last executing test programs: 14.963549373s ago: executing program 4 (id=381): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000840)=ANY=[], 0x2, 0x1ea, &(0x7f0000000600)="$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") r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000013c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRES16=r2, @ANYRESOCT=r2], 0x38}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) fadvise64(r3, 0xe0ffff, 0x4101, 0x3) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='ext4_request_blocks\x00'}, 0x10) setxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0/file0\x00', 0x0, &(0x7f00000001c0)=ANY=[], 0x386, 0x0) 14.823806595s ago: executing program 4 (id=382): openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = openat$sysfs(0xffffff9c, 0x0, 0x440000, 0x20) r1 = socket$rxrpc(0x21, 0x2, 0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) io_setup(0x3, &(0x7f0000000140)=0x0) io_submit(r2, 0x0, &(0x7f0000000a40)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0x8000f28, 0x0) splice(r5, 0x0, r4, 0x0, 0x7f, 0xe) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x14}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="60000000020601046c0001000000000000000000050005000a000000050001000600000005000400000000000900020073797a300000000014000300686173683a69702c706f72742c697000140007800800084000002f5408000640"], 0x60}}, 0x0) ioctl$SG_IO(r8, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x40002, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) write(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) r10 = memfd_create(&(0x7f0000000540)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0x0) r11 = fcntl$dupfd(r10, 0x0, r10) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x10, r11, 0x0) futex(&(0x7f0000000000), 0x8c, 0x1, 0x0, 0x0, 0x0) r12 = socket$inet6_sctp(0xa, 0x4, 0x84) dup(r12) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f0000000080)='\\@-\x00', 0x4) ioctl$SOUND_MIXER_READ_RECSRC(r0, 0x80044dff, &(0x7f00000000c0)) 10.263002591s ago: executing program 1 (id=393): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) r3 = open(&(0x7f0000000080)='./file1\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x15) openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4008550d, &(0x7f0000001440)) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 8.518676549s ago: executing program 1 (id=397): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000600)={'wg0\x00'}) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x20}}, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[], [], 0x2c}) r2 = socket$inet6(0xa, 0x3, 0x6) sendmmsg$inet6(r2, &(0x7f0000001fc0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c, 0x0, 0x0, 0x0, 0x18}}], 0x1, 0x0) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchmodat(r3, &(0x7f00000000c0)='./file1\x00', 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000000)={'veth1_virt_wifi\x00', {0x2, 0x4e23, @empty=0xa00}}) r5 = memfd_create(&(0x7f0000000280)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xb6\a\x17\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93', 0x6) fallocate(r5, 0x0, 0x0, 0x400) 8.518424959s ago: executing program 4 (id=398): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x400c4808, 0x0) syz_mount_image$hfs(&(0x7f0000000140), &(0x7f0000000080)='./file1\x00', 0xc898, &(0x7f0000002700)=ANY=[], 0x1, 0x285, &(0x7f00000002c0)="$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") socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1e, 0x2f, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000800000000000000000000001811", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000140000fbb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x275a, 0x0) socket$inet6(0xa, 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r6, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) 8.339715834s ago: executing program 1 (id=399): r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) open_by_handle_at(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000400)={&(0x7f0000000080)=@rc={0x1f, @any, 0xa}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000240)="c9d3c9d6979702f0ff977f20bef47894e68b06ed4437c82ddcc3006b048c55a7b06bf10fa3b5db6ed282915b2b6587a47cd48d193af9c825cb837f8975462996088793ff", 0x44}, {&(0x7f00000002c0)="554e4ad24ab3d5191935c2373cff14fe362deb0240450dd8c67c2bc8b4e42b85bf85813cbe2e20b3589ce4c03b5c8a8c3471f399d6c1ee9dc4751fe5c9e3247d27e1e4fc45cf051ea2690b8fd76c87259664e42f135fd4f28f9b6a855aebe7bf26ab78d97b6158d1fda458af9c4baadb4cd05fd8b82ec6ce7e51e9bed4d3a492693b2665dc6ce14929682a5fafb82231f25dab98b7cbbbfb4aaf16fe631105be64403f90fc3b4135", 0xa8}, {&(0x7f0000000380)="55d8848b654354bb92f5777677c928a21355d8a134d97d3e4d65c18366350e5f40f15a6be0d2e9968168eea3937fe462b021d0e9ea730b7e642f6812a95492cffe", 0x41}, {&(0x7f0000000000)="3f084b9def6b82ddf775905c12f2be448b", 0x11}], 0x4}, 0x8801) socket$alg(0x26, 0x5, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat(r0, &(0x7f0000000440)='./file0\x00', 0x200000, 0x80) syz_open_procfs(0xffffffffffffffff, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0xf84}, 0x1c) syz_emit_ethernet(0x42, &(0x7f0000000500)={@local, @empty, @val, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr, @multicast1}, @payload_conn={{{0x18, 0x0, 0x0, 0x0, 0x0, 0x6}}}}}}}, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0xfffffffe, 0x2b}) 7.886211742s ago: executing program 3 (id=400): syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) userfaultfd(0x801) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000000)=0x1, 0xfef2) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000380)={'#! ', '', [{0x20, '^sz\xd1=\xc1\xe4\xe6\xfcf\xbf\x00\xcf\x03\x84\xd7\xb6\x9d\xa0\x13\x1bc\x1e<\x89\xb665->\xdb\x8eh2%$>\xce#w= \xb0\x89\xfe\xb6\x1e%\xcf*\xfd\xff\x03w\x1d\x17\x83>WW\xeby\xee<\x9b\x1f\x1a\xfb>@h\xb7u\xcd\xae\xc9\x8c\x892\xffZ\xa2o\xf4\xc6\x97s4,\xd1\xab|5\xd1\xcb1\xc9\xf76,\xc1\xf8\xba\xbf\x8e;\xb5\x9e\x81\x94\xd7E\xf2\x00\xad<\xb0c\x8eL\x8b\x9e\xb7\xfbh?\xbf\x98\xc1\xb2(\xd8\xb4\xd8\xad\x03\xba\xe1\x9b\x8a1j\x87\xafL\xfb\xe3\xba=/\xc0\xa0 i\xf5\xa5\xce\x10+\xd6\x0e\x01\b\x9e8\x8cAH\xcf}\x19\xf8\xeeo2p\xa1\xb6]\x10\xd4\t.U\x9e\xf9\bO]\xc1\xbeF4\x0e6.\x88fQ\xf1\x80\x99P\xdd\t=\xe8MS\xcb\x1b\x90\x99l\xe9\x94\xa3<\xea\x92\xe3'}]}, 0xe2) 6.709783602s ago: executing program 2 (id=403): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) 6.709282672s ago: executing program 3 (id=404): syz_emit_ethernet(0x2e, &(0x7f0000000480)={@local, @empty, @void, {@ipv4={0x800, @igmp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2, 0x0, @remote, @rand_addr=0x64010102, {[@timestamp_addr={0x44, 0x4, 0xc3, 0x1, 0xf}]}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, 0x0) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000000)=0x1, 0xfef2) connect$inet(r7, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r8, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r8, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x9, &(0x7f0000000040), 0x4) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x9, &(0x7f0000000040), 0x4) 5.693077778s ago: executing program 0 (id=405): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000840)=ANY=[], 0x2, 0x1ea, &(0x7f0000000600)="$eJzsmb2LE0EYxp+Z3eydhyg2FjYWHniit9ndqFxzxQmWgnCKWgZvDdFNIskKSUAw2NhYWgi2NpYWFlYW/gW2WqggWJjSThiZj2wmm02IHxjR9weZeebrnZmX5FnYgCCI/5aPH76+f3hu69IpAPuxjhXT/9nRtTg4Of/d4zsnH22ff/L87dPXzQN3X+bjMblGLL6/B+DVjoMUzDU7Tqxe1xW3NC6D44TRV8Dga/lNKHQjBsM1M+empVv7jEhi/3or2btRT+JAFqEsIllU7P3loYYDhj0Aq+p0QjBrvNPr36omSdzOi5IY7TM19KNiXv7U+XY4tjHKnhAyWVcf3B/ItskNAvAsfyE4QqMrYNg1egsr8H1/nBLr/kfccXxnkfsvVzxT4tDmn9pUf0GBv+Hu/7Ao/ZY4LN8jf9BZz+HhyAPtOZ+WfvefF8q4AEwNvVlLkgu/ENkrSFQmxv4knf245U8u3Mw/ymnjdrnT62/WG9VaXIubUVQ5G5wOgjNRWRmRLuf436rypzUrfmnGXI956FbTtB12gbQdZu1Il5bj7r5ofVFruPI/jo1jOgYzz6zsQZmDmQ9XtVQbTvHMezPvRBAEQRAEQRAEQRAEQRAEUcxRMOh/wgQzL0SLiC6qN5TfAwAA//9KnWb+") r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000013c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYRESOCT=r2], 0x38}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) fadvise64(r3, 0xe0ffff, 0x4101, 0x3) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='ext4_request_blocks\x00'}, 0x10) setxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0/file0\x00', 0x0, &(0x7f00000001c0)=ANY=[], 0x386, 0x0) 5.692637638s ago: executing program 2 (id=406): syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r0, 0x0, 0x0) 5.535913281s ago: executing program 2 (id=407): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) r3 = open(&(0x7f0000000080)='./file1\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x15) openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4008550d, &(0x7f0000001440)) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 5.535551531s ago: executing program 0 (id=408): openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = openat$sysfs(0xffffff9c, 0x0, 0x440000, 0x20) r1 = socket$rxrpc(0x21, 0x2, 0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) io_setup(0x3, &(0x7f0000000140)=0x0) io_submit(r2, 0x0, &(0x7f0000000a40)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0x8000f28, 0x0) splice(r5, 0x0, r4, 0x0, 0x7f, 0xe) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x14}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="60000000020601046c0001000000000000000000050005000a000000050001000600000005000400000000000900020073797a300000000014000300686173683a69702c706f72742c697000140007800800084000002f5408000640"], 0x60}}, 0x0) ioctl$SG_IO(r8, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x40002, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) write(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) r10 = memfd_create(&(0x7f0000000540)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0x0) r11 = fcntl$dupfd(r10, 0x0, r10) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x10, r11, 0x0) futex(&(0x7f0000000000), 0x8c, 0x1, 0x0, 0x0, 0x0) r12 = socket$inet6_sctp(0xa, 0x4, 0x84) dup(r12) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f0000000080)='\\@-\x00', 0x4) ioctl$SOUND_MIXER_READ_RECSRC(r0, 0x80044dff, &(0x7f00000000c0)) 5.471031446s ago: executing program 3 (id=409): open(&(0x7f0000000300)='./bus\x00', 0x169042, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r1 = dup(r0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x12, 0x0, 0x0, 0x0, 0x0}) r2 = socket$inet6(0xa, 0x1, 0x0) syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB], 0x1, 0xa1d, &(0x7f0000001540)="$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") ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000002c0)={0x0, 0x1, {0x0, @usage, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @usage, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xffffffff]}, {0x10000, @struct, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct, 0x0, 0x0, [0x8000000000000001]}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) listxattr(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1008002, &(0x7f0000000e00)={[{@nomblk_io_submit}, {@delalloc}, {@nobh}, {@debug}, {@inode_readahead_blks}, {@jqfmt_vfsold}, {@nomblk_io_submit}, {@data_err_abort}]}, 0x1, 0x5f4, &(0x7f0000001f80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000280), 0xfea7) (fail_nth: 2) r7 = dup(r2) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r8}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x0, 0x3, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "49df4ffe5d9c533da378c3ec111d08000000000000009d73660f5d9459f47415f6e029b01d99291517d8a400ed5a20356ce10b0602fe218f3dea0baeaa030000008adda2ddfc936ea8b049d100"}, 0xd8) sendto$inet6(r2, 0x0, 0x0, 0x20040008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 5.456550768s ago: executing program 4 (id=410): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) userfaultfd(0x801) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0xfef2) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000380)={'#! ', '', [{0x20, '^sz\xd1=\xc1\xe4\xe6\xfcf\xbf\x00\xcf\x03\x84\xd7\xb6\x9d\xa0\x13\x1bc\x1e<\x89\xb665->\xdb\x8eh2%$>\xce#w= \xb0\x89\xfe\xb6\x1e%\xcf*\xfd\xff\x03w\x1d\x17\x83>WW\xeby\xee<\x9b\x1f\x1a\xfb>@h\xb7u\xcd\xae\xc9\x8c\x892\xffZ\xa2o\xf4\xc6\x97s4,\xd1\xab|5\xd1\xcb1\xc9\xf76,\xc1\xf8\xba\xbf\x8e;\xb5\x9e\x81\x94\xd7E\xf2\x00\xad<\xb0c\x8eL\x8b\x9e\xb7\xfbh?\xbf\x98\xc1\xb2(\xd8\xb4\xd8\xad\x03\xba\xe1\x9b\x8a1j\x87\xafL\xfb\xe3\xba=/\xc0\xa0 i\xf5\xa5\xce\x10+\xd6\x0e\x01\b\x9e8\x8cAH\xcf}\x19\xf8\xeeo2p\xa1\xb6]\x10\xd4\t.U\x9e\xf9\bO]\xc1\xbeF4\x0e6.\x88fQ\xf1\x80\x99P\xdd\t=\xe8MS\xcb\x1b\x90\x99l\xe9\x94\xa3<\xea\x92\xe3'}]}, 0xe2) 5.387900684s ago: executing program 1 (id=411): r0 = io_uring_setup(0x5831, &(0x7f0000000000)) syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000040)="09000000010000", 0x7) r2 = accept4(r1, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) sendmsg$NFT_BATCH(r3, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c25", @ANYRESOCT=r3, @ANYRESDEC=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$squashfs(&(0x7f00000006c0), &(0x7f0000000040)='./file0\x00', 0x2887c78, &(0x7f0000000780)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRESHEX, @ANYRESDEC, @ANYRESHEX=r5, @ANYRESDEC, @ANYRESHEX=r5, @ANYRESDEC, @ANYRES32=0x0], 0x1, 0x1ef, &(0x7f0000000b80)="$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") openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000200), 0x802, 0x0) write$UHID_CREATE(r6, &(0x7f0000000480)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000400)=""/32, 0x20, 0x0, 0x4ad}}, 0x120) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="1201000000000040341a02080000000000010902"], 0x0) r7 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r7, r8, 0x80000) ioctl$int_in(r8, 0x73, 0x0) r9 = socket(0x23, 0x5, 0x0) accept4$unix(r9, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 4.439937974s ago: executing program 4 (id=412): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000ac0)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[], 0x1, 0x5511, &(0x7f0000015b80)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24000800) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x100000, &(0x7f0000000200)=ANY=[], 0x1, 0x0, 0x0) ptrace$ARCH_GET_FS(0x1e, r0, &(0x7f0000000340), 0x1003) open(0x0, 0x0, 0x54) r3 = open(&(0x7f0000000380)='./file2\x00', 0x14507e, 0x0) pwrite64(r3, &(0x7f0000000000)='+', 0xc0014, 0x7003f00) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) mkdir(0x0, 0x0) 4.282808727s ago: executing program 3 (id=413): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f00000003c0)={@local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00ed00", 0x10, 0x3a, 0xff, @remote={0xfe, 0xc0}, @mcast2, {[], @ndisc_ra}}}}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYRESOCT=r1, @ANYRES32=r1, @ANYRES8=r3], 0x398}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) 3.265200083s ago: executing program 3 (id=414): syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./file0\x00', 0x200800, &(0x7f0000001340)={[{@lazytime}, {@uqnoenforce}, {@swalloc}, {@filestreams}, {@grpquota}, {@allocsize={'allocsize', 0x3d, [0x30, 0x39, 0x6d]}}, {@gquota}], [{@flag='nomand'}]}, 0x4, 0x9606, &(0x7f0000012cc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x541002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000200), 0xfea7) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) fallocate(r2, 0x14, 0x8, 0x1000f4) copy_file_range(r1, &(0x7f00000001c0), r0, 0x0, 0xffffffffa003e45b, 0x700000000000000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.numa_stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000001c0), 0x208e24b) 3.264923573s ago: executing program 4 (id=415): syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) userfaultfd(0x801) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000000)=0x1, 0xfef2) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000380)={'#! ', '', [{0x20, '^sz\xd1=\xc1\xe4\xe6\xfcf\xbf\x00\xcf\x03\x84\xd7\xb6\x9d\xa0\x13\x1bc\x1e<\x89\xb665->\xdb\x8eh2%$>\xce#w= \xb0\x89\xfe\xb6\x1e%\xcf*\xfd\xff\x03w\x1d\x17\x83>WW\xeby\xee<\x9b\x1f\x1a\xfb>@h\xb7u\xcd\xae\xc9\x8c\x892\xffZ\xa2o\xf4\xc6\x97s4,\xd1\xab|5\xd1\xcb1\xc9\xf76,\xc1\xf8\xba\xbf\x8e;\xb5\x9e\x81\x94\xd7E\xf2\x00\xad<\xb0c\x8eL\x8b\x9e\xb7\xfbh?\xbf\x98\xc1\xb2(\xd8\xb4\xd8\xad\x03\xba\xe1\x9b\x8a1j\x87\xafL\xfb\xe3\xba=/\xc0\xa0 i\xf5\xa5\xce\x10+\xd6\x0e\x01\b\x9e8\x8cAH\xcf}\x19\xf8\xeeo2p\xa1\xb6]\x10\xd4\t.U\x9e\xf9\bO]\xc1\xbeF4\x0e6.\x88fQ\xf1\x80\x99P\xdd\t=\xe8MS\xcb\x1b\x90\x99l\xe9\x94\xa3<\xea\x92\xe3'}]}, 0xe2) 3.168685621s ago: executing program 0 (id=416): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f00000006c0)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, 0x0, 0x0) 2.457280471s ago: executing program 1 (id=417): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) 2.134288689s ago: executing program 0 (id=418): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000840)=ANY=[], 0x2, 0x1ea, &(0x7f0000000600)="$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") r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000013c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYRESOCT=r2], 0x38}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) fadvise64(r3, 0xe0ffff, 0x4101, 0x3) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='ext4_request_blocks\x00'}, 0x10) setxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0/file0\x00', 0x0, &(0x7f00000001c0)=ANY=[], 0x386, 0x0) 2.00390192s ago: executing program 0 (id=419): syz_emit_ethernet(0x2e, &(0x7f0000000480)={@local, @empty, @void, {@ipv4={0x800, @igmp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2, 0x0, @remote, @rand_addr=0x64010102, {[@timestamp_addr={0x44, 0x4, 0xc3, 0x1, 0xf}]}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, 0x0) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000000)=0x1, 0xfef2) connect$inet(r7, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000380), 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r8, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x9, &(0x7f0000000040), 0x4) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x9, &(0x7f0000000040), 0x4) 2.00353853s ago: executing program 1 (id=420): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x400c4808, 0x0) syz_mount_image$hfs(&(0x7f0000000140), &(0x7f0000000080)='./file1\x00', 0xc898, &(0x7f0000002700)=ANY=[], 0x1, 0x285, &(0x7f00000002c0)="$eJzs3U9rE0EYx/HfzKY12lLXtiKIp2rBU2nrRQQRpO/AiydRmxSKoYJWUC9Wz8UX4N234IvwJJ4Fb558AbmtzOzEbNLdTZrQbtJ+P9CQP/PsPNPdzcyzIUQAzq2HW7+/3vnj/owUKZJ0T7KS6lJN0lVdq7/Z29/dbzUbZRuKfIT7M0ojzZE223vNvFAX5yOC2D2qaT77XH4QxlX/VXUGmAQmSZIk53krXQhnp3tvODOn3UHVCVTMtNXWWy1UnQcAoFomnd9tmOfnw/rdWmk1TPu98/+UT6DtqhOoWGb+91VWYtz+vexf6tZ7voRzr9tOlThKX7NKj6yoJ4FBVaXPxV7c2W0117ZfthpWn/QgyDRb9reN9NDtyGb78eimV3Jq0xLHG/uHzDJ6zo9hxo1hsyD/pfF79GaGbWi+mx/miYn1RY3/679aYtxu8nsq7ttTaf7rxVv0o4zTVgWjvOI7uR56CEpHGakvjazZsM2eCwTxoDx91GJfVDq6jQFRS7lRmwOilvujukdzceRJM5/NY7Oiv/qmrcz637r/9qqGOTNdG98yHBml46n5lrGfT8JZd3Ajt6UddUQYwaGe664WXr97/+JZq9V8xZ1zdKdzEExKPqd053Dt/o4btn9GYYl7op26TioZcmfeGX07Fb0v4VR1d/oxA8s+m8E0sf7yv6//MvXKul+suZu4ZJ2e95FBj8wWNwpqg0V/e6m4guth/KWHueIKbtia6+Zt6dYwPabikOcZYbb0U0+5/g8AAAAAAAAAAAAAAAAAADBtxvumQRJ1v95QV1HjqscIAAAAAAAAAAAAAAAAAAAAAMC0m7jf/32k9NGg3/8FMLZ/AQAA//8HSnYk") socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1e, 0x2f, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000800000000000000000000001811", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000140000fbb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x275a, 0x0) socket$inet6(0xa, 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r6, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) 1.866068942s ago: executing program 2 (id=421): syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0) 1.773460879s ago: executing program 2 (id=422): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) userfaultfd(0x801) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0xfef2) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000380)={'#! ', '', [{0x20, '^sz\xd1=\xc1\xe4\xe6\xfcf\xbf\x00\xcf\x03\x84\xd7\xb6\x9d\xa0\x13\x1bc\x1e<\x89\xb665->\xdb\x8eh2%$>\xce#w= \xb0\x89\xfe\xb6\x1e%\xcf*\xfd\xff\x03w\x1d\x17\x83>WW\xeby\xee<\x9b\x1f\x1a\xfb>@h\xb7u\xcd\xae\xc9\x8c\x892\xffZ\xa2o\xf4\xc6\x97s4,\xd1\xab|5\xd1\xcb1\xc9\xf76,\xc1\xf8\xba\xbf\x8e;\xb5\x9e\x81\x94\xd7E\xf2\x00\xad<\xb0c\x8eL\x8b\x9e\xb7\xfbh?\xbf\x98\xc1\xb2(\xd8\xb4\xd8\xad\x03\xba\xe1\x9b\x8a1j\x87\xafL\xfb\xe3\xba=/\xc0\xa0 i\xf5\xa5\xce\x10+\xd6\x0e\x01\b\x9e8\x8cAH\xcf}\x19\xf8\xeeo2p\xa1\xb6]\x10\xd4\t.U\x9e\xf9\bO]\xc1\xbeF4\x0e6.