last executing test programs: 13.241081178s ago: executing program 1 (id=303): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4c142, 0x0) gettid() ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000300)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000400)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r1, 0xc00464be, &(0x7f0000000440)={r2}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x26f}]}) bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) r6 = syz_io_uring_setup(0x1f87, 0x0, &(0x7f0000000100), 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="2d8e261000000000140012800b0001006970766c616e00000c00028008000500", @ANYRES32=r9, @ANYBLOB="080004000001"], 0x44}}, 0x0) io_uring_enter(r6, 0x50, 0x0, 0x0, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)={0x40}, 0x18) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000200)={0x24, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x23, @string={0x23, 0x3, "5d95b5db2648b4c56db3094885239e187f30232fb4711d740fabfa519a43621ba8"}}, 0x0, 0x0}, 0x0) r10 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0) r11 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) connect(0xffffffffffffffff, &(0x7f0000000140)=@rc, 0x80) syz_usb_disconnect(r10) ioctl$EVIOCGMASK(r11, 0x541b, 0x0) 10.764996297s ago: executing program 1 (id=315): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x10) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000440), 0x10) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x0, 0x40, 0xed, &(0x7f0000000500)=""/237, 0x41000, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x0, 0x10, 0xfffffff9, @void, @value}, 0x94) writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x1}], 0x1) r6 = accept4$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x4000000000000a1, 0x2, 0x0) 10.290659581s ago: executing program 1 (id=316): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000006000000000000000000008500000041000000850000007d"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe050000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sched_setaffinity(0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file0\x00', r5, &(0x7f0000000080)='./file1\x00') renameat(r5, &(0x7f0000000100)='./file1\x00', r5, &(0x7f00000002c0)='./file0\x00') 9.120031179s ago: executing program 1 (id=321): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) recvmmsg(r3, &(0x7f0000007c80)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/123, 0x7b}], 0x1}}], 0x1, 0x0, 0x0) 8.979980462s ago: executing program 3 (id=322): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x9a, 0x7, 0x80, 0x20, 0x46d, 0xd001, 0xcd8a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x83, 0x6, 0x0, 0xec, 0x1f, 0xa4}}]}}]}}, 0x0) 7.299268867s ago: executing program 4 (id=327): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4c142, 0x0) gettid() ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000300)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000400)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r1, 0xc00464be, &(0x7f0000000440)={r2}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x26f}]}) bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) r6 = syz_io_uring_setup(0x1f87, 0x0, &(0x7f0000000100), 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="2d8e261000000000140012800b0001006970766c616e00000c00028008000500", @ANYRES32=r9, @ANYBLOB="080004000001"], 0x44}}, 0x0) io_uring_enter(r6, 0x50, 0x0, 0x0, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)={0x40}, 0x18) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000200)={0x24, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x23, @string={0x23, 0x3, "5d95b5db2648b4c56db3094885239e187f30232fb4711d740fabfa519a43621ba8"}}, 0x0, 0x0}, 0x0) r10 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0) r11 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) connect(0xffffffffffffffff, &(0x7f0000000140)=@rc, 0x80) syz_usb_disconnect(r10) ioctl$EVIOCGMASK(r11, 0x541b, 0x0) 6.898596594s ago: executing program 3 (id=328): socket$nl_generic(0x10, 0x3, 0x10) r0 = getpid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0xf, 0x4, 0x10008, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000", @ANYRES32=r3, @ANYBLOB], &(0x7f0000001440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)={@fallback=r2, 