVB: Unable to find symbol tda8083_attach() [ 347.744690][ T9] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 347.760303][ T9] usb 10-1: USB disconnect, device number 9 [ 348.151127][T11178] device-mapper: ioctl: name not supplied when creating device [ 348.189877][T11178] loop3: detected capacity change from 0 to 164 [ 348.247081][T11178] rock: directory entry would overflow storage [ 348.253307][T11178] rock: sig=0x66, size=4, remaining=3 [ 348.287197][T11181] loop9: detected capacity change from 0 to 164 [ 348.317984][T11188] loop8: detected capacity change from 0 to 164 [ 348.371437][T11181] isofs_fill_super: bread failed, dev=loop9, iso_blknum=41, block=82 [ 348.440184][T11188] isofs_fill_super: bread failed, dev=loop8, iso_blknum=41, block=82 [ 349.330361][T11198] loop3: detected capacity change from 0 to 164 [ 349.371263][T11198] isofs_fill_super: bread failed, dev=loop3, iso_blknum=41, block=82 [ 349.724152][ T7688] usb 10-1: new full-speed USB device number 10 using dummy_hcd [ 349.972181][ T7688] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 350.201843][ T7688] usb 10-1: config 0 has no interface number 0 [ 350.234967][ T7688] usb 10-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 350.289924][ T7688] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.332197][ T7688] usb 10-1: Product: syz [ 350.363896][ T7688] usb 10-1: Manufacturer: syz [ 350.368646][ T7688] usb 10-1: SerialNumber: syz [ 350.478732][ T7688] usb 10-1: config 0 descriptor?? [ 350.529776][ T7688] usb 10-1: selecting invalid altsetting 1 [ 350.571664][ T7688] dvb_ttusb_budget: ttusb_init_controller: error [ 350.591863][ T7688] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 350.813794][ T7688] DVB: Unable to find symbol stv0299_attach() [ 351.552938][ T7688] DVB: Unable to find symbol tda8083_attach() [ 351.559893][ T7688] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 351.580581][ T7688] usb 10-1: USB disconnect, device number 10 [ 352.148877][ C0] vcan0: j1939_tp_rxtimer: 0xffff888063cf6c00: rx timeout, send abort [ 352.157517][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 352.165963][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888063cf6c00: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 352.736243][T11235] loop4: detected capacity change from 0 to 164 [ 353.109830][T11241] device-mapper: ioctl: name not supplied when creating device [ 353.151590][T11241] loop4: detected capacity change from 0 to 164 [ 353.247386][T11241] rock: directory entry would overflow storage [ 353.280053][T11241] rock: sig=0x66, size=4, remaining=3 [ 353.698829][T11256] loop4: detected capacity change from 0 to 164 [ 353.830233][T11253] loop3: detected capacity change from 0 to 164 [ 355.233858][ T7688] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 355.436380][ T7688] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 355.456853][ T7688] usb 5-1: config 0 has no interface number 0 [ 355.482270][ T7688] usb 5-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 355.664073][ T7688] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.718780][ T7688] usb 5-1: Product: syz [ 355.723015][ T7688] usb 5-1: Manufacturer: syz [ 355.746494][ T7688] usb 5-1: SerialNumber: syz [ 355.770552][ T7688] usb 5-1: config 0 descriptor?? [ 355.809027][ T7688] usb 5-1: selecting invalid altsetting 1 [ 355.829824][ T7688] dvb_ttusb_budget: ttusb_init_controller: error [ 355.853827][ T7688] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 357.163709][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 358.437729][T11289] loop8: detected capacity change from 0 to 164 [ 358.464929][ T7688] DVB: Unable to find symbol stv0299_attach() [ 358.470812][ C0] vcan0: j1939_tp_rxtimer: 0xffff888030384000: rx timeout, send abort [ 358.483742][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888030384000: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 358.528428][ T7688] DVB: Unable to find symbol tda8083_attach() [ 358.535911][ T7688] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 358.628196][ T7688] usb 5-1: USB disconnect, device number 6 [ 358.781986][T11295] device-mapper: ioctl: name not supplied when creating device [ 358.847334][T11295] loop9: detected capacity change from 0 to 164 [ 358.906405][T11295] rock: directory entry would overflow storage [ 358.912645][T11295] rock: sig=0x66, size=4, remaining=3 [ 359.166118][T11302] loop4: detected capacity change from 0 to 164 [ 363.677099][T11329] loop3: detected capacity change from 0 to 164 [ 363.760774][T11329] isofs_fill_super: bread failed, dev=loop3, iso_blknum=41, block=82 [ 365.369398][T11345] loop9: detected capacity change from 0 to 164 [ 366.079721][T11345] netlink: 112 bytes leftover after parsing attributes in process `syz.9.1432'. [ 366.172788][T11345] netlink: 