\x88fQ\xf1\x80\x99P\xdd\t=\xe8MS\xcb\x1b\x90\x99l\xe9\x94\xa3<\xea\x92\xe3'}]}, 0xe2) 884.880535ms ago: executing program 0 (id=423): open(&(0x7f0000000300)='./bus\x00', 0x169042, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r1 = dup(r0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x12, 0x0, 0x0, 0x0, 0x0}) r2 = socket$inet6(0xa, 0x1, 0x0) syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB], 0x1, 0xa1d, &(0x7f0000001540)="$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") ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000002c0)={0x0, 0x1, {0x0, @usage, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @usage, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xffffffff]}, {0x10000, @struct, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct, 0x0, 0x0, [0x8000000000000001]}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) listxattr(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1008002, &(0x7f0000000e00)={[{@nomblk_io_submit}, {@delalloc}, {@nobh}, {@debug}, {@inode_readahead_blks}, {@jqfmt_vfsold}, {@nomblk_io_submit}, {@data_err_abort}]}, 0x1, 0x5f4, &(0x7f0000001f80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000280), 0xfea7) r7 = dup(r2) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r8}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x0, 0x3, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "49df4ffe5d9c533da378c3ec111d08000000000000009d73660f5d9459f47415f6e029b01d99291517d8a400ed5a20356ce10b0602fe218f3dea0baeaa030000008adda2ddfc936ea8b049d100"}, 0xd8) sendto$inet6(r2, 0x0, 0x0, 0x20040008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 884.491595ms ago: executing program 3 (id=424): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x20}, [@RTA_DST={0x8, 0x1, @remote}, @RTA_IIF={0x8}]}, 0x2c}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000010000850000001700000085000000050000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc0, &(0x7f0000002380)=""/192, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009e258020200e0101077401020301090212000100000000090440"], 0x0) 0s ago: executing program 2 (id=425): syz_open_dev$video4linux(&(0x7f00000001c0), 0x3, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000000)={[{@test_dummy_encryption}, {@stripe={'stripe', 0x3d, 0x10000}}, {@dioread_nolock}]}, 0x1, 0x3f0, &(0x7f00000008c0)="$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") (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="40573ae4679603c3000000040000000018210000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xe5, &(0x7f0000000000)=""/229, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10021) (async) r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="090000000000000000000400"], 0x14}, 0x1, 0x0, 0x0, 0x8845}, 0x20000000) (async) ioctl$VHOST_VDPA_GET_STATUS(0xffffffffffffffff, 0x8001af71, 0x0) syz_read_part_table(0x1058, &(0x7f0000001080)="$eJzsz7FRxEAMhtF/l731XUQB9EEn7oIiTEwnNEIbVEAKmRh7CFwBELyXfCPNKFD4U1vGy23J5aHnmtT9276cz2PPU/usqpo9yXtLSzKuOXrWz8NILj89fNXH43q3n1S7JVlm5paeqmTJ+vpLbwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAv/YdAAD//2VvEiY=") (async) close(0xffffffffffffffff) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCSMAXCID(r4, 0x40047451, &(0x7f0000000200)) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000100)=0x2000004) (async) pwritev(r4, &(0x7f0000000540)=[{&(0x7f00000002c0)="00214717a70700000000030600710a069d317ebb906c", 0xa1}], 0x1, 0x0, 0x0) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002a80)=ANY=[@ANYBLOB="b702000004000000bfa300000000000007030000407effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca7ebfcd0cd000071d3d09a6175037958e271b60dedf8937f02008b6d83923dd29c034055d47dafe6c8dc3d5d78c07f34e4d5b3185b310efd4989147a00000000f110026e6d2ef831ab7ea0c34f17e3adeef3bb622003b538dfd8e012e71f6420b90adddff61b5b0a341a2d7cbdb90000bdb2ca76050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132658555cf476619f28d9961b626c57c2691208171656d60a17e3c1c4b751ca532e6ea09c346df3d7cb4ebd31a08b32808980200000000000000334d83239d0c2e9ff10ff2d27080e71113610e10c358e8327e7050b6c860dac12233f9a1fb9c2aec61ce63a38d316ef49b66d6e42fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a5f3d74ca891c4594e8a4399e01eadd3964663e88535c133f7130856f75643619f567d2e24f29e5dad9326edb697a6ea0182babc18cae2ed4b4390af9a9ceefd07e002cab5ebfcaad34732181feb215139f15eafddcb0c7cbe31fbae7c34d5ac5e7e64c21add9191eadd6e1795ad6a0f7f8cd3fccbdc3dec04b25dfc17975238345d4f71af35910b158e56657b7218baaa7cbf781c0a99bd50499ccff0f000000000000c7beba3da8223fe5308e4e2833baace04f4087c4f0da0d9a88f9dbb593ddeb3f0932a4d0175b889b8eccf707882042e716df9b57b290c661d4e85031086e97bcc5ca0e221a0e34323c129102b7b7a643e82e88a1940b3c02ed9c92d6f64b1282dc519b00159830d7617001154c46bd3ca96318c570f0721fc7aa2a58090000000000000094f22cdf550ef091a78098534f0d973058594000000000000000c12346e47ad97f4ead7cf754a52e4b2d0f22d428bd705414888700a30e2366c6a06b3367a389ca3905689a1f3db9c24db65c1e0001581d573dab18fd0600885f1ea8f2fd299fc3cdafda323e9c7080397bc49d70c060d57bc88fbe09baa058b040360ab9261503d2f363fb099408885afc2bf9a4f8c3506b669e889f5e4be1b8e0d634ebc1057b7e98186fc5141bd670dba6f43279f73db9dec75070cd9ab0fd969169ef6d2857b6bf955012cf7fe50d133da86c0477e42b98a6cc999dc21c3ef408e633dfa35f14d6e734837d365e63845f3c1092f8dd4fc7ea0000af3904ea0f3698cd9492794b8212a350d726bff873339c4cad4ead1348474250eda2c8067ab730c1d82a5687f2ed690000522a0b7426000000000000000000000000000000000000000093fc7a82b98f99d9dedf7ba17f5f0b6d15e552fbd21f7eecff10243a43af03eea84c4304a5d3f93c3fc74c00000000000043e1ed82b9aa0ae92a499984a009000000937523f5292d12659906005cde64f903c3415c458a2b32c2318f0858f19c6def80e1481e8e1c0098fc3f38b7a57211adb15d824cfdcf229628c0de49860e44286fe0e257cfa4ce50f3d10763d442824414a73c06837fe08de62f8710ca977960b74d0000ce73da6022a8671d1a3575b4e18c28c73203bf134686dd65808452cb6b76fcb134252c78de9b240de7b4cd015a77f76bb6470c05fc980b3d8f3f964f432a4bf6cddd6222c2da006b6fdb9c8468ae1d986a893b9519444d16a6dfa92c04331a6698507048fab5ae402acd05fe621f22712dfd09004770b4278fa14547d8ce3c21188e5e4e2baacd98e8e451d6aaaf090000006ed1d9018000008dd952595d78e9583bf4ea5de36099e3cd32941a815e3f3ceafe3065b9594fdcb24ebb6eddb9e87c9ecec7a42c0000abe1c6ea55887dfa18d0aea1b6eca5a883702b0bf3aefcb225895db90e237157a34e9f447237ea5b391bddd1290f7ce987a0e36b8e71b1779bbe95ffa9c3c0f6ba66e4d48e75253e3d633811e4b3220616aafbe7a3a18375ae593eb58fd500426286472466823cb8e1800aaaa0d9463c0c4ea5541a55df6eeffec0b66482228816cdfccb98374c644eea45de7867a0efbad0ab2bc33b350440a90b791b2b33f74a112a3b91b40bed8db2df8633207f8387e04ca52ab0f3f7b058b13523b896800b992972d9609551c27a5916ea16069c5b0300000026d3c27e7945b29996e5cefbc9f857bc1332d200194f658b930780603134ae6b7f5092772bd5d880dbe21b790c475b14b7fe4fe002dffd651faa79bb0cee0cdac2bc3218f2ddaa6f7ba04b696a30d313bed30ba8f35569a9b07ee7308da09c01a4b827aa1784d927aca9b8540534c5c49a0300cfbc2213fc1572b0204dd456b11a454d1f3f14179974aae624ea59500f5e048b2780666de81a040663c57f49af25be909984ae4e679107a14bbb24851f6199eaf9a1b81f33426f86b4b941c08dfe2bc8ec246ec1aae120c42405e428923f3a83d9ba5c373f5e8a54120b451e2806370f1ed60c9fd5d9af4d16cb0f413c324da52d4bd2e01d3ac2d578d72e2d63322dfc9245ce3e3a097fb82f4e3b61a55594616020f72f1c55ee3d325c7496a7c2f10cfeae16ae436751227378f0b1ee78bd33c50206700dd90b96a330f92bff736c83ca53e7f02b734d1a9292337e2be3896f7e7f244bfab4946c7042e88206f641eafcc5b4ba7a7880533cde00995d1caf6936f356ecf07a0084e7adc2dc12417997b03087c7b3b44b06f6158a2a18ce0e56ffbeb22f40521dd9972583d413098aa80db98ef324a2bfb6961c07b47521973cf0bb6f5530f6216b047b35d6e06b72b22b29de42bb1bc8ce0a0e3500000000000000000000000000b92eb197e4149627920000008000000000801792756f90b37f0858efc387f559203f314a4b0ed750fa72e5948ac3fe5921c14ef578d420e7b2a9e2f87f7b44949fe14c00000000000f47030c09f62d444b4981db81799776eeb4448278de519705fa8b56779bc8cc927b308c8e50815c4c3b27487996c09121caf47f76158362c74904f89cbc588aae84567a83571ff72bb65c082b5a8dedc05a3167d84205d5af86553c21e1f023a51c0e179fccfbc201982ebddcaa45613899d19082453b180ca0c525b8d3cfaf7d0bcddeb5d5c7166038f276a92941393ba5e51f77172822bd903d9f8b436656771774ed88daab0d0cfdd1bffc30ab566e1a4cb3ad66d830e10f7c1de13218aea21e7def6132e4f8acf03438b1d01ccbe27e5be5b46304c2b7c1ad48b01c20024032e9b3bba7d6ceca38d3e96db049b92fc32ee34fe7b8419c8fbf03d61c159dc5864e030000a2c55b614d622b8de966c97e1940026f96db3c78ca18c9f08d1c47edf1a4d7298109f31b6078711ee72eacab61213bf50000000000e1000000000000000000001217887d0452aa6d26e4614d511710abeec84b78c027c160ba3759fa55249b832ce4dfb91122193d514ed992c07f8cd6d897b314907e15642da228dbc03429e6e0e7ac118ed351c3b0c44bf5d8b58be5732f29eed98d5b3688d80f7c66f8333aa8cc2ec5b5e305b3dee2562d415b4b9ed530797f55f9fe8510423409629a09000000000000009a35d9ca93e4b4591679547b8de8af1782451f7b8e1de508f1e9e525210d62bb850f8035040ad9e57abe58797515b737bfb21d35ac560f99dbd18dad5e6345a464955e8141d75b6177e4fa176a020b0000000000006e76f0294fee7d19a0f327f8796d77b6e24b8df4bb438b527d10e657d49b844198ea9f93c4fd6fd2daa9bd87fd1e02ecc8075dca1280c201043257e9bd3c9a7aa150eb1711632b76d4dc053e64bfcfd057980136d6e9faca03b24fa300ef90bfe4ad364256937796f941c2fead94785f48777941f0cd3dba54ab6a5d5e91e90ac9ae994c3d4108b2fe7eca9413ac9bc138c74800487eb19c48db3f79be964808d409b5e36fc7fdd40080361427b6b9c118e5c9a0a1d5ca24886eb8a78796540635ac3530b9025d8bad0533a7f81b2188ec75a5fc9302e3815bdcc9ab11201ef940569c995c21eeaefe2e8fc02e0433dc7371d1f72124bad23e554c30fdd7cd8c2da1e8706417da9ad8916551a1182fac08603dfc2f2279ba161c13984cd753b54a85e6f3018c7d48c4b6c2f6910975e9ff51318b09fa13e2d38ce013aab41524c298c3719e31bcb1f102eaeee69a19e006bcdb1acc2664efa949a1a07bb3d7848d5e1381fbe63c522053a3bb32eb6345e10f7a12bf84e0e196a00833f464dd2f6547f14ebf137fce33efeb813211f31ff24d7dbb00f2574ccda59b3ea068fc2a18c37ee579f5a9ecc47da73684bcadd209ae5bbb7147df745ae7a4e446ca16d027d8d0adcdb54182c9de8053fc8b1b9d19c16c53d34db6e26f6a88d449f6abf378ca2e577e206a758a3d46e45e7949c5b5069103009693a798a330a1ccb32d49772e80862df36dc0156b3f72cd85083f8e96ca1697457ec722766bd46ee2424975a38149bd57e5c0eb4087fc243e7e51b0aca9f0ab0668d7f2ee9ad9f267d8804417aa7e36a64d489bb84a1483fd3c3ecb024060002858cbb1f7708f5b41fca2fee7c03b1f862ce88dc313d913e041dd7583a1ac41c466757c5dd07ea2c5d62a000b84b11308b6636b735b3c654cbc0000000000000019a4e9a9c2cbc906f97fd6eb00b18d09a5df123ebbdb2827b43aed6a29e9942e402c1ae52e9cb98f3019d364fc21ea02023db91ced3c2f06550cef8a79ed39091e4776001187d0ab2f82478431d36470cc008d745ce8fd64c9aa64da230bb080945a557081b767beb75b1ea856a55c71b8fda672289aa6085100d48ac8039f19fec3acbcc5944a4e6fd44af8f10110db730a8d0d41b4ea36f9510f843a471963bd4621b9e43f08d341bb69df430ac4bf5c06c6398c1b28bdd3f4c2353c330d8457cf728294e8ea1861ce50c367498945285f73c94d91210652eb4f3077cab6be2a3512eddbcb63d091d69fb1b26c8ada9a99d747d38ef5042053299b8e95decc637a022a49664742606cfdb2a3258498a6a0a82369d70177433e52b851ac396163ca09e6c22ad796a565cf23d87ae9be7235553aa6b8ab74842d3d4ba738b3fa997f079d225335f2af55644478e514aed8ba202805ad458d9ae6ab8d156f11f3cfe7def690f2bbbb463063664625223d23386540e0db96d8eb1755ad49ae817683de97a6dd32d584391302e65594b12bb2e6630217401031c8a1b964ca32f735421bbf64c9f1f9329e5cfda139ea79619e1d00a9a3ab49993362f30d191aa3387101feaa3e326190804eae2114437f8f4b27480900dd6511844a643886588fbdee7f8863a8dfdd75a9e128c6c15166a5f92d3c2d4952e5d07c59bfce0724a02600094c3369be3024edf451ff76a59855fd90353a0de907834bb77a059c56e92eed2f1415b3d8178453c7aecd8fbd161e2ffd66bcf2be175e45184f06bafd1c1c4fd7006a6c90d8afd126f1c51ee0f724ffbbed25a286c95d17c8b4297f8bba8efd565ecb157f0be244fb9657f737354b20e3a5012abb36052eec7a4fe9bc5b5283581b208d90d28d78f1c5422c3bcad67278e8bb88d7e6ccf72dd61319b44aa617d667000000000000a5edbd3e8605225681090853fc66a20e30fb9938e5886ae748236f5e071278763e070b2b75ce0a9e6870033d25dd19733152b01b507d812216e0f7fc89bbe200806f079e9515dd886a781a46ebe3da4c8307885b535109bb1678d08eeef3717bea30f64282ee844b6d64ec51b1221d175b59c1537089dfa803275ab6dcd40b1fe4e851597c1993a477c225201087b7b0977be62a71927bb01b705267aabe967add451795dfd5114726193415cc3e0784a37db8ab8b97a171bc4ad9593f7c750ad440a26b93d24ee8f080de0f2a16cbd5cd1f370bc1235d88d5cbd25acf91daa392731dab4c9c15015de2fded6332b6ebccf6e1588f3f1a5a3e853587a6843ee1a3f3c270e3ab4462bcff01c70b03e8f8c9d816d7d69e4040155e9f999ce4e366a816c6e7224f41df7eead6d6d214ed98708e1d269f4b469af2e2a2559258439758f4fded2780e736568c7eea209c5ed54a1beaf06013bb4b330d39518528a46d68b277faf926672650cad335ae285aeb0b0130a9c7016580a857722b9c51a5a37a856ccb9b6673f58ebfa66f1db4d041741e104cdd91efa4b3248ebecff3568f31b547b19a939708c3b4b45f46377b4a345248489ddef4bc87426717971de1c0049006d2fb99c311fa91c364749917ee81ea8fd51365449d568eadbad6aead6101b7e6582e793670492d814d58e4a9faa8a4a3027b230e8f5b2349fb3ff3c4365df6bd85aa7f76c388ef94f0155c81b04863624fb4708f83ebf93a51d1438d7761d4b1b929d9aa8faef691676834a2591b75205ede2e4a709c3a9899d06c5cb5a571159402e429c5cf839f49957aed76dc7db43f9fdc754e40d7c662ad7939a09bfdbc31deb0d327895afae1eca61820e09abc2c0ed5ce083aceb89c8e24ad45483d3128f0547869970dc84c8787a06046bf79f28a7678b03baeff239ce600d91a07236e255ff7ea441ff0602bb38d7aaa1c414a94c4e143ea2cca9d14a01bb70ff93057a03288bd71c45b025731765ca5250b162f08be1a29460a53f213bfb88a8e80e4c46dbfa5936894a95d27c4e90c151748f8ee457c29cb7e21deb805a9c5c6abf373a4bad5e1eaf8deff211a307626d8b27f4356755a8b3a8103e73bb2c7114e85ab2f2ee3f2ea8a4188a7d5917e790629887c1c51f56d10a8400fb4193dd79dd657ec190acfbd00e5b3a37b6205b6b5c438ebaaea9d47acc662e5ef3c51cc2add70aa9a6420abb168651d78e3a61b3007e5c86b03ffdaaebc7545061274f1b7bfefecea707423af2601bd1608abc6f7dc4bc1ab8933d11c825efb1308d2fc80d2c19d6e083bed16f8063497f59174a8e2d0500d4c1f5f0384fd8b54faa13ecde3080a17bd3b60191a8bc1cdc985d70c539e53c1b99a8e07"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffffe8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r5, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f086dd", 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) r6 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r6, 0x6611, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000380)={'macvlan1\x00', 0x2000}) syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000080)='./bus\x00', 0x10088, &(0x7f0000000200)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0], 0x1, 0x54f8, &(0x7f0000005980)="$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") kernel console output (not intermixed with test programs): rst block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 104.069926][ T26] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 104.080061][ T4284] REISERFS (device loop2): checking transaction log (loop2) [ 104.088304][ T26] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.096957][ T26] usb 5-1: Product: syz [ 104.101395][ T26] usb 5-1: Manufacturer: syz [ 104.105993][ T26] usb 5-1: SerialNumber: syz [ 104.117348][ T26] usb 5-1: config 0 descriptor?? [ 104.179452][ T13] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 104.188195][ T4284] REISERFS (device loop2): Using tea hash to sort names [ 104.198558][ T4284] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 104.373246][ T26] usb 5-1: USB disconnect, device number 5 [ 104.512892][ T3613] hid-steam 0003:28DE:1142.000F: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 104.539378][ T13] usb 2-1: config 0 has no interfaces? [ 104.544940][ T13] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 104.569342][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.589357][ T3613] hid-steam 0003:28DE:1142.0010: hidraw1: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 104.606798][ T13] usb 2-1: config 0 descriptor?? [ 104.679398][ T3613] hid-steam 0003:28DE:1142.000F: Steam wireless receiver connected [ 104.714006][ T4268] FAULT_INJECTION: forcing a failure. [ 104.714006][ T4268] name failslab, interval 1, probability 0, space 0, times 0 [ 104.735542][ T4268] CPU: 0 PID: 4268 Comm: syz.0.116 Not tainted 5.15.168-syzkaller #0 [ 104.743621][ T4268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 104.753746][ T4268] Call Trace: [ 104.753755][ T4268] [ 104.753762][ T4268] dump_stack_lvl+0x1e3/0x2d0 [ 104.753787][ T4268] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 104.753804][ T4268] ? panic+0x860/0x860 [ 104.753830][ T4268] ? __might_sleep+0xc0/0xc0 [ 104.753854][ T4268] should_fail+0x38a/0x4c0 [ 104.753878][ T4268] should_failslab+0x5/0x20 [ 104.753896][ T4268] slab_pre_alloc_hook+0x53/0xc0 [ 104.753915][ T4268] ? security_file_alloc+0x24/0x120 [ 104.753934][ T4268] kmem_cache_alloc+0x3f/0x280 [ 104.753955][ T4268] security_file_alloc+0x24/0x120 [ 104.753975][ T4268] __alloc_file+0xc3/0x240 [ 104.753997][ T4268] alloc_empty_file+0x92/0x180 [ 104.754017][ T4268] path_openat+0xfc/0x2f20 [ 104.754036][ T4268] ? stack_trace_snprint+0xe0/0xe0 [ 104.754053][ T4268] ? validate_chain+0x112/0x5930 [ 104.754073][ T4268] ? mark_lock+0x98/0x340 [ 104.754092][ T4268] ? __lock_acquire+0x1295/0x1ff0 [ 104.754111][ T4268] ? mark_lock+0x98/0x340 [ 104.754130][ T4268] ? __lock_acquire+0x1295/0x1ff0 [ 104.754147][ T4268] ? do_filp_open+0x460/0x460 [ 104.754181][ T4268] do_filp_open+0x21c/0x460 [ 104.754200][ T4268] ? vfs_tmpfile+0x2e0/0x2e0 [ 104.754231][ T4268] ? _raw_spin_unlock+0x24/0x40 [ 104.754249][ T4268] ? alloc_fd+0x598/0x630 [ 104.754275][ T4268] do_sys_openat2+0x13b/0x4f0 [ 104.754293][ T4268] ? do_sys_open+0x220/0x220 [ 104.754315][ T4268] __x64_sys_openat+0x243/0x290 [ 104.754332][ T4268] ? __ia32_sys_open+0x270/0x270 [ 104.754351][ T4268] ? syscall_enter_from_user_mode+0x2e/0x240 [ 104.754368][ T4268] ? lockdep_hardirqs_on+0x94/0x130 [ 104.754385][ T4268] ? syscall_enter_from_user_mode+0x2e/0x240 [ 104.754403][ T4268] do_syscall_64+0x3b/0xb0 [ 104.754417][ T4268] ? clear_bhb_loop+0x15/0x70 [ 104.754431][ T4268] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 104.754450][ T4268] RIP: 0033:0x7f14c2b4a990 [ 104.754466][ T4268] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 19 8f 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 6c 8f 02 00 8b 44 [ 104.754479][ T4268] RSP: 002b:00007f14c0fc3b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 104.754499][ T4268] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f14c2b4a990 [ 104.754511][ T4268] RDX: 0000000000000000 RSI: 00007f14c0fc3c10 RDI: 00000000ffffff9c [ 104.754522][ T4268] RBP: 00007f14c0fc3c10 R08: 0000000000000000 R09: 0023776172646968 [ 104.754533][ T4268] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 104.754543][ T4268] R13: 0000000000000000 R14: 00007f14c2d03f80 R15: 00007fff30a33d08 [ 104.754565][ T4268] [ 104.774571][ T3613] usb 1-1: USB disconnect, device number 3 [ 105.037084][ T4297] loop4: detected capacity change from 0 to 16 [ 105.070181][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 105.091502][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 105.270596][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10!!! [ 105.279585][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #12!!! [ 105.289315][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #2c0!!! [ 105.291982][ T4297] erofs: (device loop4): mounted with root inode @ nid 36. [ 105.391356][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 105.561973][ T3613] hid-steam 0003:28DE:1142.000F: Steam wireless receiver disconnected [ 105.571929][ T2723] usb 2-1: USB disconnect, device number 5 [ 105.601289][ T4297] attempt to access beyond end of device [ 105.601289][ T4297] loop4: rw=0, want=40, limit=16 [ 105.639365][ T4297] erofs: (device loop4): z_erofs_readahead: readahead error at page 3599 @ nid 36 [ 107.881390][ T3675] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 107.984864][ T4317] loop1: detected capacity change from 0 to 40427 [ 108.035638][ T4317] F2FS-fs (loop1): invalid crc value [ 108.056280][ T4317] F2FS-fs (loop1): Found nat_bits in checkpoint [ 108.092652][ T3675] usb 4-1: device descriptor read/64, error -71 [ 108.138842][ T4317] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 108.369273][ T3675] usb 4-1: new low-speed USB device number 8 using dummy_hcd [ 108.452275][ T25] audit: type=1800 audit(1729466068.350:6): pid=4333 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.130" name="file2" dev="loop1" ino=14 res=0 errno=0 [ 108.509954][ T2723] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 108.589414][ T3675] usb 4-1: device descriptor read/64, error -71 [ 108.737323][ T3675] usb usb4-port1: attempt power cycle [ 108.818408][ T3582] attempt to access beyond end of device [ 108.818408][ T3582] loop1: rw=2049, want=45112, limit=40427 [ 108.949871][ T2723] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.987536][ T2723] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.013139][ T2723] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 109.036545][ T2723] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.063068][ T2723] usb 3-1: config 0 descriptor?? [ 109.159424][ T3675] usb 4-1: new low-speed USB device number 9 using dummy_hcd [ 109.279503][ T3675] usb 4-1: device descriptor read/8, error -71 [ 109.400298][ T4342] loop2: detected capacity change from 0 to 4096 [ 109.445447][ T4342] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 109.462319][ T4342] ntfs3: loop2: Failed to load $MFT. [ 109.557570][ T4331] udc-core: couldn't find an available UDC or it's busy [ 109.569134][ T4331] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 109.569470][ T3675] usb 4-1: new low-speed USB device number 10 using dummy_hcd [ 109.587277][ T4331] loop2: detected capacity change from 0 to 256 [ 109.599214][ T4331] udc-core: couldn't find an available UDC or it's busy [ 109.606271][ T4331] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 109.679404][ T3675] usb 4-1: device descriptor read/8, error -71 [ 109.810051][ T3675] usb usb4-port1: unable to enumerate USB device [ 109.833046][ T4331] loop2: detected capacity change from 0 to 256 [ 110.919855][ T2723] usbhid 3-1:0.0: can't add hid