0xffffffffffffffff, 0x9, 0x8, 0x0, @void, @value}, 0x20) sendmsg(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000001400)='H', 0x20001401}], 0x1}, 0x0) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000940)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@oldalloc}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0x2, 0x44a, &(0x7f0000000400)="$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") accept$packet(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a00"], 0x22) openat$cgroup_devices(r4, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) 5.63414346s ago: executing program 1 (id=335): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000740)=0x2a68, 0x4) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000040)=0x92c, 0x4) recvfrom$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000107d1e502d0000ecff0001090224000100"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r4, 0x0, 0x0) sendmsg$NL80211_CMD_TESTMODE(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000001b00)=ANY=[@ANYRES16=r3, @ANYBLOB="000129bd7000ffdbdf252d000000080003", @ANYRES32=r5, @ANYBLOB="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"], 0x1318}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) mmap(&(0x7f00009db000/0x2000)=nil, 0x2000, 0x7b4e47580a262622, 0x10, 0xffffffffffffffff, 0x867fc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x800000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 5.488737384s ago: executing program 3 (id=337): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x14507e, 0x0) r2 = eventfd2(0x45, 0x0) dup2(r2, r1) write$eventfd(r2, &(0x7f0000000000)=0xfffffffffffffffe, 0x8) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/45, 0x0, 0x2000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f0000000500)=""/73, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000001c0)=0xffffffff) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000200)={0x0, r2}) 4.196993293s ago: executing program 4 (id=339): rseq(&(0x7f0000000200), 0x20, 0x0, 0x0) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sync() 4.186507844s ago: executing program 0 (id=340): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newneigh={0x30, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x141, 0x72}, [@NDA_LLADDR={0xa, 0x2, @random="62d546bde4e9"}, @NDA_VLAN={0x6, 0x5, 0x2}]}, 0x30}}, 0x0) 4.166891005s ago: executing program 3 (id=341): bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg$unix(r0, 0x0, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000300)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) 4.106816441s ago: executing program 0 (id=342): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x10) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000440), 0x10) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x0, 0x40, 0xed, &(0x7f0000000500)=""/237, 0x41000, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x0, 0x10, 0xfffffff9, @void, @value}, 0x94) writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x1}], 0x1) r6 = accept4$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x4000000000000a1, 0x2, 0x0) 3.917180149s ago: executing program 2 (id=344): syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040e0700081400c9"], 0xa) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af03, 0x0) 3.838914356s ago: executing program 3 (id=345): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) recvmmsg(r3, &(0x7f0000007c80)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/123, 0x7b}], 0x1}}], 0x1, 0x0, 0x0) 3.838608096s ago: executing program 2 (id=346): bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000090400"/20, @ANYRES32=r2, @ANYBLOB="0002007e0000000024001280110001006272696467655f736c617665000000000c000580050001"], 0x44}}, 0x0) 3.802465959s ago: executing program 2 (id=347): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) 3.518805285s ago: executing program 4 (id=348): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000006000000000000000000008500000041000000850000007d"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe050000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sched_setaffinity(0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file0\x00', r5, &(0x7f0000000080)='./file1\x00') renameat(r5, &(0x7f0000000100)='./file1\x00', r5, &(0x7f00000002c0)='./file0\x00') 