112 bytes leftover after parsing attributes in process `syz.9.1432'. [ 366.200068][T11350] device-mapper: ioctl: name not supplied when creating device [ 366.238605][T11350] loop3: detected capacity change from 0 to 164 [ 366.284891][T11350] rock: directory entry would overflow storage [ 366.291118][T11350] rock: sig=0x66, size=4, remaining=3 [ 366.679377][ C0] vcan0: j1939_tp_rxtimer: 0xffff888024e1d400: rx timeout, send abort [ 366.693690][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888024e1d400: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 366.994126][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 367.403703][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 367.440472][ T7686] usb 10-1: new full-speed USB device number 11 using dummy_hcd [ 367.639574][ T7686] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 367.673854][ T7686] usb 10-1: config 0 has no interface number 0 [ 367.706493][ T7686] usb 10-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 367.750922][ T7686] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.781984][ T7686] usb 10-1: Product: syz [ 367.793699][ T7686] usb 10-1: Manufacturer: syz [ 367.799379][ T7686] usb 10-1: SerialNumber: syz [ 367.834697][ T7686] usb 10-1: config 0 descriptor?? [ 367.855671][ T7686] usb 10-1: selecting invalid altsetting 1 [ 367.861667][ T7686] dvb_ttusb_budget: ttusb_init_controller: error [ 368.556499][ T7686] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 369.018426][ T7686] DVB: Unable to find symbol stv0299_attach() [ 369.040932][T11375] loop8: detected capacity change from 0 to 164 [ 369.189835][ T7686] DVB: Unable to find symbol tda8083_attach() [ 369.213688][ T7686] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 369.278982][ T7686] usb 10-1: USB disconnect, device number 11 [ 370.865301][T11396] gadgetfs: bound to dummy_udc driver [ 372.432400][T11405] loop4: detected capacity change from 0 to 164 [ 372.583391][T11409] loop3: detected capacity change from 0 to 164 [ 374.582407][T11429] loop4: detected capacity change from 0 to 164 [ 374.619383][T11429] rock: directory entry would overflow storage [ 374.638108][T11429] rock: sig=0x66, size=4, remaining=3 [ 374.796891][T11432] loop8: detected capacity change from 0 to 164 [ 374.882269][T11432] netlink: 112 bytes leftover after parsing attributes in process `syz.8.1443'. [ 375.484125][T11432] netlink: 112 bytes leftover after parsing attributes in process `syz.8.1443'. [ 377.643679][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 378.875053][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.881581][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.446893][T11470] loop3: detected capacity change from 0 to 164 [ 379.480840][T11467] loop4: detected capacity change from 0 to 164 [ 379.503283][T11470] isofs_fill_super: bread failed, dev=loop3, iso_blknum=41, block=82 [ 379.733702][T11467] isofs_fill_super: bread failed, dev=loop4, iso_blknum=41, block=82 [ 379.868754][ C1] vcan0: j1939_tp_rxtimer: 0xffff888064a9d800: rx timeout, send abort [ 379.883699][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888064a9d800: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 381.151445][T11481] loop4: detected capacity change from 0 to 164 [ 381.255981][T11481] rock: directory entry would overflow storage [ 381.269179][T11487] loop3: detected capacity change from 0 to 164 [ 381.272515][T11481] rock: sig=0x66, size=4, remaining=3 [ 381.307745][T11487] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1458'. [ 381.356166][T11487] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1458'. [ 381.410481][T11491] loop8: detected capacity change from 0 to 164 [ 383.927136][T11515] jffs2: notice: (11515) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 384.042871][T11517] loop4: detected capacity change from 0 to 164 [ 384.090646][T11517] isofs_fill_super: bread failed, dev=loop4, iso_blknum=41, block=82 [ 385.007770][T11532] loop4: detected capacity change from 0 to 164 [ 385.056952][T11532] rock: directory entry would overflow storage [ 385.093700][T11532] rock: sig=0x66, size=4, remaining=3 [ 385.249611][T11538] loop8: detected capacity change from 0 to 164 [ 385.397232][T11542] loop4: detected capacity change from 0 to 164 [ 385.611400][T11542] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1469'. [ 385.813257][T11542] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1469'. [ 387.883715][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 387.903270][ C1] vcan0: j1939_tp_rxtimer: 0xffff888024d46000: rx timeout, send abort [ 387.913697][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888024d46000: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 390.367398][T11587] loop4: detected capacity change from 0 to 164 [ 390.449104][T11587] isofs_fill_super: bread failed, dev=loop4, iso_blknum=41, block=82 [ 390.536367][T11593] loop3: detected capacity change from 0 to 164 [ 390.691870][T11593] rock: directory entry would overflow storage [ 390.860551][T11593] rock: sig=0x66, size=4, remaining=3 [ 390.956965][T11591] device-mapper: ioctl: populate_table: no targets specified [ 392.017867][T11609] loop4: detected capacity change from 0 to 164 [ 392.048806][T11608] loop3: detected capacity change from 0 to 164 [ 392.093878][T11608] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1479'. [ 392.120628][T11608] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1479'. [ 392.743278][T11617] loop8: detected capacity change from 0 to 164 [ 394.526250][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805cf4b800: rx timeout, send abort [ 394.539116][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805cf4b800: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 397.195758][T11643] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 397.832034][T11649] loop8: detected capacity change from 0 to 164 [ 397.859926][T11649] rock: directory entry would overflow storage [ 397.904926][T11649] rock: sig=0x66, size=4, remaining=3 [ 397.941039][T11649] device-mapper: ioctl: populate_table: no targets specified [ 398.322051][T11655] loop8: detected capacity change from 0 to 164 [ 398.399326][T11655] netlink: 112 bytes leftover after parsing attributes in process `syz.8.1491'. [ 398.426132][T11655] netlink: 112 bytes leftover after parsing attributes in process `syz.8.1491'. [ 398.817552][T11667] loop8: detected capacity change from 0 to 164 [ 400.274118][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 400.672425][T11687] loop4: detected capacity change from 0 to 164 [ 400.796969][T11687] isofs_fill_super: bread failed, dev=loop4, iso_blknum=41, block=82 [ 401.906638][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805c423400: rx timeout, send abort [ 401.923684][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805c423400: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 402.087707][T11697] gadgetfs: bound to dummy_udc driver [ 403.944444][T11702] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 405.394309][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 405.679683][T11721] loop9: detected capacity change from 0 to 164 [ 405.790740][T11721] rock: directory entry would overflow storage [ 405.804356][T11721] rock: sig=0x66, size=4, remaining=3 [ 405.950774][T11721] device-mapper: ioctl: populate_table: no targets specified [ 406.433134][T11736] loop4: detected capacity change from 0 to 164 [ 406.535733][T11740] loop9: detected capacity change from 0 to 164 [ 406.552516][T11736] isofs_fill_super: bread failed, dev=loop4, iso_blknum=41, block=82 [ 406.591475][T11740] netlink: 112 bytes leftover after parsing attributes in process `syz.9.1501'. [ 406.666463][T11740] netlink: 112 bytes leftover after parsing attributes in process `syz.9.1501'. [ 407.938335][T11758] loop9: detected capacity change from 0 to 164 [ 408.026919][T11758] isofs_fill_super: bread failed, dev=loop9, iso_blknum=41, block=82 [ 410.514108][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 410.668568][T11775] gadgetfs: bound to dummy_udc driver [ 411.453417][T11779] loop4: detected capacity change from 0 to 164 [ 411.506879][T11779] rock: directory entry would overflow storage [ 411.513102][T11779] rock: sig=0x66, size=4, remaining=3 [ 411.585818][T11779] device-mapper: ioctl: populate_table: no targets specified [ 414.067696][T11798] gadgetfs: bound to dummy_udc driver [ 417.802348][T11829] loop9: detected capacity change from 0 to 164 [ 417.889500][T11832] loop8: detected capacity change from 0 to 164 [ 418.125583][T11832] netlink: 112 bytes leftover after parsing attributes in process `syz.8.1512'. [ 418.147552][T11832] netlink: 112 bytes leftover after parsing attributes in process `syz.8.1512'. [ 419.646980][T11843] gadgetfs: bound to dummy_udc driver [ 420.452485][T11846] loop4: detected capacity change from 0 to 164 [ 420.494607][T11846] rock: directory entry would overflow storage [ 420.518915][T11846] rock: sig=0x66, size=4, remaining=3 [ 420.593840][T11846] device-mapper: ioctl: populate_table: no targets specified [ 424.994699][T11893] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 426.105952][T11904] loop3: detected capacity change from 0 to 164 [ 427.309564][T11914] gadgetfs: bound to dummy_udc driver [ 429.782367][T11931] gadgetfs: bound to dummy_udc driver [ 433.789324][T11954] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 434.550551][T11957] gadgetfs: bound to dummy_udc driver [ 436.844408][T11968] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 436.863794][T11968] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 