last executing test programs: 2m37.669024875s ago: executing program 2 (id=976): shmat(0x0, &(0x7f0000caa000/0x3000)=nil, 0x7000) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000001, 0x20031, 0xffffffffffffffff, 0xec785000) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x10000, 0x3, &(0x7f0000003000/0x10000)=nil) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') r1 = memfd_create(&(0x7f0000002a40)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad;\x92\n\x8d\xb6I\x1fQ\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\xe3l\x87\\\x15Hd~\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bI\xd8\x1c\xe8\x9bYS%\x1d\xa7Wd\xa4Eu\x8cs\xe0\xa1.\xd1\xb2I\x1a\xb2\xfdA\x98\x16\xca\x83y\xf9\x1a\xe7\x06h\av\xa8\xd8\xceYH\x8f\xc0\xe6v\xb5\xf5\x9d\xbe\xa58\xb42\xd8V$\xe6\xc8\x1c\xbf\x8e\xa1\xefa\xb1/\xee1=\xbfM\xeaw\f\xa2\x87\x1c(\x1a-\xeb\xfbV\xeb4\xd4C]\xc7{t\xf9\xd5`IZ\x03H\xd9\x86\xe12N\x1f\xd8{\xf5z@\xb6\x87\xa43\xdc50V-\x13F\xb6&\xcb\xa3\xe0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xad\xcf`*8&\feeV\x17U=(\xff\xe5t\xe4\xe6\xd8\x8f\x81\xa02\xfed\xde\x03\xdbN98\xb1\x8b\xccg2_\xc4bA\xf1\xf8\xfb\xf8\xd0\xfb_\x1e\"\xedF\x17$\x9e\xd8\xae\xc1\xaf\xee%\x1c\xc6V\x17\x03\xa6&\xa86\xc3\xd5\x02\x10g\x02(EI\x8d\x19\xefJ\xc1x\x92\x8c\x05\xb9\xd2Y\xa0\x13|\x95\xce\x86in\xd4\xd0\xb4\x02?gl\x8f\x1e\xa0\xe5\xf9\xe5\xc9\x9eG\xa9\x14\xff\xe2p\xb4\xda\x1b\t\xc7t\xe3\xe8\xb2\xa5\\\xc6\f\r\xb4\xc1o\x9aS\xf2+\xf7\r04\xb3\xf8\xe38\v\xa4\xbdf', 0x1) mmap(&(0x7f00001d1000/0x3000)=nil, 0x3000, 0x1800006, 0x11, r1, 0xbc4cd000) read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000004880)={0x2020}, 0x2020) 2m37.46157474s ago: executing program 2 (id=977): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000001c0)={0x0, 0x0}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000140)={0x2, 0x0, [{0x40000001, 0x7fff, 0x4, 0x31237648, 0x6, 0x2, 0x80}, {0x40000003, 0x4, 0x1, 0xffff, 0xffffffff, 0x5b}]}) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r3, 0x4068aea3, &(0x7f00000000c0)={0xc7, 0x0, 0x1}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r6, &(0x7f00000003c0)={0x0, &(0x7f00000004c0)=[@rdmsr={0x66, 0x18, {0x40000093}}], 0x18}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m36.914076862s ago: executing program 2 (id=985): syz_read_part_table(0x5b2, &(0x7f0000000000)="$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") r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x5}, 0x1c) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) 2m33.8793755s ago: executing program 0 (id=998): r0 = fsopen(&(0x7f0000000180)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x82) fchdir(r1) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @local}}, 0x24) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r3) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'syzkaller1\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1_vlan\x00'}) sendmmsg(r2, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x14bb42, 0x8c) 2m32.896301352s ago: executing program 0 (id=1001): unshare(0xc040400) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) 2m32.620723418s ago: executing program 0 (id=1003): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xe0ffffff00000000}}, 0x1c) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 2m30.630075823s ago: executing program 2 (id=1010): bpf$MAP_CREATE(0x0, 0x0, 0x48) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) membarrier(0x10, 0x0) membarrier(0x8, 0x0) 2m30.399794948s ago: executing program 2 (id=1012): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/udp6\x00') preadv(r0, 0x0, 0x0, 0x802, 0xce) 2m28.945053441s ago: executing program 2 (id=1015): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @multicast}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x488c8}, 0x4004880) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x20004014) 2m28.915366191s ago: executing program 0 (id=1017): r0 = socket$packet(0x11, 0x2, 0x300) recvmmsg(r0, &(0x7f0000000480), 0x0, 0x10022, 0x0) 2m28.698085036s ago: executing program 0 (id=1018): r0 = syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) syz_open_dev$MSR(0x0, 0x7, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0xc0800) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) readv(r0, &(0x7f0000002b80)=[{&(0x7f0000002bc0)=""/4096, 0x1000}], 0x1) readv(r0, 0x0, 0x0) 2m26.814359238s ago: executing program 0 (id=1019): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff5656d, 0x70bd29, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0x1, 0xb}, {0xf, 0xfff0}}}, 0x24}, 0x1, 0x0, 0x0, 0x240048e4}, 0x44890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600602fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 2m13.37531955s ago: executing program 32 (id=1015): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @multicast}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x488c8}, 0x4004880) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x20004014) 2m11.294813417s ago: executing program 33 (id=1019): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff5656d, 0x70bd29, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0x1, 0xb}, {0xf, 0xfff0}}}, 0x24}, 0x1, 0x0, 0x0, 0x240048e4}, 0x44890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600602fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 13.531176656s ago: executing program 4 (id=1207): r0 = syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) syz_open_dev$MSR(0x0, 0x7, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0xc0800) r1 = getpgrp(0x0) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) readv(r0, &(0x7f0000002b80)=[{&(0x7f0000002bc0)=""/4096, 0x1000}], 0x1) readv(r0, 0x0, 0x0) 11.722214977s ago: executing program 5 (id=1209): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) get_robust_list(0x0, 0x0, &(0x7f0000000680)) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) mknod$loop(0x0, 0xfff, 0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000b00)=0x6) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000580)={{0x5, 0x3, 0x3, 0xfffffffe, 'syz0\x00', 0x2}, 0x1, [0xd44, 0x7fffffffffffffff, 0x0, 0x8, 0x4, 0x4, 0x7ff, 0x2, 0x2, 0x101, 0x2, 0xd, 0xf, 0x8, 0x1, 0x7, 0x4, 0x3, 0x2, 0x9, 0x0, 0xfffffffffefffffe, 0xfe7, 0x8000000000000000, 0x2, 0x8, 0x7ff, 0x9, 0xfffffffffffffffa, 0x2, 0xfffffffffffffff7, 0x5, 0x7, 0x403, 0x2, 0x10000, 0xe, 0x5, 0x8, 0x88, 0x2, 0x6, 0x4, 0x100000002, 0x0, 0x9, 0x7, 0x6, 0xa, 0x4, 0x7fff, 0x6, 0x8001, 0xffa1, 0x6, 0x8, 0x1, 0xfffffffbfffff800, 0x244, 0x1, 0x20, 0xc, 0xffffffffffffffff, 0xffffffffffffffff, 0x8f, 0x5, 0x1, 0x4, 0x4, 0x4, 0xf, 0xae9, 0x3, 0xfffffffffffffffe, 0x4000000006, 0x9, 0x7, 0x4000000000000000, 0x0, 0x7ff, 0x4, 0x7, 0x205d, 0x9, 0x63, 0x3, 0x3, 0x6, 0xf8, 0xfffffffffffffff9, 0xfffffffffffffffb, 0xfff, 0x1000, 0x6, 0x4, 0x8000000000000000, 0x800000000209, 0x2, 0x7ff, 0x7, 0x8, 0x1ff, 0x0, 0x6, 0x3, 0x5, 0x796a, 0xb0b, 0x9, 0x7, 0x4, 0x4, 0x0, 0x8, 0x4, 0x2dd, 0x4, 0x4, 0x8, 0x10000, 0x1da0, 0x38, 0x7, 0x5, 0x2ad, 0x80000001, 0xfffffffffeffffff, 0x7]}) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="20000000070a01"], 0x20}, 0x1, 0x0, 0x0, 0x40008c0}, 0x30000000) accept4(r3, 0x0, 0x0, 0x800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0xd}, {0xfff3, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x51}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfe2a}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 10.429413746s ago: executing program 4 (id=1211): bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x7, 0x1c, &(0x7f0000000100)=ANY=[@ANYRES16, @ANYRES32, @ANYBLOB="0000000000000000b7f8bf4b381e028f02000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000001008050004000000185400000d00000000000000000000004095ff0740f5157d180000000600000000000000830a000085100000020000009500000000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000bf91000000000000b7020000020000008500000085"], 0x0, 0xf, 0x0, 0x0, 0x40f00, 0xdff007ab5d5402d0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(0x0, r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c4000000000000000010000000000000000000000000000fe8000000000000000000000000000aaff"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000001000000bfa30000000000000703000030feffff720af0fff8ffffff61a4f0ff000000002d040000000000003d400300000000006504000001ed000079130000000000006c44000000000000"], 0x0}, 0x94) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x128}, 0x1, 0x0, 0x0, 0x20000040}, 0x8011) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400404"], 0x7) 10.412360456s ago: executing program 3 (id=1213): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000002ac0), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000002d40)={'team0\x00', 0x0}) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r3, 0x0, 0xd1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$unix(0x1, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) setrlimit(0xc, &(0x7f0000000080)={0x3, 0x48}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000a77000/0x4000)=nil, 0x4000, 0x2000000, 0x40010, r4, 0x1d227000) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000003340)={0x0, 0x0, &(0x7f0000003300)={&(0x7f0000002ec0)={0x20, r1, 0x807, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000091}, 0x4010) 9.229717553s ago: executing program 3 (id=1214): ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000b80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) syz_open_pts(r0, 0x2000) futex_waitv(0x0, 0x0, 0x0, &(0x7f0000000b40), 0x0) socket$netlink(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) set_mempolicy(0x2002, &(0x7f0000000000)=0x9, 0x9) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$TIOCSTI(r0, 0x5412, 0x0) 9.087758086s ago: executing program 5 (id=1215): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(0x0, r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x635e, 0x5, 0xffffffff, 0x10000}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x24008800) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0x484c10e0d22b6613}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xfffffffffffffdc3, 0x2, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x10006}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x12}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x6}, @TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x6}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 8.747743424s ago: executing program 4 (id=1217): syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) write$char_usb(r0, &(0x7f00000007c0)='\v', 0x1) syz_usb_ep_read(0xffffffffffffffff, 0x1, 0xa1, &(0x7f0000000000)=""/161) 7.915173272s ago: executing program 1 (id=1218): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd0}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 6.766874368s ago: executing program 5 (id=1219): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xc, 0x4, 0x4, 0x9, 0x18, r2}, 0x50) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0xa) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000100)={{0x100, 0xec1, 0x0, 0x1}, 'syz1\x00', 0x1a}) ioctl$UI_DEV_CREATE(r1, 0x5501) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) accept4(r3, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 6.7008315s ago: executing program 1 (id=1220): r0 = syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) syz_open_dev$MSR(0x0, 0x7, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0xc0800) r1 = getpgrp(0x0) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) readv(r0, &(0x7f0000002b80)=[{&(0x7f0000002bc0)=""/4096, 0x1000}], 0x1) readv(r0, 0x0, 0x0) 6.553349033s ago: executing program 4 (id=1221): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) get_robust_list(0x0, 0x0, &(0x7f0000000680)) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) mknod$loop(0x0, 0xfff, 0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000b00)=0x6) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000580)={{0x5, 0x3, 0x3, 0xfffffffe, 'syz0\x00', 0x2}, 0x1, [0xd44, 0x7fffffffffffffff, 0x0, 0x8, 0x4, 0x4, 0x7ff, 0x2, 0x2, 0x101, 0x2, 0xd, 0xf, 0x8, 0x1, 0x7, 0x4, 0x3, 0x2, 0x9, 0x0, 0xfffffffffefffffe, 0xfe7, 0x8000000000000000, 0x2, 0x8, 0x7ff, 0x9, 0xfffffffffffffffa, 0x2, 0xfffffffffffffff7, 0x5, 0x7, 0x403, 0x2, 0x10000, 0xe, 0x5, 0x8, 0x88, 0x2, 0x6, 0x4, 0x100000002, 0x0, 0x9, 0x7, 0x6, 0xa, 0x4, 0x7fff, 0x6, 0x8001, 0xffa1, 0x6, 0x8, 0x1, 0xfffffffbfffff800, 0x244, 0x1, 0x20, 0xc, 0xffffffffffffffff, 0xffffffffffffffff, 0x8f, 0x5, 0x1, 0x4, 0x4, 0x4, 0xf, 0xae9, 0x3, 0xfffffffffffffffe, 0x4000000006, 0x9, 0x7, 0x4000000000000000, 0x0, 0x7ff, 0x4, 0x7, 0x205d, 0x9, 0x63, 0x3, 0x3, 0x6, 0xf8, 0xfffffffffffffff9, 0xfffffffffffffffb, 0xfff, 0x1000, 0x6, 0x4, 0x8000000000000000, 0x800000000209, 0x2, 0x7ff, 0x7, 0x8, 0x1ff, 0x0, 0x6, 0x3, 0x5, 0x796a, 0xb0b, 0x9, 0x7, 0x4, 0x4, 0x0, 0x8, 0x4, 0x2dd, 0x4, 0x4, 0x8, 0x10000, 0x1da0, 0x38, 0x7, 0x5, 0x2ad, 0x80000001, 0xfffffffffeffffff, 0x7]}) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="20000000070a01"], 0x20}, 0x1, 0x0, 0x0, 0x40008c0}, 0x30000000) accept4(r3, 0x0, 0x0, 0x800) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x4040) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0xd}, {0xfff3, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x51}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfe2a}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5.722182211s ago: executing program 3 (id=1222): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000002ac0), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000002d40)={'team0\x00', 0x0}) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r3, 0x0, 0xd1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$unix(0x1, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) setrlimit(0xc, &(0x7f0000000080)={0x3, 0x48}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000a77000/0x4000)=nil, 0x4000, 0x2000000, 0x40010, r4, 0x1d227000) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000003340)={0x0, 0x0, &(0x7f0000003300)={&(0x7f0000002ec0)={0x20, r1, 0x807, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000091}, 0x4010) 4.669687175s ago: executing program 3 (id=1223): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c00)=@newtaction={0xe68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x7, 0x1, 0x10000000, 0x4, 0xaee}, 0x7, 0x7}, [{0x8, 0xfffff000, 0x2, 0x9, 0x1ff, 0xafe}, {0xe, 0x2, 0x1, 0x9, 0x4, 0xa}, {0x7, 0xfe73, 0x6, 0x8, 0x2, 0x10000}, {0x4320, 0x3bf6, 0x4, 0x8, 0xffffff9d, 0x4}, {0x6, 0x44, 0x3, 0x986, 0xffff6d72, 0xbf5}, {0x7ff, 0x8009ef, 0x1, 0x3, 0x9, 0x81}, {0x7f, 0x5752, 0x0, 0x9, 0x7}, {0x9, 0xf7b, 0xa004, 0x8, 0x5, 0x20000a17}, {0x7, 0x200, 0x1000, 0x80, 0x4, 0x1}, {0x7, 0x80000000, 0x40, 0x3, 0xfffffff2, 0x8}, {0x6, 0xfff, 0xe4af, 0x0, 0x8, 0x7}, {0x6, 0xd, 0x230, 0x400, 0x6971, 0xfff}, {0x6, 0x8, 0x6, 0x2, 0x4, 0x3}, {0x83, 0x3, 0x4, 0x7, 0x9, 0xaa7}, {0x5, 0x5, 0x4, 0x80, 0x0, 0x100}, {0x4, 0x8, 0x9, 0x1, 0x2, 0x9}, {0x2690, 0x7ff, 0x11, 0xd, 0x2, 0x722dadd0}, {0x4b, 0x5, 0x9, 0x9, 0x279, 0x3}, {0x7, 0x7b5a, 0x4, 0x0, 0xfffffffb, 0x80000000}, {0x2, 0x0, 0x6fbc79d2, 0x9, 0x401, 0x5}, {0x0, 0x527e, 0xc7, 0xffffff01, 0x80, 0x7}, {0x4, 0xd, 0x5, 0xbd52, 0x80, 0xef35}, {0x9, 0x2b, 0x4, 0xb904, 0xfffffff8, 0x1}, {0x3, 0x8, 0xd, 0x1d00, 0x5, 0x400}, {0x8000, 0x74dfe8ce, 0x956b, 0x4, 0x2, 0xfffffff4}, {0xf2, 0x1ee, 0x5, 0xfffffd14, 0x9, 0x40}, {0x0, 0xd, 0x9, 0x6, 0xffffffff, 0x1}, {0xfffff125, 0x1000, 0x1ff, 0xfffffffe, 0x3, 0x1}, {0x0, 0xfffffff9, 0x6, 0x3, 0x7fffffff, 0x20000002}, {0xec, 0x8, 0x8f1, 0xfffffffb, 0xa, 0x10000}, {0x6, 0x726, 0x6, 0x8, 0xfff, 0x9}, {0x0, 0x9, 0x3, 0x5, 0x3, 0x2}, {0x4, 0xffff, 0x5, 0xfffffffe, 0x7f, 0x6}, {0x400, 0xf, 0xcf, 0xc, 0x4022, 0x44}, {0x4, 0x4, 0x8, 0xfff, 0x6, 0x1}, {0xffff, 0x3, 0xb5, 0x433, 0x6, 0x6}, {0x10000, 0x0, 0x7, 0x9, 0x20, 0x4}, {0x4, 0x9, 0x3, 0xf90, 0xc, 0x3}, {0x5, 0x657a0ecc, 0x1, 0xa4, 0x4, 0x7}, {0x5, 0xe4, 0x2, 0x4, 0x8001, 0x2}, {0x2, 0xe4, 0x42, 0x2, 0x0, 0x9}, {0x3, 0xff, 0x6, 0x7, 0xd7d6, 0xfffffffb}, {0x42, 0x2, 0x6, 0x7, 0xae45, 0x5}, {0x6, 0x9c, 0x5, 0x80, 0x7fffdfff, 0x5}, {0x7, 0x3, 0x3, 0x7, 0x0, 0x4}, {0x7ff, 0x2, 0x8, 0x8, 0x9, 0x5}, {0x1, 0xb, 0xfffffffe, 0x800, 0x0, 0x1}, {0x8, 0x5, 0x3fd, 0x4, 0xffffffff, 0x7}, {0x4, 0x0, 0x6, 0x5, 0x9, 0x9}, {0x3, 0x80000001, 0x9d, 0x1, 0x80000000}, {0x0, 0xfffffff7, 0x84e5, 0x7f, 0x3a, 0x3fd}, {0x8000, 0x7, 0x2, 0xd8, 0xa}, {0x9, 0x1004, 0x8, 0x6, 0x1, 0x2}, {0x0, 0x9, 0x9, 0xd, 0x7fffffff, 0xfffffc00}, {0x1, 0xfffffffc, 0x6, 0xffffffff, 0xc0, 0xfffff44c}, {0x4, 0x3, 0xfffffff5, 0x9, 0xbe, 0x4}, {0x20006, 0x3, 0x0, 0x7fff, 0x5, 0x7ff}, {0x400, 0x7, 0x80000000, 0x5, 0xfffffff7, 0x1}, {0x7, 0x100000, 0x5, 0x9, 0xbc, 0x11}, {0x1ff, 0xfffffffc, 0xf, 0x4, 0x1, 0x2}, {0x10000, 0x3, 0x0, 0x111, 0x7, 0x2}, {0x1d, 0x3, 0xda62, 0x4, 0x0, 0x8}, {0xb8000000, 0xfffffff8, 0x7, 0x9, 0x0, 0x49}, {0x8, 0x401, 0x9, 0x332a, 0x1, 0x2}, {0xfa0, 0x6, 0x7f, 0x7, 0x8, 0x80}, {0x10001, 0x4, 0x400, 0x9, 0x6, 0xdbce}, {0x1, 0x57f, 0x800, 0xe49, 0x0, 0xa81c}, {0x5, 0x8, 0xa, 0xa, 0x100006, 0x8}, {0x7f, 0xf, 0x1, 0x5, 0x401}, {0x7f, 0x4, 0x6, 0x2, 0x3}, {0x625, 0x80000001, 0xfc4, 0xfffffffd, 0x7}, {0x6, 0xfffffffc, 0x95db, 0x3d0b, 0x3, 0x80000001}, {0x7fff, 0x2, 0xffffff7f, 0x381, 0x8, 0x1}, {0x9, 0x4, 0x1, 0x80000000, 0xae, 0x9}, {0x9, 0xffffff80, 0xffff, 0xfff, 0x3, 0x3ff}, {0x9, 0x2, 0xb2f9, 0xbf, 0x1ff, 0x9}, {0xe, 0x310, 0x2, 0xad0, 0x7fffffff, 0x859}, {0x7, 0x6, 0x2, 0x200, 0x6, 0x2}, {0x7bf65384, 0x8, 0xe87, 0x0, 0x3, 0xfffffffd}, {0x3, 0x2, 0x1fd, 0x7, 0x2, 0x6}, {0x3, 0x0, 0x3, 0x80000001, 0xc3, 0xa9d}, {0x8, 0x200, 0x8, 0x8, 0xc}, {0x4, 0x4, 0x13ca, 0x74, 0x2, 0x1}, {0x2, 0x2, 0x1, 0x7fff, 0x14, 0x3}, {0x80000000, 0x4, 0x899, 0x2, 0x0, 0x2}, {0x5, 0x80000, 0x0, 0x1, 0x3, 0x3}, {0x400, 0x5, 0x3ff, 0x3, 0xd, 0x5}, {0x2, 0x20000000, 0x3, 0x5, 0x81, 0x5}, {0x6, 0x7ff, 0x1, 0x3f, 0x9, 0x7}, {0x8, 0x0, 0xd, 0x6, 0x5}, {0x3, 0x7, 0x1, 0x3b1c, 0x2, 0x6}, {0x100004, 0x49354bbb, 0x2, 0x3, 0x7, 0x9}, {0x5, 0x2, 0x10, 0x9, 0x2, 0x400}, {0x40000fff, 0x54, 0x8, 0xc, 0x0, 0x6}, {0x401, 0x0, 0xff, 0x6, 0x3, 0x3}, {0x80000000, 0x7d, 0x2, 0xb, 0x84, 0x3}, {0xc45c, 0xa, 0x0, 0x2, 0x4, 0x2}, {0x7, 0x6, 0x86, 0x9, 0x3, 0x8001}, {0x3a, 0x7eb, 0x4, 0x9, 0x9, 0x405}, {0x7011, 0xfff, 0x9, 0x1, 0x40000009, 0x2}, {0x1, 0xff, 0x8, 0x2968, 0x2, 0xfffffffc}, {0x0, 0x9, 0xc400, 0x2, 0x100, 0xc72}, {0xfffffff9, 0x5, 0x81, 0x26, 0x9, 0x1}, {0x7ff, 0x81, 0xfffffff8, 0x401, 0x5, 0x3ff}, {0x3, 0x6, 0xd, 0x0, 0x6e5f, 0x80}, {0x4, 0x3ff, 0x7, 0x0, 0x0, 0x6}, {0x0, 0x4, 0x7f, 0x4, 0x10, 0x4}, {0x7, 0x4, 0x54, 0x6, 0x2f, 0x7}, {0x3, 0xff, 0x2, 0x7f, 0x4, 0x5}, {0x8000, 0x8, 0xd, 0x1, 0x5, 0x4}, {0xcab, 0xd, 0x4, 0xf, 0x8, 0x7}, {0x2, 0x2, 0x3, 0x5, 0x7, 0x34}, {0x0, 0x6, 0x10000, 0x8, 0xbb, 0x7fffffff}, {0x1, 0x9, 0x9, 0x9, 0x80, 0x7}, {0x39e3, 0x9, 0x0, 0x0, 0x7, 0x3}, {0xfffffffc, 0x4, 0x0, 0xbe50, 0x40, 0x7}, {0xe, 