2.573330243s ago: executing program 0 (id=349): socket$nl_generic(0x10, 0x3, 0x10) r0 = getpid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0xf, 0x4, 0x10008, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000", @ANYRES32=r3, @ANYBLOB], &(0x7f0000001440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)={@fallback=r2, 0xffffffffffffffff, 0x9, 0x8, 0x0, @void, @value}, 0x20) sendmsg(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000001400)='H', 0x20001401}], 0x1}, 0x0) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000940)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@oldalloc}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0x2, 0x44a, &(0x7f0000000400)="$eJzs281vFOUfAPDvzLbl9+OtFfEFRK0SY+NLSwsqBy8aTTxgNNEDHuu2EMJCDa2JECLVGLyYGBI9G48m/gXevBj1ZOJV74aEKBfQU83MzsDuslsobHcr+/kkA8+z82yf57vPPDPPzLMbwMAaz/5JIrZGxG8RMVrPNhcYr/939fLZ6t+Xz1aTWFl5688kL3fl8tlqWbR835YiM5FGpJ8kRSXNFk+fOT5bq82fKvJTSyfem1o8febZYydmj84fnT85c/Dggf3TLzw/81xX4sziurL7w4U9u15758Lr1cMX3v3p26y9W4v9jXF0y3gW+F8rudZ9T3S7sj7b1pBOhvrYENakEhFZdw3n4380KnG980bj1Y/72jhgXWXXpk2ddy+vAHexJPrdAqA/ygt9dv9bbj2aemwIl16q3wBlcV8ttvqeoUiLMsMt97fdNB4Rh5f/+SrbYp2eQwAANPqs+uWheKbd/C+N+xvKbS/WUMYi4p6I2BER90bEzoi4LyIv+0BEPLjG+luXhm6c/6QXbyuwW5TN/14s1raa53/l7C/GKkVuWx7/cHLkWG1+X/GZTMTwpiw/vUod37/y6+ed9jXO/7Itq7+cCxbtuDjU8oBubnZpNp+UdsGljyJ2D7WLP7m2EpBExK6I2L22P729TBx76ps9nQrdPP5VdGGdaeXriCfr/b8cLfGXktXXJ6f+F7X5fVPlUXGjn385/2an+u8o/i7I+n9z8/HfWmQsaVyvXVx7Hed//7TjPc3tHv8jydv5+WikeO2D2aWlU9MRI8mhPN/0+sz195b5snwW/8Te9uN/R/GeLP6HIiI7iB+OiEci4tGi7Y9FxOMRsXeV+H98ufO+jdD/c23Pf9eO/5b+X3uicvyH7zrVf2v9fyBPTRSv5Oe/m7jVBt7JZwcAAAD/FWn+HfgknbyWTtPJyfp3+HfG5rS2sLj09JGF90/O1b8rPxbDafmka7Theeh0slz8xXp+pnhWXO7fXzw3/qLy/zw/WV2ozfU5dhh0WzqM/8wflX63Dlh37dbRZkb60BCg51rHf9qcPfdGLxsD9JTfa8Pgusn4T3vVDqD3XP9hcLUb/+da8tYC4O7k+g+Dy/iHwWX8w+Ay/mEg3cnv+iUGORHphmiGxDol+n1mAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6I5/AwAA///K8u7c") accept$packet(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a00"], 0x22) openat$cgroup_devices(r4, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) 2.485981281s ago: executing program 4 (id=350): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000001c0)={0x802, 0xaa, 0x1ff, 0x4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_SET_TIME(r5, 0x4024700a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x5, 0x4f}) 1.534785588s ago: executing program 1 (id=351): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4c142, 0x0) gettid() ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000300)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000400)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r1, 0xc00464be, &(0x7f0000000440)={r2}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x26f}]}) bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) r6 = syz_io_uring_setup(0x1f87, 0x0, &(0x7f0000000100), 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="2d8e261000000000140012800b0001006970766c616e00000c00028008000500", @ANYRES32=r9, @ANYBLOB="080004000001"], 0x44}}, 0x0) io_uring_enter(r6, 0x50, 0x0, 0x0, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)={0x40}, 0x18) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000200)={0x24, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x23, @string={0x23, 0x3, "5d95b5db2648b4c56db3094885239e187f30232fb4711d740fabfa519a43621ba8"}}, 0x0, 0x0}, 0x0) r10 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0) r11 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) futex(&(0x7f0000000000), 0x8c, 0x1, 0x0, 0x0, 0x0) syz_usb_disconnect(r10) ioctl$EVIOCGMASK(r11, 0x541b, 0x0) 1.51211733s ago: executing program 0 (id=352): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000001540)='./bus\x00', 0x8000, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1, 0x1502, &(0x7f0000002a80)="$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") r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x14507e, 0x0) r2 = eventfd2(0x45, 0x0) dup2(r2, r1) write$eventfd(r2, &(0x7f0000000000)=0xfffffffffffffffe, 0x8) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/45, 0x0, 0x2000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f0000000500)=""/73, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000001c0)=0xffffffff) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000200)={0x0, r2}) 