436.905055][T11968] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 436.950425][T11968] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 436.958350][T11968] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 436.967531][ T5777] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 437.166955][T11973] loop9: detected capacity change from 0 to 164 [ 437.243140][T11973] isofs_fill_super: bread failed, dev=loop9, iso_blknum=41, block=82 [ 439.078104][ T5777] Bluetooth: hci2: command tx timeout [ 439.176250][T11966] chnl_net:caif_netlink_parms(): no params data found [ 439.647866][T11998] loop9: detected capacity change from 0 to 164 [ 439.763679][T11998] isofs_fill_super: bread failed, dev=loop9, iso_blknum=41, block=82 [ 440.174250][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.184409][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.249261][ T49] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.039830][T12010] gadgetfs: bound to dummy_udc driver [ 441.667080][ T5777] Bluetooth: hci2: command tx timeout [ 441.866410][ T49] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.472721][T12020] gadgetfs: bound to dummy_udc driver [ 443.713807][ T5777] Bluetooth: hci2: command tx timeout [ 443.776953][ T49] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.855723][T11966] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.862823][T11966] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.905237][T11966] bridge_slave_0: entered allmulticast mode [ 443.944967][T11966] bridge_slave_0: entered promiscuous mode [ 443.965075][T11966] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.972344][T11966] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.997178][T11966] bridge_slave_1: entered allmulticast mode [ 444.022100][T11966] bridge_slave_1: entered promiscuous mode [ 444.161863][ T49] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.577645][T11966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 444.655977][T11966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 444.696634][T11966] team0: Port device team_slave_0 added [ 444.707984][T11966] team0: Port device team_slave_1 added [ 444.847679][T12030] loop8: detected capacity change from 0 to 164 [ 444.878592][T11966] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 444.894268][T11966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 444.953704][T11966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 444.975050][T12030] netlink: 112 bytes leftover after parsing attributes in process `syz.8.1549'. [ 445.014677][T11966] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 445.021722][T11966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 445.065669][T11966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 445.080690][T12030] netlink: 112 bytes leftover after parsing attributes in process `syz.8.1549'. [ 445.931856][T12037] gadgetfs: bound to dummy_udc driver [ 446.486663][ T5777] Bluetooth: hci2: command tx timeout [ 448.203824][T12046] gadgetfs: bound to dummy_udc driver [ 448.879561][T11966] hsr_slave_0: entered promiscuous mode [ 448.928499][T11966] hsr_slave_1: entered promiscuous mode [ 451.296601][T12064] gadgetfs: bound to dummy_udc driver [ 452.006904][T12066] loop8: detected capacity change from 0 to 164 [ 452.062295][T12066] isofs_fill_super: bread failed, dev=loop8, iso_blknum=41, block=82 [ 454.738951][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805c57d400: rx timeout, send abort [ 454.750284][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805c57d400: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 455.304768][T12093] gadgetfs: bound to dummy_udc driver [ 458.543048][T11966] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 458.603664][T11966] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 458.648514][T11966] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 458.693046][T11966] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 458.765546][ T49] hsr_slave_0: left promiscuous mode [ 458.785132][ T49] hsr_slave_1: left promiscuous mode [ 458.794181][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 458.801641][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 458.824490][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 458.831945][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 458.858559][ T49] bridge_slave_1: left allmulticast mode [ 458.864755][ T49] bridge_slave_1: left promiscuous mode [ 458.882564][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.897608][ T49] bridge_slave_0: left allmulticast mode [ 458.903303][ T49] bridge_slave_0: left promiscuous mode [ 459.480498][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.593356][ T49] veth1_macvtap: left promiscuous mode [ 459.599966][ T49] veth0_macvtap: left promiscuous mode [ 