device: -71 [ 111.070425][ T2723] usbhid: probe of 3-1:0.0 failed with error -71 [ 111.118210][ T2723] usb 3-1: USB disconnect, device number 7 [ 111.171918][ T4354] loop1: detected capacity change from 0 to 8 [ 111.391561][ T3615] hid-generic 0000:04AD:0000.0011: unknown main item tag 0x0 [ 111.399259][ T3615] hid-generic 0000:04AD:0000.0011: unknown main item tag 0x0 [ 111.406760][ T3615] hid-generic 0000:04AD:0000.0011: unknown main item tag 0x0 [ 111.414235][ T3615] hid-generic 0000:04AD:0000.0011: unknown main item tag 0x0 [ 111.423021][ T3615] hid-generic 0000:04AD:0000.0011: unknown main item tag 0x0 [ 111.434633][ T3615] hid-generic 0000:04AD:0000.0011: unknown main item tag 0x0 [ 111.453900][ T3615] hid-generic 0000:04AD:0000.0011: unknown main item tag 0x0 [ 111.463186][ T3615] hid-generic 0000:04AD:0000.0011: unknown main item tag 0x0 [ 111.473163][ T3615] hid-generic 0000:04AD:0000.0011: unknown main item tag 0x0 [ 111.480720][ T3615] hid-generic 0000:04AD:0000.0011: unknown main item tag 0x0 [ 111.774907][ T4370] loop2: detected capacity change from 0 to 40427 [ 111.781609][ T3615] hid-generic 0000:04AD:0000.0011: unknown main item tag 0x0 [ 111.789005][ T3615] hid-generic 0000:04AD:0000.0011: unknown main item tag 0x0 [ 111.796467][ T3615] hid-generic 0000:04AD:0000.0011: unknown main item tag 0x0 [ 111.803893][ T3615] hid-generic 0000:04AD:0000.0011: unknown main item tag 0x0 [ 111.811312][ T3615] hid-generic 0000:04AD:0000.0011: unknown main item tag 0x0 [ 111.818683][ T3615] hid-generic 0000:04AD:0000.0011: unknown main item tag 0x0 [ 111.826166][ T3615] hid-generic 0000:04AD:0000.0011: unknown main item tag 0x0 [ 111.833627][ T3615] hid-generic 0000:04AD:0000.0011: unknown main item tag 0x0 [ 111.842259][ T3615] hid-generic 0000:04AD:0000.0011: unknown main item tag 0x0 [ 111.853190][ T3615] hid-generic 0000:04AD:0000.0011: unknown main item tag 0x0 [ 111.860754][ T3615] hid-generic 0000:04AD:0000.0011: unknown main item tag 0x0 [ 111.868718][ T3615] hid-generic 0000:04AD:0000.0011: unknown main item tag 0x0 [ 111.876232][ T3615] hid-generic 0000:04AD:0000.0011: unknown main item tag 0x0 [ 111.883764][ T3615] hid-generic 0000:04AD:0000.0011: unknown main item tag 0x0 [ 111.891436][ T3615] hid-generic 0000:04AD:0000.0011: unknown main item tag 0x0 [ 111.901196][ T4370] F2FS-fs (loop2): invalid crc value [ 111.907236][ T3615] hid-generic 0000:04AD:0000.0011: unknown main item tag 0x0 [ 111.916378][ T3615] hid-generic 0000:04AD:0000.0011: unknown main item tag 0x0 [ 111.925847][ T4370] F2FS-fs (loop2): Found nat_bits in checkpoint [ 111.964671][ T3615] hid-generic 0000:04AD:0000.0011: unknown main item tag 0x0 [ 111.972153][ T4370] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 111.980347][ T3615] hid-generic 0000:04AD:0000.0011: unknown main item tag 0x0 [ 112.140336][ T3615] hid-generic 0000:04AD:0000.0011: unknown main item tag 0x0 [ 112.148183][ T3615] hid-generic 0000:04AD:0000.0011: unknown main item tag 0x0 [ 112.156254][ T3615] hid-generic 0000:04AD:0000.0011: unknown main item tag 0x0 [ 112.168338][ T3615] hid-generic 0000:04AD:0000.0011: hidraw0: HID v0.00 Device [syz0] on syz0 [ 112.276856][ T25] audit: type=1800 audit(1729466072.180:7): pid=4378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.147" name="file2" dev="loop2" ino=14 res=0 errno=0 [ 112.309239][ T3613] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 112.429379][ T3614] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 112.819792][ T3613] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.878430][ T3613] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.889595][ T3614] usb 2-1: config 0 has no interfaces? [ 112.897481][ T3614] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 112.978023][ T3614] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.003928][ T3613] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 113.093433][ T3613] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.185410][ T3614] usb 2-1: config 0 descriptor?? [ 113.298305][ T3613] usb 4-1: config 0 descriptor?? [ 113.462008][ T1292] usb 2-1: USB disconnect, device number 6 [ 113.538910][ T3571] attempt to access beyond end of device [ 113.538910][ T3571] loop2: rw=2049, want=45112, limit=40427 [ 113.925560][ T3613] hid-steam 0003:28DE:1142.0012: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 113.942610][ T3613] hid-steam 0003:28DE:1142.0013: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 114.132881][ T4392] loop1: detected capacity change from 0 to 4096 [ 114.220808][ T4392] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 114.271231][ T3613] hid-steam 0003:28DE:1142.0012: Steam wireless receiver connected [ 114.281466][ T3613] usb 4-1: USB disconnect, device number 11 [ 114.300806][ T3613] hid-steam 0003:28DE:1142.0012: Steam wireless receiver disconnected [ 114.341765][ T4392] ntfs3: loop1: failed to convert "076c" to cp862 [ 115.615287][ T2723] hid-generic 0000:04AD:0000.0014: unknown main item tag 0x0 [ 115.632998][ T2723] hid-generic 0000:04AD:0000.0014: unknown main item tag 0x0 [ 115.648211][ T2723] hid-generic 0000:04AD:0000.0014: unknown main item tag 0x0 [ 115.685767][ T2723] hid-generic 0000:04AD:0000.0014: unknown main item tag 0x0 [ 115.716128][ T2723] hid-generic 0000:04AD:0000.0014: unknown main item tag 0x0 [ 115.748102][ T4409] loop2: detected capacity change from 0 to 512 [ 115.777017][ T2723] hid-generic 0000:04AD:0000.0014: unknown main item tag 0x0 [ 115.810088][ T2723] hid-generic 0000:04AD:0000.0014: unknown main item tag 0x0 [ 115.827728][ T2723] hid-generic 0000:04AD:0000.0014: unknown main item tag 0x0 [ 115.876569][ T2723] hid-generic 0000:04AD:0000.0014: unknown main item tag 0x0 [ 115.917776][ T4409] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 115.936285][ T2723] hid-generic 0000:04AD:0000.0014: unknown main item tag 0x0 [ 115.950765][ T4409] EXT4-fs (loop2): 1 truncate cleaned up [ 115.956413][ T4409] EXT4-fs (loop2): mounted filesystem without journal. Opts: resuid=0x000000000000ee01,noblock_validity,usrquota,resuid=0x0000000000000000,discard,jqfmt=vfsold,usrjquota=min_batch_time=0x0000000000000a9b,nodiscard,,errors=continue. Quota mode: writeback. [ 116.001793][ T2723] hid-generic 0000:04AD:0000.0014: unknown main item tag 0x0 [ 116.014123][ T2723] hid-generic 0000:04AD:0000.0014: unknown main item tag 0x0 [ 116.025242][ T2723] hid-generic 0000:04AD:0000.0014: unknown main item tag 0x0 [ 116.037546][ T2723] hid-generic 0000:04AD:0000.0014: unknown main item tag 0x0 [ 116.104837][ T2723] hid-generic 0000:04AD:0000.0014: unknown main item tag 0x0 [ 116.127896][ T2723] hid-generic 0000:04AD:0000.0014: unknown main item tag 0x0 [ 116.150582][ T2723] hid-generic 0000:04AD:0000.0014: unknown main item tag 0x0 [ 116.158219][ T2723] hid-generic 0000:04AD:0000.0014: unknown main item tag 0x0 [ 116.172226][ T2723] hid-generic 0000:04AD:0000.0014: unknown main item tag 0x0 [ 116.184564][ T2723] hid-generic 0000:04AD:0000.0014: unknown main item tag 0x0 [ 116.205961][ T2723] hid-generic 0000:04AD:0000.0014: unknown main item tag 0x0 [ 116.251471][ T4422] chnl_net:caif_netlink_parms(): no params data found [ 116.259802][ T2723] hid-generic 0000:04AD:0000.0014: unknown main item tag 0x0 [ 116.267202][ T2723] hid-generic 0000:04AD:0000.0014: unknown main item tag 0x0 [ 116.285272][ T2723] hid-generic 0000:04AD:0000.0014: unknown main item tag 0x0 [ 116.295388][ T2723] hid-generic 0000:04AD:0000.0014: unknown main item tag 0x0 [ 116.307561][ T2723] hid-generic 0000:04AD:0000.0014: unknown main item tag 0x0 [ 116.319752][ T2723] hid-generic 0000:04AD:0000.0014: unknown main item tag 0x0 [ 116.327204][ T2723] hid-generic 0000:04AD:0000.0014: unknown main item tag 0x0 [ 116.342636][ T2723] hid-generic 0000:04AD:0000.0014: unknown main item tag 0x0 [ 116.367872][ T2723] hid-generic 0000:04AD:0000.0014: unknown main item tag 0x0 [ 116.375756][ T2723] hid-generic 0000:04AD:0000.0014: unknown main item tag 0x0 [ 116.395701][ T2723] hid-generic 0000:04AD:0000.0014: unknown main item tag 0x0 [ 116.471522][ T2723] hid-generic 0000:04AD:0000.0014: hidraw0: HID v0.00 Device [syz0] on syz0 [ 116.556844][ T4422] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.575184][ T4422] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.609261][ T4422] device bridge_slave_0 entered promiscuous mode [ 116.628616][ T4422] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.673347][ T4422] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.693406][ T4422] device bridge_slave_1 entered promiscuous mode [ 116.767789][ T4422] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.790021][ T4422] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.811296][ T25] audit: type=1800 audit(1729466076.720:8): pid=4437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.165" name="/" dev="fuse" ino=1 res=0 errno=0 [ 116.868100][ T25] audit: type=1326 audit(1729466076.760:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4436 comm="syz.2.165" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f330d129ff9 code=0x0 [ 116.901118][ T4422] team0: Port device team_slave_0 added [ 116.910440][ T4422] team0: Port device team_slave_1 added [ 116.921252][ T25] audit: type=1326 audit(1729466076.810:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4436 comm="syz.2.165" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f330d129ff9 code=0x0 [ 116.961935][ T4422] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.973311][ T4422] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.008958][ T4422] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.033108][ T4422] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.055759][ T4422] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.087025][ T4422] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.157968][ T4422] device hsr_slave_0 entered promiscuous mode [ 117.182561][ T4422] device hsr_slave_1 entered promiscuous mode [ 117.193614][ T4422] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 117.202513][ T4422] Cannot create hsr debugfs directory [ 117.460158][ T4422] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.759647][ T4422] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.308590][ T4422] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.370479][ T3613] Bluetooth: hci7: command 0x0409 tx timeout [ 118.885843][ T4463] netlink: 'syz.3.171': attribute type 15 has an invalid length. [ 118.893795][ T4463] netlink: 'syz.3.171': attribute type 7 has an invalid length. [ 120.526803][ T3613] Bluetooth: hci7: command 0x041b tx timeout [ 120.836619][ T4422] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.888506][ T4471] netlink: 56 bytes leftover after parsing attributes in process `syz.3.173'. [ 120.960674][ T4473] loop1: detected capacity change from 0 to 256 [ 121.014412][ T4422] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 121.067778][ T4422] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 121.107391][ T4422] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 121.142153][ T4422] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 121.445749][ T4422] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.478531][ T3737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 121.486703][ T3737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 121.497379][ T4422] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.508012][ T3737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 121.522821][ T3737] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 121.648890][ T3737] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.656022][ T3737] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.741481][ T3737] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 121.766312][ T3737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 121.801917][ T3737] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 121.830140][ T3737] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.837271][ T3737] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.872129][ T3737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 121.970123][ T3812] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 121.983305][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 121.994699][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 122.006575][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 122.019910][ T3812] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 122.025720][ T4487] loop2: detected capacity change from 0 to 256 [ 122.028998][ T3812] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 122.043005][ T1292] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 122.058532][ T4422] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 122.135434][ T4422] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 122.212308][ T4487] FAULT_INJECTION: forcing a failure. [ 122.212308][ T4487] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 122.227322][ T3812] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 122.248090][ T3812] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 122.267522][ T3812] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 122.288827][ T3812] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 122.297410][ T4487] CPU: 1 PID: 4487 Comm: syz.2.181 Not tainted 5.15.168-syzkaller #0 [ 122.305486][ T4487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 122.309678][ T3812] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 122.315533][ T4487] Call Trace: [ 122.315543][ T4487] [ 122.315549][ T4487] dump_stack_lvl+0x1e3/0x2d0 [ 122.333524][ T4487] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 122.339167][ T4487] ? panic+0x860/0x860 [ 122.343251][ T4487] ? __fget_files+0x413/0x480 [ 122.347935][ T4487] should_fail+0x38a/0x4c0 [ 122.352358][ T4487] _copy_from_user+0x2d/0x170 [ 122.357042][ T4487] __sys_connect+0x137/0x410 [ 122.361634][ T4487] ? __sys_connect_file+0x170/0x170 [ 122.366850][ T4487] ? syscall_enter_from_user_mode+0x2e/0x240 [ 122.372832][ T4487] ? lockdep_hardirqs_on+0x94/0x130 [ 122.378040][ T4487] __x64_sys_connect+0x76/0x80 [ 122.382806][ T4487] do_syscall_64+0x3b/0xb0 [ 122.387222][ T4487] ? clear_bhb_loop+0x15/0x70 [ 122.391899][ T4487] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 122.397801][ T4487] RIP: 0033:0x7f330d129ff9 [ 122.402227][ T4487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.421831][ T4487] RSP: 002b:00007f330b5a2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 122.430248][ T4487] RAX: ffffffffffffffda RBX: 00007f330d2e1f80 RCX: 00007f330d129ff9 [ 122.438219][ T4487] RDX: 000000000000006e RSI: 000000002057eff8 RDI: 0000000000000003 [ 122.446194][ T4487] RBP: 00007f330b5a2090 R08: 0000000000000000 R09: 0000000000000000 [ 122.454165][ T4487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.462133][ T4487] R13: 0000000000000000 R14: 00007f330d2e1f80 R15: 00007ffc6dbeb3a8 [ 122.470120][ T4487] [ 122.491852][ T1292] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 122.522921][ T1292] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.543048][ T1292] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.557576][ T1292] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 122.589555][ T3613] Bluetooth: hci7: command 0x040f tx timeout [ 122.662737][ T1292] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 122.692725][ T1292] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 122.939680][ T21] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 123.147052][ T1292] usb 1-1: Manufacturer: syz [ 123.166822][ T1292] usb 1-1: config 0 descriptor?? [ 123.580581][ T3851] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 123.588112][ T3851] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 123.599484][ T21] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 123.615418][ T4422] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.623106][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.634489][ T4506] loop1: detected capacity change from 0 to 16 [ 123.653416][ T21] usb 3-1: config 0 descriptor?? [ 123.700930][ T1292] appleir 0003:05AC:8243.0015: unknown main item tag 0x0 [ 123.711478][ T21] cp210x 3-1:0.0: cp210x converter detected [ 123.712183][ T1292] appleir 0003:05AC:8243.0015: No inputs registered, leaving [ 123.733049][ T4506] erofs: (device loop1): mounted with root inode @ nid 36. [ 123.771781][ T1292] appleir 0003:05AC:8243.0015: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 123.783883][ T4506] attempt to access beyond end of device [ 123.783883][ T4506] loop1: rw=0, want=40, limit=16 [ 123.797508][ T4506] erofs: (device loop1): z_erofs_readahead: readahead error at page 3599 @ nid 36 [ 124.063310][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 124.091703][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 124.149598][ T21] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 124.371396][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 124.471497][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 124.615708][ T4422] device veth0_vlan entered promiscuous mode [ 124.670107][ T3619] Bluetooth: hci7: command 0x0419 tx timeout [ 124.690774][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 124.754509][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 124.874614][ T4422] device veth1_vlan entered promiscuous mode [ 124.917254][ T21] usb 3-1: cp210x converter now attached to ttyUSB0 [ 124.929808][ T3851] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 124.940213][ T3851] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 124.953039][ T4422] device veth0_macvtap entered promiscuous mode [ 124.966916][ T4422] device veth1_macvtap entered promiscuous mode [ 124.986517][ T4422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.997865][ T4422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.018010][ T4422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.036271][ T4422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.057758][ T4422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.076890][ T4422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.096460][ T4422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.114841][ T4422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.118198][ T3675] usb 3-1: USB disconnect, device number 8 [ 125.128325][ T4422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.135855][ T21] usb 1-1: reset high-speed USB device number 4 using dummy_hcd [ 125.144704][ T4422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.168823][ T4422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.174970][ T3675] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 125.188037][ T4422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.196605][ T3675] cp210x 3-1:0.0: device disconnected [ 125.206560][ T4422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.218517][ T4422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.241357][ T4422] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.251086][ T3851] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 125.262296][ T3851] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 125.271041][ T3851] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 125.280642][ T3851] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 125.294694][ T4422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.313126][ T4422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.324612][ T4422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.335350][ T4422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.347364][ T4422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.357957][ T4422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.368486][ T4422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.379279][ T4422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.389128][ T4422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.399890][ T4422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.409967][ T4422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.420530][ T4422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.430449][ T4422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.441043][ T4422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.461305][ T4422] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.471137][ T3851] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 125.480625][ T3851] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 125.493107][ T4422] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.503646][ T4422] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.519514][ T4422] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.530477][ T4422] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.646613][ T3851] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.675964][ T3851] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.690727][ T1138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.694154][ T3851] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 125.706318][ T1138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.720426][ T3851] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 