1.369384874s ago: executing program 2 (id=353): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x13, 0x800, 0x1, 0x2, 0xd59f80, 0x4, 0x5, 0xb, 0x8, 0x5, 0x722, 0x200, 0x7008, 0xa, 0x2b, 0x0, {0xffff945a, 0x1}, 0x3, 0xf1}}) 1.179898171s ago: executing program 2 (id=354): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() mount$fuse(0x0, &(0x7f0000004f00)='./file0\x00', &(0x7f0000004f40), 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000120000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c626c6b73697a653d3078303030303030303030302cf240511256cf7657a3abdf516f746865722c003c0860a5d877642f0e3d427cb66f9800906e43eb6bc2029b1e6ef06b8efac8643576683aff9e1c70afe617d306fb21146092aebb29a23b3cdc5d24d6aef733ca69f4da36b150dee8cc7de0c52a70011440c73bdcdf0e5cb118a7ef27a17465cb3b4d40aceb492f7677"]) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() setxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x24, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x5a, &(0x7f0000000100)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b70200001400a685b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000400)='./bus\x00', 0x800, &(0x7f0000000840)=ANY=[], 0x1, 0x36e, &(0x7f0000000c00)="$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") r4 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) io_setup(0x7, &(0x7f00000000c0)=0x0) io_submit(r5, 0x3f, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000000)="96", 0xfe00}, &(0x7f0000000040)={0x0, 0x0, 0x41, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) creat(&(0x7f0000000040)='./bus\x00', 0x0) 1.179261821s ago: executing program 4 (id=355): r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x4, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x2]}}}}]}, 0x88}}, 0x0) 506.811143ms ago: executing program 0 (id=356): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000001100)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x4) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$tun(r1, &(0x7f0000000240)={@void, @val, @ipv6=@icmpv6={0x0, 0x6, "41b0ca", 0x40, 0x3a, 0x0, @rand_addr=' \x01\x00', @empty, {[@routing, @fragment, @dstopts={0x0, 0x2, '\x00', [@pad1, @calipso={0x7, 0x8}, @jumbo]}], @ni={0x8c}}}}, 0x72) 506.279974ms ago: executing program 4 (id=357): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000100), 0x0, 0x0) listen(r0, 0x100101) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_CAPBSET_DROP(0x1c, 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0, 0x0) fcntl$setown(r2, 0x8, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/power/image_size', 0x159102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ppoll(&(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) ioctl$SNDRV_PCM_IOCTL_PAUSE(0xffffffffffffffff, 0x4161, 0x0) accept4(r0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$video(0x0, 0x7fff, 0x0) 485.075235ms ago: executing program 2 (id=358): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUMAUDOUT(r0, 0xc0345642, &(0x7f00000000c0)={0x7, "86f745a7ce60d43b773fd8714a5c64274fdec0adb16d4ffc728ce26885a68d3f"}) r1 = socket$netlink(0x10, 0x3, 0x14) r2 = syz_usb_connect(0x0, 0x1a2, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$uac1(r2, &(0x7f00000008c0)={0xc, 0x0, 0x0}, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\a\x00\x00B\x00'], 0xfe33) recvmsg(r3, 0x0, 0x2200) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x7b, &(0x7f0000000240)=ANY=[@ANYBLOB="12015002020000382505a1a44000010203010902690002010980020904000001020d00000b24060001b4ea92542d6305240001000d240f0101000000070002004506241a00011a07240a0906010109058103080008f8070904010000020d00000404010100020d00000905820200020508b609050302df03017f54"], &(0x7f00000004c0)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x300, 0x5, 0x40, 0x9, 0x40, 0x5e}, 0x83, &(0x7f0000000300)={0x5, 0xf, 0x83, 0x5, [@generic={0x5e, 0x10, 0x2, "678d9a8a4e58eb644f00dfa85252e1056951d02dfcbe8b6edee4fbc3a08ef100f0e25fca3afe83feb89944e4d8f7358afa6aa55359e78cc0124f3e0a299a75025cd39c241c599076e7f234fae9c00cb6dfa08567ca7ed827cec9c9"}, @ext_cap={0x7, 0x10, 0x2, 0x5, 0x9, 0x0, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xf, 0x2, 0x3, 0x3afe}, @ptm_cap={0x3}, @ssp_cap={0xc, 0x10, 0xa, 0x8, 0x0, 0xcc, 0xf, 0x7fff}]}, 0x3, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x2c0a}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x42a}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x430}}]}) r5 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) r6 = openat$tcp_congestion(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) write$tcp_congestion(r6, &(0x7f0000000080)='vegas\x00', 0x6) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000040)={0x14, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x2, {[@global=@item_012={0x1, 0x1, 0x6, '?'