459.627088][T12106] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 459.730221][ T49] veth1_vlan: left promiscuous mode [ 459.753864][ T49] veth0_vlan: left promiscuous mode [ 461.570819][T12118] loop4: detected capacity change from 0 to 164 [ 461.647074][T12118] isofs_fill_super: bread failed, dev=loop4, iso_blknum=41, block=82 [ 463.922469][T12126] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 466.995614][ T49] team0 (unregistering): Port device team_slave_1 removed [ 467.236898][ T49] team0 (unregistering): Port device team_slave_0 removed [ 467.877511][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 468.138790][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 471.858733][ T49] bond0 (unregistering): Released all slaves [ 474.181290][T12179] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 474.370492][T11966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 475.183868][T12186] usb usb8: usbfs: process 12186 (syz.4.1589) did not claim interface 0 before use [ 475.508449][T12188] loop9: detected capacity change from 0 to 164 [ 475.549237][T11966] 8021q: adding VLAN 0 to HW filter on device team0 [ 475.597425][ T2903] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.604634][ T2903] bridge0: port 1(bridge_slave_0) entered forwarding state [ 475.683305][T12188] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1583'. [ 475.698949][T12188] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1583'. [ 475.821026][ T7933] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.828267][ T7933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 475.984671][T11966] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 476.033669][T11966] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 476.602865][T12194] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 478.160646][T11966] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 478.341420][T11966] veth0_vlan: entered promiscuous mode [ 478.402136][T11966] veth1_vlan: entered promiscuous mode [ 479.343086][T11966] veth0_macvtap: entered promiscuous mode [ 479.376316][T11966] veth1_macvtap: entered promiscuous mode [ 479.464203][T11966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 479.482078][T11966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.643629][T11966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 479.703940][T11966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.733631][T11966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 479.829456][T11966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.876894][T11966] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 479.967501][T11966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 480.007556][T11966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.047292][T11966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 480.091672][T11966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.124236][T11966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 480.144018][T11966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.208773][T11966] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 481.161630][T11966] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.196732][T11966] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.225855][T11966] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.247855][T11966] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.662264][T12215] loop9: detected capacity change from 0 to 164 [ 481.717408][T11195] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.097424][T11195] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.474211][T11195] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.483315][T11195] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.509792][T12215] isofs_fill_super: bread failed, dev=loop9, iso_blknum=41, block=82 [ 485.700909][T12234] gadgetfs: bound to dummy_udc driver [ 493.315675][T12288] loop9: detected capacity change from 0 to 164 [ 495.045875][T12304] gadgetfs: bound to dummy_udc driver [ 495.473646][ T5853] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 495.481465][ C0] gadgetfs: connected [ 495.495509][ T5853] gadgetfs: disconnected [ 495.841098][ C0] gadgetfs: connected [ 495.858864][ T5853] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 496.100488][ T5853] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 496.110666][ T5853] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.137614][ C0] gadgetfs: configuration #1 [ 497.197614][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805c205000: rx timeout, send abort [ 497.206275][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805c205000: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 499.067535][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802526f400: rx timeout, send abort [ 