0x5, 0x7, 0xffffffff, 0xd, 0x1}, {0x5, 0x1000, 0x9, 0x7ffc, 0x24e, 0x1}, {0x7, 0x7, 0x7, 0x80000000, 0x1, 0x5}, {0x7, 0x9, 0x4, 0x8dad, 0x6, 0x7}, {0x1, 0x101, 0x3, 0x7, 0x4, 0x7}, {0x3ff, 0x3, 0x5, 0x2, 0x0, 0x2}, {0x2, 0x5, 0x7, 0x5, 0x2, 0x8}, {0x3c, 0x3409, 0x3, 0x5, 0x997c, 0x2df0}, {0x2, 0x9, 0x10001, 0x8711, 0x800}, {0x81, 0x0, 0x1, 0x1db, 0x0, 0xb}, {0x2, 0x5, 0x2, 0xc, 0x0, 0x7}, {0x8, 0xdfd3, 0x8, 0x2, 0xfffffffe, 0x2}], [{0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x6}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x4}, {0x4}, {0x2}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0xe691a73254f1a9a5, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {}, {0x2}, {0x4, 0x1}, {0x0, 0x3}, {0x2}, {0x2}, {0x1}, {0x5, 0x1}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5}, {0x0, 0x1}, {0x5}, {}, {0x5}, {0x4}, {0x5}, {}, {0x5}, {}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x2}, {0x2, 0x1}, {0x3}, {0x5}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x708aee799a2a8f33}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {}, {0x6}, {0x5, 0x1}, {0x2}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x1}, {0x3}, {0x2}, {0x4}, {0x4, 0x1}, {}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x4}, 0x20000015) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000001100)=0x3fa, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, &(0x7f00000002c0)={0x2, &(0x7f0000000240)=[{0x80, 0x81, 0x10, 0xc}, {0x1, 0x7, 0x7, 0xffffffff}]}, 0x10) r2 = socket(0x1, 0x2, 0x200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) bind$vsock_stream(r2, 0x0, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r4, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) connect$llc(r4, &(0x7f0000000100)={0x1a, 0xf, 0x8a, 0x6, 0x6, 0xf, @random="000000001df4"}, 0x10) 3.10618898s ago: executing program 1 (id=1224): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0) 3.09914112s ago: executing program 3 (id=1225): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) get_robust_list(0x0, 0x0, &(0x7f0000000680)) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) mknod$loop(0x0, 0xfff, 0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000b00)=0x6) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000580)={{0x5, 0x3, 0x3, 0xfffffffe, 'syz0\x00', 0x2}, 0x1, [0xd44, 0x7fffffffffffffff, 0x0, 0x8, 0x4, 0x4, 0x7ff, 0x2, 0x2, 0x101, 0x2, 0xd, 0xf, 0x8, 0x1, 0x7, 0x4, 0x3, 0x2, 0x9, 0x0, 0xfffffffffefffffe, 0xfe7, 0x8000000000000000, 0x2, 0x8, 0x7ff, 0x9, 0xfffffffffffffffa, 0x2, 0xfffffffffffffff7, 0x5, 0x7, 0x403, 0x2, 0x10000, 0xe, 0x5, 0x8, 0x88, 0x2, 0x6, 0x4, 0x100000002, 0x0, 0x9, 0x7, 0x6, 0xa, 0x4, 0x7fff, 0x6, 0x8001, 0xffa1, 0x6, 0x8, 0x1, 0xfffffffbfffff800, 0x244, 0x1, 0x20, 0xc, 0xffffffffffffffff, 0xffffffffffffffff, 0x8f, 0x5, 0x1, 0x4, 0x4, 0x4, 0xf, 0xae9, 0x3, 0xfffffffffffffffe, 0x4000000006, 0x9, 0x7, 0x4000000000000000, 0x0, 0x7ff, 0x4, 0x7, 0x205d, 0x9, 0x63, 0x3, 0x3, 0x6, 0xf8, 0xfffffffffffffff9, 0xfffffffffffffffb, 0xfff, 0x1000, 0x6, 0x4, 0x8000000000000000, 0x800000000209, 0x2, 0x7ff, 0x7, 0x8, 0x1ff, 0x0, 0x6, 0x3, 0x5, 0x796a, 0xb0b, 0x9, 0x7, 0x4, 0x4, 0x0, 0x8, 0x4, 0x2dd, 0x4, 0x4, 0x8, 0x10000, 0x1da0, 0x38, 0x7, 0x5, 0x2ad, 0x80000001, 0xfffffffffeffffff, 0x7]}) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="20000000070a01"], 0x20}, 0x1, 0x0, 0x0, 0x40008c0}, 0x30000000) accept4(r3, 0x0, 0x0, 0x800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0xd}, {0xfff3, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x51}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfe2a}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.09703981s ago: executing program 5 (id=1226): bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x7, 0x1c, &(0x7f0000000100)=ANY=[@ANYRES16, @ANYRES32, @ANYBLOB="0000000000000000b7f8bf4b381e028f02000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000001008050004000000185400000d00000000000000000000004095ff0740f5157d180000000600000000000000830a000085100000020000009500000000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000bf91000000000000b7020000020000008500000085"], 0x0, 0xf, 0x0, 0x0, 0x40f00, 0xdff007ab5d5402d0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(0x0, r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c4000000000000000010000000000000000000000000000fe8000000000000000000000000000aaff"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000001000000bfa30000000000000703000030feffff720af0fff8ffffff61a4f0ff000000002d040000000000003d400300000000006504000001ed000079130000000000006c44000000000000"], 0x0}, 0x94) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x128}, 0x1, 0x0, 0x0, 0x20000040}, 0x8011) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400404"], 0x7) 2.770120378s ago: executing program 4 (id=1227): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x3, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x5}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0xdd86, r6, 0x15}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000200)="f3a7b9b72c617e5eb41027a9", 0xc}, {&(0x7f00000005c0)="87a0a3", 0x3}], 0x2}, 0x44) 1.823648359s ago: executing program 5 (id=1228): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, 0x0, 0x40000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x635e, 0x5, 0xffffffff, 0x10000}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x24008800) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r5, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0x484c10e0d22b6613}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xfffffffffffffdc3, 0x2, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x10006}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x12}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x6}, @TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x6}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.703576042s ago: executing program 1 (id=1229): r0 = syz_usb_connect$printer(0x2, 0x2d, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) write$char_usb(r1, &(0x7f00000007c0)='\v', 0x1) syz_usb_ep_read(r0, 0x1, 0xa1, &(0x7f0000000000)=""/161) 747.320763ms ago: executing program 3 (id=1230): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd0}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 746.262783ms ago: executing program 5 (id=1238): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, 0x0, 0x40000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x635e, 0x5, 0xffffffff, 0x10000}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x24008800) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r5, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0x484c10e0d22b6613}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xfffffffffffffdc3, 0x2, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x10006}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x12}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x6}, @TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x6}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 746.155123ms ago: executing program 1 (id=1231): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000b00)=0x6) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r1, 0x0, 0x0) 745.959843ms ago: executing program 4 (id=1232): r0 = syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) syz_open_dev$MSR(0x0, 0x7, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0xc0800) sched_setaffinity(0x0, 0xfffffffffffffdc3, &(0x7f00000000c0)=0x5) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) readv(r0, &(0x7f0000002b80)=[{&(0x7f0000002bc0)=""/4096, 0x1000}], 0x1) readv(r0, 0x0, 0x0) 0s ago: executing program 1 (id=1233): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0xffffffffffffffff, 0x5, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x3, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x2d, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) syz_emit_ethernet(0x3f, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000386dd6a00000000092b01fe8000000000000000000000000000bbfe8000004000e3bc00000000000000aa320004000110000050"], 0x0) io_setup(0x20fe, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd1, &(0x7f0000000000)=0x9, 0x4) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x1, 0x1, 0x2, 0x0, 0x6}, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000009100)=[{{0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000300)=""/179, 0xb3}, {&(0x7f0000000440)=""/249, 0xf9}, {&(0x7f0000000540)=""/191, 0xbf}, {&(0x7f0000000600)=""/54, 0x36}, {&(0x7f0000001000)=""/156, 0x9c}], 0x5, &(0x7f0000001140)=""/216, 0xd8}, 0xffffffff}, {{&(0x7f0000001240)=@nfc_llcp, 0x80, &(0x7f0000002580)}, 0x2}, {{&(0x7f00000028c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002940)=""/28, 0x1c}, {&(0x7f0000002980)=""/17, 0x11}, {&(0x7f00000029c0)=""/127, 0x7f}], 0x3, &(0x7f0000002a80)=""/114, 0x72}, 0x7}, {{&(0x7f0000002b00)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000002c40)=[{&(0x7f0000002b80)=""/152, 0x98}], 0x1, &(0x7f0000002c80)=""/4096, 0x1000}, 0x1000}, {{&(0x7f0000003c80)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000003d00)=""/243, 0xf3}, {&(0x7f0000003e00)=""/39, 0x27}, {&(0x7f0000003e40)=""/34, 0x22}, {&(0x7f0000003ec0)=""/213, 0xd5}], 0x4, &(0x7f0000004040)=""/4096, 0x1000}, 0x5}, {{0x0, 0x0, &(0x7f00000053c0)=[{&(0x7f00000050c0)=""/206, 0xce}, {&(0x7f00000051c0)=""/199, 0xc7}, {&(0x7f00000052c0)=""/201, 0xc9}], 0x3}, 0x41f3}, {{&(0x7f0000005400)=@xdp, 0x80, &(0x7f00000079c0)=[{0x0}, {&(0x7f0000000640)=""/41, 0x29}, {&(0x7f00000064c0)=""/242, 0xf2}, {&(0x7f00000065c0)=""/19, 0x13}, {&(0x7f0000006600)=""/196, 0xc4}, {&(0x7f0000006700)=""/161, 0xa1}, {&(0x7f00000067c0)=""/4096, 0x1000}, {&(0x7f00000077c0)=""/157, 0x9d}, {&(0x7f0000007980)=""/4, 0x4}], 0x9}, 0x2}, {{&(0x7f0000007a80)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @local}}}}, 0x80, &(0x7f0000008f80)=[{&(0x7f0000007b00)=""/5, 0x5}, {0x0}, {&(0x7f0000007c40)=""/86, 0x56}, {&(0x7f0000007d40)=""/250, 0xfa}, {&(0x7f0000007e40)=""/207, 0xcf}, {&(0x7f0000007f40)=""/48, 0x30}, {&(0x7f0000007f80)=""/4096, 0x1000}], 0x7}, 0x7}], 0x8, 0x12100, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xc5}]}, 0x2c}}, 0x0) r7 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r7, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x18, 0x29, 0x37}}, @ip_tos_u8={{0x18, 0x29, 0x36}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) kernel console output (not intermixed with test programs): 3][ T28] audit: type=1800 audit(1783306962.571:39): pid=7464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.425" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 268.096476][ T7475] team0: Port device vxlan0 added [ 268.118398][ T28] audit: type=1800 audit(1783306962.601:40): pid=7464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.425" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 268.164682][ T8] usb 4-1: USB disconnect, device number 4 [ 268.235564][ T7502] BTRFS info (device loop2): balance: start [ 268.255133][ T7502] BTRFS info (device loop2): balance: ended with status: 0 [ 268.403315][ T5776] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 268.557158][ T7508] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 3, id = 0 [ 269.414935][ T7506] lo speed is unknown, defaulting to 1000 [ 270.637845][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 270.697266][ T7510] loop2: detected capacity change from 0 to 40427 [ 270.710593][ T7510] F2FS-fs (loop2): invalid crc value [ 270.750083][ T7510] F2FS-fs (loop2): Found nat_bits in checkpoint [ 270.823550][ T8] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 270.955069][ T7544] syz.1.440 (7544): /proc/7543/oom_adj is deprecated, please use /proc/7543/oom_score_adj instead. [ 270.993468][ T7510] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 271.134483][ T7510] syz.2.432: attempt to access beyond end of device [ 271.134483][ T7510] loop2: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 271.713764][ T7546] fido_id[7546]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 272.687773][ T7563] netlink: 28 bytes leftover after parsing attributes in process `syz.0.445'. [ 272.830066][ T7564] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 3, id = 0 [ 274.686525][ T7560] lo speed is unknown, defaulting to 1000 [ 274.737761][ T7572] loop0: detected capacity change from 0 to 256 [ 276.003666][ T7588] netlink: 88 bytes leftover after parsing attributes in process `syz.0.453'. [ 277.523619][ T7581] loop1: detected capacity change from 0 to 32768 [ 277.562608][ T7581] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.452 (7581) [ 277.659150][ T7581] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 277.689197][ T7581] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 277.699480][ T7581] BTRFS info (device loop1): setting nodatacow, compression disabled [ 277.730629][ T7581] BTRFS info (device loop1): force clearing of disk cache [ 277.748963][ T7581] BTRFS info (device loop1): turning off barriers [ 277.756843][ T7581] BTRFS info (device loop1): use no compression [ 277.774838][ T7581] BTRFS info (device loop1): disabling free space tree [ 277.800070][ T7581] BTRFS info (device loop1): enabling ssd optimizations [ 277.820151][ T7581] BTRFS info (device loop1): using spread ssd allocation scheme [ 277.848332][ T7581] BTRFS info (device loop1): not using ssd optimizations [ 277.886570][ T7581] BTRFS info (device loop1): not using spread ssd allocation scheme [ 278.052197][ T7583] loop2: detected capacity change from 0 to 65536 [ 278.077523][ T7581] BTRFS info (device loop1): rebuilding free space tree [ 278.130811][ T7583] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 278.142169][ T7581] BTRFS info (device loop1): disabling free space tree [ 278.185566][ T7581] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 278.196587][ T7581] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 278.219610][ T7581] BTRFS info (device loop1): checking UUID tree [ 278.319562][ T28] audit: type=1800 audit(1783306972.851:41): pid=7581 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.452" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 278.351551][ T7583] XFS (loop2): Ending clean mount [ 278.390003][ T28] audit: type=1800 audit(1783306972.851:42): pid=7581 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.452" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 278.424371][ T7628] BTRFS info (device loop1): balance: start [ 278.461950][ T7628] BTRFS info (device loop1): balance: ended with status: 0 [ 278.529617][ T5776] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 278.615734][ T5777] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 278.882915][ T7631] netlink: 36 bytes leftover after parsing attributes in process `syz.1.459'. [ 279.454076][ T7606] loop0: detected capacity change from 0 to 40427 [ 279.493500][ T7606] F2FS-fs (loop0): invalid crc value [ 279.563695][ T7606] F2FS-fs (loop0): Found nat_bits in checkpoint [ 279.623469][ T7645] netlink: 88 bytes leftover after parsing attributes in process `syz.3.462'. [ 280.438513][ T7606] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 280.562847][ T7606] syz.0.456: attempt to access beyond end of device [ 280.562847][ T7606] loop0: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 280.822216][ T7655] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 3, id = 0 [ 281.058758][ T5809] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 281.100173][ T7652] lo speed is unknown, defaulting to 1000 [ 281.273452][ T5809] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 281.294302][ T5809] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 281.307644][ T7646] loop2: detected capacity change from 0 to 40427 [ 281.315682][ T5809] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 281.326505][ T7646] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64) [ 281.335233][ T5809] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 281.360165][ T7646] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 281.362432][ T5809] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 281.383000][ T5809] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 281.403751][ T7646] F2FS-fs (loop2): Image doesn't support compression [ 281.410699][ T5809] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 281.448383][ T7646] F2FS-fs (loop2): Image doesn't support compression [ 281.455749][ T5809] usb 4-1: Product: syz [ 281.468694][ T5809] usb 4-1: Manufacturer: syz [ 281.480210][ T7646] F2FS-fs (loop2): invalid crc value [ 281.498513][ T5809] cdc_wdm 4-1:1.0: skipping garbage [ 281.503785][ T5809] cdc_wdm 4-1:1.0: skipping garbage [ 281.606789][ T5809] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 281.628006][ T5809] cdc_wdm 4-1:1.0: Unknown control protocol [ 281.714934][ T5809] usb 4-1: USB disconnect, device number 5 [ 281.778566][ T7646] F2FS-fs (loop2): Start checkpoint disabled! [ 281.825059][ T7646] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 281.838341][ T7646] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 282.221317][ T28] audit: type=1800 audit(1783306976.761:43): pid=7664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.458" name="file0" dev="loop2" ino=10 res=0 errno=0 [ 282.342196][ T11] kworker/u4:0: attempt to access beyond end of device [ 282.342196][ T11] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 282.376712][ T11] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 282.422399][ T7660] loop1: detected capacity change from 0 to 32768 [ 282.440771][ T7660] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.467 (7660) [ 282.498346][ T7660] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 282.538335][ T7660] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 282.571507][ T7660] BTRFS info (device loop1): enabling auto defrag [ 282.578130][ T7660] BTRFS info (device loop1): max_inline at 4096 [ 282.616823][ T7660] BTRFS info (device loop1): using free space tree [ 282.793100][ T7663] loop0: detected capacity change from 0 to 32768 [ 282.843058][ T7663] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz.0.468 (7663) [ 283.149827][ T7660] BTRFS info (device loop1): enabling ssd optimizations [ 283.251845][ T7660] BTRFS info (device loop1): auto enabling async discard [ 283.701011][ T5872] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by udevd (5872) [ 283.826490][ T7689] loop2: detected capacity change from 0 to 1024 [ 283.936932][ T7689] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 284.015916][ T7689] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 284.111821][ T7689] EXT4-fs error (device loop2): ext4_map_blocks:720: inode #15: comm syz.2.469: lblock 0 mapped to illegal pblock 0 (length 5) [ 284.139686][ T7689] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 5 with error 117 [ 284.152201][ T7689] EXT4-fs (loop2): This should not