}]}}, 0x0}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001d00010000000000000000000a0010"], 0x1c}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$isdn(0x22, 0x3, 0x11) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000023c0)={{0x14}, [@NFT_MSG_DELTABLE={0x28, 0x2, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWTABLE={0x90, 0x0, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_USERDATA={0x3c, 0x6, "61774c8a1c9f633e19755b87e05f317541111dd9a4a11c1c70bfbda85f1f1fe6104493157fb05faa1df1bcef4568b5e3e5268227e1996493"}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8}]}, @NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}}, @NFT_MSG_DELSETELEM={0x2424, 0xe, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x240c, 0x3, 0x0, 0x1, [{0xfc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0xf8, 0x7, 0x0, 0x1, @immediate={{0xe}, @val={0xe4, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0xdc, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0xc4, 0x1, "9c798bf5b2d2a00c2e1024b121dc2bc42675298694e2438cd053a12010256b8c0fdbce12a52d2689965ec3a9e2749692230baf7796c4383b64419aa9707cbf410ab303168077ac120667102b96bfa96b940711d68b24e6ea7c74d47e9545ed318fd5a8bc04deceef040c7efbee7c7f338b15466de5180a6b504a7dc3867223f64c988e90e5a4687d862e66172afb32f8c7934eab61370454b46a65e721d02ce988c7498756df88e2c56b6a95709846cd170b3bc21ceda30d601598f4b13fd118"}]}, @NFTA_IMMEDIATE_DATA={0x4}]}}}]}, {0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @socket={{0xb}, @void}}]}, {0xef8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0xec4, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x78, 0x1, "d11758b7027dfd2e89bccf1a7b1cd55a9143cced59bfbdb846c8bced622007ff4109774cfcfb4282bc994c6a7302d9dfd41d794402ff54745a6f0576d924aaa7a4a37e92f3deb93c84276aae22c02a493e19e657cef59e6c90a3a4a3957b11191619b5b9ddef1823d93cac403227a94e7058e858"}, @NFTA_DATA_VALUE={0x86, 0x1, "eb3b6a517582939445d9098fb9cf50e801fd0bc114706f2a86ce16c180ae615ee105c3416891a7e87f6075895830bf269131016a06c2f618384a4cceb4168d2a1f055325ea8fa2a4bf5b8e77d6c98092dda73a57946e7eb2848460650e49e2d352b4a0450d07dde2955e55ecf5dabd1ef4027bca35b24461d1ffe7c2089095ea8790"}, @NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x13, 0x1, "7e1dfb01c1b33cac014a5cd5b06da4"}, @NFTA_DATA_VALUE={0xd04, 0x1, "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"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xc000000000}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xff}]}, {0x13f0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1200000}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_DATA={0x15c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xad, 0x1, "7bb1b47b042d7e73ba0f6ebf1c3068f0fab4993654f84f8c48f06f88fd5e66c3cca4d823c019c2e29351d4abf62e8af00aaa9634b09c187831255dffd0cc06653166dbafe85ac48abda3709f433c0342c2a5d200de8b21e1bbdde431c03861e50e39d4aec5b35d861f0b8eae35bfa296da573bf879ba285773f09f85627478cbd98af16c1535e93df4c7fb59d212e57494825b01691e9ccb042fa55c7d0b3aa08696fe4df859d1bc1b"}, @NFTA_DATA_VALUE={0xa5, 0x1, "f8413d908b5d8aae9e54fc27f1c2b83926580cc43c97042392d0e546f5209b51df5490b7e65f4847e12f44067244416c36228225c0a22bf4848d5841001d817169a550a842960b5a2a73d65f0be41ff0bc992754d0814882be2f12b7146f58750839b8288770f716961afb195cd232a3c10c5f1a8e67dd06832a68dcee09009a39e7e77816f252a9368fc65e38fb572b0958118c6e9ed32ee126235642d86480ac"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY={0x1160, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7a4ff176ff9ca4a8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0xae, 