499.076059][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802526f400: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 501.638623][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.645038][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.856804][T12308] gadgetfs: suspended from state 3 [ 508.948847][T12308] gadgetfs: disconnected [ 508.954075][ T7686] usb 1-1: USB disconnect, device number 2 [ 509.153771][ T7838] ================================================================== [ 509.161891][ T7838] BUG: KASAN: slab-use-after-free in __mutex_lock+0xfc/0xc80 [ 509.169481][ T7838] Read of size 8 at addr ffff88805c61e460 by task syz-executor/7838 [ 509.177488][ T7838] [ 509.179882][ T7838] CPU: 1 PID: 7838 Comm: syz-executor Not tainted syzkaller #0 [ 509.187491][ T7838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 509.197568][ T7838] Call Trace: [ 509.200919][ T7838] [ 509.203938][ T7838] dump_stack_lvl+0x18c/0x250 [ 509.208757][ T7838] ? __lock_acquire+0x7d80/0x7d80 [ 509.213878][ T7838] ? show_regs_print_info+0x20/0x20 [ 509.219104][ T7838] ? load_image+0x420/0x420 [ 509.223669][ T7838] ? __virt_addr_valid+0x10c/0x380 [ 509.228806][ T7838] ? __virt_addr_valid+0x10c/0x380 [ 509.233949][ T7838] ? __virt_addr_valid+0x10c/0x380 [ 509.239064][ T7838] print_report+0xa8/0x210 [ 509.243479][ T7838] ? __mutex_lock+0xfc/0xc80 [ 509.248066][ T7838] kasan_report+0x117/0x150 [ 509.252596][ T7838] ? tomoyo_check_open_permission+0x384/0x460 [ 509.258688][ T7838] ? __mutex_lock+0xfc/0xc80 [ 509.263279][ T7838] __mutex_lock+0xfc/0xc80 [ 509.267707][ T7838] ? end_current_label_crit_section+0x170/0x170 [ 509.273951][ T7838] ? ep_open+0x4e/0x270 [ 509.278222][ T7838] ? mutex_lock_nested+0x20/0x20 [ 509.283156][ T7838] ? apparmor_file_open+0x5ab/0x760 [ 509.288349][ T7838] ? apparmor_inode_getattr+0x2c0/0x2c0 [ 509.293889][ T7838] ? __rwlock_init+0x150/0x150 [ 509.298657][ T7838] ep_open+0x4e/0x270 [ 509.302628][ T7838] ? do_dentry_open+0x86f/0x14b0 [ 509.307566][ T7838] do_dentry_open+0x880/0x14b0 [ 509.312334][ T7838] ? ep_ioctl+0x1c0/0x1c0 [ 509.316656][ T7838] path_openat+0x284f/0x3270 [ 509.321244][ T7838] ? do_sys_openat2+0xda/0x1d0 [ 509.326005][ T7838] ? __x64_sys_openat+0x139/0x160 [ 509.331041][ T7838] ? verify_lock_unused+0x140/0x140 [ 509.336234][ T7838] ? do_filp_open+0x430/0x430 [ 509.340907][ T7838] do_filp_open+0x1f2/0x430 [ 509.345406][ T7838] ? vfs_tmpfile+0x620/0x620 [ 509.349992][ T7838] ? _raw_spin_unlock+0x28/0x40 [ 509.354854][ T7838] ? alloc_fd+0x590/0x640 [ 509.359218][ T7838] do_sys_openat2+0x134/0x1d0 [ 509.363888][ T7838] ? do_sys_open+0xe0/0xe0 [ 509.368296][ T7838] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 509.374275][ T7838] ? fsnotify_link_count+0xf0/0xf0 [ 509.379381][ T7838] ? lock_chain_count+0x20/0x20 [ 509.384225][ T7838] __x64_sys_openat+0x139/0x160 [ 509.389071][ T7838] do_syscall_64+0x55/0xb0 [ 509.393665][ T7838] ? clear_bhb_loop+0x40/0x90 [ 509.398437][ T7838] ? clear_bhb_loop+0x40/0x90 [ 509.403107][ T7838] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 509.409008][ T7838] RIP: 0033:0x7f22c3b5e98e [ 509.413462][ T7838] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 509.433111][ T7838] RSP: 002b:00007ffc4c0264a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 509.441520][ T7838] RAX: ffffffffffffffda RBX: 000055557a858500 RCX: 00007f22c3b5e98e [ 509.449484][ T7838] RDX: 0000000000000000 RSI: 00007ffc4c026610 RDI: ffffffffffffff9c [ 509.457448][ T7838] RBP: 00007ffc4c026610 R08: 0000000000000000 R09: 0000000000000000 [ 509.465409][ T7838] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc4c027700 [ 509.473460][ T7838] R13: 00007f22c3c3448b R14: 000055557a8584e8 R15: 0000000000000006 [ 509.481517][ T7838] [ 509.484528][ T7838] [ 509.486882][ T7838] Allocated by task 12304: [ 509.491356][ T7838] kasan_set_track+0x4e/0x70 [ 509.495942][ T7838] __kasan_kmalloc+0x8f/0xa0 [ 509.500520][ T7838] gadgetfs_bind+0x25f/0x830 [ 509.505098][ T7838] gadget_bind_driver+0x2b3/0x770 [ 509.510136][ T7838] really_probe+0x247/0xae0 [ 509.514650][ T7838] __driver_probe_device+0x1f5/0x390 [ 509.519929][ T7838] driver_probe_device+0x4f/0x420 [ 509.524939][ T7838] __driver_attach+0x444/0x6d0 [ 509.529696][ T7838] bus_for_each_dev+0x235/0x2b0 [ 509.534542][ T7838] bus_add_driver+0x340/0x630 [ 509.539214][ T7838] driver_register+0x23a/0x310 [ 509.543968][ T7838] usb_gadget_register_driver_owner+0xf9/0x270 [ 509.550212][ T7838] dev_config+0xe49/0x1260 [ 509.554619][ T7838] vfs_write+0x299/0x9a0 [ 509.558875][ T7838] ksys_write+0x151/0x260 [ 509.563196][ T7838] do_syscall_64+0x55/0xb0 [ 509.567779][ T7838] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 509.573665][ T7838] [ 509.575978][ T7838] Freed by task 12308: [ 509.580060][ T7838] kasan_set_track+0x4e/0x70 [ 509.584645][ T7838] kasan_save_free_info+0x28/0x40 [ 509.589682][ T7838] ____kasan_slab_free+0x126/0x1f0 [ 509.594783][ T7838] slab_free_freelist_hook+0x130/0x1a0 [ 509.600234][ T7838] __kmem_cache_free+0xba/0x1f0 [ 509.605086][ T7838] destroy_ep_files+0x280/0x340 [ 509.609936][ T7838] gadgetfs_unbind+0x109/0x2b0 [ 509.614705][ T7838] gadget_unbind_driver+0x1bf/0x3e0 [ 509.619925][ T7838] device_release_driver_internal+0x408/0x6f0 [ 509.626006][ T7838] driver_detach+0x1f3/0x2d0 [ 509.630586][ T7838] bus_remove_driver+0x221/0x2f0 [ 509.635523][ T7838] usb_gadget_unregister_driver+0x4e/0x70 [ 509.641238][ T7838] dev_release+0x86/0x200 [ 509.645570][ T7838] __fput+0x221/0x940 [ 509.649542][ T7838] task_work_run+0x1d4/0x260 [ 509.654153][ T7838] do_exit+0x986/0x2530 [ 509.658307][ T7838] do_group_exit+0x22d/0x2f0 [ 509.662892][ T7838] get_signal+0x12a6/0x1390 [ 509.667410][ T7838] arch_do_signal_or_restart+0xc2/0x7b0 [ 509.672977][ T7838] exit_to_user_mode_loop+0x70/0x110 [ 509.678265][ T7838] exit_to_user_mode_prepare+0xee/0x180 [ 509.683901][ T7838] irqentry_exit_to_user_mode+0x9/0x30 [ 509.689359][ T7838] exc_page_fault+0x8c/0x100 [ 509.693940][ T7838] asm_exc_page_fault+0x26/0x30 [ 509.698786][ T7838] [ 509.701097][ T7838] Last potentially related work creation: [ 509.706805][ T7838] kasan_save_stack+0x3e/0x60 [ 509.711477][ T7838] __kasan_record_aux_stack+0xaf/0xc0 [ 509.716846][ T7838] kvfree_call_rcu+0xee/0x780 [ 509.721518][ T7838] __ipv6_dev_mc_dec+0x2e6/0x340 [ 509.726542][ T7838] br_multicast_leave_snoopers+0x162/0x1d0 [ 509.732392][ T7838] br_dev_stop+0x8a/0x180 [ 509.736776][ T7838] __dev_close_many+0x1d5/0x2b0 [ 509.741656][ T7838] dev_close_many+0x220/0x410 [ 509.746436][ T7838] unregister_netdevice_many_notify+0x4bf/0x1910 [ 509.752833][ T7838] default_device_exit_batch+0x962/0xa00 [ 509.758484][ T7838] cleanup_net+0x792/0xbb0 [ 509.762983][ T7838] process_scheduled_works+0xa60/0x1600 [ 509.768523][ T7838] worker_thread+0xa5e/0xfe0 [ 509.773105][ T7838] kthread+0x2fa/0x390 [ 509.777163][ T7838] ret_from_fork+0x48/0x80 [ 509.781572][ T7838] ret_from_fork_asm+0x11/0x20 [ 509.786438][ T7838] [ 509.788754][ T7838] Second to last potentially related work creation: [ 509.795378][ T7838] kasan_save_stack+0x3e/0x60 [ 509.800079][ T7838] __kasan_record_aux_stack+0xaf/0xc0 [ 509.805449][ T7838] kvfree_call_rcu+0xee/0x780 [ 509.810127][ T7838] ipv6_mc_destroy_dev+0x3bf/0x590 [ 509.815233][ T7838] addrconf_ifdown+0x13b8/0x18a0 [ 509.820224][ T7838] addrconf_notify+0x6c6/0x1010 [ 509.825103][ T7838] notifier_call_chain+0x18f/0x380 [ 509.830207][ T7838] unregister_netdevice_many_notify+0x1037/0x1910 [ 509.836612][ T7838] default_device_exit_batch+0x962/0xa00 [ 509.842242][ T7838] cleanup_net+0x792/0xbb0 [ 509.846667][ T7838] process_scheduled_works+0xa60/0x1600 [ 509.852208][ T7838] worker_thread+0xa5e/0xfe0 [ 509.856793][ T7838] kthread+0x2fa/0x390 [ 509.860852][ T7838] ret_from_fork+0x48/0x80 [ 509.865261][ T7838] ret_from_fork_asm+0x11/0x20 [ 509.870026][ T7838] [ 509.872359][ T7838] The buggy address belongs to the object at ffff88805c61e400 [ 509.872359][ T7838] which belongs to the cache kmalloc-512 of size 512 [ 509.886466][ T7838] The buggy address is located 96 bytes inside of [ 509.886466][ T7838] freed 512-byte region [ffff88805c61e400, ffff88805c61e600) [ 509.900195][ T7838] [ 509.902509][ T7838] The buggy address belongs to the physical page: [ 509.908914][ T7838] page:ffffea0001718700 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5c61c [ 509.919058][ T7838] head:ffffea0001718700 order:2 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 509.927981][ T7838] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 509.935972][ T7838] page_type: 0xffffffff() [ 509.940298][ T7838] raw: 00fff00000000840 ffff888017c41c80 dead000000000100 dead000000000122 [ 509.948870][ T7838] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 509.957443][ T7838] page dumped because: kasan: bad access detected [ 509.963855][ T7838] page_owner tracks the page as allocated [ 509.969556][ T7838] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5814, tgid 5814 (kworker/u4:3), ts 72201767848, free_ts 24661812388 [ 509.990213][ T7838] post_alloc_hook+0x1c1/0x200 [ 509.995090][ T7838] get_page_from_freelist+0x2181/0x22a0 [ 510.000734][ T7838] __alloc_pages+0x1f0/0x460 [ 510.005353][ T7838] alloc_slab_page+0x5d/0x180 [ 510.010037][ T7838] new_slab+0x87/0x2d0 [ 510.014100][ T7838] ___slab_alloc+0xc5c/0x12f0 [ 510.018767][ T7838] __kmem_cache_alloc_node+0x11f/0x250 [ 510.024223][ T7838] kmalloc_trace+0x2a/0xe0 [ 510.028632][ T7838] tomoyo_find_next_domain+0xe0/0x1a50 [ 510.034173][ T7838] tomoyo_bprm_check_security+0x116/0x170 [ 510.039878][ T7838] security_bprm_check+0x62/0xa0 [ 510.044832][ T7838] bprm_execve+0xa72/0x1730 [ 510.049338][ T7838] kernel_execve+0x87e/0x980 [ 510.053922][ T7838] call_usermodehelper_exec_async+0x20b/0x350 [ 510.059976][ T7838] ret_from_fork+0x48/0x80 [ 510.064380][ T7838] ret_from_fork_asm+0x11/0x20 [ 510.069136][ T7838] page last free stack trace: [ 510.073796][ T7838] free_unref_page_prepare+0x7d7/0x8f0 [ 510.079245][ T7838] free_unref_page+0x32/0x2e0 [ 510.083907][ T7838] free_contig_range+0xa1/0x150 [ 510.088745][ T7838] destroy_args+0x7d/0x840 [ 510.093260][ T7838] debug_vm_pgtable+0x411/0x440 [ 510.098104][ T7838] do_one_initcall+0x242/0x790 [ 510.102861][ T7838] do_initcall_level+0x13d/0x1f0 [ 510.107811][ T7838] do_initcalls+0x69/0xd0 [ 510.112131][ T7838] kernel_init_freeable+0x3d9/0x560 [ 510.117337][ T7838] kernel_init+0x1d/0x1c0 [ 510.121657][ T7838] ret_from_fork+0x48/0x80 [ 510.126063][ T7838] ret_from_fork_asm+0x11/0x20 [ 510.130822][ T7838] [ 510.133135][ T7838] Memory state around the buggy address: [ 510.138844][ T7838] ffff88805c61e300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 510.146891][ T7838] ffff88805c61e380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 510.154941][ T7838] >ffff88805c61e400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 510.162986][ T7838] ^ [ 510.170168][ T7838] ffff88805c61e480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 510.178218][ T7838] ffff88805c61e500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 510.186266][ T7838] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 510.435564][ T7838] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 510.442816][ T7838] CPU: 0 PID: 7838 Comm: syz-executor Not tainted syzkaller #0 [ 510.450380][ T7838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 510.460452][ T7838] Call Trace: [ 510.463740][ T7838] [ 510.466679][ T7838] dump_stack_lvl+0x18c/0x250 [ 510.471383][ T7838] ? show_regs_print_info+0x20/0x20 [ 510.476593][ T7838] ? load_image+0x420/0x420 [ 510.481119][ T7838] panic+0x2ca/0x720 [ 510.485070][ T7838] ? bpf_jit_dump+0xd0/0xd0 [ 510.489586][ T7838] ? _raw_spin_unlock_irqrestore+0x111/0x120 [ 510.495572][ T7838] ? _raw_spin_unlock+0x40/0x40 [ 510.500422][ T7838] ? print_memory_metadata+0x314/0x400 [ 510.505875][ T7838] ? __mutex_lock+0xfc/0xc80 [ 510.510459][ T7838] check_panic_on_warn+0x84/0xa0 [ 510.515393][ T7838] ? __mutex_lock+0xfc/0xc80 [ 510.519973][ T7838] end_report+0x6f/0x130 [ 510.524211][ T7838] kasan_report+0x128/0x150 [ 510.528715][ T7838] ? tomoyo_check_open_permission+0x384/0x460 [ 510.534787][ T7838] ? __mutex_lock+0xfc/0xc80 [ 510.539374][ T7838] __mutex_lock+0xfc/0xc80 [ 510.543786][ T7838] ? end_current_label_crit_section+0x170/0x170 [ 510.550020][ T7838] ? ep_open+0x4e/0x270 [ 510.554169][ T7838] ? mutex_lock_nested+0x20/0x20 [ 510.559109][ T7838] ? apparmor_file_open+0x5ab/0x760 [ 510.564304][ T7838] ? apparmor_inode_getattr+0x2c0/0x2c0 [ 510.569840][ T7838] ? __rwlock_init+0x150/0x150 [ 510.574613][ T7838] ep_open+0x4e/0x270 [ 510.578583][ T7838] ? do_dentry_open+0x86f/0x14b0 [ 510.583514][ T7838] do_dentry_open+0x880/0x14b0 [ 510.588275][ T7838] ? ep_ioctl+0x1c0/0x1c0 [ 510.592602][ T7838] path_openat+0x284f/0x3270 [ 510.597193][ T7838] ? do_sys_openat2+0xda/0x1d0 [ 510.601947][ T7838] ? __x64_sys_openat+0x139/0x160 [ 510.606986][ T7838] ? verify_lock_unused+0x140/0x140 [ 510.612183][ T7838] ? do_filp_open+0x430/0x430 [ 510.616854][ T7838] do_filp_open+0x1f2/0x430 [ 510.621348][ T7838] ? vfs_tmpfile+0x620/0x620 [ 510.625933][ T7838] ? _raw_spin_unlock+0x28/0x40 [ 510.630778][ T7838] ? alloc_fd+0x590/0x640 [ 510.635107][ T7838] do_sys_openat2+0x134/0x1d0 [ 510.639789][ T7838] ? do_sys_open+0xe0/0xe0 [ 510.644211][ T7838] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 510.650198][ T7838] ? fsnotify_link_count+0xf0/0xf0 [ 510.655309][ T7838] ? lock_chain_count+0x20/0x20 [ 510.660156][ T7838] __x64_sys_openat+0x139/0x160 [ 510.665006][ T7838] do_syscall_64+0x55/0xb0 [ 510.669421][ T7838] ? clear_bhb_loop+0x40/0x90 [ 510.674091][ T7838] ? clear_bhb_loop+0x40/0x90 [ 510.678757][ T7838] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 510.684641][ T7838] RIP: 0033:0x7f22c3b5e98e [ 510.689046][ T7838] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 510.708668][ T7838] RSP: 002b:00007ffc4c0264a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 510.717075][ T7838] RAX: ffffffffffffffda RBX: 000055557a858500 RCX: 00007f22c3b5e98e [ 510.725128][ T7838] RDX: 0000000000000000 RSI: 00007ffc4c026610 RDI: ffffffffffffff9c [ 510.733091][ T7838] RBP: 00007ffc4c026610 R08: 0000000000000000 R09: 0000000000000000 [ 510.741053][ T7838] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc4c027700 [ 510.749013][ T7838] R13: 00007f22c3c3448b R14: 000055557a8584e8 R15: 0000000000000006 [ 510.756979][ T7838] [ 510.760246][ T7838] Kernel Offset: disabled [ 510.764762][ T7838] Rebooting in 86400 seconds..