126.070620][ T3613] hid-generic 0000:04AD:0000.0016: unknown main item tag 0x0 [ 126.079807][ T3613] hid-generic 0000:04AD:0000.0016: unknown main item tag 0x0 [ 126.101200][ T3613] hid-generic 0000:04AD:0000.0016: unknown main item tag 0x0 [ 126.108621][ T3613] hid-generic 0000:04AD:0000.0016: unknown main item tag 0x0 [ 126.121286][ T3613] hid-generic 0000:04AD:0000.0016: unknown main item tag 0x0 [ 126.128731][ T3613] hid-generic 0000:04AD:0000.0016: unknown main item tag 0x0 [ 126.147197][ T3613] hid-generic 0000:04AD:0000.0016: unknown main item tag 0x0 [ 126.157208][ T3613] hid-generic 0000:04AD:0000.0016: unknown main item tag 0x0 [ 126.159330][ T2723] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 126.172171][ T3613] hid-generic 0000:04AD:0000.0016: unknown main item tag 0x0 [ 126.172227][ T3613] hid-generic 0000:04AD:0000.0016: unknown main item tag 0x0 [ 126.204551][ T3613] hid-generic 0000:04AD:0000.0016: unknown main item tag 0x0 [ 126.212400][ T3613] hid-generic 0000:04AD:0000.0016: unknown main item tag 0x0 [ 126.220391][ T3613] hid-generic 0000:04AD:0000.0016: unknown main item tag 0x0 [ 126.228224][ T3613] hid-generic 0000:04AD:0000.0016: unknown main item tag 0x0 [ 126.235864][ T3613] hid-generic 0000:04AD:0000.0016: unknown main item tag 0x0 [ 126.243661][ T3613] hid-generic 0000:04AD:0000.0016: unknown main item tag 0x0 [ 126.251162][ T3613] hid-generic 0000:04AD:0000.0016: unknown main item tag 0x0 [ 126.259014][ T3613] hid-generic 0000:04AD:0000.0016: unknown main item tag 0x0 [ 126.266643][ T3613] hid-generic 0000:04AD:0000.0016: unknown main item tag 0x0 [ 126.275014][ T3613] hid-generic 0000:04AD:0000.0016: unknown main item tag 0x0 [ 126.283766][ T3613] hid-generic 0000:04AD:0000.0016: unknown main item tag 0x0 [ 126.291615][ T3613] hid-generic 0000:04AD:0000.0016: unknown main item tag 0x0 [ 126.299061][ T3613] hid-generic 0000:04AD:0000.0016: unknown main item tag 0x0 [ 126.307002][ T3613] hid-generic 0000:04AD:0000.0016: unknown main item tag 0x0 [ 126.314491][ T3613] hid-generic 0000:04AD:0000.0016: unknown main item tag 0x0 [ 126.322347][ T3613] hid-generic 0000:04AD:0000.0016: unknown main item tag 0x0 [ 126.329848][ T3613] hid-generic 0000:04AD:0000.0016: unknown main item tag 0x0 [ 126.337466][ T3613] hid-generic 0000:04AD:0000.0016: unknown main item tag 0x0 [ 126.354372][ T3613] hid-generic 0000:04AD:0000.0016: unknown main item tag 0x0 [ 126.365831][ T3613] hid-generic 0000:04AD:0000.0016: unknown main item tag 0x0 [ 126.380773][ T3613] hid-generic 0000:04AD:0000.0016: unknown main item tag 0x0 [ 126.397008][ T3613] hid-generic 0000:04AD:0000.0016: unknown main item tag 0x0 [ 126.422823][ T3613] hid-generic 0000:04AD:0000.0016: hidraw1: HID v0.00 Device [syz0] on syz0 [ 126.699240][ T2723] usb 5-1: Using ep0 maxpacket: 32 [ 126.900426][ T2723] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 66, changing to 10 [ 126.918946][ T2723] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 17175, setting to 1024 [ 126.942865][ T2723] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 126.961525][ T2723] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.042502][ T2723] hub 5-1:4.0: USB hub found [ 127.140214][ T3785] usb 1-1: USB disconnect, device number 4 [ 127.538448][ T2723] hub 5-1:4.0: 2 ports detected [ 127.543669][ T2723] usb 5-1: selecting invalid altsetting 1 [ 127.549768][ T2723] hub 5-1:4.0: Using single TT (err -22) [ 127.719467][ T2723] hub 5-1:4.0: config failed, can't get hub status (err -5) [ 127.783881][ T2723] usb 5-1: USB disconnect, device number 6 [ 128.949440][ T26] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 129.303694][ T3785] hid-generic 0000:04AD:0000.0017: unknown main item tag 0x0 [ 129.328617][ T3785] hid-generic 0000:04AD:0000.0017: unknown main item tag 0x0 [ 129.336726][ T26] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 129.357906][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.379508][ T3785] hid-generic 0000:04AD:0000.0017: unknown main item tag 0x0 [ 129.386945][ T3785] hid-generic 0000:04AD:0000.0017: unknown main item tag 0x0 [ 129.406022][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.416311][ T3785] hid-generic 0000:04AD:0000.0017: unknown main item tag 0x0 [ 129.424006][ T26] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 129.437350][ T3785] hid-generic 0000:04AD:0000.0017: unknown main item tag 0x0 [ 129.445055][ T3785] hid-generic 0000:04AD:0000.0017: unknown main item tag 0x0 [ 129.453998][ T3785] hid-generic 0000:04AD:0000.0017: unknown main item tag 0x0 [ 129.463042][ T3785] hid-generic 0000:04AD:0000.0017: unknown main item tag 0x0 [ 129.470949][ T3785] hid-generic 0000:04AD:0000.0017: unknown main item tag 0x0 [ 129.478334][ T3785] hid-generic 0000:04AD:0000.0017: unknown main item tag 0x0 [ 129.652387][ T26] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 129.662685][ T3785] hid-generic 0000:04AD:0000.0017: unknown main item tag 0x0 [ 129.670128][ T26] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 129.678209][ T26] usb 4-1: Manufacturer: syz [ 129.682962][ T3785] hid-generic 0000:04AD:0000.0017: unknown main item tag 0x0 [ 129.690414][ T3785] hid-generic 0000:04AD:0000.0017: unknown main item tag 0x0 [ 129.697798][ T3785] hid-generic 0000:04AD:0000.0017: unknown main item tag 0x0 [ 129.707263][ T3785] hid-generic 0000:04AD:0000.0017: unknown main item tag 0x0 [ 129.715685][ T26] usb 4-1: config 0 descriptor?? [ 129.720924][ T3785] hid-generic 0000:04AD:0000.0017: unknown main item tag 0x0 [ 129.728314][ T3785] hid-generic 0000:04AD:0000.0017: unknown main item tag 0x0 [ 129.735754][ T3785] hid-generic 0000:04AD:0000.0017: unknown main item tag 0x0 [ 129.743235][ T3785] hid-generic 0000:04AD:0000.0017: unknown main item tag 0x0 [ 129.750768][ T3785] hid-generic 0000:04AD:0000.0017: unknown main item tag 0x0 [ 129.758408][ T3785] hid-generic 0000:04AD:0000.0017: unknown main item tag 0x0 [ 129.768817][ T3785] hid-generic 0000:04AD:0000.0017: unknown main item tag 0x0 [ 129.776269][ T3785] hid-generic 0000:04AD:0000.0017: unknown main item tag 0x0 [ 129.783827][ T3785] hid-generic 0000:04AD:0000.0017: unknown main item tag 0x0 [ 129.791304][ T3785] hid-generic 0000:04AD:0000.0017: unknown main item tag 0x0 [ 129.798694][ T3785] hid-generic 0000:04AD:0000.0017: unknown main item tag 0x0 [ 129.806255][ T3785] hid-generic 0000:04AD:0000.0017: unknown main item tag 0x0 [ 129.813713][ T3785] hid-generic 0000:04AD:0000.0017: unknown main item tag 0x0 [ 129.821160][ T3785] hid-generic 0000:04AD:0000.0017: unknown main item tag 0x0 [ 129.828532][ T3785] hid-generic 0000:04AD:0000.0017: unknown main item tag 0x0 [ 129.835965][ T3785] hid-generic 0000:04AD:0000.0017: unknown main item tag 0x0 [ 129.846636][ T3785] hid-generic 0000:04AD:0000.0017: hidraw0: HID v0.00 Device [syz0] on syz0 [ 130.211557][ T26] appleir 0003:05AC:8243.0018: unknown main item tag 0x0 [ 130.222022][ T26] appleir 0003:05AC:8243.0018: No inputs registered, leaving [ 130.237271][ T26] appleir 0003:05AC:8243.0018: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 130.789415][ T4500] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 132.098310][ T4591] loop2: detected capacity change from 0 to 4096 [ 132.249288][ T3613] usb 4-1: reset high-speed USB device number 12 using dummy_hcd [ 132.419759][ T4500] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 132.429403][ T4500] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.440292][ T4500] usb 1-1: config 0 descriptor?? [ 132.479331][ T3785] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 132.545310][ T4596] FAULT_INJECTION: forcing a failure. [ 132.545310][ T4596] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 132.558452][ T4596] CPU: 1 PID: 4596 Comm: syz.4.210 Not tainted 5.15.168-syzkaller #0 [ 132.566515][ T4596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 132.576562][ T4596] Call Trace: [ 132.579833][ T4596] [ 132.582756][ T4596] dump_stack_lvl+0x1e3/0x2d0 [ 132.587433][ T4596] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 132.593069][ T4596] ? panic+0x860/0x860 [ 132.597145][ T4596] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 132.602776][ T4596] ? lockdep_hardirqs_on+0x94/0x130 [ 132.607983][ T4596] should_fail+0x38a/0x4c0 [ 132.612422][ T4596] _copy_from_user+0x2d/0x170 [ 132.617096][ T4596] iovec_from_user+0x13b/0x390 [ 132.621864][ T4596] __import_iovec+0x72/0x4b0 [ 132.626457][ T4596] ? __ia32_sys_shutdown+0x60/0x60 [ 132.631575][ T4596] import_iovec+0xe6/0x120 [ 132.635994][ T4596] ___sys_sendmsg+0x215/0x2e0 [ 132.640674][ T4596] ? __sys_sendmsg+0x260/0x260 [ 132.645470][ T4596] ? __fdget+0x191/0x220 [ 132.649711][ T4596] __se_sys_sendmsg+0x19a/0x260 [ 132.654557][ T4596] ? __x64_sys_sendmsg+0x80/0x80 [ 132.659500][ T4596] ? syscall_enter_from_user_mode+0x2e/0x240 [ 132.665475][ T4596] ? lockdep_hardirqs_on+0x94/0x130 [ 132.670668][ T4596] ? syscall_enter_from_user_mode+0x2e/0x240 [ 132.676651][ T4596] do_syscall_64+0x3b/0xb0 [ 132.681060][ T4596] ? clear_bhb_loop+0x15/0x70 [ 132.685731][ T4596] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 132.691633][ T4596] RIP: 0033:0x7f4e5dd3eff9 [ 132.696044][ T4596] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.715643][ T4596] RSP: 002b:00007f4e5c175038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 132.724064][ T4596] RAX: ffffffffffffffda RBX: 00007f4e5def7130 RCX: 00007f4e5dd3eff9 [ 132.732030][ T4596] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 000000000000000a [ 132.739994][ T4596] RBP: 00007f4e5c175090 R08: 0000000000000000 R09: 0000000000000000 [ 132.747957][ T4596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.755919][ T4596] R13: 0000000000000000 R14: 00007f4e5def7130 R15: 00007ffeeb00a038 [ 132.763899][ T4596] [ 132.880388][ T1389] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.887447][ T1389] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.923398][ T4500] cp210x 1-1:0.0: cp210x converter detected [ 133.191695][ T4500] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 133.256269][ T4500] usb 1-1: cp210x converter now attached to ttyUSB0 [ 133.349473][ T3785] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 133.365170][ T3785] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.390995][ T3785] usb 3-1: config 0 descriptor?? [ 133.473861][ T4500] usb 1-1: USB disconnect, device number 5 [ 133.498463][ T4500] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 133.539510][ T4500] cp210x 1-1:0.0: device disconnected [ 133.652596][ T4591] udc-core: couldn't find an available UDC or it's busy [ 133.670622][ T4591] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 133.699386][ T3785] [drm] vendor descriptor length:6 data:06 5f 01 05 41 00 00 00 00 00 00 [ 133.712510][ T3785] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 133.740522][ T1292] usb 4-1: USB disconnect, device number 12 [ 133.919489][ T3785] [drm:udl_init] *ERROR* Selecting channel failed [ 133.951484][ T3785] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2 [ 133.968457][ T3785] [drm] Initialized udl on minor 2 [ 134.009396][ T3785] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 134.044504][ T3785] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 134.093366][ T3785] usb 3-1: USB disconnect, device number 9 [ 134.527487][ T4615] loop2: detected capacity change from 0 to 8 [ 134.698280][ T1292] hid-generic 0000:04AD:0000.0019: unknown main item tag 0x0 [ 134.705811][ T1292] hid-generic 0000:04AD:0000.0019: unknown main item tag 0x0 [ 134.719268][ T1292] hid-generic 0000:04AD:0000.0019: unknown main item tag 0x0 [ 134.726665][ T1292] hid-generic 0000:04AD:0000.0019: unknown main item tag 0x0 [ 134.735091][ T1292] hid-generic 0000:04AD:0000.0019: unknown main item tag 0x0 [ 134.742801][ T1292] hid-generic 0000:04AD:0000.0019: unknown main item tag 0x0 [ 134.750424][ T1292] hid-generic 0000:04AD:0000.0019: unknown main item tag 0x0 [ 134.757801][ T1292] hid-generic 0000:04AD:0000.0019: unknown main item tag 0x0 [ 134.773793][ T1292] hid-generic 0000:04AD:0000.0019: unknown main item tag 0x0 [ 134.782913][ T1292] hid-generic 0000:04AD:0000.0019: unknown main item tag 0x0 [ 134.790700][ T1292] hid-generic 0000:04AD:0000.0019: unknown main item tag 0x0 [ 134.798092][ T1292] hid-generic 0000:04AD:0000.0019: unknown main item tag 0x0 [ 134.805859][ T1292] hid-generic 0000:04AD:0000.0019: unknown main item tag 0x0 [ 134.813513][ T1292] hid-generic 0000:04AD:0000.0019: unknown main item tag 0x0 [ 134.821192][ T1292] hid-generic 0000:04AD:0000.0019: unknown main item tag 0x0 [ 134.828581][ T1292] hid-generic 0000:04AD:0000.0019: unknown main item tag 0x0 [ 134.836325][ T1292] hid-generic 0000:04AD:0000.0019: unknown main item tag 0x0 [ 134.843154][ T4612] chnl_net:caif_netlink_parms(): no params data found [ 134.844075][ T1292] hid-generic 0000:04AD:0000.0019: unknown main item tag 0x0 [ 134.858032][ T1292] hid-generic 0000:04AD:0000.0019: unknown main item tag 0x0 [ 134.865704][ T1292] hid-generic 0000:04AD:0000.0019: unknown main item tag 0x0 [ 134.879313][ T1292] hid-generic 0000:04AD:0000.0019: unknown main item tag 0x0 [ 134.899303][ T1292] hid-generic 0000:04AD:0000.0019: unknown main item tag 0x0 [ 134.906696][ T1292] hid-generic 0000:04AD:0000.0019: unknown main item tag 0x0 [ 134.919228][ T1292] hid-generic 0000:04AD:0000.0019: unknown main item tag 0x0 [ 134.929494][ T1292] hid-generic 0000:04AD:0000.0019: unknown main item tag 0x0 [ 134.947072][ T1292] hid-generic 0000:04AD:0000.0019: unknown main item tag 0x0 [ 134.957181][ T1292] hid-generic 0000:04AD:0000.0019: unknown main item tag 0x0 [ 134.974986][ T1292] hid-generic 0000:04AD:0000.0019: unknown main item tag 0x0 [ 134.986777][ T1292] hid-generic 0000:04AD:0000.0019: unknown main item tag 0x0 [ 135.015137][ T1292] hid-generic 0000:04AD:0000.0019: unknown main item tag 0x0 [ 135.035358][ T1292] hid-generic 0000:04AD:0000.0019: unknown main item tag 0x0 [ 135.063129][ T1292] hid-generic 0000:04AD:0000.0019: unknown main item tag 0x0 [ 135.101327][ T1292] hid-generic 0000:04AD:0000.0019: hidraw0: HID v0.00 Device [syz0] on syz0 [ 135.244960][ T4612] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.271977][ T4612] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.287171][ T4612] device bridge_slave_0 entered promiscuous mode [ 135.306743][ T4612] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.325098][ T4612] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.337362][ T4612] device bridge_slave_1 entered promiscuous mode [ 135.369255][ T3613] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 136.478201][ T1292] Bluetooth: hci8: command 0x0409 tx timeout [ 136.589155][ C1] sched: RT throttling activated [ 136.606722][ T4612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 136.640184][ T4612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 136.701567][ T4612] team0: Port device team_slave_0 added [ 136.719405][ T3613] usb 3-1: config 0 has no interfaces? [ 136.725077][ T3613] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 136.765598][ T4612] team0: Port device team_slave_1 added [ 136.799938][ T3613] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.820897][ T1292] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 137.175238][ T3613] usb 3-1: config 0 descriptor?? [ 137.211678][ T4612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 137.218627][ T4612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.259139][ T4612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 137.283437][ T4612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 137.299785][ T4612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.335415][ T4612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 137.521509][ T3613] usb 3-1: USB disconnect, device number 10 [ 137.539458][ T1292] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 137.567951][ T1292] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.586115][ T1292] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.596295][ T1292] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 137.633641][ T4612] device hsr_slave_0 entered promiscuous mode [ 137.645385][ T4612] device hsr_slave_1 entered promiscuous mode [ 137.663216][ T4612] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 137.679244][ T4612] Cannot create hsr debugfs directory [ 137.695280][ T1292] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 137.723438][ T1292] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 137.755732][ T1292] usb 1-1: Manufacturer: syz [ 137.820560][ T1292] usb 1-1: config 0 descriptor?? [ 137.981555][ T4612] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.123151][ T4612] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.264083][ T4612] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.315575][ T1292] appleir 0003:05AC:8243.001A: unknown main item tag 0x0 [ 138.344908][ T1292] appleir 0003:05AC:8243.001A: No inputs registered, leaving [ 138.377384][ T1292] appleir 0003:05AC:8243.001A: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 138.463112][ T4612] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.509657][ T3619] Bluetooth: hci8: command 0x041b tx timeout [ 138.727376][ T4612] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 138.773553][ T4612] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 138.836199][ T4612] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 139.110558][ T4612] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 139.712252][ T4612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.753379][ T3880] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 139.759451][ T3613] usb 1-1: reset high-speed USB device number 6 using dummy_hcd [ 139.779952][ T3880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 139.814465][ T4612] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.839670][ T3880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 139.879050][ T3880] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 139.909642][ T3880] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.916705][ T3880] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.948424][ T3880] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 139.979903][ T3880] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 140.009335][ T3880] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.016400][ T3880] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.063078][ T3880] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 140.083867][ T3880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 140.103013][ T3880] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 140.147737][ T3880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 140.180971][ T3880] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 140.212251][ T3880] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 140.236835][ T3880] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 140.265542][ T3880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 140.292735][ T3880] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 140.330974][ T3880] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 140.374137][ T3880] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 140.392997][ T3880] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 140.421319][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 140.589939][ T1292] Bluetooth: hci8: command 0x040f tx timeout [ 140.809382][ T3619] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 140.875076][ T3737] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 140.883572][ T3737] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 141.038507][ T4612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.565815][ T3737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 141.589969][ T3737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 141.680816][ T3737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 141.702505][ T3737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 141.745787][ T3737] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 141.790015][ T3737] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 141.821727][ T4612] device veth0_vlan entered promiscuous mode [ 141.870139][ T4612] device veth1_vlan entered promiscuous mode [ 141.879620][ T3619] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 141.892680][ T3737] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 141.919136][ T3619] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.955864][ T4612] device veth0_macvtap entered promiscuous mode [ 141.960017][ T3619] usb 5-1: config 0 descriptor?? [ 141.986366][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 141.995603][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 142.013136][ T4500] hid-generic 0000:04AD:0000.001B: unknown main item tag 0x0 [ 142.021683][ T3619] cp210x 5-1:0.0: cp210x converter detected [ 142.041846][ T4500] hid-generic 0000:04AD:0000.001B: unknown main item tag 0x0 [ 142.064573][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 142.085799][ T4612] device veth1_macvtap entered promiscuous mode [ 142.086276][ T4500] hid-generic 0000:04AD:0000.001B: unknown main item tag 0x0 [ 142.116488][ T4612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.125759][ T4500] hid-generic 0000:04AD:0000.001B: unknown main item tag 0x0 [ 142.154993][ T4500] hid-generic 0000:04AD:0000.001B: unknown main item tag 0x0 [ 142.157675][ T4612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.183337][ T4612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.184188][ T4500] hid-generic 0000:04AD:0000.001B: unknown main item tag 0x0 [ 142.204815][ T4612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.221963][ T4612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.235509][ T4612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.237657][ T4500] hid-generic 0000:04AD:0000.001B: unknown main item tag 0x0 [ 142.245921][ T4612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.270090][ T4612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.279345][ T4500] hid-generic 0000:04AD:0000.001B: unknown main item tag 0x0 [ 142.287283][ T4500] hid-generic 0000:04AD:0000.001B: unknown main item tag 0x0 [ 142.297317][ T4612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.307941][ T4500] hid-generic 0000:04AD:0000.001B: unknown main item tag 0x0 [ 142.307966][ T4500] hid-generic 0000:04AD:0000.001B: unknown main item tag 0x0 [ 142.307986][ T4500] hid-generic 0000:04AD:0000.001B: unknown main item tag 0x0 [ 142.308006][ T4500] hid-generic 0000:04AD:0000.001B: unknown main item tag 0x0 [ 142.339038][ T4670] loop2: detected capacity change from 0 to 40427 [ 142.343007][ T4612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.345694][ T4500] hid-generic 0000:04AD:0000.001B: unknown main item tag 0x0 [ 142.364565][ T4500] hid-generic 0000:04AD:0000.001B: unknown main item tag 0x0 [ 142.372210][ T3613] usb 1-1: device descriptor read/64, error -71 [ 142.378802][ T4500] hid-generic 0000:04AD:0000.001B: unknown main item tag 0x0 [ 142.382733][ T4612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.386755][ T4500] hid-generic 0000:04AD:0000.001B: unknown main item tag 0x0 [ 142.404560][ T4500] hid-generic 0000:04AD:0000.001B: unknown main item tag 0x0 [ 142.412360][ T4500] hid-generic 0000:04AD:0000.001B: unknown main item tag 0x0 [ 142.417406][ T4612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.420327][ T4500] hid-generic 0000:04AD:0000.001B: unknown main item tag 0x0 [ 142.437656][ T4500] hid-generic 0000:04AD:0000.001B: unknown main item tag 0x0 [ 142.445389][ T4500] hid-generic 0000:04AD:0000.001B: unknown main item tag 0x0 [ 142.453263][ T4612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.465608][ T4500] hid-generic 0000:04AD:0000.001B: unknown main item tag 0x0 [ 142.473360][ T3619] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 142.481181][ T4612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.491650][ T4500] hid-generic 0000:04AD:0000.001B: unknown main item tag 0x0 [ 142.504901][ T4500] hid-generic 0000:04AD:0000.001B: unknown main item tag 0x0 [ 142.512746][ T4612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.523813][ T4500] hid-generic 0000:04AD:0000.001B: unknown main item tag 0x0 [ 142.531550][ T4612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.544256][ T3619] usb 5-1: cp210x converter now attached to ttyUSB0 [ 142.550950][ T4500] hid-generic 0000:04AD:0000.001B: unknown main item tag 0x0 [ 142.561690][ T4612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.576286][ T4500] hid-generic 0000:04AD:0000.001B: unknown main item tag 0x0 [ 142.585470][ T4500] hid-generic 0000:04AD:0000.001B: unknown main item tag 0x0 [ 142.602514][ T4612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.613386][ T4500] hid-generic 0000:04AD:0000.001B: unknown main item tag 0x0 [ 142.633133][ T4612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.643535][ T4670] F2FS-fs (loop2): invalid crc value [ 142.649399][ T3613] usb 1-1: reset high-speed USB device number 6 using dummy_hcd [ 142.659295][ T4500] hid-generic 0000:04AD:0000.001B: unknown main item tag 0x0 [ 142.693013][ T4500] hid-generic 0000:04AD:0000.001B: unknown main item tag 0x0 [ 142.702278][ T4612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.713784][ T4670] F2FS-fs (loop2): Found nat_bits in checkpoint [ 142.733142][ T1074] Bluetooth: hci8: command 0x0419 tx timeout [ 142.749988][ T4500] hid-generic 0000:04AD:0000.001B: hidraw1: HID v0.00 Device [syz0] on syz0 [ 142.769247][ T4612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.789280][ T4612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.809206][ T4612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.824536][ T4612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.840876][ T4612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.851222][ T4612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.861798][ T4670] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 142.875943][ T4612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.896314][ T4612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.937935][ T4612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.948362][ T3613] usb 1-1: device firmware changed [ 142.954092][ T13] usb 1-1: USB disconnect, device number 6 [ 142.965344][ T25] audit: type=1800 audit(1729466102.870:11): pid=4672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.230" name="file2" dev="loop2" ino=14 res=0 errno=0 [ 143.001171][ T4612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.023955][ T4612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.045085][ T4612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.067857][ T4612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.092811][ T4612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 143.119568][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 143.139371][ T13] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 143.139570][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 143.181337][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 143.200183][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 143.208905][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 143.234223][ T3622] usb 5-1: USB disconnect, device number 7 [ 143.235843][ T4612] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.260746][ T3622] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 143.270761][ T4612] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.295815][ T3622] cp210x 5-1:0.0: device disconnected [ 143.309479][ T4612] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.339426][ T4612] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.463027][ T3571] attempt to access beyond end of device [ 143.463027][ T3571] loop2: rw=2049, want=45112, limit=40427 [ 143.509414][ T13] usb 1-1: config 0 has no interfaces? [ 143.515047][ T13] usb 1-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 143.545343][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.577394][ T13] usb 1-1: config 0 descriptor?? [ 143.587957][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.607512][ T3695] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.630229][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.630661][ T3695] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.640787][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 143.655883][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 144.656448][ T1292] usb 1-1: USB disconnect, device number 7 [ 144.719348][ T4500] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 144.914617][ T4710] FAULT_INJECTION: forcing a failure. [ 144.914617][ T4710] name failslab, interval 1, probability 0, space 0, times 0 [ 144.928664][ T4710] CPU: 1 PID: 4710 Comm: syz.3.241 Not tainted 5.15.168-syzkaller #0 [ 144.936739][ T4710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 144.946786][ T4710] Call Trace: [ 144.950061][ T4710] [ 144.952985][ T4710] dump_stack_lvl+0x1e3/0x2d0 [ 144.957669][ T4710] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 144.963296][ T4710] ? panic+0x860/0x860 [ 144.967370][ T4710] ? __might_sleep+0xc0/0xc0 [ 144.971959][ T4710] should_fail+0x38a/0x4c0 [ 144.976379][ T4710] should_failslab+0x5/0x20 [ 144.980874][ T4710] slab_pre_alloc_hook+0x53/0xc0 [ 144.985811][ T4710] __kmalloc+0x6e/0x300 [ 144.989960][ T4710] ? tomoyo_realpath_from_path+0xd8/0x5e0 [ 144.995683][ T4710] tomoyo_realpath_from_path+0xd8/0x5e0 [ 145.001218][ T4710] ? tomoyo_path_number_perm+0xd4/0x810 [ 145.006769][ T4710] tomoyo_path_number_perm+0x225/0x810 [ 145.012230][ T4710] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 145.017720][ T4710] ? __fget_files+0x413/0x480 [ 145.022405][ T4710] security_file_ioctl+0x6d/0xa0 [ 145.027343][ T4710] __se_sys_ioctl+0x47/0x160 [ 145.031932][ T4710] do_syscall_64+0x3b/0xb0 [ 145.036339][ T4710] ? clear_bhb_loop+0x15/0x70 [ 145.041008][ T4710] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 145.046902][ T4710] RIP: 0033:0x7f41e288eff9 [ 145.051324][ T4710] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.070931][ T4710] RSP: 002b:00007f41e0cc5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 145.079356][ T4710] RAX: ffffffffffffffda RBX: 00007f41e2a47130 RCX: 00007f41e288eff9 [ 145.087328][ T4710] RDX: 0000000020000240 RSI: 00000000000089e1 RDI: 0000000000000004 [ 145.095297][ T4710] RBP: 00007f41e0cc5090 R08: 0000000000000000 R09: 0000000000000000 [ 145.103266][ T4710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.111232][ T4710] R13: 0000000000000000 R14: 00007f41e2a47130 R15: 00007ffda5dc6998 [ 145.119223][ T4710] [ 145.124072][ T4710] ERROR: Out of memory at tomoyo_realpath_from_path. [ 145.439501][ T4500] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 145.480686][ T4500] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.104803][ T4500] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.243034][ T4500] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 146.319514][ T4500] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 146.319545][ T4500] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 146.319565][ T4500] usb 5-1: Manufacturer: syz [ 146.328404][ T4500] usb 5-1: config 0 descriptor?? [ 146.946260][ T4500] appleir 0003:05AC:8243.001C: unknown main item tag 0x0 [ 147.103269][ T4500] appleir 0003:05AC:8243.001C: No inputs registered, leaving [ 147.113888][ T4500] appleir 0003:05AC:8243.001C: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 149.702048][ T3810] usb 5-1: USB disconnect, device number 8 [ 149.976728][ T21] hid-generic 0000:04AD:0000.001D: unknown main item tag 0x0 [ 149.999757][ T21] hid-generic 0000:04AD:0000.001D: unknown main item tag 0x0 [ 150.179221][ T21] hid-generic 0000:04AD:0000.001D: unknown main item tag 0x0 [ 150.186627][ T21] hid-generic 0000:04AD:0000.001D: unknown main item tag 0x0 [ 150.209233][ T21] hid-generic 0000:04AD:0000.001D: unknown main item tag 0x0 [ 151.202935][ T21] hid-generic 0000:04AD:0000.001D: unknown main item tag 0x0 [ 151.215845][ T21] hid-generic 0000:04AD:0000.001D: unknown main item tag 0x0 [ 151.224778][ T21] hid-generic 0000:04AD:0000.001D: unknown main item tag 0x0 [ 151.245005][ T21] hid-generic 0000:04AD:0000.001D: unknown main item tag 0x0 [ 151.276672][ T21] hid-generic 0000:04AD:0000.001D: unknown main item tag 0x0 [ 151.370389][ T21] hid-generic 0000:04AD:0000.001D: unknown main item tag 0x0 [ 151.377800][ T21] hid-generic 0000:04AD:0000.001D: unknown main item tag 0x0 [ 151.399563][ T21] hid-generic 0000:04AD:0000.001D: unknown main item tag 0x0 [ 151.406966][ T21] hid-generic 0000:04AD:0000.001D: unknown main item tag 0x0 [ 151.427859][ T21] hid-generic 0000:04AD:0000.001D: unknown main item tag 0x0 [ 151.437147][ T4784] netlink: 'syz.4.263': attribute type 4 has an invalid length. [ 151.449301][ T21] hid-generic 0000:04AD:0000.001D: unknown main item tag 0x0 [ 151.469740][ T21] hid-generic 0000:04AD:0000.001D: unknown main item tag 0x0 [ 151.478810][ T21] hid-generic 0000:04AD:0000.001D: unknown main item tag 0x0 [ 151.565347][ T21] hid-generic 0000:04AD:0000.001D: unknown main item tag 0x0 [ 151.609205][ T21] hid-generic 0000:04AD:0000.001D: unknown main item tag 0x0 [ 151.647096][ T21] hid-generic 0000:04AD:0000.001D: unknown main item tag 0x0 [ 151.680575][ T21] hid-generic 0000:04AD:0000.001D: unknown main item tag 0x0 [ 151.701618][ T21] hid-generic 0000:04AD:0000.001D: unknown main item tag 0x0 [ 151.729255][ T21] hid-generic 0000:04AD:0000.001D: unknown main item tag 0x0 [ 151.736766][ T21] hid-generic 0000:04AD:0000.001D: unknown main item tag 0x0 [ 151.744900][ T21] hid-generic 0000:04AD:0000.001D: unknown main item tag 0x0 [ 151.759202][ T21] hid-generic 0000:04AD:0000.001D: unknown main item tag 0x0 [ 151.776832][ T21] hid-generic 0000:04AD:0000.001D: unknown main item tag 0x0 [ 151.786677][ T21] hid-generic 0000:04AD:0000.001D: unknown main item tag 0x0 [ 151.804867][ T21] hid-generic 0000:04AD:0000.001D: unknown main item tag 0x0 [ 151.825124][ T21] hid-generic 0000:04AD:0000.001D: unknown main item tag 0x0 [ 151.832953][ T21] hid-generic 0000:04AD:0000.001D: unknown main item tag 0x0 [ 151.855900][ T21] hid-generic 0000:04AD:0000.001D: hidraw0: HID v0.00 Device [syz0] on syz0 [ 151.889295][ T4500] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 152.259446][ T4500] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 152.280150][ T4500] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.301924][ T4500] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.322390][ T4500] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 152.438541][ T4500] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 152.468088][ T4500] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 152.488342][ T4500] usb 2-1: Manufacturer: syz [ 152.520571][ T4500] usb 2-1: config 0 descriptor?? [ 152.927608][ T4809] netlink: 4 bytes leftover after parsing attributes in process `syz.4.270'. [ 153.001065][ T4500] appleir 0003:05AC:8243.001E: unknown main item tag 0x0 [ 153.029880][ T4500] appleir 0003:05AC:8243.001E: No inputs registered, leaving [ 153.106896][ T4500] appleir 0003:05AC:8243.001E: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 154.708985][ T4829] loop2: detected capacity change from 0 to 128 [ 155.006478][ T4500] hid-generic 0000:04AD:0000.001F: unknown main item tag 0x0 [ 155.092723][ T4500] hid-generic 0000:04AD:0000.001F: unknown main item tag 0x0 [ 155.165493][ T4500] hid-generic 0000:04AD:0000.001F: unknown main item tag 0x0 [ 155.238998][ T4500] hid-generic 0000:04AD:0000.001F: unknown main item tag 0x0 [ 155.303618][ T4500] hid-generic 0000:04AD:0000.001F: unknown main item tag 0x0 [ 155.325281][ T4500] hid-generic 0000:04AD:0000.001F: unknown main item tag 0x0 [ 155.345641][ T4500] hid-generic 0000:04AD:0000.001F: unknown main item tag 0x0 [ 155.361527][ T4500] hid-generic 0000:04AD:0000.001F: unknown main item tag 0x0 [ 155.370996][ T4500] hid-generic 0000:04AD:0000.001F: unknown main item tag 0x0 [ 155.378452][ T4500] hid-generic 0000:04AD:0000.001F: unknown main item tag 0x0 [ 155.397442][ T4500] hid-generic 0000:04AD:0000.001F: unknown main item tag 0x0 [ 155.406709][ T25] audit: type=1804 audit(1729466115.310:12): pid=4829 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.275" name="/newroot/54/file0/bus" dev="loop2" ino=1048600 res=1 errno=0 [ 155.435891][ T4500] hid-generic 0000:04AD:0000.001F: unknown main item tag 0x0 [ 155.450790][ T4500] hid-generic 0000:04AD:0000.001F: unknown main item tag 0x0 [ 155.474025][ T4500] hid-generic 0000:04AD:0000.001F: unknown main item tag 0x0 [ 155.489987][ T4500] hid-generic 0000:04AD:0000.001F: unknown main item tag 0x0 [ 155.504783][ T4500] hid-generic 0000:04AD:0000.001F: unknown main item tag 0x0 [ 155.585672][ T4500] hid-generic 0000:04AD:0000.001F: unknown main item tag 0x0 [ 155.626243][ T4500] hid-generic 0000:04AD:0000.001F: unknown main item tag 0x0 [ 155.703875][ T4500] hid-generic 0000:04AD:0000.001F: unknown main item tag 0x0 [ 155.849495][ T4500] hid-generic 0000:04AD:0000.001F: unknown main item tag 0x0 [ 155.872596][ T4500] hid-generic 0000:04AD:0000.001F: unknown main item tag 0x0 [ 155.898385][ T4500] hid-generic 0000:04AD:0000.001F: unknown main item tag 0x0 [ 155.921663][ T4500] hid-generic 0000:04AD:0000.001F: unknown main item tag 0x0 [ 155.942867][ T4500] hid-generic 0000:04AD:0000.001F: unknown main item tag 0x0 [ 155.962999][ T4500] hid-generic 0000:04AD:0000.001F: unknown main item tag 0x0 [ 155.985294][ T4500] hid-generic 0000:04AD:0000.001F: unknown main item tag 0x0 [ 156.007643][ T4500] hid-generic 0000:04AD:0000.001F: unknown main item tag 0x0 [ 156.027751][ T4500] hid-generic 0000:04AD:0000.001F: unknown main item tag 0x0 [ 156.049056][ T4500] hid-generic 0000:04AD:0000.001F: unknown main item tag 0x0 [ 156.068171][ T4500] hid-generic 0000:04AD:0000.001F: unknown main item tag 0x0 [ 156.090457][ T4500] hid-generic 0000:04AD:0000.001F: unknown main item tag 0x0 [ 156.111601][ T4500] hid-generic 0000:04AD:0000.001F: unknown main item tag 0x0 [ 156.135004][ T4500] hid-generic 0000:04AD:0000.001F: hidraw1: HID v0.00 Device [syz0] on syz0 [ 156.424275][ T3622] usb 2-1: USB disconnect, device number 7 [ 156.893036][ T4854] loop2: detected capacity change from 0 to 16 [ 156.994043][ T4854] erofs: (device loop2): mounted with root inode @ nid 36. [ 157.095275][ T4854] attempt to access beyond end of device [ 157.095275][ T4854] loop2: rw=0, want=40, limit=16 [ 157.146941][ T4857] erofs: (device loop2): z_erofs_readahead: readahead error at page 3599 @ nid 36 [ 159.656605][ T4879] FAULT_INJECTION: forcing a failure. [ 159.656605][ T4879] name failslab, interval 1, probability 0, space 0, times 0 [ 159.671058][ T4879] CPU: 1 PID: 4879 Comm: syz.1.288 Not tainted 5.15.168-syzkaller #0 [ 159.679130][ T4879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 159.689188][ T4879] Call Trace: [ 159.692461][ T4879] [ 159.695383][ T4879] dump_stack_lvl+0x1e3/0x2d0 [ 159.700063][ T4879] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 159.705690][ T4879] ? panic+0x860/0x860 [ 159.709756][ T4879] ? __might_sleep+0xc0/0xc0 [ 159.714341][ T4879] ? __mutex_lock_common+0x444/0x25a0 [ 159.719714][ T4879] should_fail+0x38a/0x4c0 [ 159.724132][ T4879] should_failslab+0x5/0x20 [ 159.728635][ T4879] slab_pre_alloc_hook+0x53/0xc0 [ 159.733574][ T4879] __kmalloc_node+0x71/0x390 [ 159.738172][ T4879] ? kvmalloc_node+0x80/0x140 [ 159.742846][ T4879] ? __lock_acquire+0x1ff0/0x1ff0 [ 159.747871][ T4879] kvmalloc_node+0x80/0x140 [ 159.752374][ T4879] seq_read_iter+0x1fe/0xd10 [ 159.756979][ T4879] seq_read+0x452/0x5c0 [ 159.761133][ T4879] ? seq_open+0x140/0x140 [ 159.765462][ T4879] ? __mutex_trylock_common+0x17e/0x2e0 [ 159.771009][ T4879] ? __might_sleep+0xc0/0xc0 [ 159.775601][ T4879] ? rcu_lock_release+0x20/0x20 [ 159.780451][ T4879] ? common_file_perm+0x17d/0x1d0 [ 159.785475][ T4879] ? fsnotify_perm+0x442/0x590 [ 159.790234][ T4879] ? seq_open+0x140/0x140 [ 159.794562][ T4879] vfs_read+0x2fc/0xe10 [ 159.798719][ T4879] ? kernel_read+0x1f0/0x1f0 [ 159.803308][ T4879] ? __fget_files+0x413/0x480 [ 159.807986][ T4879] ? mutex_lock_nested+0x17/0x20 [ 159.812916][ T4879] ? __fdget_pos+0x2cb/0x380 [ 159.817497][ T4879] ? ksys_read+0x77/0x2c0 [ 159.821821][ T4879] ksys_read+0x1a2/0x2c0 [ 159.826058][ T4879] ? print_irqtrace_events+0x210/0x210 [ 159.831513][ T4879] ? vfs_write+0xe50/0xe50 [ 159.835925][ T4879] ? syscall_enter_from_user_mode+0x2e/0x240 [ 159.841898][ T4879] ? lockdep_hardirqs_on+0x94/0x130 [ 159.847093][ T4879] ? syscall_enter_from_user_mode+0x2e/0x240 [ 159.853247][ T4879] do_syscall_64+0x3b/0xb0 [ 159.857656][ T4879] ? clear_bhb_loop+0x15/0x70 [ 159.862333][ T4879] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 159.868223][ T4879] RIP: 0033:0x7f21ee653ff9 [ 159.872638][ T4879] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.892236][ T4879] RSP: 002b:00007f21eca8a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 159.900648][ T4879] RAX: ffffffffffffffda RBX: 00007f21ee80c130 RCX: 00007f21ee653ff9 [ 159.908612][ T4879] RDX: 0000000000002020 RSI: 00000000200020c0 RDI: 0000000000000007 [ 159.916578][ T4879] RBP: 00007f21eca8a090 R08: 0000000000000000 R09: 0000000000000000 [ 159.924541][ T4879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.932504][ T4879] R13: 0000000000000000 R14: 00007f21ee80c130 R15: 00007ffdc1f04be8 [ 159.940484][ T4879] [ 160.264562][ T21] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 160.759849][ T21] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 160.781456][ T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.891052][ T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.000683][ T21] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 161.018342][ T4500] hid-generic 0000:04AD:0000.0020: unknown main item tag 0x0 [ 161.043820][ T4500] hid-generic 0000:04AD:0000.0020: unknown main item tag 0x0 [ 161.051788][ T4500] hid-generic 0000:04AD:0000.0020: unknown main item tag 0x0 [ 161.059974][ T4500] hid-generic 0000:04AD:0000.0020: unknown main item tag 0x0 [ 161.068209][ T4500] hid-generic 0000:04AD:0000.0020: unknown main item tag 0x0 [ 161.077147][ T4500] hid-generic 