happen!! Data will be lost [ 284.152201][ T7689] [ 284.211456][ T7697] EXT4-fs error (device loop2): ext4_ext_remove_space:2955: inode #15: comm syz.2.469: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 284.262958][ T7697] EXT4-fs error (device loop2) in ext4_setattr:5682: Corrupt filesystem [ 284.267172][ T5777] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 284.355817][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 285.881387][ T7708] loop2: detected capacity change from 0 to 32768 [ 286.443692][ T7708] read_mapping_page failed! [ 286.449000][ T7708] ERROR: (device loop2): txCommit: [ 286.449000][ T7708] [ 287.225343][ T7718] loop0: detected capacity change from 0 to 32768 [ 287.244681][ T7718] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.478 (7718) [ 287.260712][ T7720] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 3, id = 0 [ 287.260750][ T7718] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 287.280063][ T7718] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 287.288879][ T7718] BTRFS info (device loop0): setting nodatasum [ 287.295043][ T7718] BTRFS info (device loop0): force zlib compression, level 3 [ 287.302558][ T7718] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 287.311801][ T7718] BTRFS info (device loop0): use lzo compression, level 0 [ 287.319022][ T7718] BTRFS info (device loop0): turning on flush-on-commit [ 287.326075][ T7718] BTRFS info (device loop0): enabling auto defrag [ 287.332604][ T7718] BTRFS info (device loop0): max_inline at 4096 [ 287.339002][ T7718] BTRFS info (device loop0): using free space tree [ 287.438138][ T7718] BTRFS info (device loop0): enabling ssd optimizations [ 287.740617][ T7736] program syz.0.478 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 287.756825][ T7736] overlayfs: missing 'lowerdir' [ 288.331410][ T5771] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 288.666048][ T7716] lo speed is unknown, defaulting to 1000 [ 288.861032][ T7747] random: crng reseeded on system resumption [ 289.341586][ T7738] loop3: detected capacity change from 0 to 32768 [ 289.607971][ T7738] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.479 (7738) [ 290.037048][ T7738] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 290.058505][ T7738] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 290.067275][ T7738] BTRFS info (device loop3): setting nodatacow, compression disabled [ 290.088556][ T7738] BTRFS info (device loop3): force clearing of disk cache [ 290.095972][ T7738] BTRFS info (device loop3): turning off barriers [ 290.106441][ T7738] BTRFS info (device loop3): use no compression [ 290.114493][ T7738] BTRFS info (device loop3): disabling free space tree [ 290.121603][ T7738] BTRFS info (device loop3): enabling ssd optimizations [ 290.128910][ T7738] BTRFS info (device loop3): using spread ssd allocation scheme [ 290.136599][ T7738] BTRFS info (device loop3): not using ssd optimizations [ 290.143735][ T7738] BTRFS info (device loop3): not using spread ssd allocation scheme [ 290.289765][ T7738] BTRFS info (device loop3): rebuilding free space tree [ 290.331304][ T7738] BTRFS info (device loop3): disabling free space tree [ 290.358364][ T7738] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 290.368098][ T7738] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 290.395026][ T7738] BTRFS info (device loop3): checking UUID tree [ 290.439381][ T7768] netlink: 36 bytes leftover after parsing attributes in process `syz.0.482'. [ 290.463594][ T28] audit: type=1800 audit(1783306985.001:44): pid=7738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.479" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 290.758595][ T28] audit: type=1800 audit(1783306985.031:45): pid=7738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.479" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 292.417772][ T5779] Bluetooth: hci3: command 0x0406 tx timeout [ 292.565022][ T7772] BTRFS info (device loop3): balance: start [ 293.100716][ T7772] BTRFS info (device loop3): balance: ended with status: 0 [ 293.207061][ T5782] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 294.386388][ T7783] loop0: detected capacity change from 0 to 16 [ 294.429862][ T7783] erofs: (device loop0): mounted with root inode @ nid 36. [ 294.822652][ T7778] loop1: detected capacity change from 0 to 32768 [ 294.846536][ T7778] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.495 (7778) [ 294.881790][ T7778] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 294.901574][ T7778] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 294.910876][ T7778] BTRFS info (device loop1): setting nodatacow, compression disabled [ 294.925365][ T7778] BTRFS info (device loop1): force clearing of disk cache [ 294.948665][ T7778] BTRFS info (device loop1): turning off barriers [ 294.989646][ T7778] BTRFS info (device loop1): use no compression [ 295.008196][ T7778] BTRFS info (device loop1): disabling free space tree [ 295.024407][ T7778] BTRFS info (device loop1): enabling ssd optimizations [ 295.038296][ T7778] BTRFS info (device loop1): using spread ssd allocation scheme [ 295.076904][ T7778] BTRFS info (device loop1): not using ssd optimizations [ 295.090353][ T7778] BTRFS info (device loop1): not using spread ssd allocation scheme [ 295.243594][ T7778] BTRFS info (device loop1): rebuilding free space tree [ 295.277577][ T7778] BTRFS info (device loop1): disabling free space tree [ 295.287210][ T7778] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 295.297582][ T7778] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 295.349072][ T7778] BTRFS info (device loop1): checking UUID tree [ 295.454473][ T28] audit: type=1800 audit(1783306989.971:46): pid=7778 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.495" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 295.457581][ T7810] tipc: Enabled bearer , priority 2 [ 295.558362][ T28] audit: type=1800 audit(1783306990.021:47): pid=7778 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.495" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 295.615711][ T7812] BTRFS info (device loop1): balance: start [ 295.639000][ T7812] BTRFS info (device loop1): balance: ended with status: 0 [ 295.783459][ T7778] syz.1.495 (7778) used greatest stack depth: 19416 bytes left [ 295.887714][ T5777] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 296.019127][ T5774] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 13 /dev/loop1 scanned by udevd (5774) [ 298.058424][ T7834] kernel read not supported for file /file1 (pid: 7834 comm: syz.1.496) [ 298.135602][ T28] audit: type=1800 audit(1783306992.621:48): pid=7834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.496" name="file1" dev="mqueue" ino=14397 res=0 errno=0 [ 300.894094][ T7843] loop1: detected capacity change from 0 to 32768 [ 300.956528][ T28] audit: type=1800 audit(1783306995.481:49): pid=7843 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.499" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 301.569057][ T28] audit: type=1800 audit(1783306995.491:50): pid=7843 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.499" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 302.146893][ T7856] tipc: Enabled bearer , priority 2 [ 303.138443][ T8] tipc: Node number set to 1751037043 [ 305.280926][ T7876] (null): rxe_set_mtu: Set mtu to 1024 [ 305.288131][ T7876] rdma_rxe: rxe_newlink: failed to add bond0 [ 305.307512][ T7876] afs: Unknown parameter '' [ 306.758310][ T7885] kernel read not supported for file /file1 (pid: 7885 comm: syz.0.510) [ 306.792099][ T28] audit: type=1800 audit(1783307001.331:51): pid=7885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.510" name="file1" dev="mqueue" ino=14456 res=0 errno=0 [ 307.375200][ T7873] loop1: detected capacity change from 0 to 32768 [ 307.450889][ T7873] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 307.658533][ T7873] XFS (loop1): Ending clean mount [ 307.824187][ T7878] loop3: detected capacity change from 0 to 32768 [ 307.837829][ T7878] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 13 [ 307.906864][ T5777] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 307.991940][ T7884] loop2: detected capacity change from 0 to 32768 [ 308.023283][ T7884] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 13 [ 308.102465][ T5872] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 13 [ 308.323632][ T7904] netlink: 88 bytes leftover after parsing attributes in process `syz.3.515'. [ 309.128090][ T5774] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 13 [ 309.283552][ T7906] random: crng reseeded on system resumption [ 311.308775][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 311.897658][ T7910] loop2: detected capacity change from 0 to 40427 [ 311.958066][ T7910] F2FS-fs (loop2): invalid crc value [ 312.005840][ T7910] F2FS-fs (loop2): Found nat_bits in checkpoint [ 312.414914][ T7910] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 312.625139][ T7934] kernel read not supported for file /file1 (pid: 7934 comm: syz.3.520) [ 312.637316][ T28] audit: type=1800 audit(1783307007.171:52): pid=7934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.520" name="file1" dev="mqueue" ino=14493 res=0 errno=0 [ 313.280406][ T7939] loop3: detected capacity change from 0 to 256 [ 313.329602][ T7939] exfat: Deprecated parameter 'utf8' [ 313.334979][ T7939] exfat: Deprecated parameter 'utf8' [ 313.436977][ T7939] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 314.884717][ T7945] loop0: detected capacity change from 0 to 256 [ 314.896165][ T7945] exfat: Deprecated parameter 'utf8' [ 314.903609][ T7945] exfat: Deprecated parameter 'utf8' [ 314.986308][ T7945] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 316.699980][ T7947] loop3: detected capacity change from 0 to 32768 [ 316.739281][ T7942] loop2: detected capacity change from 0 to 40427 [ 316.749595][ T7942] F2FS-fs (loop2): invalid crc value [ 316.769964][ T7947] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 316.771806][ T7942] F2FS-fs (loop2): Found nat_bits in checkpoint [ 316.885805][ T7947] XFS (loop3): Ending clean mount [ 317.077537][ T5782] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 317.199092][ T7965] netlink: 88 bytes leftover after parsing attributes in process `syz.1.525'. [ 317.368088][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.383030][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.385563][ T7968] loop3: detected capacity change from 0 to 32768 [ 318.435018][ T28] audit: type=1800 audit(1783307012.971:53): pid=7968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.524" name="file1" dev="loop3" ino=4 res=0 errno=0 [ 318.525473][ T28] audit: type=1800 audit(1783307013.011:54): pid=7968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.524" name="file1" dev="loop3" ino=4 res=0 errno=0 [ 319.485326][ T7966] loop0: detected capacity change from 0 to 65536 [ 319.538632][ T7966] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 319.650209][ T7966] XFS (loop0): Ending clean mount [ 319.702874][ T5771] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 319.938440][ T7981] loop2: detected capacity change from 0 to 32768 [ 319.988585][ T7981] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 13 [ 320.893226][ T5873] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 13 [ 320.980430][ T8006] netlink: 88 bytes leftover after parsing attributes in process `syz.1.539'. [ 322.418662][ T8004] loop2: detected capacity change from 0 to 40427 [ 322.444590][ T8004] F2FS-fs (loop2): invalid crc value [ 322.467202][ T8004] F2FS-fs (loop2): Found nat_bits in checkpoint [ 322.483907][ T8008] loop0: detected capacity change from 0 to 40427 [ 322.503344][ T8008] F2FS-fs (loop0): Corrupted extension count (64 + 1 > 64) [ 322.518742][ T8008] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 322.537603][ T8008] F2FS-fs (loop0): Image doesn't support compression [ 322.547090][ T8008] F2FS-fs (loop0): Image doesn't support compression [ 322.575806][ T8008] F2FS-fs (loop0): invalid crc value [ 322.581678][ T8004] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 322.686013][ T8008] F2FS-fs (loop0): Start checkpoint disabled! [ 322.733711][ T8008] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 322.743574][ T8008] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 323.662216][ T8018] loop3: detected capacity change from 0 to 131072 [ 323.701024][ T8018] F2FS-fs (loop3): Invalid log sectorsize (67108873) [ 323.707788][ T8018] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 323.719828][ T8018] F2FS-fs (loop3): invalid crc value [ 323.735930][ T8018] F2FS-fs (loop3): Found nat_bits in checkpoint [ 323.783819][ T8020] netlink: 88 bytes leftover after parsing attributes in process `syz.1.550'. [ 323.793526][ T8018] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 323.800904][ T8018] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 323.998251][ T28] audit: type=1800 audit(1783307018.511:55): pid=8018 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.543" name="file1" dev="loop3" ino=7 res=0 errno=0 [ 324.819562][ T28] audit: type=1800 audit(1783307019.361:56): pid=8008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.540" name="file0" dev="loop0" ino=10 res=0 errno=0 [ 325.434162][ T137] kworker/u4:5: attempt to access beyond end of device [ 325.434162][ T137] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 325.461558][ T137] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 326.282740][ T8036] loop1: detected capacity change from 0 to 32768 [ 326.311749][ T8036] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 326.328660][ T8036] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 326.349671][ T8036] BTRFS info (device loop1): setting nodatacow, compression disabled [ 326.359804][ T8036] BTRFS info (device loop1): force clearing of disk cache [ 326.367156][ T8036] BTRFS info (device loop1): turning off barriers [ 326.376780][ T8036] BTRFS info (device loop1): use no compression [ 326.492931][ T8036] BTRFS info (device loop1): disabling free space tree [ 326.522035][ T8045] loop2: detected capacity change from 0 to 1024 [ 326.534502][ T8045] hfsplus: unable to parse mount options [ 326.579254][ T8036] BTRFS info (device loop1): enabling ssd optimizations [ 326.662875][ T8036] BTRFS info (device loop1): using spread ssd allocation scheme [ 326.784677][ T8036] BTRFS info (device loop1): not using ssd optimizations [ 326.909504][ T8036] BTRFS info (device loop1): not using spread ssd allocation scheme [ 327.540936][ T8036] BTRFS info (device loop1): rebuilding free space tree [ 327.677185][ T8036] BTRFS info (device loop1): disabling free space tree [ 327.696979][ T8036] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 327.747507][ T8036] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 327.776451][ T8036] BTRFS info (device loop1): checking UUID tree [ 327.864894][ T28] audit: type=1800 audit(1783307022.401:57): pid=8036 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.546" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 328.084143][ T8071] netlink: 60 bytes leftover after parsing attributes in process `syz.3.553'. [ 329.069386][ T5777] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 329.893241][ T8064] loop2: detected capacity change from 0 to 40427 [ 330.326888][ T8064] F2FS-fs (loop2): invalid crc value [ 330.466699][ T8075] loop3: detected capacity change from 0 to 32768 [ 330.830494][ T8064] F2FS-fs (loop2): Failed to start F2FS issue_checkpoint_thread (-4) [ 331.597471][ T8075] read_mapping_page failed! [ 331.602560][ T8075] ERROR: (device loop3): txCommit: [ 331.602560][ T8075] [ 335.831008][ T8111] netlink: 60 bytes leftover after parsing attributes in process `syz.2.563'. [ 335.861832][ T8111] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.869650][ T8111] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.147283][ T8122] kernel read not supported for file /file1 (pid: 8122 comm: syz.0.567) [ 337.236286][ T28] audit: type=1800 audit(1783307031.741:58): pid=8122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.567" name="file1" dev="mqueue" ino=14456 res=0 errno=0 [ 338.088986][ T8112] loop1: detected capacity change from 0 to 40427 [ 338.121718][ T8112] F2FS-fs (loop1): Corrupted extension count (64 + 1 > 64) [ 338.150530][ T8112] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 338.183951][ T8116] loop3: detected capacity change from 0 to 40427 [ 338.192123][ T8112] F2FS-fs (loop1): Image doesn't support compression [ 338.213774][ T8116] F2FS-fs (loop3): invalid crc value [ 338.220840][ T8112] F2FS-fs (loop1): Image doesn't support compression [ 338.232347][ T8112] F2FS-fs (loop1): invalid crc value [ 338.234085][ T8116] F2FS-fs (loop3): Found nat_bits in checkpoint [ 338.463585][ T8116] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 338.541792][ T8112] F2FS-fs (loop1): Start checkpoint disabled! [ 338.593851][ T8112] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 338.612994][ T8112] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 338.732070][ T8137] loop0: detected capacity change from 0 to 4096 [ 338.743300][ T8137] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 338.752623][ T8137] ntfs3: loop0: RAW NTFS volume: Filesystem size 0.00 Gb > volume size 0.00 Gb. Mount in read-only. [ 338.798498][ T8137] ntfs3: loop0: It is recommened to use chkdsk. [ 338.831840][ T8137] ntfs3: loop0: failed to read volume at offset 0x201800 [ 338.839567][ T8137] ntfs3: loop0: failed to read volume at offset 0x201800 [ 338.846640][ T8137] ntfs3: loop0: failed to read volume at offset 0x201800 [ 338.853800][ T8137] ntfs3: loop0: failed to read volume at offset 0x201800 [ 338.860967][ T8137] ntfs3: loop0: failed to read volume at offset 0x202800 [ 338.868078][ T8137] ntfs3: loop0: failed to read volume at offset 0x203800 [ 338.875438][ T8137] ntfs3: loop0: failed to read volume at offset 0x205800 [ 338.911978][ T13] kworker/u4:1: attempt to access beyond end of device [ 338.911978][ T13] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 338.982845][ T13] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 339.127600][ T8117] loop2: detected capacity change from 0 to 65536 [ 339.148808][ T8117] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 339.202364][ T8117] XFS (loop2): Ending clean mount [ 339.241396][ T5776] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 339.838653][ T27] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 340.188111][ T27] usb 3-1: unable to get BOS descriptor or descriptor too short [ 340.302890][ T27] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 340.434579][ T27] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 340.528753][ T27] usb 3-1: config 1 interface 1 has no altsetting 0 [ 340.568138][ T27] usb 3-1: string descriptor 0 read error: -22 [ 340.594788][ T27] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 340.658340][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.789730][ T27] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 340.884435][ T5774] udevd[5774]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 340.924723][ T8147] loop2: detected capacity change from 0 to 128 [ 340.953243][ T8147] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 340.967791][ T8147] ext4 filesystem being mounted at /121/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 341.473003][ T8147] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 341.496352][ T8169] fscrypt: loop2: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 341.513752][ T8147] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 343.085830][ T5809] usb 3-1: USB disconnect, device number 5 [ 343.155194][ T5776] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 343.281583][ T8187] kernel read not supported for file /file1 (pid: 8187 comm: syz.3.577) [ 343.290763][ T28] audit: type=1800 audit(1783307037.831:59): pid=8187 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.577" name="file1" dev="mqueue" ino=14493 res=0 errno=0 [ 344.942314][ T8190] loop2: detected capacity change from 0 to 40427 [ 345.088138][ T8190] F2FS-fs (loop2): invalid crc value [ 345.257515][ T8190] F2FS-fs (loop2): Found nat_bits in checkpoint [ 345.804235][ T8190] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 347.066215][ T8214] loop1: detected capacity change from 0 to 40427 [ 347.108336][ T8214] F2FS-fs (loop1): Corrupted extension count (64 + 1 > 64) [ 347.115627][ T8214] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 347.162283][ T8214] F2FS-fs (loop1): Image doesn't support compression [ 347.169369][ T8214] F2FS-fs (loop1): Image doesn't support compression [ 347.215571][ T8214] F2FS-fs (loop1): invalid crc value [ 347.443816][ T8219] loop3: detected capacity change from 0 to 32768 [ 347.469996][ T8214] F2FS-fs (loop1): Start checkpoint disabled! [ 347.541973][ T8214] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 347.558857][ T8214] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 347.590614][ T8219] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 347.681409][ T11] kworker/u4:0: attempt to access beyond end of device [ 347.681409][ T11] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 347.708873][ T11] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 347.769392][ T8] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 347.846281][ T5782] ocfs2: Unmounting device (7,3) on (node local) [ 347.960699][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 347.980708][ T8] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 348.000151][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.031045][ T8] usb 3-1: config 0 descriptor?? [ 348.071960][ T8] pwc: Askey VC010 type 2 USB webcam detected. [ 348.395246][ T8223] loop0: detected capacity change from 0 to 32768 [ 348.669824][ T8] pwc: recv_control_msg error -32 req 02 val 2b00 [ 348.684462][ T8] pwc: recv_control_msg error -32 req 02 val 2700 [ 348.705557][ T8223] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 348.729402][ T8] pwc: recv_control_msg error -32 req 02 val 2c00 [ 348.773640][ T8] pwc: recv_control_msg error -32 req 04 val 1000 [ 348.782918][ T8] pwc: recv_control_msg error -32 req 04 val 1300 [ 348.795908][ T8] pwc: recv_control_msg error -32 req 04 val 1400 [ 348.822483][ T8] pwc: recv_control_msg error -32 req 02 val 2000 [ 348.954576][ T8] pwc: recv_control_msg error -32 req 02 val 2100 [ 349.042957][ T8] pwc: recv_control_msg error -32 req 04 val 1500 [ 349.156273][ T8] pwc: recv_control_msg error -32 req 02 val 2500 [ 349.252643][ T8] pwc: recv_control_msg error -32 req 02 val 2400 [ 349.458043][ T8] pwc: recv_control_msg error -32 req 02 val 2600 [ 349.493832][ T8223] XFS (loop0): Ending clean mount [ 349.734146][ T8] pwc: recv_control_msg error -71 req 02 val 2800 [ 349.885699][ T8] pwc: recv_control_msg error -71 req 04 val 1100 [ 350.087126][ T8] pwc: recv_control_msg error -71 req 04 val 1200 [ 350.282477][ T8] pwc: Registered as video103. [ 350.297627][ T5771] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 350.316137][ T8] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input6 [ 350.389783][ T8] usb 3-1: USB disconnect, device number 6 [ 350.503324][ T8253] tipc: Started in network mode [ 350.529671][ T8253] tipc: Node identity b22bd9e607e7, cluster identity 4711 [ 350.540904][ T8253] tipc: Enabled bearer , priority 0 [ 350.569307][ T8253] syzkaller0: entered promiscuous mode [ 350.588317][ T8253] syzkaller0: entered allmulticast mode [ 350.819313][ T8253] netlink: 44 bytes leftover after parsing attributes in process `syz.1.596'. [ 351.625450][ T8262] lo speed is unknown, defaulting to 1000 [ 351.631795][ T8262] lo speed is unknown, defaulting to 1000 [ 351.758682][ T8253] tipc: Resetting bearer [ 351.848767][ T8262] lo speed is unknown, defaulting to 1000 [ 351.924412][ T8262] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 352.050494][ T8252] tipc: Resetting bearer [ 352.176611][ T8252] tipc: Disabling bearer [ 352.196061][ T27] tipc: Node number set to 3050101222 [ 352.201958][ T8262] lo speed is unknown, defaulting to 1000 [ 352.214410][ T8262] lo speed is unknown, defaulting to 1000 [ 352.223824][ T8262] lo speed is unknown, defaulting to 1000 [ 352.239934][ T8262] lo speed is unknown, defaulting to 1000 [ 353.698492][ T5812] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 353.789951][ T8269] loop2: detected capacity change from 0 to 40427 [ 353.801963][ T8269] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64) [ 353.831807][ T8269] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 353.849016][ T8269] F2FS-fs (loop2): Image doesn't support compression [ 353.861502][ T8279] loop1: detected capacity change from 0 to 32768 [ 353.868137][ T8269] F2FS-fs (loop2): Image doesn't support compression [ 353.879686][ T8269] F2FS-fs (loop2): invalid crc value [ 353.895106][ T5812] usb 1-1: unable to get BOS descriptor or descriptor too short [ 353.926223][ T5812] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 353.929645][ T8279] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 353.988153][ T5812] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 354.019040][ T8269] F2FS-fs (loop2): Start checkpoint disabled! [ 354.049703][ T5812] usb 1-1: config 1 interface 1 has no altsetting 0 [ 354.066858][ T8269] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 354.070109][ T5812] usb 1-1: string descriptor 0 read error: -22 [ 354.084367][ T8269] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 354.086687][ T5812] usb 1-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 354.119661][ T8279] XFS (loop1): Ending clean mount [ 354.160043][ T5812] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.271933][ T5777] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 354.302441][ T5812] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 354.333936][ T5873] udevd[5873]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 354.522084][ T1141] kworker/u4:7: attempt to access beyond end of device [ 354.522084][ T1141] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 354.575430][ T1141] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 354.679318][ T8277] loop0: detected capacity change from 0 to 128 [ 354.713204][ T8277] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 354.755603][ T8277] ext4 filesystem being mounted at /160/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 354.854518][ T8294] netlink: 60 bytes leftover after parsing attributes in process `syz.1.604'. [ 354.889041][ T8294] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.896529][ T8294] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.814659][ T8277] fscrypt: loop0: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 356.079956][ T8303] netlink: 8 bytes leftover after parsing attributes in process `syz.1.607'. [ 357.111478][ T8311] netlink: 'syz.2.609': attribute type 4 has an invalid length. [ 357.145818][ T27] lo speed is unknown, defaulting to 1000 [ 357.544906][ T8318] tipc: Enabled bearer , priority 0 [ 357.568126][ T8318] syzkaller0: entered promiscuous mode [ 357.578615][ T8318] syzkaller0: entered allmulticast mode [ 357.632724][ T10] usb 1-1: USB disconnect, device number 6 [ 357.670785][ T8321] netlink: 44 bytes leftover after parsing attributes in process `syz.3.611'. [ 357.700017][ T5771] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 357.757529][ T8318] tipc: Resetting bearer [ 357.803548][ T8317] tipc: Resetting bearer [ 357.903691][ T8317] tipc: Disabling bearer [ 358.436436][ T8328] netlink: 'syz.3.615': attribute type 1 has an invalid length. [ 359.008436][ T8320] loop2: detected capacity change from 0 to 32768 [ 359.143133][ T8320] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 359.353136][ T8320] XFS (loop2): Ending clean mount [ 359.492971][ T5776] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 359.593588][ T8344] netlink: 8 bytes leftover after parsing attributes in process `syz.1.616'. [ 360.806070][ T8325] loop0: detected capacity change from 0 to 40427 [ 361.371707][ T8358] netlink: 60 bytes leftover after parsing attributes in process `syz.2.626'. [ 362.392391][ T8366] loop2: detected capacity change from 0 to 256 [ 362.467143][ T8366] exfat: Deprecated parameter 'utf8' [ 362.578468][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 362.597587][ T8366] exfat: Deprecated parameter 'namecase' [ 362.703054][ T8366] exfat: Deprecated parameter 'namecase' [ 362.991975][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 363.068748][ T8366] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 363.180290][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 363.321591][ T10] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 363.401388][ T10] usb 4-1: config 1 interface 1 has no altsetting 0 [ 363.459286][ T10] usb 4-1: string descriptor 0 read error: -22 [ 363.482043][ T10] usb 4-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 363.512098][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.685219][ T10] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 363.703831][ T5872] udevd[5872]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 363.907573][ T8362] loop3: detected capacity change from 0 to 128 [ 363.987382][ T8362] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 364.039521][ T8349] loop1: detected capacity change from 0 to 32768 [ 364.060407][ T8362] ext4 filesystem being mounted at /162/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 364.086707][ T8349] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.619 (8349) [ 364.565835][ T8383] fscrypt: loop3: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 364.634066][ T8377] loop0: detected capacity change from 0 to 32768 [ 364.748349][ T8385] netlink: 8 bytes leftover after parsing attributes in process `syz.1.628'. [ 365.369229][ T8377] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 366.056182][ T8377] XFS (loop0): Ending clean mount [ 366.189949][ T5771] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 366.303859][ T5812] usb 4-1: USB disconnect, device number 6 [ 366.382600][ T5782] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 366.469678][ T8407] kernel read not supported for file /file1 (pid: 8407 comm: syz.1.632) [ 366.483532][ T28] audit: type=1800 audit(1783307061.021:60): pid=8407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.632" name="file1" dev="mqueue" ino=14397 res=0 errno=0 [ 368.153519][ T8425] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 369.133774][ T8421] loop3: detected capacity change from 0 to 32768 [ 369.234393][ T8421] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 369.256770][ T8421] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 369.266453][ T8421] BTRFS info (device loop3): setting nodatacow, compression disabled [ 369.284450][ T8421] BTRFS info (device loop3): force clearing of disk cache [ 369.318541][ T8421] BTRFS info (device loop3): turning off barriers [ 369.337489][ T8421] BTRFS info (device loop3): use no compression [ 369.356066][ T8421] BTRFS info (device loop3): disabling free space tree [ 369.380862][ T8421] BTRFS info (device loop3): enabling ssd optimizations [ 369.537100][ T8421] BTRFS info (device loop3): using spread ssd allocation scheme [ 369.643324][ T8421] BTRFS info (device loop3): not using ssd optimizations [ 369.811956][ T8421] BTRFS info (device loop3): not using spread ssd allocation scheme [ 370.302977][ T8457] binder: BINDER_SET_CONTEXT_MGR already set [ 370.309810][ T8457] binder: 8456:8457 ioctl 4018620d 200000004a80 returned -16 [ 370.494608][ T8421] BTRFS info (device loop3): rebuilding free space tree [ 370.525357][ T8436] loop2: detected capacity change from 0 to 32768 [ 370.557170][ T8421] BTRFS info (device loop3): disabling free space tree [ 370.581965][ T8421] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 370.589033][ T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 370.618644][ T8436] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 370.633775][ T8421] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 370.655752][ T8421] BTRFS info (device loop3): checking UUID tree [ 370.724812][ T28] audit: type=1800 audit(1783307065.261:61): pid=8421 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.637" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 370.751802][ T8421] BTRFS info (device loop3): balance: start [ 370.789881][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 370.820981][ T8421] BTRFS info (device loop3): balance: ended with status: 0 [ 371.215028][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 371.372941][ T10] usb 2-1: config 7 interface 0 has no altsetting 0 [ 371.424140][ T8436] XFS (loop2): Ending clean mount [ 371.443559][ T10] usb 2-1: New USB device found, idVendor=5fc9, idProduct=0061, bcdDevice=76.09 [ 371.463986][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.511409][ T10] usb 2-1: Product: syz [ 371.519717][ T5782] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 371.540481][ T10] usb 2-1: Manufacturer: syz [ 371.545152][ T10] usb 2-1: SerialNumber: syz [ 371.654361][ T5776] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 371.849794][ T10] usb 2-1: USB disconnect, device number 7 [ 372.303946][ T8496] netlink: 12 bytes leftover after parsing attributes in process `syz.0.652'. [ 373.006684][ T8499] tipc: Enabled bearer , priority 0 [ 373.040253][ T8499] syzkaller0: entered promiscuous mode [ 373.045795][ T8499] syzkaller0: entered allmulticast mode [ 373.226975][ T8504] netlink: 44 bytes leftover after parsing attributes in process `syz.0.654'. [ 373.435085][ T8509] tipc: Resetting bearer [ 373.540399][ T8510] netlink: 60 bytes leftover after parsing attributes in process `syz.2.656'. [ 373.775820][ T8498] tipc: Resetting bearer [ 374.095576][ T8498] tipc: Disabling bearer [ 374.384295][ T8517] overlayfs: missing 'lowerdir' [ 375.422654][ T8523] kernel read not supported for file /file1 (pid: 8523 comm: syz.2.660) [ 375.431702][ T28] audit: type=1800 audit(1783307069.971:62): pid=8523 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.660" name="file1" dev="mqueue" ino=8229 res=0 errno=0 [ 375.646835][ T8502] loop1: detected capacity change from 0 to 32768 [ 375.840936][ T8514] loop3: detected capacity change from 0 to 32768 [ 375.881173][ T8502] JBD2: Ignoring recovery information on journal [ 375.903352][ T8514] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.657 (8514) [ 375.994108][ T8532] netlink: 12 bytes leftover after parsing attributes in process `syz.0.662'. [ 376.244101][ T8514] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 376.573919][ T8514] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 376.672710][ T8514] BTRFS info (device loop3): setting nodatacow, compression disabled [ 376.689284][ T8502] JBD2: journal reset failed [ 376.694051][ T8502] (syz.1.653,8502,1):ocfs2_journal_load:1167 ERROR: Failed to load journal! [ 376.728263][ T8514] BTRFS info (device loop3): force clearing of disk cache [ 376.738314][ T8502] (syz.1.653,8502,0):ocfs2_check_volume:2432 ERROR: ocfs2 journal load failed! -4 [ 376.763129][ T8514] BTRFS info (device loop3): turning off barriers [ 376.795579][ T8514] BTRFS info (device loop3): use no compression [ 376.822252][ T8514] BTRFS info (device loop3): disabling free space tree [ 376.858340][ T8514] BTRFS info (device loop3): enabling ssd optimizations [ 376.865373][ T8514] BTRFS info (device loop3): using spread ssd allocation scheme [ 376.921030][ T8514] BTRFS info (device loop3): not using ssd optimizations [ 376.936817][ T8514] BTRFS info (device loop3): not using spread ssd allocation scheme [ 377.246433][ T8514] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 378.038546][ T8514] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 378.191258][ T8514] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 378.356562][ T8514] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 378.422670][ T8514] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 378.443432][ T8514] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 378.464877][ T8514] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 378.756185][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.781940][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.799001][ T8567] block device autoloading is deprecated and will be removed. [ 380.508896][ T8514] BTRFS error (device loop3): open_ctree failed: -12 [ 380.805907][ T8570] tipc: Enabled bearer , priority 0 [ 380.819545][ T8570] syzkaller0: entered promiscuous mode [ 380.825201][ T8570] syzkaller0: entered allmulticast mode [ 380.892313][ T8570] netlink: 44 bytes leftover after parsing attributes in process `syz.0.668'. [ 380.931819][ T8570] tipc: Resetting bearer [ 380.958750][ T8569] tipc: Resetting bearer [ 381.049444][ T8569] tipc: Disabling bearer [ 381.110206][ T5872] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by udevd (5872) [ 381.861699][ T8594] netlink: 12 bytes leftover after parsing attributes in process `syz.1.672'. [ 382.656163][ T8603] netlink: 60 bytes leftover after parsing attributes in process `syz.1.676'. [ 382.898437][ T5809] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 383.281773][ T5809] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 383.410255][ T5809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.468891][ T5809] usb 4-1: Product: syz [ 383.505717][ T5809] usb 4-1: Manufacturer: syz [ 383.537505][ T5809] usb 4-1: SerialNumber: syz [ 383.589338][ T5809] usb 4-1: config 0 descriptor?? [ 383.802993][ T5809] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 385.194131][ T8607] loop2: detected capacity change from 0 to 32768 [ 385.303313][ T8607] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 385.357357][ T8607] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 385.416511][ T8622] tipc: Enabled bearer , priority 0 [ 385.424095][ T8607] BTRFS info (device loop2): setting nodatacow, compression disabled [ 385.429425][ T8622] syzkaller0: entered promiscuous mode [ 385.438116][ T8622] syzkaller0: entered allmulticast mode [ 385.448759][ T8607] BTRFS info (device loop2): force clearing of disk cache [ 385.456087][ T8607] BTRFS info (device loop2): turning off barriers [ 385.466616][ T8607] BTRFS info (device loop2): use no compression [ 385.494744][ T8607] BTRFS info (device loop2): disabling free space tree [ 385.506999][ T8607] BTRFS info (device loop2): enabling ssd optimizations [ 385.529062][ T8622] tipc: Resetting bearer [ 385.547650][ T8607] BTRFS info (device loop2): using spread ssd allocation scheme [ 385.564154][ T8607] BTRFS info (device loop2): not using ssd optimizations [ 385.572238][ T8607] BTRFS info (device loop2): not using spread ssd allocation scheme [ 385.587747][ T8621] tipc: Resetting bearer [ 385.647534][ T8621] tipc: Disabling bearer [ 385.700710][ T8607] BTRFS info (device loop2): rebuilding free space tree [ 385.739156][ T8607] BTRFS info (device loop2): disabling free space tree [ 385.746283][ T8607] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 385.781713][ T8607] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 385.814365][ T8607] BTRFS info (device loop2): checking UUID tree [ 385.897917][ T28] audit: type=1800 audit(1783307080.431:63): pid=8607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.678" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 385.926663][ T5809] usb 4-1: dvb_usb_v2: will use the device's hardware PID filter (table count: 32) [ 385.937019][ T5809] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 385.947756][ T5809] usb 4-1: media controller created [ 385.961127][ T5809] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 385.977516][ T8607] BTRFS info (device loop2): balance: start [ 386.002865][ T5809] dvb_usb_rtl28xxu 4-1:0.0: unknown tuner MT2063 [ 386.016063][ T8607] BTRFS info (device loop2): balance: ended with status: 0 [ 386.124753][ T5809] usb 4-1: USB disconnect, device number 7 [ 386.292085][ T5776] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 387.135663][ T2135] kernel write not supported for file /dsp (pid: 2135 comm: kworker/1:2) [ 387.159664][ T8653] netlink: 12 bytes leftover after parsing attributes in process `syz.2.684'. [ 390.191116][ T8661] loop2: detected capacity change from 0 to 32768 [ 390.338552][ T8661] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 390.441953][ T8661] XFS (loop2): Ending clean mount [ 390.703536][ T5776] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 392.255053][ T27] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 392.412975][ T8711] netlink: 8 bytes leftover after parsing attributes in process `syz.1.699'. [ 392.479219][ T27] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 392.529123][ T8715] netlink: 60 bytes leftover after parsing attributes in process `syz.3.700'. [ 393.352892][ T27] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 393.408416][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.445755][ T27] usb 1-1: Product: syz [ 393.457597][ T27] usb 1-1: Manufacturer: syz [ 393.466578][ T27] usb 1-1: SerialNumber: syz [ 393.547449][ T27] usb 1-1: config 0 descriptor?? [ 393.582149][ T27] streamzap 1-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 395.606012][ T8733] loop3: detected capacity change from 0 to 32768 [ 395.614684][ T10] usb 1-1: USB disconnect, device number 7 [ 395.634857][ T8733] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.707 (8733) [ 395.719956][ T8733] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 395.761554][ T8733] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 395.779305][ T8733] BTRFS info (device loop3): setting nodatacow, compression disabled [ 395.799214][ T8733] BTRFS info (device loop3): force clearing of disk cache [ 395.813209][ T8733] BTRFS info (device loop3): turning off barriers [ 395.852478][ T8733] BTRFS info (device loop3): use no compression [ 395.878627][ T8733] BTRFS info (device loop3): disabling free space tree [ 395.897450][ T8733] BTRFS info (device loop3): enabling ssd optimizations [ 395.916610][ T8733] BTRFS info (device loop3): using spread ssd allocation scheme [ 395.944705][ T8733] BTRFS info (device loop3): not using ssd optimizations [ 395.965084][ T8733] BTRFS info (device loop3): not using spread ssd allocation scheme [ 396.584858][ T8733] BTRFS info (device loop3): rebuilding free space tree [ 396.884690][ T8733] BTRFS info (device loop3): disabling free space tree [ 396.912418][ T8733] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 396.951710][ T8733] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 397.024744][ T8733] BTRFS info (device loop3): checking UUID tree [ 397.137564][ T28] audit: type=1800 audit(1783307091.671:64): pid=8733 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.707" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 397.159763][ T28] audit: type=1800 audit(1783307091.681:65): pid=8733 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.707" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 397.584857][ T8769] netlink: 60 bytes leftover after parsing attributes in process `syz.1.712'. [ 397.663294][ T5782] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 398.632689][ T8774] loop2: detected capacity change from 0 to 128 [ 398.669615][ T8774] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 398.687184][ T8774] ext4 filesystem being mounted at /152/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 398.914607][ T5776] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 399.803084][ T8787] tipc: Enabling of bearer rejected, failed to enable media [ 399.943897][ T8790] netlink: 44 bytes leftover after parsing attributes in process `syz.2.716'. [ 402.872874][ T8816] netlink: 60 bytes leftover after parsing attributes in process `syz.1.723'. [ 403.812468][ T8821] input: syz1 as /devices/virtual/input/input7 [ 404.632371][ T8828] tipc: Enabled bearer , priority 0 [ 404.694790][ T8828] syzkaller0: entered promiscuous mode [ 404.725356][ T8828] syzkaller0: entered allmulticast mode [ 404.747298][ T8828] netlink: 44 bytes leftover after parsing attributes in process `syz.2.727'. [ 404.838255][ T8829] tipc: Resetting bearer [ 404.868583][ T8827] tipc: Resetting bearer [ 404.947381][ T8827] tipc: Disabling bearer [ 406.388606][ T2135] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 406.611140][ T2135] usb 2-1: Using ep0 maxpacket: 16 [ 406.630406][ T2135] usb 2-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 406.648282][ T2135] usb 2-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 406.668670][ T2135] usb 2-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 406.693292][ T2135] usb 2-1: config 1 interface 0 has no altsetting 0 [ 406.711023][ T2135] usb 2-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 406.730660][ T2135] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.752823][ T2135] usb 2-1: Product: syz [ 406.762051][ T2135] usb 2-1: Manufacturer: syz [ 406.777028][ T2135] usb 2-1: SerialNumber: syz [ 407.474361][ T2135] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 407.670674][ T2135] usb 2-1: USB disconnect, device number 8 [ 407.697952][ T8838] loop2: detected capacity change from 0 to 32768 [ 407.711269][ T8850] input: syz1 as /devices/virtual/input/input8 [ 407.721554][ T2135] usblp0: removed [ 407.805173][ T8838] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 407.874103][ T8838] XFS (loop2): Ending clean mount [ 408.118417][ T5776] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 408.821351][ T8873] tipc: Enabled bearer , priority 0 [ 408.871615][ T8873] syzkaller0: entered promiscuous mode [ 408.888505][ T8873] syzkaller0: entered allmulticast mode [ 408.899305][ T8873] netlink: 44 bytes leftover after parsing attributes in process `syz.0.738'. [ 408.932414][ T8873] tipc: Resetting bearer [ 408.954584][ T8872] tipc: Resetting bearer [ 408.996084][ T8872] tipc: Disabling bearer [ 411.885252][ T8891] netlink: 60 bytes leftover after parsing attributes in process `syz.1.742'. [ 416.277062][ T8911] tipc: Enabled bearer , priority 0 [ 416.407201][ T8912] loop3: detected capacity change from 0 to 128 [ 416.428296][ T8913] syzkaller0: entered promiscuous mode [ 416.441819][ T8912] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 416.454543][ T8912] hpfs: filesystem error: improperly stopped [ 416.460939][ T8912] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 416.469327][ T8912] hpfs: You really don't want any checks? You are crazy... [ 416.476773][ T8912] hpfs: Code page index out of array [ 416.482386][ T8912] hpfs: code page support is disabled [ 416.502210][ T8912] hpfs: hpfs_map_4sectors(): unaligned read [ 416.509373][ T8912] hpfs: hpfs_map_4sectors(): unaligned read [ 416.515444][ T8912] hpfs: filesystem error: unable to find root dir [ 416.561636][ T8912] hpfs: hpfs_map_sector(): read error [ 416.567357][ T8912] hpfs: hpfs_map_sector(): read error [ 416.598011][ T8913] syzkaller0: entered allmulticast mode [ 416.968683][ T8911] netlink: 44 bytes leftover after parsing attributes in process `syz.1.748'. [ 417.201443][ T8913] tipc: Resetting bearer [ 417.698795][ T8909] tipc: Resetting bearer [ 417.735061][ T8912] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 418.113173][ T8909] tipc: Disabling bearer [ 419.138559][ T27] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 420.248540][ T27] usb 1-1: Using ep0 maxpacket: 8 [ 420.266342][ T27] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 420.293904][ T27] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 420.319466][ T27] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 420.352735][ T27] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 420.387764][ T27] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 420.412464][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.631508][ T8930] loop3: detected capacity change from 0 to 32768 [ 420.652381][ T27] usb 1-1: GET_CAPABILITIES returned 0 [ 420.658074][ T27] usbtmc 1-1:16.0: can't read capabilities [ 420.697496][ T8930] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 420.822790][ T8930] XFS (loop3): Ending clean mount [ 420.913537][ T27] usb 1-1: USB disconnect, device number 8 [ 420.970691][ T8947] netlink: 40 bytes leftover after parsing attributes in process `syz.1.758'. [ 420.983790][ T5782] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 421.210561][ T8950] loop2: detected capacity change from 0 to 128 [ 421.239746][ T8950] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 421.252572][ T8950] hpfs: filesystem error: improperly stopped [ 421.259076][ T8950] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 421.266924][ T8950] hpfs: You really don't want any checks? You are crazy... [ 421.274356][ T8950] hpfs: Code page index out of array [ 421.279989][ T8950] hpfs: code page support is disabled [ 421.329308][ T8950] hpfs: hpfs_map_4sectors(): unaligned read [ 421.335812][ T8950] hpfs: hpfs_map_4sectors(): unaligned read [ 421.341970][ T8950] hpfs: filesystem error: unable to find root dir [ 421.392561][ T8950] hpfs: hpfs_map_sector(): read error [ 421.398142][ T8950] hpfs: hpfs_map_sector(): read error [ 421.497862][ T8951] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 422.239239][ T8956] tipc: Enabled bearer , priority 0 [ 422.247152][ T8956] syzkaller0: entered promiscuous mode [ 422.252985][ T8956] syzkaller0: entered allmulticast mode [ 422.273640][ T8956] netlink: 44 bytes leftover after parsing attributes in process `syz.2.763'. [ 422.306752][ T8956] tipc: Resetting bearer [ 422.343701][ T8955] tipc: Resetting bearer [ 422.449478][ T8955] tipc: Disabling bearer [ 423.476061][ T8973] input: syz1 as /devices/virtual/input/input9 [ 423.788792][ T8974] loop2: detected capacity change from 0 to 32768 [ 423.798820][ T8974] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.767 (8974) [ 423.815893][ T8974] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 423.826318][ T8974] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 423.835577][ T8974] BTRFS info (device loop2): metadata ratio 0 [ 423.841802][ T8974] BTRFS info (device loop2): turning on sync discard [ 423.848585][ T8974] BTRFS info (device loop2): using free space tree [ 423.911125][ T8974] BTRFS info (device loop2): enabling ssd optimizations [ 424.152982][ T5776] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 424.505601][ T8978] loop3: detected capacity change from 0 to 32768 [ 424.718379][ T8] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 424.739758][ T9006] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 425.545899][ T8978] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 425.858343][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 426.180176][ T8] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 426.699180][ T9021] tipc: Enabled bearer , priority 0 [ 426.707382][ T9021] syzkaller0: entered promiscuous mode [ 426.713821][ T9021] syzkaller0: entered allmulticast mode [ 426.724170][ T9021] netlink: 44 bytes leftover after parsing attributes in process `syz.1.776'. [ 426.735472][ T8] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 426.770832][ T8978] XFS (loop3): Ending clean mount [ 426.785007][ T9021] tipc: Resetting bearer [ 426.792124][ T8] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 426.818257][ T8] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 426.848327][ T8] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 426.857516][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.879988][ T9020] tipc: Resetting bearer [ 426.886121][ T5782] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 426.959639][ T9020] tipc: Disabling bearer [ 427.140527][ T8] usb 3-1: GET_CAPABILITIES returned 0 [ 427.146156][ T8] usbtmc 3-1:16.0: can't read capabilities [ 427.386582][ T2135] usb 3-1: USB disconnect, device number 7 [ 428.911664][ T9041] loop3: detected capacity change from 0 to 32768 [ 428.946035][ T9041] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.781 (9041) [ 428.971673][ T9041] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 428.982066][ T9041] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 428.990849][ T9041] BTRFS info (device loop3): metadata ratio 0 [ 428.996956][ T9041] BTRFS info (device loop3): turning on sync discard [ 429.003733][ T9041] BTRFS info (device loop3): using free space tree [ 429.061650][ T9039] input: syz1 as /devices/virtual/input/input10 [ 429.091842][ T9041] BTRFS info (device loop3): enabling ssd optimizations [ 429.146299][ T9057] netlink: 277 bytes leftover after parsing attributes in process `syz.2.782'. [ 429.477523][ T5782] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 430.753062][ T9073] Error parsing options; rc = [-22] [ 430.772436][ T9073] netlink: 'syz.1.786': attribute type 21 has an invalid length. [ 430.781389][ T9073] netlink: 132 bytes leftover after parsing attributes in process `syz.1.786'. [ 431.734186][ T9075] tipc: Enabled bearer , priority 0 [ 431.752816][ T9075] syzkaller0: entered promiscuous mode [ 431.775358][ T9075] syzkaller0: entered allmulticast mode [ 431.819151][ T9074] tipc: Resetting bearer [ 431.896841][ T9069] loop3: detected capacity change from 0 to 32768 [ 431.936767][ T9069] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 431.951120][ T9074] tipc: Disabling bearer [ 431.984746][ T9069] XFS (loop3): Ending clean mount [ 432.112288][ T5782] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 433.152046][ T9086] loop2: detected capacity change from 0 to 32768 [ 433.206896][ T9086] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 433.263639][ T9086] XFS (loop2): Ending clean mount [ 433.410278][ T5776] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 434.116588][ T9109] bridge0: port 3(syz_tun) entered blocking state [ 434.174492][ T9109] bridge0: port 3(syz_tun) entered disabled state [ 434.186976][ T9109] syz_tun: entered allmulticast mode [ 434.231235][ T9109] syz_tun: entered promiscuous mode [ 434.548308][ T5809] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 434.639517][ T9107] loop2: detected capacity change from 0 to 32768 [ 434.694539][ T9107] (syz.2.800,9107,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 434.731134][ T9107] (syz.2.800,9107,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 434.749382][ T5809] usb 4-1: Using ep0 maxpacket: 8 [ 434.764400][ T5809] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 434.806324][ T5809] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 434.846942][ T5809] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 434.879191][ T5809] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 434.928322][ T5809] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 434.937472][ T5809] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.057580][ T9107] JBD2: Ignoring recovery information on journal [ 435.162271][ T9107] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 435.218354][ T5809] usb 4-1: GET_CAPABILITIES returned 0 [ 435.223951][ T5809] usbtmc 4-1:16.0: can't read capabilities [ 435.490988][ T6005] usb 4-1: USB disconnect, device number 8 [ 435.650972][ T5776] ocfs2: Unmounting device (7,2) on (node local) [ 436.718228][ T9131] tipc: Enabled bearer , priority 0 [ 436.787767][ T9132] syzkaller0: entered promiscuous mode [ 436.831638][ T9132] syzkaller0: entered allmulticast mode [ 437.167338][ T9130] tipc: Resetting bearer [ 437.500210][ T9130] tipc: Disabling bearer [ 437.717482][ T9145] veth1_to_batadv: entered promiscuous mode [ 437.748013][ T9145] veth1_to_batadv: entered allmulticast mode [ 437.762183][ T9144] veth1_to_batadv: left allmulticast mode [ 437.779385][ T9144] veth1_to_batadv: left promiscuous mode [ 437.993068][ T9149] input: syz1 as /devices/virtual/input/input11 [ 438.029046][ T5809] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 438.211262][ T5809] usb 1-1: Using ep0 maxpacket: 8 [ 438.218854][ T5809] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 438.231849][ T5809] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 438.278574][ T5809] usb 1-1: config 0 interface 0 has no altsetting 0 [ 438.285303][ T5809] usb 1-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 438.308226][ T5809] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.335571][ T5809] usb 1-1: config 0 descriptor?? [ 438.878418][ T5809] elecom 0003:056E:00FE.0004: unexpected long global item [ 439.402398][ T5809] elecom: probe of 0003:056E:00FE.0004 failed with error -22 [ 439.413287][ T5809] usb 1-1: USB disconnect, device number 9 [ 440.044106][ T9166] tipc: Enabled bearer , priority 0 [ 440.052121][ T9166] syzkaller0: entered promiscuous mode [ 440.058016][ T9166] syzkaller0: entered allmulticast mode [ 440.077524][ T9165] tipc: Resetting bearer [ 440.155527][ T9165] tipc: Disabling bearer [ 440.194011][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.200732][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 444.978526][ T9199] loop2: detected capacity change from 0 to 64 [ 445.097759][ T9204] tipc: Enabled bearer , priority 0 [ 445.147730][ T9205] syzkaller0: entered promiscuous mode [ 445.174238][ T9205] syzkaller0: entered allmulticast mode [ 445.449650][ T9205] netlink: 44 bytes leftover after parsing attributes in process `syz.0.821'. [ 445.468550][ T9202] tipc: Resetting bearer [ 445.721096][ T9202] tipc: Disabling bearer [ 446.584415][ T6005] IPVS: starting estimator thread 0... [ 446.740575][ T9224] IPVS: using max 15 ests per chain, 36000 per kthread [ 448.556982][ T9244] loop3: detected capacity change from 0 to 128 [ 449.879499][ T9258] loop3: detected capacity change from 0 to 7 [ 449.904177][ T9258] Dev loop3: unable to read RDB block 7 [ 449.921107][ T9258] loop3: unable to read partition table [ 449.934720][ T9258] loop3: partition table beyond EOD, truncated [ 449.985331][ T9258] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 454.520203][ T9355] loop2: detected capacity change from 0 to 512 [ 454.587695][ T9355] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 454.828994][ T9355] ext4 filesystem being mounted at /182/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 456.462067][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 456.971992][ T9384] can0: slcan on ptm0. [ 459.551942][ T9378] can0 (unregistered): slcan off ptm0. [ 461.549442][ T9411] kvm: faulting far call emulation tainted memory [ 461.941335][ T9418] loop3: detected capacity change from 0 to 4096 [ 462.018990][ T9418] NILFS (loop3): invalid segment: Checksum error in segment payload [ 462.048041][ T9418] NILFS (loop3): trying rollback from an earlier position [ 462.137854][ T9418] NILFS (loop3): recovery complete [ 462.197872][ T9424] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 462.419089][ T9418] NILFS (loop3): nilfs_sufile_do_free: segment 13 is already clean [ 462.758771][ T2135] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 463.048800][ T2135] usb 2-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 463.059327][ T2135] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.067781][ T2135] usb 2-1: Product: syz [ 463.074304][ T2135] usb 2-1: Manufacturer: syz [ 463.091253][ T2135] usb 2-1: SerialNumber: syz [ 463.590187][ T2135] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 465.134603][ T9439] loop3: detected capacity change from 0 to 32768 [ 465.179005][ T9462] tipc: Enabled bearer , priority 0 [ 465.214028][ T9439] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 465.231048][ T9462] syzkaller0: entered promiscuous mode [ 465.258541][ T9462] syzkaller0: entered allmulticast mode [ 465.364178][ T9462] netlink: 44 bytes leftover after parsing attributes in process `syz.2.867'. [ 465.406369][ T9461] tipc: Resetting bearer [ 465.523044][ T9439] XFS (loop3): Ending clean mount [ 465.599892][ T9461] tipc: Disabling bearer [ 466.071135][ T8] usb 2-1: USB disconnect, device number 9 [ 466.118982][ T8] usblp0: removed [ 466.337012][ T5782] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 467.030792][ T9486] loop2: detected capacity change from 0 to 40427 [ 467.043464][ T9486] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 467.051526][ T9486] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 467.073875][ T9486] F2FS-fs (loop2): invalid crc value [ 467.152542][ T9486] F2FS-fs (loop2): Found nat_bits in checkpoint [ 467.343710][ T9486] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 467.351161][ T9486] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 468.016662][ T9500] hub 8-0:1.0: USB hub found [ 468.025642][ T9500] hub 8-0:1.0: 1 port detected [ 469.382215][ T9506] netlink: 1319 bytes leftover after parsing attributes in process `syz.3.870'. [ 469.387326][ T9507] devpts: called with bogus options [ 471.053953][ T9525] tipc: Enabled bearer , priority 0 [ 471.121080][ T9522] netlink: 44 bytes leftover after parsing attributes in process `syz.1.882'. [ 471.254964][ T9521] tipc: Disabling bearer [ 471.571226][ T27] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 471.973930][ T27] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 472.076982][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.178273][ T27] usb 1-1: Product: syz [ 472.192664][ T27] usb 1-1: Manufacturer: syz [ 472.221974][ T27] usb 1-1: SerialNumber: syz [ 472.238002][ T9515] loop3: detected capacity change from 0 to 32768 [ 472.351631][ T9515] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 472.423269][ T9551] loop2: detected capacity change from 0 to 1024 [ 472.505472][ T9515] XFS (loop3): Ending clean mount [ 472.514151][ T9551] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 472.567387][ T9551] ext4 filesystem being mounted at /189/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 472.749215][ T5782] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 472.804189][ T27] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 472.969271][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 473.357877][ T9575] kvm: pic: level sensitive irq not supported [ 473.358005][ T9575] kvm: pic: level sensitive irq not supported [ 473.372741][ T9575] kvm: pic: non byte write [ 474.631327][ T9436] usb 1-1: USB disconnect, device number 10 [ 474.676451][ T9436] usblp0: removed [ 476.184926][ T8] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 476.389317][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 476.512579][ T8] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 476.645558][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.822962][ T8] usb 4-1: config 0 descriptor?? [ 477.148905][ T8] pwc: Askey VC010 type 2 USB webcam detected. [ 477.258173][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 477.391942][ T9609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.541591][ T9609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 477.654286][ T8] pwc: send_video_command error -71 [ 477.675947][ T8] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 477.697630][ T8] Philips webcam: probe of 4-1:0.0 failed with error -71 [ 477.732575][ T8] usb 4-1: USB disconnect, device number 9 [ 479.396699][ T9644] loop2: detected capacity change from 0 to 512 [ 479.420460][ T9644] EXT4-fs: Ignoring removed i_version option [ 480.128880][ T9644] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 480.751746][ T9644] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 480.985490][ T9644] Quota error (device loop2): write_blk: dquota write failed [ 481.150013][ T9644] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 481.174451][ T9644] Quota error (device loop2): write_blk: dquota write failed [ 481.212334][ T9644] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 481.224169][ T9644] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.900: Failed to acquire dquot type 1 [ 481.386772][ T9644] EXT4-fs (loop2): 1 truncate cleaned up [ 481.397407][ T9644] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 481.418727][ T5812] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 481.849296][ T5812] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 482.158101][ T5812] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.192006][ T5812] usb 4-1: Product: syz [ 482.205546][ T5812] usb 4-1: Manufacturer: syz [ 482.216860][ T5812] usb 4-1: SerialNumber: syz [ 482.268089][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 482.638165][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 483.668900][ T9673] loop2: detected capacity change from 0 to 512 [ 483.702573][ T9673] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 483.725018][ T9673] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 483.778712][ T9673] ext4 filesystem being mounted at /197/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 483.827722][ T5812] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 484.232351][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 485.708020][ T9666] usb 4-1: USB disconnect, device number 10 [ 485.792842][ T9666] usblp0: removed [ 487.096640][ T9705] syzkaller0: entered promiscuous mode [ 487.138720][ T9705] syzkaller0: entered allmulticast mode [ 487.250404][ T9705] netlink: 44 bytes leftover after parsing attributes in process `syz.1.917'. [ 489.158427][ T28] audit: type=1326 audit(1783307183.621:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9721 comm="syz.3.924" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd53db9de59 code=0x0 [ 490.957901][ T28] audit: type=1326 audit(1783307185.491:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9741 comm="syz.0.929" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5ec4f9de59 code=0x0 [ 492.638579][ T28] audit: type=1326 audit(1783307187.181:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9767 comm="syz.0.937" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5ec4f9de59 code=0x0 [ 492.722473][ T9748] loop2: detected capacity change from 0 to 32768 [ 493.193441][ T9748] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 493.451353][ T9748] XFS (loop2): Ending clean mount [ 493.652577][ T5776] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 493.880968][ T9796] syzkaller0: entered promiscuous mode [ 493.886913][ T9796] syzkaller0: entered allmulticast mode [ 494.118740][ T9798] netlink: 44 bytes leftover after parsing attributes in process `syz.3.945'. [ 495.050470][ T28] audit: type=1326 audit(1783307189.591:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9806 comm="syz.2.949" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff6adb9de59 code=0x0 [ 495.435958][ T9809] loop3: detected capacity change from 0 to 32768 [ 495.729274][ T9809] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 496.064127][ T9809] XFS (loop3): Ending clean mount [ 496.592734][ T5782] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 496.627895][ T9839] bridge_slave_0: left allmulticast mode [ 496.633752][ T9839] bridge_slave_0: left promiscuous mode [ 496.642480][ T9839] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.654620][ T9839] bridge_slave_1: left allmulticast mode [ 496.665870][ T9839] bridge_slave_1: left promiscuous mode [ 496.685166][ T9839] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.704506][ T9839] bond0: (slave bond_slave_0): Releasing backup interface [ 496.727883][ T9839] bond0: (slave bond_slave_1): Releasing backup interface [ 496.801231][ T9839] team0: Port device team_slave_0 removed [ 496.812715][ T9666] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 496.831783][ T9839] team0: Port device team_slave_1 removed [ 496.847414][ T9839] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 496.855034][ T9839] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 496.865825][ T9839] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 496.874384][ T9839] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 496.894315][ T9839] bond1: left allmulticast mode [ 496.899824][ T9839] ip6gretap1: left allmulticast mode [ 496.905420][ T9839] bond1: left promiscuous mode [ 496.929575][ T9839] ip6gretap1: left promiscuous mode [ 496.959103][ T9839] team0: Port device macvlan2 removed [ 496.981481][ T9839] bond1: (slave ip6gretap1): Releasing active interface [ 497.032475][ T9841] team0: Mode changed to "activebackup" [ 497.043391][ T9666] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 497.053143][ T9666] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.067957][ T9666] usb 1-1: Product: syz [ 497.078189][ T9666] usb 1-1: Manufacturer: syz [ 497.082869][ T9666] usb 1-1: SerialNumber: syz [ 497.154974][ T9844] netlink: 44 bytes leftover after parsing attributes in process `syz.1.960'. [ 497.513265][ T9666] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 499.351405][ T9865] loop2: detected capacity change from 0 to 32768 [ 499.399643][ T9865] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 499.514778][ T9865] XFS (loop2): Ending clean mount [ 499.692532][ T5776] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 500.004219][ T9892] syzkaller0: entered promiscuous mode [ 500.014610][ T9892] syzkaller0: entered allmulticast mode [ 500.105324][ T9892] netlink: 44 bytes leftover after parsing attributes in process `syz.1.972'. [ 500.529760][ T9666] usb 1-1: USB disconnect, device number 11 [ 500.554968][ T9666] usblp0: removed [ 501.309884][ T9923] syzkaller0: entered promiscuous mode [ 501.338641][ T9923] syzkaller0: entered allmulticast mode [ 501.417952][ T9923] netlink: 44 bytes leftover after parsing attributes in process `syz.1.982'. [ 501.451542][ T9929] loop2: detected capacity change from 0 to 2048 [ 501.545230][ T9929] xt_hashlimit: size too large, truncated to 1048576 [ 501.578856][ T2135] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 501.635907][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.645110][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.803989][ T2135] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 501.825286][ T2135] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.844287][ T2135] usb 1-1: Product: syz [ 501.864524][ T2135] usb 1-1: Manufacturer: syz [ 501.874606][ T2135] usb 1-1: SerialNumber: syz [ 502.365679][ T2135] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 504.381946][ T2135] usb 1-1: USB disconnect, device number 12 [ 504.405219][ T2135] usblp0: removed [ 509.691876][T10017] syzkaller0: entered promiscuous mode [ 509.697454][T10017] syzkaller0: entered allmulticast mode [ 518.098808][T10074] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1024'. [ 521.935826][T10082] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1026'. [ 524.715947][T10054] pim6reg: entered allmulticast mode [ 524.982111][T10062] syzkaller0: entered promiscuous mode [ 524.997711][T10062] syzkaller0: entered allmulticast mode [ 525.649624][T10103] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 525.692890][T10103] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 525.710450][T10103] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 525.730959][T10103] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 525.763197][T10103] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 525.795813][T10103] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 527.503562][T10103] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 527.547660][T10103] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 527.560341][T10103] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 527.587273][T10103] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 527.604938][T10103] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 527.622783][T10103] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 527.876104][ T5779] Bluetooth: hci1: command tx timeout [ 528.273704][T10091] syzkaller0: entered promiscuous mode [ 528.279650][T10091] syzkaller0: entered allmulticast mode [ 529.417146][ T9321] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.708700][ T5779] Bluetooth: hci4: command tx timeout [ 529.948666][ T5779] Bluetooth: hci1: command tx timeout [ 530.616159][ T9321] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.215603][ T9321] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.247070][T10106] lo speed is unknown, defaulting to 1000 [ 531.270484][T10106] lo speed is unknown, defaulting to 1000 [ 532.529888][ T5779] Bluetooth: hci4: command tx timeout [ 532.535445][ T5779] Bluetooth: hci1: command tx timeout [ 532.625535][ T9321] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.181785][T10131] input: syz1 as /devices/virtual/input/input12 [ 533.633992][T10102] lo speed is unknown, defaulting to 1000 [ 533.907424][T10102] lo speed is unknown, defaulting to 1000 [ 535.679363][ T5779] Bluetooth: hci1: command tx timeout [ 535.684949][ T51] Bluetooth: hci4: command tx timeout [ 535.935025][T10106] chnl_net:caif_netlink_parms(): no params data found [ 535.955242][ T9321] tipc: Left network mode [ 536.051068][T10144] tipc: Enabled bearer , priority 0 [ 536.526738][T10148] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1039'. [ 536.551164][T10149] tipc: Resetting bearer [ 536.867675][T10143] tipc: Disabling bearer [ 537.187675][T10106] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.218996][T10106] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.226412][T10106] bridge_slave_0: entered allmulticast mode [ 537.270185][T10106] bridge_slave_0: entered promiscuous mode [ 537.718497][ T51] Bluetooth: hci4: command tx timeout [ 538.267471][T10106] bridge0: port 2(bridge_slave_1) entered blocking state [ 538.321729][T10106] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.337529][T10106] bridge_slave_1: entered allmulticast mode [ 539.177181][T10106] bridge_slave_1: entered promiscuous mode [ 541.209982][T10106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 541.249768][T10106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 542.329277][T10106] team0: Port device team_slave_0 added [ 542.367528][T10106] team0: Port device team_slave_1 added [ 542.404472][T10102] chnl_net:caif_netlink_parms(): no params data found [ 542.688933][ T9321] IPVS: stopping master sync thread 7720 ... [ 542.851486][T10106] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 542.863851][T10106] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 542.948521][T10106] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 542.984455][T10106] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 543.018595][T10106] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 543.132182][T10106] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 545.193811][T10106] hsr_slave_0: entered promiscuous mode [ 545.242384][T10106] hsr_slave_1: entered promiscuous mode [ 545.308444][T10106] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 545.316130][T10106] Cannot create hsr debugfs directory [ 546.461123][T10102] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.598976][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88805caf5400: rx timeout, send abort [ 546.611073][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88805caf5400: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 546.626176][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88802fd92800: rx timeout, send abort [ 546.634854][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88802fd92800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 546.698403][T10102] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.705709][T10102] bridge_slave_0: entered allmulticast mode [ 546.735840][T10102] bridge_slave_0: entered promiscuous mode [ 546.767559][T10102] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.788317][T10102] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.802718][T10102] bridge_slave_1: entered allmulticast mode [ 546.851120][T10102] bridge_slave_1: entered promiscuous mode [ 548.003393][T10240] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1055'. [ 550.537176][T10102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 550.588806][T10240] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1055'. [ 550.597837][T10240] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1055'. [ 550.618073][ T9321] hsr_slave_0: left promiscuous mode [ 550.626378][ T9321] hsr_slave_1: left promiscuous mode [ 550.890303][ T9321] veth1_macvtap: left promiscuous mode [ 550.896771][ T9321] veth0_macvtap: left promiscuous mode [ 550.918899][ T9321] veth1_vlan: left promiscuous mode [ 550.937942][T10241] UBIFS error (pid: 10241): cannot open "./file0", error -22 [ 550.947025][ T9321] veth0_vlan: left promiscuous mode [ 553.419568][ T9321] bond1 (unregistering): Released all slaves [ 553.978567][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888021c63800: rx timeout, send abort [ 553.987821][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888021c63800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 558.752370][ T9321] bond0 (unregistering): Released all slaves [ 559.026159][T10102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 559.225986][T10282] tipc: Enabling of bearer rejected, failed to enable media [ 559.269081][T10291] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1062'. [ 559.488956][T10102] team0: Port device team_slave_0 added [ 559.520208][T10102] team0: Port device team_slave_1 added [ 559.724916][T10102] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 559.772409][T10102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 559.820975][T10102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 559.851149][T10102] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 559.864823][T10102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 559.918582][ T9436] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 559.946313][T10102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 560.133274][ T9436] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 560.152883][ T9436] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.181299][ T9436] usb 4-1: Product: syz [ 560.200002][ T9436] usb 4-1: Manufacturer: syz [ 560.204912][ T9436] usb 4-1: SerialNumber: syz [ 560.677700][T10102] hsr_slave_0: entered promiscuous mode [ 560.776631][T10102] hsr_slave_1: entered promiscuous mode [ 560.861950][T10102] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 560.949512][ T9436] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 560.991429][T10102] Cannot create hsr debugfs directory [ 562.374198][T10106] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 562.425907][T10106] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 562.522104][T10106] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 562.605658][ T9436] usb 4-1: USB disconnect, device number 11 [ 562.630546][ T9436] usblp0: removed [ 562.677218][T10106] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 563.089151][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.095758][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.392538][T10102] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 563.493498][T10102] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 563.530028][T10102] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 563.690981][T10102] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 563.723523][T10106] 8021q: adding VLAN 0 to HW filter on device bond0 [ 563.812101][T10106] 8021q: adding VLAN 0 to HW filter on device team0 [ 563.842203][ T9301] bridge0: port 1(bridge_slave_0) entered blocking state [ 563.849518][ T9301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 563.929039][ T9301] bridge0: port 2(bridge_slave_1) entered blocking state [ 563.936247][ T9301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 564.180882][T10106] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 564.523193][ T9321] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.029753][ T9321] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.248305][T10102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 565.317234][ T9321] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.406400][T10102] 8021q: adding VLAN 0 to HW filter on device team0 [ 565.436739][ T9318] bridge0: port 1(bridge_slave_0) entered blocking state [ 565.443986][ T9318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 565.619051][ T9321] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.722277][ T9318] bridge0: port 2(bridge_slave_1) entered blocking state [ 565.729669][ T9318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 565.859793][T10365] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1072'. [ 566.138788][T10365] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1072'. [ 566.158321][T10365] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1072'. [ 566.320911][T10106] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 566.622313][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88802c6f5800: rx timeout, send abort [ 566.631146][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88802eea4800: rx timeout, send abort [ 566.640617][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88802c6f5800: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 566.655537][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88802eea4800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 566.734132][ T9321] tipc: Disabling bearer [ 566.800623][ T9321] tipc: Left network mode [ 568.926643][T10102] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 569.382420][T10106] veth0_vlan: entered promiscuous mode [ 569.422563][T10106] veth1_vlan: entered promiscuous mode [ 569.666619][T10106] veth0_macvtap: entered promiscuous mode [ 569.783528][T10106] veth1_macvtap: entered promiscuous mode [ 569.820549][ T9321] IPVS: stopping master sync thread 7508 ... [ 569.855508][T10106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 569.869346][T10106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.885691][T10106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 569.896954][T10106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.907524][T10106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 569.922080][T10106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.934745][T10106] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 569.946013][T10102] veth0_vlan: entered promiscuous mode [ 569.977979][T10106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 569.995617][T10106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.006663][T10106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 570.019465][T10106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.036970][T10106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 570.050738][T10106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.066688][T10106] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 570.124860][T10102] veth1_vlan: entered promiscuous mode [ 570.143563][T10106] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.157290][ T5761] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 570.164321][T10106] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.176621][T10106] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.185941][T10106] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.378526][ T5761] usb 2-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 570.393997][ T5761] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.402621][ T5761] usb 2-1: Product: syz [ 570.406853][ T5761] usb 2-1: Manufacturer: syz [ 570.412522][ T5761] usb 2-1: SerialNumber: syz [ 570.452427][T10102] veth0_macvtap: entered promiscuous mode [ 570.537866][ T9326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 570.552485][T10102] veth1_macvtap: entered promiscuous mode [ 570.569541][ T9326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 570.684168][ T9316] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 570.712030][T10102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 570.730469][ T9316] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 570.738361][T10102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.762399][T10102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 570.778217][T10102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.799734][T10102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 570.817578][T10102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.837560][T10102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 570.855818][T10102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.874871][T10102] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 570.928210][ T9321] hsr_slave_0: left promiscuous mode [ 570.934894][ T9321] hsr_slave_1: left promiscuous mode [ 570.942975][ T9321] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 570.959386][ T9321] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 570.981799][ T5761] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 570.993688][ T9321] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 571.001626][ T9321] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 571.075362][ T9321] veth1_macvtap: left promiscuous mode [ 571.088597][ T9321] veth0_macvtap: left promiscuous mode [ 571.094368][ T9321] veth1_vlan: left promiscuous mode [ 571.102501][ T9321] veth0_vlan: left promiscuous mode [ 572.090609][ T9321] team0 (unregistering): Port device team_slave_1 removed [ 572.157756][ T9321] team0 (unregistering): Port device team_slave_0 removed [ 572.221319][ T9321] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 572.285891][ T9321] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 572.672966][ T9321] bond0 (unregistering): (slave team0): Releasing backup interface [ 572.727757][ T9321] bond0 (unregistering): Released all slaves [ 572.808046][T10102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 572.828217][T10102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.848310][T10102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 572.866879][T10102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.876899][T10102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 572.877944][ T5811] usb 2-1: USB disconnect, device number 10 [ 572.908881][T10102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.922110][T10102] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 572.937439][T10102] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.946816][T10102] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.958820][ T5811] usblp0: removed [ 573.000457][T10102] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.013072][T10102] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.393555][ T5761] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 573.768591][ T5761] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 573.777716][ T5761] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.792546][ T5761] usb 4-1: Product: syz [ 573.796743][ T5761] usb 4-1: Manufacturer: syz [ 573.801854][ T5761] usb 4-1: SerialNumber: syz [ 573.922301][T10440] input: syz1 as /devices/virtual/input/input13 [ 574.168302][ T9307] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 574.176280][ T9307] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 574.304632][ T5761] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 574.359252][ T9307] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 574.381235][ T9307] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 574.770991][T10458] syzkaller0: entered promiscuous mode [ 574.798292][T10458] syzkaller0: entered allmulticast mode [ 575.651465][T10444] loop5: detected capacity change from 0 to 40427 [ 575.707430][T10444] F2FS-fs (loop5): invalid crc value [ 575.787573][T10444] F2FS-fs (loop5): Found nat_bits in checkpoint [ 575.986306][T10444] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 576.081157][T10444] syz.5.1031: attempt to access beyond end of device [ 576.081157][T10444] loop5: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 576.114372][ T5761] usb 4-1: USB disconnect, device number 12 [ 576.131499][ T5761] usblp0: removed [ 577.088803][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88802fd87c00: rx timeout, send abort [ 577.097597][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88802fd87c00: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 577.112949][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88802fd84800: rx timeout, send abort [ 577.121873][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88802fd84800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 577.813046][T10501] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1086'. [ 577.826690][T10501] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1086'. [ 577.836814][T10501] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1086'. [ 578.213792][T10500] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1085'. [ 578.630092][T10506] input: syz1 as /devices/virtual/input/input14 [ 579.282493][T10519] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1084'. [ 579.339904][T10519] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1084'. [ 579.349149][T10519] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1084'. [ 580.478350][ T5811] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 580.681339][ T5811] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 580.698604][ T5811] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.743497][ T5811] usb 4-1: Product: syz [ 580.764252][ T5811] usb 4-1: Manufacturer: syz [ 580.779084][ T5811] usb 4-1: SerialNumber: syz [ 581.060482][T10529] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1090'. [ 581.341572][ T5811] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 583.616490][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88805d669c00: rx timeout, send abort [ 583.625831][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88805d669c00: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 583.640547][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88802525dc00: rx timeout, send abort [ 583.650870][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88802525dc00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 584.419436][T10419] usb 4-1: USB disconnect, device number 13 [ 584.448795][T10419] usblp0: removed [ 584.871632][T10566] syzkaller0: entered promiscuous mode [ 584.889093][T10566] syzkaller0: entered allmulticast mode [ 585.155735][T10576] pim6reg9: entered allmulticast mode [ 588.070556][T10598] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1101'. [ 588.208288][ T9436] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 588.450064][ T9436] usb 6-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 588.468419][ T9436] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.521932][ T9436] usb 6-1: Product: syz [ 588.536750][ T9436] usb 6-1: Manufacturer: syz [ 588.566380][ T9436] usb 6-1: SerialNumber: syz [ 588.877360][T10618] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1105'. [ 589.003337][ T9436] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 590.136620][T10629] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1097'. [ 590.196788][T10629] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1097'. [ 590.205982][T10629] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1097'. [ 590.960042][ T5761] usb 6-1: USB disconnect, device number 2 [ 590.969833][ T5761] usblp0: removed [ 591.896909][T10651] pim6reg9: entered allmulticast mode [ 592.421103][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888027a00000: rx timeout, send abort [ 592.429888][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888027a00000: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 592.444645][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888027a00c00: rx timeout, send abort [ 592.453880][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888027a00c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 593.826808][T10668] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1114'. [ 594.230904][T10419] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 594.523985][T10419] usb 2-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 594.541994][T10419] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.574664][T10419] usb 2-1: Product: syz [ 594.608694][T10419] usb 2-1: Manufacturer: syz [ 594.628180][T10419] usb 2-1: SerialNumber: syz [ 595.368128][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 595.468133][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 595.788129][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 595.958124][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 596.414412][T10419] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 597.194672][T10670] loop5: detected capacity change from 0 to 40427 [ 597.230070][T10670] F2FS-fs (loop5): invalid crc value [ 597.317554][T10670] F2FS-fs (loop5): Found nat_bits in checkpoint [ 597.483690][T10419] usb 2-1: USB disconnect, device number 11 [ 597.507411][T10419] usblp0: removed [ 597.872007][T10699] pim6reg9: entered allmulticast mode [ 598.066737][T10698] input: syz1 as /devices/virtual/input/input15 [ 598.974808][T10711] syzkaller0: entered promiscuous mode [ 598.981866][T10711] syzkaller0: entered allmulticast mode [ 600.069165][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88807c741400: rx timeout, send abort [ 600.078012][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88807c741400: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 600.092905][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88807c743c00: rx timeout, send abort [ 600.103964][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88807c743c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 601.229439][T10737] pim6reg9: entered allmulticast mode [ 601.460798][T10742] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1126'. [ 603.866229][T10741] loop3: detected capacity change from 0 to 40427 [ 603.966330][T10741] F2FS-fs (loop3): invalid crc value [ 603.992018][T10741] F2FS-fs (loop3): Found nat_bits in checkpoint [ 604.659651][T10780] syzkaller0: entered promiscuous mode [ 604.680136][T10780] syzkaller0: entered allmulticast mode [ 604.853521][T10784] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1132'. [ 606.570579][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88805c5a4000: rx timeout, send abort [ 606.579402][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88805c5a4000: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 606.593950][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88805c5a7400: rx timeout, send abort [ 606.603834][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88805c5a7400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 609.174005][T10837] syzkaller0: entered promiscuous mode [ 609.188222][T10837] syzkaller0: entered allmulticast mode [ 609.994875][T10846] input: syz1 as /devices/virtual/input/input16 [ 611.899701][T10852] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1147'. [ 613.829708][T10872] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1150'. [ 613.884545][T10872] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1150'. [ 613.893791][T10872] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1150'. [ 615.064277][T10890] syzkaller0: entered promiscuous mode [ 615.108725][T10890] syzkaller0: entered allmulticast mode [ 618.399558][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88802fd84800: rx timeout, send abort [ 618.408435][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88802fd84800: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 618.423516][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88802fd86400: rx timeout, send abort [ 618.433047][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88802fd86400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 621.727247][T10970] input: syz1 as /devices/virtual/input/input17 [ 623.064167][ T9436] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 623.295474][ T9436] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 623.361000][ T9436] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.738643][ T9436] usb 5-1: Product: syz [ 623.743641][ T9436] usb 5-1: Manufacturer: syz [ 623.825651][ T9436] usb 5-1: SerialNumber: syz [ 623.941762][T10994] input: syz1 as /devices/virtual/input/input18 [ 624.064030][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88802526ec00: rx timeout, send abort [ 624.072856][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88802526ec00: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 624.087724][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88802526e800: rx timeout, send abort [ 624.096456][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88802526e800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 624.512927][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.533671][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.994526][T11012] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1176'. [ 626.018843][T11012] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1176'. [ 626.028422][T11012] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1176'. [ 626.062008][T11012] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 626.071027][T11012] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 626.079873][T11012] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 626.089480][T11012] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 626.451211][ T9436] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 626.497239][ T9436] usb 5-1: USB disconnect, device number 2 [ 626.630728][ T9436] usblp0: removed [ 629.767286][T11037] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1181'. [ 631.086028][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888025c58400: rx timeout, send abort [ 631.097074][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888025c58400: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 631.111833][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888025c58000: rx timeout, send abort [ 631.128562][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888025c58000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 633.148195][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 633.642206][T11080] syzkaller0: entered promiscuous mode [ 633.698259][ T9666] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 633.845916][T11080] syzkaller0: entered allmulticast mode [ 634.075589][ T9666] usb 6-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 634.097434][ T9666] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.114374][ T9666] usb 6-1: Product: syz [ 634.119338][ T9666] usb 6-1: Manufacturer: syz [ 634.125227][ T9666] usb 6-1: SerialNumber: syz [ 635.136914][T11087] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1189'. [ 635.156370][T11087] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1189'. [ 635.165579][T11087] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1189'. [ 635.180275][T11087] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 635.189196][T11087] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 635.198642][T11087] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 635.207508][T11087] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 635.454230][T11093] input: syz1 as /devices/virtual/input/input19 [ 636.934042][ T9666] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 637.045171][ T9666] usb 6-1: USB disconnect, device number 3 [ 637.088440][ T9666] usblp0: removed [ 637.291060][T11098] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1191'. [ 637.695777][T11110] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1193'. [ 637.802747][T11110] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1193'. [ 637.812777][T11110] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1193'. [ 638.841747][T11123] input: syz1 as /devices/virtual/input/input20 [ 640.311338][T11132] input: syz1 as /devices/virtual/input/input21 [ 640.973751][T11138] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1198'. [ 641.108747][T11138] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1198'. [ 641.117917][T11138] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1198'. [ 642.289249][T11149] syzkaller0: entered promiscuous mode [ 642.361087][T11149] syzkaller0: entered allmulticast mode [ 642.609660][T11158] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1200'. [ 646.182750][T11190] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1205'. [ 646.873371][T11184] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1205'. [ 646.882457][T11184] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1205'. [ 646.957404][T11183] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1206'. [ 647.194638][T11200] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1209'. [ 647.360366][T11200] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1209'. [ 647.369738][T11200] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1209'. [ 647.445050][T11200] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 647.454054][T11200] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 647.463018][T11200] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 647.471933][T11200] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 649.695579][T11230] syzkaller0: entered promiscuous mode [ 649.701709][T11230] syzkaller0: entered allmulticast mode [ 650.211541][T11240] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1215'. [ 651.813756][T11260] input: syz1 as /devices/virtual/input/input22 [ 652.301669][T11242] Bluetooth: hci1: command 0x0406 tx timeout [ 652.302878][T10103] Bluetooth: hci4: command 0x0406 tx timeout [ 653.987455][T11283] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1221'. [ 654.082424][T11283] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1221'. [ 654.091739][T11283] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1221'. [ 655.861969][T11294] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1225'. [ 655.902454][T11294] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1225'. [ 655.911728][T11294] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1225'. [ 656.671219][T11307] syzkaller0: entered promiscuous mode [ 656.722828][T11307] syzkaller0: entered allmulticast mode [ 656.788956][T11313] syzkaller0: entered promiscuous mode [ 656.818378][T11313] syzkaller0: entered allmulticast mode [ 657.135360][T11321] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1228'. [ 657.724417][T11330] syzkaller0: entered promiscuous mode [ 657.939387][T11330] syzkaller0: entered allmulticast mode [ 658.923339][T11337] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1238'. [ 658.956420][T11345] pim6reg: entered allmulticast mode [ 659.772916][ C0] ------------[ cut here ]------------ [ 659.778466][ C0] WARNING: CPU: 0 PID: 11347 at net/mac80211/tx.c:5033 __ieee80211_beacon_get+0x1141/0x1520 [ 659.788765][ C0] Modules linked in: [ 659.792708][ C0] CPU: 0 PID: 11347 Comm: syz.1.1233 Not tainted syzkaller #0 [ 659.800291][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 659.810391][ C0] RIP: 0010:__ieee80211_beacon_get+0x1141/0x1520 [ 659.816814][ C0] Code: f7 4c 89 ef e8 70 d3 ba f7 45 31 ed 4c 8b bc 24 a0 00 00 00 e9 7f fe ff ff e8 cb f1 7c f7 0f 0b e9 61 f8 ff ff e8 bf f1 7c f7 <0f> 0b e9 85 fb ff ff e8 b3 f1 7c f7 48 c7 c7 00 ae 65 8e 4c 89 e6 [ 659.836542][ C0] RSP: 0018:ffffc90000007a18 EFLAGS: 00010246 [ 659.842650][ C0] RAX: ffffffff8a09f3b1 RBX: dffffc0000000000 RCX: ffff88802ca73c00 [ 659.850670][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 659.858675][ C0] RBP: 0000000000000000 R08: ffff88802ca73c00 R09: 0000000000000003 [ 659.866685][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805b3a2440 [ 659.874726][ C0] R13: ffff888023d98024 R14: ffff88805b3a2930 R15: ffff888023d98000 [ 659.882791][ C0] FS: 00007f85d33b26c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 659.891796][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 659.898430][ C0] CR2: 00007f85d33b1ff8 CR3: 000000007e098000 CR4: 00000000003506f0 [ 659.906417][ C0] Call Trace: [ 659.909828][ C0] [ 659.912741][ C0] ? __ieee80211_beacon_get+0x36/0x1520 [ 659.918417][ C0] ieee80211_beacon_get_tim+0xbf/0x580 [ 659.923896][ C0] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 659.930745][ C0] mac80211_hwsim_beacon_tx+0x3bd/0x770 [ 659.936379][ C0] __iterate_interfaces+0x225/0x4c0 [ 659.941703][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 659.947994][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 659.955261][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 659.961541][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 659.968612][ C0] mac80211_hwsim_beacon+0xbb/0x1b0 [ 659.973874][ C0] ? hw_scan_work+0xf10/0xf10 [ 659.978619][ C0] __hrtimer_run_queues+0x525/0xc10 [ 659.983923][ C0] ? hrtimer_interrupt+0x980/0x980 [ 659.989068][ C0] ? read_tsc+0x9/0x20 [ 659.993188][ C0] hrtimer_run_softirq+0x177/0x290 [ 659.998344][ C0] handle_softirqs+0x27d/0x820 [ 660.003143][ C0] ? read_tsc+0x9/0x20 [ 660.007255][ C0] ? ktime_get+0x24b/0x280 [ 660.011710][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 660.016558][ C0] ? do_softirq+0x1a0/0x1a0 [ 660.021105][ C0] __irq_exit_rcu+0xd3/0x190 [ 660.025827][ C0] ? irq_exit_rcu+0x20/0x20 [ 660.030401][ C0] irq_exit_rcu+0x9/0x20 [ 660.034693][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 660.040493][ C0] [ 660.043437][ C0] [ 660.046525][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 660.052635][ C0] RIP: 0010:lock_is_held_type+0x13e/0x190 [ 660.058426][ C0] Code: 75 40 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 75 46 41 f7 c5 00 02 00 00 74 01 fb 65 48 8b 04 25 28 00 00 00 <48> 3b 44 24 08 75 3c 89 e8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f [ 660.078121][ C0] RSP: 0018:ffffc90004f878b8 EFLAGS: 00000206 [ 660.084225][ C0] RAX: 2d4d32989e41ec00 RBX: ffff88802ca73c00 RCX: 2d4d32989e41ec00 [ 660.092259][ C0] RDX: 0000000000000000 RSI: ffffffff8acadce0 RDI: ffffffff8b1cfa20 [ 660.100281][ C0] RBP: 0000000000000000 R08: ffffc90004f87b17 R09: 0000000000000000 [ 660.108307][ C0] R10: ffffc90004f87ae0 R11: fffff520009f0f63 R12: dffffc0000000000 [ 660.116313][ C0] R13: 0000000000000246 R14: ffffffff8d131e00 R15: 00000000ffffffff [ 660.124338][ C0] __might_resched+0x9f/0x5f0 [ 660.129103][ C0] ? __might_sleep+0xe0/0xe0 [ 660.133748][ C0] ? verify_lock_unused+0x140/0x140 [ 660.139015][ C0] __might_fault+0x71/0x120 [ 660.143590][ C0] _copy_from_user+0x2a/0xe0 [ 660.148276][ C0] ___sys_recvmsg+0x174/0x590 [ 660.153065][ C0] ? __sys_recvmsg+0x2a0/0x2a0 [ 660.157877][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 660.162948][ C0] ? __might_fault+0xc6/0x120 [ 660.167639][ C0] ? __might_fault+0xaa/0x120 [ 660.172357][ C0] do_recvmmsg+0x377/0x810 [ 660.176815][ C0] ? __sys_recvmmsg+0x290/0x290 [ 660.181740][ C0] ? __ia32_sys_get_robust_list+0x110/0x110 [ 660.187747][ C0] __x64_sys_recvmmsg+0x199/0x250 [ 660.192847][ C0] ? do_recvmmsg+0x810/0x810 [ 660.197454][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 660.202701][ C0] do_syscall_64+0x55/0xb0 [ 660.207291][ C0] ? clear_bhb_loop+0x40/0x90 [ 660.212009][ C0] ? clear_bhb_loop+0x40/0x90 [ 660.216702][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 660.222671][ C0] RIP: 0033:0x7f85d259de59 [ 660.227112][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 660.246788][ C0] RSP: 002b:00007f85d33b2028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 660.255252][ C0] RAX: ffffffffffffffda RBX: 00007f85d2826180 RCX: 00007f85d259de59 [ 660.263286][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000004 [ 660.271307][ C0] RBP: 00007f85d2633e6f R08: 0000000000000000 R09: 0000000000000000 [ 660.279326][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 660.287313][ C0] R13: 00007f85d2826218 R14: 00007f85d2826180 R15: 00007fff1f5298d8 [ 660.295369][ C0] [ 660.298440][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 660.305779][ C0] CPU: 0 PID: 11347 Comm: syz.1.1233 Not tainted syzkaller #0 [ 660.313257][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 660.323351][ C0] Call Trace: [ 660.326642][ C0] [ 660.329492][ C0] dump_stack_lvl+0x18c/0x250 [ 660.334192][ C0] ? show_regs_print_info+0x20/0x20 [ 660.339408][ C0] ? load_image+0x420/0x420 [ 660.343967][ C0] panic+0x2ca/0x720 [ 660.347892][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 660.352422][ C0] __warn+0x2e0/0x470 [ 660.356416][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 660.362151][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 660.367886][ C0] report_bug+0x2be/0x4f0 [ 660.372289][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 660.378036][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 660.383817][ C0] ? __ieee80211_beacon_get+0x1143/0x1520 [ 660.389558][ C0] handle_bug+0xcf/0x120 [ 660.393831][ C0] exc_invalid_op+0x1a/0x50 [ 660.398443][ C0] asm_exc_invalid_op+0x1a/0x20 [ 660.403325][ C0] RIP: 0010:__ieee80211_beacon_get+0x1141/0x1520 [ 660.409671][ C0] Code: f7 4c 89 ef e8 70 d3 ba f7 45 31 ed 4c 8b bc 24 a0 00 00 00 e9 7f fe ff ff e8 cb f1 7c f7 0f 0b e9 61 f8 ff ff e8 bf f1 7c f7 <0f> 0b e9 85 fb ff ff e8 b3 f1 7c f7 48 c7 c7 00 ae 65 8e 4c 89 e6 [ 660.429463][ C0] RSP: 0018:ffffc90000007a18 EFLAGS: 00010246 [ 660.435544][ C0] RAX: ffffffff8a09f3b1 RBX: dffffc0000000000 RCX: ffff88802ca73c00 [ 660.443529][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 660.451508][ C0] RBP: 0000000000000000 R08: ffff88802ca73c00 R09: 0000000000000003 [ 660.459490][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805b3a2440 [ 660.467472][ C0] R13: ffff888023d98024 R14: ffff88805b3a2930 R15: ffff888023d98000 [ 660.475480][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 660.481224][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 660.486959][ C0] ? __ieee80211_beacon_get+0x36/0x1520 [ 660.492526][ C0] ieee80211_beacon_get_tim+0xbf/0x580 [ 660.498005][ C0] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 660.504820][ C0] mac80211_hwsim_beacon_tx+0x3bd/0x770 [ 660.510392][ C0] __iterate_interfaces+0x225/0x4c0 [ 660.515615][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 660.521871][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 660.529087][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 660.535340][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 660.542391][ C0] mac80211_hwsim_beacon+0xbb/0x1b0 [ 660.547600][ C0] ? hw_scan_work+0xf10/0xf10 [ 660.552288][ C0] __hrtimer_run_queues+0x525/0xc10 [ 660.557519][ C0] ? hrtimer_interrupt+0x980/0x980 [ 660.562672][ C0] ? read_tsc+0x9/0x20 [ 660.566778][ C0] hrtimer_run_softirq+0x177/0x290 [ 660.571920][ C0] handle_softirqs+0x27d/0x820 [ 660.576697][ C0] ? read_tsc+0x9/0x20 [ 660.580810][ C0] ? ktime_get+0x24b/0x280 [ 660.585252][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 660.590036][ C0] ? do_softirq+0x1a0/0x1a0 [ 660.594560][ C0] __irq_exit_rcu+0xd3/0x190 [ 660.599180][ C0] ? irq_exit_rcu+0x20/0x20 [ 660.603699][ C0] irq_exit_rcu+0x9/0x20 [ 660.607986][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 660.613652][ C0] [ 660.616594][ C0] [ 660.619533][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 660.625532][ C0] RIP: 0010:lock_is_held_type+0x13e/0x190 [ 660.631264][ C0] Code: 75 40 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 75 46 41 f7 c5 00 02 00 00 74 01 fb 65 48 8b 04 25 28 00 00 00 <48> 3b 44 24 08 75 3c 89 e8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f [ 660.650912][ C0] RSP: 0018:ffffc90004f878b8 EFLAGS: 00000206 [ 660.656988][ C0] RAX: 2d4d32989e41ec00 RBX: ffff88802ca73c00 RCX: 2d4d32989e41ec00 [ 660.664969][ C0] RDX: 0000000000000000 RSI: ffffffff8acadce0 RDI: ffffffff8b1cfa20 [ 660.673066][ C0] RBP: 0000000000000000 R08: ffffc90004f87b17 R09: 0000000000000000 [ 660.681046][ C0] R10: ffffc90004f87ae0 R11: fffff520009f0f63 R12: dffffc0000000000 [ 660.689031][ C0] R13: 0000000000000246 R14: ffffffff8d131e00 R15: 00000000ffffffff [ 660.697028][ C0] __might_resched+0x9f/0x5f0 [ 660.701746][ C0] ? __might_sleep+0xe0/0xe0 [ 660.706372][ C0] ? verify_lock_unused+0x140/0x140 [ 660.711586][ C0] __might_fault+0x71/0x120 [ 660.716102][ C0] _copy_from_user+0x2a/0xe0 [ 660.720702][ C0] ___sys_recvmsg+0x174/0x590 [ 660.725415][ C0] ? __sys_recvmsg+0x2a0/0x2a0 [ 660.730198][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 660.735269][ C0] ? __might_fault+0xc6/0x120 [ 660.739960][ C0] ? __might_fault+0xaa/0x120 [ 660.744647][ C0] do_recvmmsg+0x377/0x810 [ 660.749083][ C0] ? __sys_recvmmsg+0x290/0x290 [ 660.753949][ C0] ? __ia32_sys_get_robust_list+0x110/0x110 [ 660.759867][ C0] __x64_sys_recvmmsg+0x199/0x250 [ 660.764903][ C0] ? do_recvmmsg+0x810/0x810 [ 660.769508][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 660.774735][ C0] do_syscall_64+0x55/0xb0 [ 660.779191][ C0] ? clear_bhb_loop+0x40/0x90 [ 660.783874][ C0] ? clear_bhb_loop+0x40/0x90 [ 660.788561][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 660.794495][ C0] RIP: 0033:0x7f85d259de59 [ 660.798922][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 660.818570][ C0] RSP: 002b:00007f85d33b2028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 660.826998][ C0] RAX: ffffffffffffffda RBX: 00007f85d2826180 RCX: 00007f85d259de59 [ 660.834978][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000004 [ 660.842957][ C0] RBP: 00007f85d2633e6f R08: 0000000000000000 R09: 0000000000000000 [ 660.851024][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 660.859005][ C0] R13: 00007f85d2826218 R14: 00007f85d2826180 R15: 00007fff1f5298d8 [ 660.866991][ C0] [ 660.870597][ C0] Kernel Offset: disabled [ 660.874995][ C0] Rebooting in 86400 seconds..