0000:04AD:0000.0020: unknown main item tag 0x0 [ 161.089295][ T4500] hid-generic 0000:04AD:0000.0020: unknown main item tag 0x0 [ 161.106008][ T4500] hid-generic 0000:04AD:0000.0020: unknown main item tag 0x0 [ 161.119259][ T4500] hid-generic 0000:04AD:0000.0020: unknown main item tag 0x0 [ 161.127111][ T21] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 161.127760][ T4500] hid-generic 0000:04AD:0000.0020: unknown main item tag 0x0 [ 161.145759][ T4500] hid-generic 0000:04AD:0000.0020: unknown main item tag 0x0 [ 161.147366][ T21] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 161.153751][ T4500] hid-generic 0000:04AD:0000.0020: unknown main item tag 0x0 [ 161.172489][ T4500] hid-generic 0000:04AD:0000.0020: unknown main item tag 0x0 [ 161.181996][ T4500] hid-generic 0000:04AD:0000.0020: unknown main item tag 0x0 [ 161.190353][ T4500] hid-generic 0000:04AD:0000.0020: unknown main item tag 0x0 [ 161.194110][ T21] usb 1-1: Manufacturer: syz [ 161.198027][ T4500] hid-generic 0000:04AD:0000.0020: unknown main item tag 0x0 [ 161.221301][ T4500] hid-generic 0000:04AD:0000.0020: unknown main item tag 0x0 [ 161.235797][ T4500] hid-generic 0000:04AD:0000.0020: unknown main item tag 0x0 [ 161.245068][ T4500] hid-generic 0000:04AD:0000.0020: unknown main item tag 0x0 [ 161.246493][ T21] usb 1-1: config 0 descriptor?? [ 161.253502][ T4500] hid-generic 0000:04AD:0000.0020: unknown main item tag 0x0 [ 161.269230][ T4500] hid-generic 0000:04AD:0000.0020: unknown main item tag 0x0 [ 161.277358][ T4500] hid-generic 0000:04AD:0000.0020: unknown main item tag 0x0 [ 161.295793][ T4500] hid-generic 0000:04AD:0000.0020: unknown main item tag 0x0 [ 161.354532][ T4500] hid-generic 0000:04AD:0000.0020: unknown main item tag 0x0 [ 161.401134][ T4500] hid-generic 0000:04AD:0000.0020: unknown main item tag 0x0 [ 161.473748][ T4500] hid-generic 0000:04AD:0000.0020: unknown main item tag 0x0 [ 161.510365][ T4500] hid-generic 0000:04AD:0000.0020: unknown main item tag 0x0 [ 161.569704][ T4500] hid-generic 0000:04AD:0000.0020: unknown main item tag 0x0 [ 161.578150][ T4500] hid-generic 0000:04AD:0000.0020: unknown main item tag 0x0 [ 161.671608][ T4500] hid-generic 0000:04AD:0000.0020: unknown main item tag 0x0 [ 161.679079][ T4500] hid-generic 0000:04AD:0000.0020: unknown main item tag 0x0 [ 161.707370][ T4500] hid-generic 0000:04AD:0000.0020: unknown main item tag 0x0 [ 161.763954][ T4500] hid-generic 0000:04AD:0000.0020: hidraw0: HID v0.00 Device [syz0] on syz0 [ 161.780958][ T21] appleir 0003:05AC:8243.0021: unknown main item tag 0x0 [ 161.796555][ T21] appleir 0003:05AC:8243.0021: No inputs registered, leaving [ 161.967396][ T21] appleir 0003:05AC:8243.0021: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 164.534351][ T13] usb 1-1: USB disconnect, device number 8 [ 166.729937][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 166.749183][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 166.758039][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 166.766909][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 167.619258][ T13] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 167.668605][ T4951] FAULT_INJECTION: forcing a failure. [ 167.668605][ T4951] name failslab, interval 1, probability 0, space 0, times 0 [ 167.712365][ T4951] CPU: 0 PID: 4951 Comm: syz.1.309 Not tainted 5.15.168-syzkaller #0 [ 167.720448][ T4951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 167.730509][ T4951] Call Trace: [ 167.733784][ T4951] [ 167.736711][ T4951] dump_stack_lvl+0x1e3/0x2d0 [ 167.741391][ T4951] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 167.747026][ T4951] ? panic+0x860/0x860 [ 167.751097][ T4951] ? __might_sleep+0xc0/0xc0 [ 167.755697][ T4951] should_fail+0x38a/0x4c0 [ 167.760124][ T4951] should_failslab+0x5/0x20 [ 167.764628][ T4951] slab_pre_alloc_hook+0x53/0xc0 [ 167.769574][ T4951] kmem_cache_alloc_node+0x49/0x2c0 [ 167.774770][ T4951] ? __alloc_skb+0xdd/0x590 [ 167.779278][ T4951] __alloc_skb+0xdd/0x590 [ 167.783607][ T4951] alloc_skb_with_frags+0xa3/0x780 [ 167.788731][ T4951] sock_alloc_send_pskb+0x915/0xa50 [ 167.793941][ T4951] ? sock_kzfree_s+0x50/0x50 [ 167.798532][ T4951] ? do_raw_spin_unlock+0x137/0x8b0 [ 167.803735][ T4951] unix_dgram_sendmsg+0x6fd/0x2090 [ 167.808868][ T4951] ? unix_dgram_poll+0x640/0x640 [ 167.813810][ T4951] ? aa_sock_msg_perm+0x91/0x150 [ 167.818747][ T4951] ? unix_seqpacket_sendmsg+0x108/0x1d0 [ 167.824297][ T4951] ? unix_dgram_peer_wake_me+0x420/0x420 [ 167.829932][ T4951] kernel_sendmsg+0x205/0x2e0 [ 167.834621][ T4951] ? sock_sendmsg+0x2d0/0x2d0 [ 167.839325][ T4951] sock_no_sendpage+0x156/0x1c0 [ 167.844182][ T4951] ? __receive_sock+0x90/0x90 [ 167.848866][ T4951] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 167.854848][ T4951] kernel_sendpage+0x2e0/0x390 [ 167.859633][ T4951] sock_sendpage+0x7f/0xb0 [ 167.864052][ T4951] pipe_to_sendpage+0x260/0x350 [ 167.868901][ T4951] ? sock_fasync+0xf0/0xf0 [ 167.873314][ T4951] ? generic_splice_sendpage+0x220/0x220 [ 167.878957][ T4951] __splice_from_pipe+0x33b/0x890 [ 167.883996][ T4951] ? generic_splice_sendpage+0x220/0x220 [ 167.889634][ T4951] generic_splice_sendpage+0x195/0x220 [ 167.895094][ T4951] ? iter_file_splice_write+0xfa0/0xfa0 [ 167.900644][ T4951] ? common_file_perm+0x17d/0x1d0 [ 167.905669][ T4951] ? fsnotify_perm+0x64/0x590 [ 167.910339][ T4951] ? security_file_permission+0x75/0xa0 [ 167.915880][ T4951] ? iter_file_splice_write+0xfa0/0xfa0 [ 167.921426][ T4951] do_splice+0xfe6/0x1790 [ 167.925778][ T4951] ? __fget_files+0x413/0x480 [ 167.930460][ T4951] ? wait_for_space+0x2d0/0x2d0 [ 167.935316][ T4951] ? __fdget+0x191/0x220 [ 167.939567][ T4951] __se_sys_splice+0x340/0x420 [ 167.944342][ T4951] ? __x64_sys_splice+0xf0/0xf0 [ 167.949198][ T4951] ? syscall_enter_from_user_mode+0x2e/0x240 [ 167.955181][ T4951] ? lockdep_hardirqs_on+0x94/0x130 [ 167.960386][ T4951] ? __x64_sys_splice+0x1d/0xf0 [ 167.965243][ T4951] do_syscall_64+0x3b/0xb0 [ 167.969660][ T4951] ? clear_bhb_loop+0x15/0x70 [ 167.974338][ T4951] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 167.980235][ T4951] RIP: 0033:0x7f21ee653ff9 [ 167.984659][ T4951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.002119][ T4947] chnl_net:caif_netlink_parms(): no params data found [ 168.004262][ T4951] RSP: 002b:00007f21ecaab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 168.019428][ T4951] RAX: ffffffffffffffda RBX: 00007f21ee80c058 RCX: 00007f21ee653ff9 [ 168.027402][ T4951] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 168.035374][ T4951] RBP: 00007f21ecaab090 R08: 000000000004ffe6 R09: 0000000000000000 [ 168.043347][ T4951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 168.051322][ T4951] R13: 0000000000000001 R14: 00007f21ee80c058 R15: 00007ffdc1f04be8 [ 168.059308][ T4951] [ 168.250803][ T4947] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.257932][ T4947] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.988892][ T4947] device bridge_slave_0 entered promiscuous mode [ 169.140119][ T4947] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.194511][ T4947] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.277196][ T4947] device bridge_slave_1 entered promiscuous mode [ 169.401428][ T4947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.149438][ T13] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 170.281529][ T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.360546][ T21] Bluetooth: hci9: command 0x0409 tx timeout [ 170.392317][ T4947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.463135][ T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.473310][ T13] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 170.529329][ T13] usb 1-1: string descriptor 0 read error: -71 [ 170.535536][ T13] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 170.558027][ T13] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 170.574175][ T4947] team0: Port device team_slave_0 added [ 170.580545][ T13] usb 1-1: config 0 descriptor?? [ 170.599448][ T13] usb 1-1: can't set config #0, error -71 [ 170.609614][ T13] usb 1-1: USB disconnect, device number 9 [ 170.615182][ T4947] team0: Port device team_slave_1 added [ 170.697427][ T4947] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.727141][ T4947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.763679][ T4997] FAULT_INJECTION: forcing a failure. [ 170.763679][ T4997] name failslab, interval 1, probability 0, space 0, times 0 [ 170.778156][ T4997] CPU: 1 PID: 4997 Comm: syz.3.320 Not tainted 5.15.168-syzkaller #0 [ 170.786234][ T4997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 170.796286][ T4997] Call Trace: [ 170.799566][ T4997] [ 170.802493][ T4997] dump_stack_lvl+0x1e3/0x2d0 [ 170.807176][ T4997] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 170.812808][ T4997] ? panic+0x860/0x860 [ 170.816887][ T4997] ? __might_sleep+0xc0/0xc0 [ 170.821482][ T4997] ? drm_mode_setcrtc+0xbc1/0x17b0 [ 170.826602][ T4997] should_fail+0x38a/0x4c0 [ 170.831029][ T4997] should_failslab+0x5/0x20 [ 170.835539][ T4997] slab_pre_alloc_hook+0x53/0xc0 [ 170.840479][ T4997] kmem_cache_alloc_trace+0x49/0x290 [ 170.845760][ T4997] ? vkms_atomic_crtc_duplicate_state+0x74/0x180 [ 170.852129][ T4997] vkms_atomic_crtc_duplicate_state+0x74/0x180 [ 170.858282][ T4997] drm_atomic_get_crtc_state+0x178/0x390 [ 170.863925][ T4997] __drm_atomic_helper_set_config+0xf4/0xf70 [ 170.869913][ T4997] ? __kmalloc+0x168/0x300 [ 170.874332][ T4997] ? __drm_atomic_helper_disable_plane+0x60/0x60 [ 170.880666][ T4997] ? drm_atomic_state_init+0x15d/0x2b0 [ 170.886133][ T4997] drm_atomic_helper_set_config+0x87/0x150 [ 170.891943][ T4997] drm_mode_setcrtc+0xbc1/0x17b0 [ 170.896885][ T4997] ? mark_lock+0x98/0x340 [ 170.901248][ T4997] ? drm_crtc_check_viewport+0x3a0/0x3a0 [ 170.906886][ T4997] ? drm_is_current_master+0x1a6/0x200 [ 170.912346][ T4997] ? do_raw_spin_lock+0x14a/0x370 [ 170.917388][ T4997] ? _raw_spin_unlock+0x24/0x40 [ 170.922240][ T4997] drm_ioctl_kernel+0x345/0x4f0 [ 170.927094][ T4997] ? drm_crtc_check_viewport+0x3a0/0x3a0 [ 170.932730][ T4997] ? drm_ioctl_permit+0x210/0x210 [ 170.937755][ T4997] ? __might_fault+0xb4/0x110 [ 170.942443][ T4997] drm_ioctl+0x60d/0x9d0 [ 170.946689][ T4997] ? drm_crtc_check_viewport+0x3a0/0x3a0 [ 170.952329][ T4997] ? drm_ioctl_kernel+0x4f0/0x4f0 [ 170.957373][ T4997] ? bpf_lsm_file_ioctl+0x5/0x10 [ 170.962309][ T4997] ? security_file_ioctl+0x7d/0xa0 [ 170.967421][ T4997] ? drm_ioctl_kernel+0x4f0/0x4f0 [ 170.972442][ T4997] __se_sys_ioctl+0xf1/0x160 [ 170.977033][ T4997] do_syscall_64+0x3b/0xb0 [ 170.981451][ T4997] ? clear_bhb_loop+0x15/0x70 [ 170.986122][ T4997] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 170.992020][ T4997] RIP: 0033:0x7f41e288eff9 [ 170.996441][ T4997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.016040][ T4997] RSP: 002b:00007f41e0d07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 171.024461][ T4997] RAX: ffffffffffffffda RBX: 00007f41e2a46f80 RCX: 00007f41e288eff9 [ 171.032431][ T4997] RDX: 0000000020000400 RSI: 00000000c06864a2 RDI: 0000000000000003 [ 171.040403][ T4997] RBP: 00007f41e0d07090 R08: 0000000000000000 R09: 0000000000000000 [ 171.048370][ T4997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.056336][ T4997] R13: 0000000000000000 R14: 00007f41e2a46f80 R15: 00007ffda5dc6998 [ 171.064319][ T4997] [ 171.076626][ T21] Bluetooth: hci0: command 0x0406 tx timeout [ 171.086593][ T4947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.097815][ T21] Bluetooth: hci2: command 0x0406 tx timeout [ 171.104241][ T21] Bluetooth: hci3: command 0x0406 tx timeout [ 171.112613][ T4947] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.119987][ T21] Bluetooth: hci4: command 0x0406 tx timeout [ 171.126239][ T4947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.236224][ T4947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.395024][ T4947] device hsr_slave_0 entered promiscuous mode [ 171.401906][ T4947] device hsr_slave_1 entered promiscuous mode [ 171.408464][ T4947] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 171.503910][ T4947] Cannot create hsr debugfs directory [ 172.429359][ T3810] Bluetooth: hci9: command 0x041b tx timeout [ 172.658271][ T5014] netlink: 8 bytes leftover after parsing attributes in process `syz.4.324'. [ 173.542546][ T4947] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.826569][ T4947] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.007762][ T4947] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.172700][ T4947] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.190343][ T13] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 174.350198][ T4947] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 174.389326][ T4947] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 174.460312][ T4947] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 174.491949][ T4947] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 174.557407][ T2723] Bluetooth: hci9: command 0x040f tx timeout [ 174.609433][ T13] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 174.813298][ T4947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.300061][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 175.327370][ T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.350199][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 175.398327][ T4947] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.419753][ T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.470281][ T13] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 175.513829][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 175.532430][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 175.593452][ T3695] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.600562][ T3695] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.608308][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 175.876808][ T3880] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 176.005144][ T13] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 176.009373][ T3880] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 176.070329][ T13] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 176.079602][ T13] usb 4-1: Manufacturer: syz [ 176.223051][ T3880] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.230178][ T3880] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.369719][ T13] usb 4-1: config 0 descriptor?? [ 176.654337][ T3810] Bluetooth: hci9: command 0x0419 tx timeout [ 176.668154][ T3880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 176.693470][ T3880] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 176.710242][ T3880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 176.724157][ T3880] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 176.751192][ T3880] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 176.814514][ T3880] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 177.386261][ T3880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 177.570950][ T3880] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 177.793226][ T4947] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 177.836865][ T4947] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 177.846487][ T3880] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 177.866187][ T3880] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 177.905261][ T3880] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 178.372238][ T3851] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 178.384092][ T3851] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 178.426750][ T4947] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.536911][ T3851] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 178.553895][ T3851] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 178.631785][ T3851] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 178.654814][ T3851] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 178.680974][ T3851] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 178.689490][ T3851] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 178.699811][ T4947] device veth0_vlan entered promiscuous mode [ 178.733851][ T4947] device veth1_vlan entered promiscuous mode [ 178.808319][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 178.821922][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 178.838560][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 178.930199][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 178.940041][ T13] usbhid 4-1:0.0: can't add hid device: -71 [ 178.948601][ T4947] device veth0_macvtap entered promiscuous mode [ 178.956104][ T13] usbhid: probe of 4-1:0.0 failed with error -71 [ 178.993686][ T4947] device veth1_macvtap entered promiscuous mode [ 179.096038][ T4947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.159815][ T13] usb 4-1: USB disconnect, device number 13 [ 179.169870][ T4947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.189213][ T4947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.219467][ T4947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.249192][ T4947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.273682][ T4947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.416886][ T4947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.437859][ T4947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.449081][ T4947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.464212][ T4947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.474529][ T4947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.485477][ T4947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.495413][ T4947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.539350][ T4947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.709682][ T4947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.777332][ T4947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.814029][ T4947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.950441][ T4947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.980665][ T4947] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.009120][ T4947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.059306][ T4947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.089689][ T4947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.116105][ T4947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.152087][ T4947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.379610][ T4947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.704776][ T21] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 180.977940][ T4947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.040287][ T4947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.059178][ T4947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.089265][ T4947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.108110][ T4947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.119673][ T4947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.133423][ T4947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.144081][ T4947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.154467][ T4947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.165143][ T4947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.175857][ T4947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.186390][ T4947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.197219][ T4947] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.207554][ T3851] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 181.219884][ T3851] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 181.240255][ T3851] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 181.251123][ T3851] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 181.350608][ T4947] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.359740][ T4947] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.368431][ T4947] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.378615][ T4947] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.659634][ T21] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 181.689686][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.758316][ T21] usb 2-1: Product: syz [ 181.777123][ T3669] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.791704][ T21] usb 2-1: Manufacturer: syz [ 181.827797][ T3669] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.841970][ T21] usb 2-1: SerialNumber: syz [ 181.928272][ T3880] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 181.966723][ T21] usb 2-1: config 0 descriptor?? [ 181.986297][ T3880] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.024409][ T21] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 182.055787][ T3880] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.078659][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 182.105835][ T21] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 182.151700][ T21] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 182.173758][ T21] usb 2-1: media controller created [ 182.221073][ T21] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 182.250570][ T3622] hid-generic 0000:04AD:0000.0022: unknown main item tag 0x0 [ 182.274350][ T3622] hid-generic 0000:04AD:0000.0022: unknown main item tag 0x0 [ 182.283309][ T3622] hid-generic 0000:04AD:0000.0022: unknown main item tag 0x0 [ 182.291022][ T3622] hid-generic 0000:04AD:0000.0022: unknown main item tag 0x0 [ 182.303549][ T3622] hid-generic 0000:04AD:0000.0022: unknown main item tag 0x0 [ 182.311324][ T3622] hid-generic 0000:04AD:0000.0022: unknown main item tag 0x0 [ 182.318941][ T3622] hid-generic 0000:04AD:0000.0022: unknown main item tag 0x0 [ 182.336940][ T3622] hid-generic 0000:04AD:0000.0022: unknown main item tag 0x0 [ 182.370784][ T3622] hid-generic 0000:04AD:0000.0022: unknown main item tag 0x0 [ 182.379044][ T21] DVB: Unable to find symbol mt352_attach() [ 182.418272][ T3622] hid-generic 0000:04AD:0000.0022: unknown main item tag 0x0 [ 182.438634][ T3622] hid-generic 0000:04AD:0000.0022: unknown main item tag 0x0 [ 182.448511][ T3622] hid-generic 0000:04AD:0000.0022: unknown main item tag 0x0 [ 182.456080][ T3622] hid-generic 0000:04AD:0000.0022: unknown main item tag 0x0 [ 182.463874][ T21] DVB: Unable to find symbol nxt6000_attach() [ 182.470047][ T21] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 182.480015][ T3622] hid-generic 0000:04AD:0000.0022: unknown main item tag 0x0 [ 182.487406][ T3622] hid-generic 0000:04AD:0000.0022: unknown main item tag 0x0 [ 182.495165][ T3622] hid-generic 0000:04AD:0000.0022: unknown main item tag 0x0 [ 182.505868][ T3622] hid-generic 0000:04AD:0000.0022: unknown main item tag 0x0 [ 182.514192][ T3622] hid-generic 0000:04AD:0000.0022: unknown main item tag 0x0 [ 182.521870][ T3622] hid-generic 0000:04AD:0000.0022: unknown main item tag 0x0 [ 182.530923][ T21] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input6 [ 182.552350][ T3622] hid-generic 0000:04AD:0000.0022: unknown main item tag 0x0 [ 182.565599][ T3622] hid-generic 0000:04AD:0000.0022: unknown main item tag 0x0 [ 182.583665][ T21] dvb-usb: schedule remote query interval to 1000 msecs. [ 182.617917][ T3622] hid-generic 0000:04AD:0000.0022: unknown main item tag 0x0 [ 182.625705][ T21] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 182.636122][ T3622] hid-generic 0000:04AD:0000.0022: unknown main item tag 0x0 [ 182.645327][ T21] dvb-usb: bulk message failed: -22 (7/0) [ 182.651890][ T3622] hid-generic 0000:04AD:0000.0022: unknown main item tag 0x0 [ 182.659303][ T21] dvb-usb: bulk message failed: -22 (7/0) [ 182.665284][ T3622] hid-generic 0000:04AD:0000.0022: unknown main item tag 0x0 [ 182.677934][ T21] usb 2-1: USB disconnect, device number 9 [ 182.684542][ T3622] hid-generic 0000:04AD:0000.0022: unknown main item tag 0x0 [ 182.694055][ T3622] hid-generic 0000:04AD:0000.0022: unknown main item tag 0x0 [ 182.701856][ T3622] hid-generic 0000:04AD:0000.0022: unknown main item tag 0x0 [ 182.713380][ T3622] hid-generic 0000:04AD:0000.0022: unknown main item tag 0x0 [ 182.721054][ T3622] hid-generic 0000:04AD:0000.0022: unknown main item tag 0x0 [ 182.728664][ T3622] hid-generic 0000:04AD:0000.0022: unknown main item tag 0x0 [ 182.769534][ T3622] hid-generic 0000:04AD:0000.0022: unknown main item tag 0x0 [ 182.801775][ T3622] hid-generic 0000:04AD:0000.0022: hidraw0: HID v0.00 Device [syz0] on syz0 [ 183.463153][ T3586] udevd[3586]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 183.542601][ T21] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 183.609288][ T4528] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 186.409376][ T4528] usb 4-1: device descriptor read/all, error -71 [ 186.465119][ T13] Bluetooth: hci5: command 0x0406 tx timeout [ 186.471228][ T13] Bluetooth: hci6: command 0x0406 tx timeout [ 187.053114][ T5163] FAULT_INJECTION: forcing a failure. [ 187.053114][ T5163] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 187.066803][ T5163] CPU: 0 PID: 5163 Comm: syz.0.367 Not tainted 5.15.168-syzkaller #0 [ 187.074872][ T5163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 187.084931][ T5163] Call Trace: [ 187.088214][ T5163] [ 187.091141][ T5163] dump_stack_lvl+0x1e3/0x2d0 [ 187.095823][ T5163] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 187.101455][ T5163] ? panic+0x860/0x860 [ 187.105542][ T5163] should_fail+0x38a/0x4c0 [ 187.109966][ T5163] prepare_alloc_pages+0x1db/0x5b0 [ 187.115092][ T5163] __alloc_pages+0x14f/0x700 [ 187.119686][ T5163] ? __rmqueue_pcplist+0x2030/0x2030 [ 187.124981][ T5163] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 187.130616][ T5163] ? lockdep_hardirqs_on+0x94/0x130 [ 187.135826][ T5163] alloc_pages_vma+0x39a/0x800 [ 187.140589][ T5163] ? mpol_shared_policy_lookup+0x144/0x1e0 [ 187.146397][ T5163] shmem_alloc_and_acct_page+0x4d1/0xd10 [ 187.152040][ T5163] ? shmem_swapin_page+0x22f0/0x22f0 [ 187.157433][ T5163] ? xas_start+0x3ff/0x7b0 [ 187.161858][ T5163] ? xas_load+0x11a/0x140 [ 187.166189][ T5163] ? pagecache_get_page+0xd23/0x1010 [ 187.171488][ T5163] ? page_cache_prev_miss+0x500/0x500 [ 187.176863][ T5163] ? __schedule+0x12cc/0x45b0 [ 187.181541][ T5163] ? __mark_inode_dirty+0x4ca/0xd60 [ 187.186745][ T5163] shmem_getpage_gfp+0x17b1/0x3190 [ 187.191887][ T5163] ? shmem_getpage+0xa0/0xa0 [ 187.196483][ T5163] ? fault_in_safe_writeable+0x250/0x250 [ 187.202112][ T5163] ? preempt_schedule+0xd9/0xe0 [ 187.206958][ T5163] ? schedule_preempt_disabled+0x20/0x20 [ 187.212593][ T5163] shmem_write_begin+0xce/0x1a0 [ 187.217454][ T5163] generic_perform_write+0x2bf/0x5b0 [ 187.222851][ T5163] ? grab_cache_page_write_begin+0x90/0x90 [ 187.228761][ T5163] ? file_remove_privs+0x610/0x610 [ 187.233881][ T5163] ? rwsem_write_trylock+0x166/0x210 [ 187.239186][ T5163] __generic_file_write_iter+0x243/0x4f0 [ 187.244839][ T5163] generic_file_write_iter+0xa7/0x1b0 [ 187.250248][ T5163] vfs_write+0xacd/0xe50 [ 187.254502][ T5163] ? file_end_write+0x250/0x250 [ 187.259372][ T5163] ? __fget_files+0x413/0x480 [ 187.264059][ T5163] ? mutex_lock_nested+0x17/0x20 [ 187.268998][ T5163] ? __fdget_pos+0x2cb/0x380 [ 187.273587][ T5163] ? ksys_write+0x77/0x2c0 [ 187.278007][ T5163] ksys_write+0x1a2/0x2c0 [ 187.282344][ T5163] ? print_irqtrace_events+0x210/0x210 [ 187.287814][ T5163] ? __ia32_sys_read+0x80/0x80 [ 187.292583][ T5163] ? syscall_enter_from_user_mode+0x2e/0x240 [ 187.298567][ T5163] ? lockdep_hardirqs_on+0x94/0x130 [ 187.303767][ T5163] ? syscall_enter_from_user_mode+0x2e/0x240 [ 187.309755][ T5163] do_syscall_64+0x3b/0xb0 [ 187.314179][ T5163] ? clear_bhb_loop+0x15/0x70 [ 187.318860][ T5163] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 187.324760][ T5163] RIP: 0033:0x7f14c2b4bff9 [ 187.329185][ T5163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.348792][ T5163] RSP: 002b:00007f14c0f82038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 187.357209][ T5163] RAX: ffffffffffffffda RBX: 00007f14c2d04130 RCX: 00007f14c2b4bff9 [ 187.365183][ T5163] RDX: 000000000208e24b RSI: 0000000020000080 RDI: 0000000000000007 [ 187.373166][ T5163] RBP: 00007f14c0f82090 R08: 0000000000000000 R09: 0000000000000000 [ 187.381137][ T5163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.389105][ T5163] R13: 0000000000000000 R14: 00007f14c2d04130 R15: 00007fff30a33d08 [ 187.397090][ T5163] [ 188.059398][ T4528] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 188.447148][ T1292] hid-generic 0000:04AD:0000.0023: unknown main item tag 0x0 [ 188.525462][ T1292] hid-generic 0000:04AD:0000.0023: unknown main item tag 0x0 [ 188.700099][ T1292] hid-generic 0000:04AD:0000.0023: unknown main item tag 0x0 [ 188.820269][ T1292] hid-generic 0000:04AD:0000.0023: unknown main item tag 0x0 [ 188.979284][ T4528] usb 4-1: Using ep0 maxpacket: 8 [ 189.032781][ T1292] hid-generic 0000:04AD:0000.0023: unknown main item tag 0x0 [ 189.049408][ T1292] hid-generic 0000:04AD:0000.0023: unknown main item tag 0x0 [ 189.057341][ T1292] hid-generic 0000:04AD:0000.0023: unknown main item tag 0x0 [ 189.064819][ T1292] hid-generic 0000:04AD:0000.0023: unknown main item tag 0x0 [ 189.073909][ T1292] hid-generic 0000:04AD:0000.0023: unknown main item tag 0x0 [ 189.081617][ T1292] hid-generic 0000:04AD:0000.0023: unknown main item tag 0x0 [ 189.119220][ T1292] hid-generic 0000:04AD:0000.0023: unknown main item tag 0x0 [ 189.126758][ T1292] hid-generic 0000:04AD:0000.0023: unknown main item tag 0x0 [ 189.159198][ T1292] hid-generic 0000:04AD:0000.0023: unknown main item tag 0x0 [ 189.176807][ T1292] hid-generic 0000:04AD:0000.0023: unknown main item tag 0x0 [ 189.206836][ T1292] hid-generic 0000:04AD:0000.0023: unknown main item tag 0x0 [ 189.237240][ T1292] hid-generic 0000:04AD:0000.0023: unknown main item tag 0x0 [ 189.269370][ T1292] hid-generic 0000:04AD:0000.0023: unknown main item tag 0x0 [ 189.297123][ T1292] hid-generic 0000:04AD:0000.0023: unknown main item tag 0x0 [ 189.309237][ T1292] hid-generic 0000:04AD:0000.0023: unknown main item tag 0x0 [ 189.400988][ T4528] usb 4-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 189.431100][ T4528] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.645967][ T4528] usb 4-1: Product: syz [ 189.737012][ T4528] usb 4-1: Manufacturer: syz [ 189.835379][ T4528] usb 4-1: SerialNumber: syz [ 190.011851][ T4528] usb 4-1: config 0 descriptor?? [ 190.052205][ T1292] hid-generic 0000:04AD:0000.0023: unknown main item tag 0x0 [ 190.059700][ T1292] hid-generic 0000:04AD:0000.0023: unknown main item tag 0x0 [ 190.067081][ T1292] hid-generic 0000:04AD:0000.0023: unknown main item tag 0x0 [ 190.074531][ T1292] hid-generic 0000:04AD:0000.0023: unknown main item tag 0x0 [ 190.081386][ T4528] usb 4-1: can't set config #0, error -71 [ 190.082425][ T1292] hid-generic 0000:04AD:0000.0023: unknown main item tag 0x0 [ 190.099307][ T1292] hid-generic 0000:04AD:0000.0023: unknown main item tag 0x0 [ 190.106701][ T1292] hid-generic 0000:04AD:0000.0023: unknown main item tag 0x0 [ 190.127454][ T1292] hid-generic 0000:04AD:0000.0023: unknown main item tag 0x0 [ 190.127625][ T4528] usb 4-1: USB disconnect, device number 15 [ 190.155695][ T1292] hid-generic 0000:04AD:0000.0023: unknown main item tag 0x0 [ 190.165812][ T1292] hid-generic 0000:04AD:0000.0023: unknown main item tag 0x0 [ 190.183418][ T1292] hid-generic 0000:04AD:0000.0023: unknown main item tag 0x0 [ 190.209298][ T1292] hid-generic 0000:04AD:0000.0023: unknown main item tag 0x0 [ 190.216692][ T1292] hid-generic 0000:04AD:0000.0023: unknown main item tag 0x0 [ 190.309338][ T1292] hid-generic 0000:04AD:0000.0023: hidraw0: HID v0.00 Device [syz0] on syz0 [ 190.590168][ T3785] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 191.236113][ T3785] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 191.251740][ T3785] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.263673][ T3785] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.273695][ T3785] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 191.471254][ T3785] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 191.572280][ T3785] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 191.773052][ T3785] usb 3-1: Manufacturer: syz [ 192.010264][ T3785] usb 3-1: config 0 descriptor?? [ 192.319337][ T1074] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 194.354627][ T1389] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.455613][ T1389] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.549284][ T1074] usb 2-1: device descriptor read/all, error -71 [ 195.320256][ T3785] usbhid 3-1:0.0: can't add hid device: -71 [ 195.626428][ T3785] usbhid: probe of 3-1:0.0 failed with error -71 [ 195.786496][ T1292] hid-generic 0000:04AD:0000.0024: unknown main item tag 0x0 [ 195.795039][ T1292] hid-generic 0000:04AD:0000.0024: unknown main item tag 0x0 [ 195.841854][ T3785] usb 3-1: USB disconnect, device number 11 [ 196.549432][ T1292] hid-generic 0000:04AD:0000.0024: unknown main item tag 0x0 [ 196.587314][ T1292] hid-generic 0000:04AD:0000.0024: unknown main item tag 0x0 [ 196.730361][ T1292] hid-generic 0000:04AD:0000.0024: unknown main item tag 0x0 [ 197.486964][ T1292] hid-generic 0000:04AD:0000.0024: unknown main item tag 0x0 [ 197.495634][ T1292] hid-generic 0000:04AD:0000.0024: unknown main item tag 0x0 [ 197.503366][ T1292] hid-generic 0000:04AD:0000.0024: unknown main item tag 0x0 [ 197.511325][ T1292] hid-generic 0000:04AD:0000.0024: unknown main item tag 0x0 [ 197.518694][ T1292] hid-generic 0000:04AD:0000.0024: unknown main item tag 0x0 [ 197.526618][ T1292] hid-generic 0000:04AD:0000.0024: unknown main item tag 0x0 [ 197.534302][ T1292] hid-generic 0000:04AD:0000.0024: unknown main item tag 0x0 [ 197.558638][ T1292] hid-generic 0000:04AD:0000.0024: unknown main item tag 0x0 [ 197.590782][ T1292] hid-generic 0000:04AD:0000.0024: unknown main item tag 0x0 [ 197.598189][ T1292] hid-generic 0000:04AD:0000.0024: unknown main item tag 0x0 [ 197.851877][ T1292] hid-generic 0000:04AD:0000.0024: unknown main item tag 0x0 [ 197.859882][ T1292] hid-generic 0000:04AD:0000.0024: unknown main item tag 0x0 [ 197.867273][ T1292] hid-generic 0000:04AD:0000.0024: unknown main item tag 0x0 [ 197.875053][ T1292] hid-generic 0000:04AD:0000.0024: unknown main item tag 0x0 [ 197.882563][ T1292] hid-generic 0000:04AD:0000.0024: unknown main item tag 0x0 [ 197.889977][ T1292] hid-generic 0000:04AD:0000.0024: unknown main item tag 0x0 [ 197.897355][ T1292] hid-generic 0000:04AD:0000.0024: unknown main item tag 0x0 [ 197.915120][ T1292] hid-generic 0000:04AD:0000.0024: unknown main item tag 0x0 [ 198.067464][ T1292] hid-generic 0000:04AD:0000.0024: unknown main item tag 0x0 [ 198.075295][ T1292] hid-generic 0000:04AD:0000.0024: unknown main item tag 0x0 [ 198.082806][ T1292] hid-generic 0000:04AD:0000.0024: unknown main item tag 0x0 [ 198.090755][ T1292] hid-generic 0000:04AD:0000.0024: unknown main item tag 0x0 [ 198.098159][ T1292] hid-generic 0000:04AD:0000.0024: unknown main item tag 0x0 [ 198.105640][ T1292] hid-generic 0000:04AD:0000.0024: unknown main item tag 0x0 [ 198.133349][ T1292] hid-generic 0000:04AD:0000.0024: unknown main item tag 0x0 [ 198.179833][ T1292] hid-generic 0000:04AD:0000.0024: unknown main item tag 0x0 [ 198.187228][ T1292] hid-generic 0000:04AD:0000.0024: unknown main item tag 0x0 [ 198.316980][ T1292] hid-generic 0000:04AD:0000.0024: hidraw0: HID v0.00 Device [syz0] on syz0 [ 198.524248][ T5264] syz.1.397[5264] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 198.524382][ T5264] syz.1.397[5264] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 198.809331][ T1292] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 200.291429][ T5283] af_packet: tpacket_rcv: packet too big, clamped from 62 to 4294967286. macoff=82 [ 201.609385][ T1292] usb 5-1: device descriptor read/all, error -71 [ 201.792704][ T3617] hid-generic 0000:04AD:0000.0025: unknown main item tag 0x0 [ 201.827482][ T3617] hid-generic 0000:04AD:0000.0025: unknown main item tag 0x0 [ 201.881129][ T3617] hid-generic 0000:04AD:0000.0025: unknown main item tag 0x0 [ 201.945241][ T3617] hid-generic 0000:04AD:0000.0025: unknown main item tag 0x0 [ 201.991442][ T3617] hid-generic 0000:04AD:0000.0025: unknown main item tag 0x0 [ 202.023467][ T3617] hid-generic 0000:04AD:0000.0025: unknown main item tag 0x0 [ 202.160423][ T5313] FAULT_INJECTION: forcing a failure. [ 202.160423][ T5313] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 202.173519][ T5313] CPU: 0 PID: 5313 Comm: syz.3.409 Not tainted 5.15.168-syzkaller #0 [ 202.181581][ T5313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 202.191636][ T5313] Call Trace: [ 202.194906][ T5313] [ 202.197840][ T5313] dump_stack_lvl+0x1e3/0x2d0 [ 202.202518][ T5313] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 202.208147][ T5313] ? panic+0x860/0x860 [ 202.212214][ T5313] ? shmem_getpage_gfp+0x2b48/0x3190 [ 202.217501][ T5313] should_fail+0x38a/0x4c0 [ 202.221930][ T5313] copy_page_from_iter_atomic+0x451/0x1230 [ 202.227748][ T5313] ? pipe_zero+0x4f0/0x4f0 [ 202.232164][ T5313] ? generic_update_time+0x1cb/0x1e0 [ 202.237459][ T5313] generic_perform_write+0x33a/0x5b0 [ 202.242751][ T5313] ? grab_cache_page_write_begin+0x90/0x90 [ 202.248551][ T5313] ? file_remove_privs+0x610/0x610 [ 202.253655][ T5313] ? rwsem_write_trylock+0x166/0x210 [ 202.258951][ T5313] __generic_file_write_iter+0x243/0x4f0 [ 202.264611][ T5313] generic_file_write_iter+0xa7/0x1b0 [ 202.269994][ T5313] vfs_write+0xacd/0xe50 [ 202.274251][ T5313] ? file_end_write+0x250/0x250 [ 202.279104][ T5313] ? __fget_files+0x413/0x480 [ 202.283785][ T5313] ? mutex_lock_nested+0x17/0x20 [ 202.288718][ T5313] ? __fdget_pos+0x2cb/0x380 [ 202.293300][ T5313] ? ksys_write+0x77/0x2c0 [ 202.297713][ T5313] ksys_write+0x1a2/0x2c0 [ 202.302041][ T5313] ? print_irqtrace_events+0x210/0x210 [ 202.307499][ T5313] ? __ia32_sys_read+0x80/0x80 [ 202.312259][ T5313] ? syscall_enter_from_user_mode+0x2e/0x240 [ 202.318238][ T5313] ? lockdep_hardirqs_on+0x94/0x130 [ 202.323445][ T5313] ? syscall_enter_from_user_mode+0x2e/0x240 [ 202.329438][ T5313] do_syscall_64+0x3b/0xb0 [ 202.333857][ T5313] ? clear_bhb_loop+0x15/0x70 [ 202.338527][ T5313] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 202.344419][ T5313] RIP: 0033:0x7f41e288eff9 [ 202.348833][ T5313] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.368442][ T5313] RSP: 002b:00007f41e0cc5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 202.376858][ T5313] RAX: ffffffffffffffda RBX: 00007f41e2a47130 RCX: 00007f41e288eff9 [ 202.384826][ T5313] RDX: 000000000000fea7 RSI: 0000000020000280 RDI: 0000000000000007 [ 202.392794][ T5313] RBP: 00007f41e0cc5090 R08: 0000000000000000 R09: 0000000000000000 [ 202.400759][ T5313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.408812][ T5313] R13: 0000000000000000 R14: 00007f41e2a47130 R15: 00007ffda5dc6998 [ 202.416791][ T5313] [ 202.419862][ C0] vkms_vblank_simulate: vblank timer overrun [ 202.456915][ T5312] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 202.498477][ T3617] hid-generic 0000:04AD:0000.0025: unknown main item tag 0x0 [ 202.506118][ T3617] hid-generic 0000:04AD:0000.0025: unknown main item tag 0x0 [ 202.514073][ T3617] hid-generic 0000:04AD:0000.0025: unknown main item tag 0x0 [ 202.521761][ T3617] hid-generic 0000:04AD:0000.0025: unknown main item tag 0x0 [ 202.529450][ T3617] hid-generic 0000:04AD:0000.0025: unknown main item tag 0x0 [ 202.536905][ T3617] hid-generic 0000:04AD:0000.0025: unknown main item tag 0x0 [ 202.544627][ T3617] hid-generic 0000:04AD:0000.0025: unknown main item tag 0x0 [ 202.891224][ T3617] hid-generic 0000:04AD:0000.0025: unknown main item tag 0x0 [ 202.980998][ T3617] hid-generic 0000:04AD:0000.0025: unknown main item tag 0x0 [ 203.140997][ T3617] hid-generic 0000:04AD:0000.0025: unknown main item tag 0x0 [ 203.148830][ T3617] hid-generic 0000:04AD:0000.0025: unknown main item tag 0x0 [ 203.156331][ T3617] hid-generic 0000:04AD:0000.0025: unknown main item tag 0x0 [ 203.169189][ T3617] hid-generic 0000:04AD:0000.0025: unknown main item tag 0x0 [ 203.176578][ T3617] hid-generic 0000:04AD:0000.0025: unknown main item tag 0x0 [ 203.194380][ T3617] hid-generic 0000:04AD:0000.0025: unknown main item tag 0x0 [ 203.202051][ T3617] hid-generic 0000:04AD:0000.0025: unknown main item tag 0x0 [ 203.210718][ T3617] hid-generic 0000:04AD:0000.0025: unknown main item tag 0x0 [ 203.218187][ T3617] hid-generic 0000:04AD:0000.0025: unknown main item tag 0x0 [ 203.227563][ T3617] hid-generic 0000:04AD:0000.0025: unknown main item tag 0x0 [ 203.236085][ T3617] hid-generic 0000:04AD:0000.0025: unknown main item tag 0x0 [ 203.270646][ T3617] hid-generic 0000:04AD:0000.0025: unknown main item tag 0x0 [ 203.348493][ T3617] hid-generic 0000:04AD:0000.0025: unknown main item tag 0x0 [ 203.462004][ T3617] hid-generic 0000:04AD:0000.0025: unknown main item tag 0x0 [ 203.499185][ T3617] hid-generic 0000:04AD:0000.0025: unknown main item tag 0x0 [ 203.537206][ T3617] hid-generic 0000:04AD:0000.0025: unknown main item tag 0x0 [ 203.567534][ T3617] hid-generic 0000:04AD:0000.0025: unknown main item tag 0x0 [ 203.620343][ T3617] hid-generic 0000:04AD:0000.0025: hidraw0: HID v0.00 Device [syz0] on syz0 [ 205.877780][ T13] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 206.339539][ T13] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 206.358796][ T13] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.391741][ T13] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.422506][ T13] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 206.424618][ T5280] Bluetooth: hci1: command 0x0406 tx timeout [ 206.449254][ T1074] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 206.934873][ T27] INFO: task syz.3.4:3655 blocked for more than 143 seconds. [ 207.009010][ T27] Not tainted 5.15.168-syzkaller #0 [ 207.047321][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 207.089271][ T27] task:syz.3.4 state:D stack:23888 pid: 3655 ppid: 3578 flags:0x00004004 [ 207.157330][ T13] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 207.166657][ T13] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 207.169884][ T27] Call Trace: [ 207.174786][ T13] usb 2-1: Manufacturer: syz [ 207.211295][ T13] usb 2-1: config 0 descriptor?? [ 207.218208][ T27] [ 207.229473][ T27] __schedule+0x12c4/0x45b0 [ 207.241331][ T27] ? release_firmware_map_entry+0x190/0x190 [ 207.254061][ T27] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 207.267353][ T27] ? print_irqtrace_events+0x210/0x210 [ 207.279426][ T1074] usb 4-1: Using ep0 maxpacket: 32 [ 207.281789][ T27] ? _raw_spin_lock_irq+0xdb/0x110 [ 207.290052][ T27] schedule+0x11b/0x1f0 [ 207.294324][ T27] io_schedule+0x88/0x100 [ 207.298766][ T27] wait_on_page_bit_common+0xa13/0x1180 [ 207.304589][ T27] ? wait_on_page_bit+0x50/0x50 [ 207.309623][ T27] ? rcu_lock_release+0x20/0x20 [ 207.314692][ T27] ? rcu_lock_release+0x5/0x20 [ 207.319633][ T27] do_read_cache_page+0x9c1/0x1040 [ 207.324947][ T27] erofs_namei+0x15e/0x1700 [ 207.329642][ T27] erofs_lookup+0x1c0/0x460 [ 207.334256][ T27] ? erofs_namei+0x1700/0x1700 [ 207.339306][ T27] ? d_hash_and_lookup+0x1b0/0x1b0 [ 207.344540][ T27] ? __init_waitqueue_head+0xaa/0x140 [ 207.352152][ T27] __lookup_slow+0x275/0x3d0 [ 207.356878][ T27] ? lookup_one_len+0x2d0/0x2d0 [ 207.361966][ T27] ? down_read+0x1b3/0x2e0 [ 207.366505][ T27] lookup_slow+0x53/0x70 [ 207.370950][ T27] walk_component+0x48c/0x610 [ 207.375825][ T27] ? nd_alloc_stack+0xf0/0xf0 [ 207.381268][ T27] ? generic_permission+0x21c/0x4f0 [ 207.388860][ T27] ? inode_permission+0xf7/0x450 [ 207.393984][ T27] ? lockdep_hardirqs_on+0x94/0x130 [ 207.399406][ T27] ? bpf_lsm_inode_permission+0x5/0x10 [ 207.399462][ T1074] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 207.404982][ T27] ? security_inode_permission+0xad/0xf0 [ 207.418820][ T27] link_path_walk+0x642/0xd90 [ 207.423695][ T27] ? handle_lookup_down+0x130/0x130 [ 207.428074][ T1074] usb 4-1: config 0 has no interface number 0 [ 207.429083][ T27] path_lookupat+0xa9/0x450 [ 207.447568][ T27] filename_lookup+0x230/0x5c0 [ 207.454694][ T27] ? hashlen_string+0x110/0x110 [ 207.463042][ T27] ? getname_flags+0x1ec/0x4e0 [ 207.467833][ T27] user_path_at_empty+0x40/0x180 [ 207.474848][ T27] path_setxattr+0xae/0x2a0 [ 207.480109][ T27] ? simple_xattr_list_add+0xf0/0xf0 [ 207.486667][ T27] ? syscall_enter_from_user_mode+0x2e/0x240 [ 207.492999][ T27] __x64_sys_setxattr+0xb7/0xd0 [ 207.498095][ T27] do_syscall_64+0x3b/0xb0 [ 207.503477][ T27] ? clear_bhb_loop+0x15/0x70 [ 207.508162][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 207.514249][ T27] RIP: 0033:0x7f0857df2ff9 [ 207.518661][ T27] RSP: 002b:00007f085626b038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 207.527247][ T27] RAX: ffffffffffffffda RBX: 00007f0857faaf80 RCX: 00007f0857df2ff9 [ 207.535257][ T27] RDX: 00000000200001c0 RSI: 0000000000000000 RDI: 0000000020000180 [ 207.543390][ T27] RBP: 00007f0857e65296 R08: 0000000000000000 R09: 0000000000000000 [ 207.551496][ T27] R10: 0000000000000386 R11: 0000000000000246 R12: 0000000000000000 [ 207.559636][ T27] R13: 0000000000000000 R14: 00007f0857faaf80 R15: 00007ffcf4806ea8 [ 207.567627][ T27] [ 207.570862][ T27] INFO: task syz.3.4:3661 blocked for more than 144 seconds. [ 207.578223][ T27] Not tainted 5.15.168-syzkaller #0 [ 207.584414][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 207.595117][ T27] task:syz.3.4 state:D stack:24624 pid: 3661 ppid: 3578 flags:0x00004004 [ 207.600078][ T1074] usb 4-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=74.07 [ 207.610238][ T27] Call Trace: [ 207.616615][ T27] [ 207.620350][ T27] __schedule+0x12c4/0x45b0 [ 207.622804][ T1074] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.624882][ T27] ? blk_flush_plug_list+0x452/0x490 [ 207.638694][ T27] ? release_firmware_map_entry+0x190/0x190 [ 207.643806][ T1074] usb 4-1: Product: syz [ 207.645087][ T27] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 207.648797][ T1074] usb 4-1: Manufacturer: syz [ 207.655140][ T27] ? blk_check_plugged+0x250/0x250 [ 207.664979][ T27] ? print_irqtrace_events+0x210/0x210 [ 207.669895][ T1074] usb 4-1: SerialNumber: syz [ 207.670750][ T27] ? _raw_spin_lock_irq+0xdb/0x110 [ 207.677021][ T1074] usb 4-1: config 0 descriptor?? [ 207.685473][ T27] schedule+0x11b/0x1f0 [ 207.702728][ T27] io_schedule+0x88/0x100 [ 207.707267][ T27] wait_on_page_bit_common+0xa13/0x1180 [ 207.720798][ T27] ? wait_on_page_bit+0x50/0x50 [ 207.734920][ T27] ? rcu_lock_release+0x20/0x20 [ 207.745538][ T27] ? bio_add_page+0x2ba/0x450 [ 207.755959][ T27] z_erofs_runqueue+0x788/0x1a80 [ 207.765530][ T27] ? tick_nohz_tick_stopped+0x77/0xb0 [ 207.777172][ T27] ? z_erofs_do_read_page+0x2600/0x2600 [ 207.796684][ T27] ? __bpf_trace_erofs_destroy_inode+0x20/0x20 [ 207.835133][ T27] z_erofs_readahead+0xc9a/0x1280 [ 207.846061][ T27] ? z_erofs_readpage+0x840/0x840 [ 207.851265][ T27] read_pages+0x159/0x8e0 [ 207.856021][ T27] ? page_cache_ra_unbounded+0x930/0x930 [ 207.861700][ T27] ? add_to_page_cache_locked+0x40/0x40 [ 207.867245][ T27] ? down_read+0x1b3/0x2e0 [ 207.873272][ T27] page_cache_ra_unbounded+0x7b0/0x930 [ 207.878999][ T27] ? read_cache_pages_invalidate_pages+0x1c0/0x1c0 [ 207.885552][ T27] force_page_cache_ra+0x378/0x3e0 [ 207.890723][ T27] generic_fadvise+0x5ba/0x8b0 [ 207.897050][ T27] ? dump_task+0x5f0/0x5f0 [ 207.901571][ T27] ? __fdget+0x191/0x220 [ 207.905864][ T27] __x64_sys_fadvise64+0x138/0x180 [ 207.911693][ T27] do_syscall_64+0x3b/0xb0 [ 207.916434][ T27] ? clear_bhb_loop+0x15/0x70 [ 207.923621][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 207.970647][ T27] RIP: 0033:0x7f0857df2ff9 [ 207.998177][ T27] RSP: 002b:00007f085624a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000dd [ 208.046509][ T27] RAX: ffffffffffffffda RBX: 00007f0857fab058 RCX: 00007f0857df2ff9 [ 208.146866][ T3617] usb 4-1: USB disconnect, device number 16 [ 208.286159][ T27] RDX: 0000000000004101 RSI: 0000000000e0ffff RDI: 0000000000000004 [ 208.374634][ T27] RBP: 00007f0857e65296 R08: 0000000000000000 R09: 0000000000000000 [ 208.436332][ T27] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 208.493007][ T27] R13: 0000000000000001 R14: 00007f0857fab058 R15: 00007ffcf4806ea8 [ 208.529223][ T27] [ 208.533346][ T27] INFO: task syz.0.7:3678 blocked for more than 145 seconds. [ 208.541864][ T27] Not tainted 5.15.168-syzkaller #0 [ 208.547750][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 208.558418][ T27] task:syz.0.7 state:D stack:24664 pid: 3678 ppid: 3569 flags:0x00004004 [ 208.568531][ T27] Call Trace: [ 208.575828][ T27] [ 208.578830][ T27] __schedule+0x12c4/0x45b0 [ 208.583513][ T27] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 208.589890][ T27] ? rcu_is_watching+0x11/0xa0 [ 208.594723][ T27] ? lockdep_hardirqs_on+0x94/0x130 [ 208.600234][ T27] ? release_firmware_map_entry+0x190/0x190 [ 208.606175][ T27] ? wait_on_page_bit_common+0xa80/0x1180 [ 208.613037][ T27] schedule+0x11b/0x1f0 [ 208.617245][ T27] io_schedule+0x88/0x100 [ 208.622438][ T27] wait_on_page_bit_common+0xa13/0x1180 [ 208.628073][ T27] ? wait_on_page_bit+0x50/0x50 [ 208.633031][ T27] ? rcu_lock_release+0x20/0x20 [ 208.637922][ T27] ? bio_add_page+0x2ba/0x450 [ 208.642738][ T27] z_erofs_runqueue+0x788/0x1a80 [ 208.647716][ T27] ? tick_nohz_tick_stopped+0x77/0xb0 [ 208.653216][ T27] ? z_erofs_do_read_page+0x2600/0x2600 [ 208.658811][ T27] ? __bpf_trace_erofs_destroy_inode+0x20/0x20 [ 208.665056][ T27] z_erofs_readahead+0xc9a/0x1280 [ 208.670327][ T27] ? z_erofs_readpage+0x840/0x840 [ 208.675450][ T27] read_pages+0x159/0x8e0 [ 208.679893][ T27] ? page_cache_ra_unbounded+0x930/0x930 [ 208.685597][ T27] ? add_to_page_cache_locked+0x40/0x40 [ 208.691259][ T27] ? down_read+0x1b3/0x2e0 [ 208.695758][ T27] page_cache_ra_unbounded+0x7b0/0x930 [ 208.705223][ T27] ? read_cache_pages_invalidate_pages+0x1c0/0x1c0 [ 208.711870][ T27] force_page_cache_ra+0x378/0x3e0 [ 208.717504][ T27] generic_fadvise+0x5ba/0x8b0 [ 208.722416][ T27] ? dump_task+0x5f0/0x5f0 [ 208.726912][ T27] ? __fdget+0x191/0x220 [ 208.732041][ T27] __x64_sys_fadvise64+0x138/0x180 [ 208.737261][ T27] do_syscall_64+0x3b/0xb0 [ 208.741980][ T27] ? clear_bhb_loop+0x15/0x70 [ 208.746724][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 208.754073][ T27] RIP: 0033:0x7f1b88be3ff9 [ 208.758554][ T27] RSP: 002b:00007f1b8705c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000dd [ 208.767077][ T27] RAX: ffffffffffffffda RBX: 00007f1b88d9bf80 RCX: 00007f1b88be3ff9 [ 208.775109][ T27] RDX: 0000000000004101 RSI: 0000000000e0ffff RDI: 0000000000000004 [ 208.783174][ T27] RBP: 00007f1b88c56296 R08: 0000000000000000 R09: 0000000000000000 [ 208.791235][ T27] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 208.799304][ T27] R13: 0000000000000000 R14: 00007f1b88d9bf80 R15: 00007fff01841be8 [ 208.807356][ T27] [ 208.810487][ T27] INFO: task syz.0.7:3683 blocked for more than 145 seconds. [ 208.818297][ T27] Not tainted 5.15.168-syzkaller #0 [ 208.824261][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 208.833354][ T27] task:syz.0.7 state:D stack:27040 pid: 3683 ppid: 3569 flags:0x00004004 [ 208.842675][ T27] Call Trace: [ 208.845972][ T27] [ 208.848900][ T27] __schedule+0x12c4/0x45b0 [ 208.853509][ T27] ? release_firmware_map_entry+0x190/0x190 [ 208.859432][ T27] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 208.865412][ T27] ? print_irqtrace_events+0x210/0x210 [ 208.870968][ T27] ? _raw_spin_lock_irq+0xdb/0x110 [ 208.876084][ T27] schedule+0x11b/0x1f0 [ 208.880294][ T27] io_schedule+0x88/0x100 [ 208.884629][ T27] wait_on_page_bit_common+0xa13/0x1180 [ 208.890295][ T27] ? wait_on_page_bit+0x50/0x50 [ 208.895152][ T27] ? rcu_lock_release+0x20/0x20 [ 208.900113][ T27] ? rcu_lock_release+0x5/0x20 [ 208.904884][ T27] do_read_cache_page+0x9c1/0x1040 [ 208.912499][ T27] erofs_namei+0x15e/0x1700 [ 208.917016][ T27] erofs_lookup+0x1c0/0x460 [ 208.923871][ T27] ? erofs_namei+0x1700/0x1700 [ 208.928650][ T27] ? d_hash_and_lookup+0x1b0/0x1b0 [ 208.933877][ T27] ? __init_waitqueue_head+0xaa/0x140 [ 208.939454][ T27] __lookup_slow+0x275/0x3d0 [ 208.944052][ T27] ? lookup_one_len+0x2d0/0x2d0 [ 208.948907][ T27] ? down_read+0x1b3/0x2e0 [ 208.953410][ T27] lookup_slow+0x53/0x70 [ 208.957663][ T27] walk_component+0x48c/0x610 [ 208.962427][ T27] ? nd_alloc_stack+0xf0/0xf0 [ 208.967100][ T27] ? generic_permission+0x21c/0x4f0 [ 208.972377][ T27] ? inode_permission+0xf7/0x450 [ 208.977312][ T27] ? lockdep_hardirqs_on+0x94/0x130 [ 208.982554][ T27] ? bpf_lsm_inode_permission+0x5/0x10 [ 208.988016][ T27] ? security_inode_permission+0xad/0xf0 [ 208.994502][ T27] link_path_walk+0x642/0xd90 [ 208.999235][ T27] ? handle_lookup_down+0x130/0x130 [ 209.004447][ T27] path_lookupat+0xa9/0x450 [ 209.008965][ T27] filename_lookup+0x230/0x5c0 [ 209.013822][ T27] ? hashlen_string+0x110/0x110 [ 209.018693][ T27] ? getname_flags+0x1ec/0x4e0 [ 209.027645][ T27] user_path_at_empty+0x40/0x180 [ 209.032675][ T27] path_setxattr+0xae/0x2a0 [ 209.037189][ T27] ? simple_xattr_list_add+0xf0/0xf0 [ 209.042592][ T27] ? syscall_enter_from_user_mode+0x2e/0x240 [ 209.048575][ T27] __x64_sys_setxattr+0xb7/0xd0 [ 209.053538][ T27] do_syscall_64+0x3b/0xb0 [ 209.057955][ T27] ? clear_bhb_loop+0x15/0x70 [ 209.062670][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 209.068582][ T27] RIP: 0033:0x7f1b88be3ff9 [ 209.073383][ T27] RSP: 002b:00007f1b8703b038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 209.081908][ T27] RAX: ffffffffffffffda RBX: 00007f1b88d9c058 RCX: 00007f1b88be3ff9 [ 209.089980][ T27] RDX: 00000000200001c0 RSI: 0000000000000000 RDI: 0000000020000180 [ 209.097956][ T27] RBP: 00007f1b88c56296 R08: 0000000000000000 R09: 0000000000000000 [ 209.105965][ T27] R10: 0000000000000386 R11: 0000000000000246 R12: 0000000000000000 [ 209.114053][ T27] R13: 0000000000000000 R14: 00007f1b88d9c058 R15: 00007fff01841be8 [ 209.122090][ T27] [ 209.127318][ T27] [ 209.127318][ T27] Showing all locks held in the system: [ 209.137620][ T27] 5 locks held by kworker/0:1/13: [ 209.142749][ T27] #0: ffff88801c0a0938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 209.153547][ T27] #1: ffffc90000d27d20 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 209.165010][ T27] #2: ffff888147eb1220 (&dev->mutex){....}-{3:3}, at: hub_event+0x208/0x54c0 [ 209.173941][ T27] #3: ffff88807795a220 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8a/0x570 [ 209.183219][ T27] #4: ffff888063ac81a8 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8a/0x570 [ 209.192493][ T27] 1 lock held by khungtaskd/27: [ 209.197337][ T27] #0: ffffffff8c91fc20 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 209.206678][ T27] 1 lock held by klogd/3018: [ 209.211298][ T27] #0: ffff8880b903a318 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 [ 209.221437][ T27] 2 locks held by getty/3324: [ 209.227344][ T27] #0: ffff88814afff098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 209.237141][ T27] #1: ffffc9000229b2e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6af/0x1db0 [ 209.248756][ T27] 4 locks held by udevd/3563: [ 209.253996][ T27] #0: ffff888075702d58 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xae/0xd10 [ 209.262850][ T27] #1: ffff888062fd6088 (&of->mutex){+.+.}-{3:3}, at: kernfs_seq_start+0x50/0x3b0 [ 209.272120][ T27] #2: ffff888053dde0f0 (kn->active#89){++++}-{0:0}, at: kernfs_seq_start+0x6f/0x3b0 [ 209.281683][ T27] #3: ffff88807795a220 (&dev->mutex){....}-{3:3}, at: manufacturer_show+0x22/0x90 [ 209.291043][ T27] 1 lock held by syz.3.4/3655: [ 209.295794][ T27] #0: ffff8880618bc180 (&type->i_mutex_dir_key#8){.+.+}-{3:3}, at: lookup_slow+0x45/0x70 [ 209.305719][ T27] 1 lock held by syz.3.4/3661: [ 209.310529][ T27] #0: ffff8880618bc320 (mapping.invalidate_lock#3){.+.+}-{3:3}, at: page_cache_ra_unbounded+0x1a6/0x930 [ 209.321811][ T27] 3 locks held by kworker/u4:7/3669: [ 209.327082][ T27] #0: ffff8880b903a318 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 [ 209.338152][ T27] #1: ffff88807dfb8a28 (&p->pi_lock){-.-.}-{2:2}, at: try_to_wake_up+0xae/0x1300 [ 209.347423][ T27] #2: ffff8880236acd40 (&wdev->mtx){+.+.}-{3:3}, at: ieee80211_ibss_work+0xa0/0x1480 [ 209.358584][ T27] 1 lock held by syz.0.7/3678: [ 209.363375][ T27] #0: ffff8880618bcda0 (mapping.invalidate_lock#3){.+.+}-{3:3}, at: page_cache_ra_unbounded+0x1a6/0x930 [ 209.374664][ T27] 1 lock held by syz.0.7/3683: [ 209.379474][ T27] #0: ffff8880618bcc00 (&type->i_mutex_dir_key#8){.+.+}-{3:3}, at: lookup_slow+0x45/0x70 [ 209.392535][ T27] 1 lock held by syz.4.124/4297: [ 209.397481][ T27] #0: ffff8880618bd820 (mapping.invalidate_lock#3){.+.+}-{3:3}, at: page_cache_ra_unbounded+0x1a6/0x930 [ 209.408772][ T27] 1 lock held by syz.4.124/4305: [ 209.413755][ T27] #0: ffff8880618bd680 (&type->i_mutex_dir_key#8){.+.+}-{3:3}, at: lookup_slow+0x45/0x70 [ 209.423738][ T27] 1 lock held by syz.1.185/4506: [ 209.428662][ T27] #0: ffff888061aec320 (mapping.invalidate_lock#3){.+.+}-{3:3}, at: page_cache_ra_unbounded+0x1a6/0x930 [ 209.441484][ T27] 1 lock held by syz.1.185/4511: [ 209.446423][ T27] #0: ffff888061aec180 (&type->i_mutex_dir_key#8){.+.+}-{3:3}, at: lookup_slow+0x45/0x70 [ 209.456401][ T27] 1 lock held by syz.2.281/4854: [ 209.463815][ T27] #0: ffff888061aecc00 (&type->i_mutex_dir_key#8){.+.+}-{3:3}, at: lookup_slow+0x45/0x70 [ 209.473794][ T27] 1 lock held by syz.2.281/4857: [ 209.478717][ T27] #0: ffff888061aecda0 (mapping.invalidate_lock#3){.+.+}-{3:3}, at: page_cache_ra_unbounded+0x1a6/0x930 [ 209.490131][ T27] [ 209.492454][ T27] ============================================= [ 209.492454][ T27] [ 209.500995][ T27] NMI backtrace for cpu 1 [ 209.505321][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 5.15.168-syzkaller #0 [ 209.513294][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 209.523352][ T27] Call Trace: [ 209.526632][ T27] [ 209.529564][ T27] dump_stack_lvl+0x1e3/0x2d0 [ 209.534247][ T27] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 209.539887][ T27] ? panic+0x860/0x860 [ 209.543966][ T27] ? nmi_cpu_backtrace+0x23b/0x4a0 [ 209.549071][ T27] nmi_cpu_backtrace+0x46a/0x4a0 [ 209.553992][ T27] ? __wake_up_klogd+0xd5/0x100 [ 209.558848][ T27] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 209.565002][ T27] ? _printk+0xd1/0x120 [ 209.569159][ T27] ? panic+0x860/0x860 [ 209.573227][ T27] ? __wake_up_klogd+0xcc/0x100 [ 209.578074][ T27] ? panic+0x860/0x860 [ 209.582142][ T27] ? __rcu_read_unlock+0x92/0x100 [ 209.587166][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 209.593214][ T27] nmi_trigger_cpumask_backtrace+0x181/0x2a0 [ 209.599203][ T27] watchdog+0xe72/0xeb0 [ 209.603374][ T27] kthread+0x3f6/0x4f0 [ 209.607430][ T27] ? hungtask_pm_notify+0x50/0x50 [ 209.612441][ T27] ? kthread_blkcg+0xd0/0xd0 [ 209.617036][ T27] ret_from_fork+0x1f/0x30 [ 209.621465][ T27] [ 209.626082][ T27] Sending NMI from CPU 1 to CPUs 0: [ 209.631800][ C0] NMI backtrace for cpu 0 [ 209.631810][ C0] CPU: 0 PID: 3881 Comm: kworker/u4:17 Not tainted 5.15.168-syzkaller #0 [ 209.631826][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 209.631834][ C0] Workqueue: phy12 ieee80211_iface_work [ 209.631855][ C0] RIP: 0010:__kasan_check_write+0x0/0x10 [ 209.631873][ C0] Code: a4 1b 8c eb 0a 48 c7 c7 ca a4 1b 8c 4c 89 fe e8 46 e4 68 08 31 db eb d7 cc cc 89 f6 48 8b 0c 24 31 d2 e9 63 ef ff ff 0f 1f 00 <89> f6 48 8b 0c 24 ba 01 00 00 00 e9 50 ef ff ff 55 41 56 53 48 89 [ 209.631884][ C0] RSP: 0018:ffffc9000332f998 EFLAGS: 00000256 [ 209.631896][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffffffff8a3cd530 [ 209.631906][ C0] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffc9000332fa40 [ 209.631915][ C0] RBP: ffffc9000332fab0 R08: dffffc0000000000 R09: ffffed100c3cb19c [ 209.631925][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff92000665f48 [ 209.631934][ C0] R13: dffffc0000000000 R14: ffff888061e58cd8 R15: dffffc0000000000 [ 209.631944][ C0] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 209.631956][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 209.631966][ C0] CR2: 00007f41e2a19178 CR3: 0000000073f0b000 CR4: 00000000003506f0 [ 209.631979][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 209.631987][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 209.631995][ C0] Call Trace: [ 209.632000][ C0] [ 209.632005][ C0] ? nmi_cpu_backtrace+0x39f/0x4a0 [ 209.632020][ C0] ? read_lock_is_recursive+0x10/0x10 [ 209.632036][ C0] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 209.632050][ C0] ? unknown_nmi_error+0xd0/0xd0 [ 209.632071][ C0] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 209.632085][ C0] ? nmi_handle+0xf7/0x370 [ 209.632099][ C0] ? __kasan_check_read+0x10/0x10 [ 209.632112][ C0] ? default_do_nmi+0x62/0x150 [ 209.632127][ C0] ? exc_nmi+0xa8/0x100 [ 209.632140][ C0] ? end_repeat_nmi+0x16/0x31 [ 209.632155][ C0] ? __mutex_unlock_slowpath+0x200/0x750 [ 209.632170][ C0] ? __kasan_check_read+0x10/0x10 [ 209.632184][ C0] ? __kasan_check_read+0x10/0x10 [ 209.632198][ C0] ? __kasan_check_read+0x10/0x10 [ 209.632212][ C0] [ 209.632215][ C0] [ 209.632219][ C0] __mutex_unlock_slowpath+0x218/0x750 [ 209.632233][ C0] ? __lock_acquire+0x1ff0/0x1ff0 [ 209.632248][ C0] ? mutex_unlock+0x10/0x10 [ 209.632264][ C0] ? ieee80211_sta_active_ibss+0x28c/0x2d0 [ 209.632282][ C0] ieee80211_ibss_work+0xb52/0x1480 [ 209.632296][ C0] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 209.632313][ C0] ? _raw_spin_unlock+0x40/0x40 [ 209.632328][ C0] ? ieee80211_ibss_rx_queued_mgmt+0x2af0/0x2af0 [ 209.632346][ C0] ? skb_dequeue+0x10f/0x140 [ 209.632361][ C0] ? ieee80211_iface_work+0x9bf/0xcc0 [ 209.632377][ C0] ? ieee80211_iface_work+0xbdf/0xcc0 [ 209.632396][ C0] process_one_work+0x8a1/0x10c0 [ 209.632418][ C0] ? worker_detach_from_pool+0x260/0x260 [ 209.632438][ C0] ? _raw_spin_lock_irqsave+0x120/0x120 [ 209.632452][ C0] ? kthread_data+0x4e/0xc0 [ 209.632466][ C0] ? wq_worker_running+0x97/0x170 [ 209.632480][ C0] worker_thread+0xaca/0x1280 [ 209.632494][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 209.632518][ C0] kthread+0x3f6/0x4f0 [ 209.632530][ C0] ? rcu_lock_release+0x20/0x20 [ 209.632544][ C0] ? kthread_blkcg+0xd0/0xd0 [ 209.632557][ C0] ret_from_fork+0x1f/0x30 [ 209.632584][ C0] [ 209.658640][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 209.981299][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 5.15.168-syzkaller #0 [ 209.989251][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 209.999282][ T27] Call Trace: [ 210.002543][ T27] [ 210.005451][ T27] dump_stack_lvl+0x1e3/0x2d0 [ 210.010113][ T27] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 210.015739][ T27] ? panic+0x860/0x860 [ 210.019791][ T27] panic+0x318/0x860 [ 210.023663][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 210.029274][ T27] ? nmi_trigger_cpumask_backtrace+0x221/0x2a0 [ 210.035404][ T27] ? fb_is_primary_device+0xd0/0xd0 [ 210.040579][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 210.046631][ T27] ? nmi_trigger_cpumask_backtrace+0x221/0x2a0 [ 210.052781][ T27] ? nmi_trigger_cpumask_backtrace+0x281/0x2a0 [ 210.058910][ T27] ? nmi_trigger_cpumask_backtrace+0x286/0x2a0 [ 210.065044][ T27] watchdog+0xeb0/0xeb0 [ 210.069198][ T27] kthread+0x3f6/0x4f0 [ 210.073246][ T27] ? hungtask_pm_notify+0x50/0x50 [ 210.078256][ T27] ? kthread_blkcg+0xd0/0xd0 [ 210.082849][ T27] ret_from_fork+0x1f/0x30 [ 210.087251][ T27] [ 210.090487][ T27] Kernel Offset: disabled [ 210.094816][ T27] Rebooting in 86400 seconds..