0x1, "868b16128085d2cea32662f0433d92633563805e41d16b99a131101551c140737cede45177f4264c635deb72c9e5909d594e2e063542b2c00011dd148f1504d171bc4bf9ea1fbcbf568fa38221b33e8b5072ce7321a10ccc61ab25823ef4090ded8f8032cf2f8e266f1273750dfc5e8488cfba77aef037990e78734beee4f9e3de66faa8fb6b830f8528796ac8c8e9560f8ce1521cddd53075b46fddf2921740970b3a2507992aea7337"}, @NFTA_DATA_VALUE={0xf62, 0x1, "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"}, @NFTA_DATA_VALUE={0x6a, 0x1, "d2b8c90989565bce3472a9f685ac5579e9058d4ee77882f899a7507c06eba7e6c66de4b3e4b1a7debf704f8b5de1ea494daf6b0a7fd5239d50f745f70922c3c179d959a8cc9c8a409e18a0ed035592a543c4f7a3428a00c1477211e0c93734b44dc1c968e7b4"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_KEY={0x60, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x1f, 0x1, "2b0e8a6ac94f4e049af167bdb83428ebf28d05af8cc9f00729d17d"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x98, 0xb, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_FIB_RESULT={0x8}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xf}]}}}, {0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}, {0x30, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xb}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0xf3}, @NFTA_HASH_TYPE={0x8}]}}}]}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @nat={{0x8}, @void}}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}, @NFT_MSG_DELTABLE={0x15c, 0x2, 0xa, 0x401, 0x0, 0x0, {0xb, 0x0, 0xa}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x80, 0x6, "c7004e66e65fdeaba65743b6a4bc089c5b6ebea02eb2ccd168658ee86868e2a5a3940c28d0c5d8f8ab7902e02052de32f71122560112dd1e3b44d3f4436ed11ce479ee3750c06fb48909bc6f7e61729a0fe14fb0349d59b57e9625a5777bd3b9b83075ce44f0c84113acea0a908079ed041500fc5a8063be57ead2c1"}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_USERDATA={0xac, 0x6, "1e5b038fc0e60183c26a12637a11078c6b0e2518d94f7d821fbc791569b32d318625765bb9ffae4d77d014d1f512bd55ff15cea53245c8ec32ba505f60ccfa809419ad274fb0c970fc7004a4870a84a678694e9e848321aef1ad026626379ddd502e684e08748706455b829ffc2d0858a5eb44c071aebb4724e64e047a9858d1410bd6bca2c2a0f2df2396de1ee460c077e817f15b2635cda01adb1da8b34ebcd485e7f720d41475"}]}, @NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x5}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x269c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000500)={'wlan0\x00'}) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000640)={0xc, &(0x7f0000000540)={0x0, 0x23, 0x95, {0x95, 0x24, "2d5563b505187070a6f540e0635b5716ec9c1ac6956f2c375d4b752328af62b516e6bc83c044e6eb00d51708f23978685528b7bfc8a741a1f624756cca0fc9fec5440468eae99faab6597ef7c8f7187da4e36a7c3e4ae74c338d7fe7e61f468b8f30c673edf74dae0d5906abea8509f968affef32a5e22e1c29cf1486894bd9648cdd6eff5d5867a6e394e5ef0b058dc1106de"}}, &(0x7f0000000600)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000a80)={0x24, &(0x7f0000000900)={0x40, 0x11, 0xd5, "2712401e3a1d505abc50c958dd12af1b6a24f93b1c42d081f48e151d389683bbb305e951c93555cbf0bd24eaa0e6dd9705b67a5d9ecce19d1b8d50033500721ea6b2a7421d6ec8b89483f68962bc63828bc1f3afccfdc2f4eb477fed60350bebe6b6474ada55408e3670de5ab6a38a351e31756ae3263f05305fde88750c65d34b67fcee7e159a8c23dde187a1607b145b0036ee41d87b6d2167eb8568999940f8c6744d0c516f253173ab9b1bd1dcafb7419cc3edab4f2e6c1c29c086cf2abdf21f7dec3b2223a424eb8fcc5d5d464a8a611b6215"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0xa}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000700)={0x20, 0x80, 0x1c, {0xf, 0x9, 0xfffffffa, 0x9, 0xe603, 0x0, 0x80, 0x0, 0xfffa, 0x3a, 0xca10}}, &(0x7f0000000740)={0x20, 0x85, 0x4, 0x4}, &(0x7f0000000840)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000880)={0x20, 0x87, 0x2, 0x9}, &(0x7f0000000a40)={0x20, 0x89, 0x2, 0x1}}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000007c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a27f2", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x8000, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000002340)={&(0x7f0000000040)={0x1c, 0x0, 0x8, 0x801, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x22f0}]}, 0x1c}}, 0x0) 231.004578ms ago: executing program 0 (id=359): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x10) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000440), 0x10) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x0, 0x40, 0xed, &(0x7f0000000500)=""/237, 0x41000, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x0, 0x10, 0xfffffff9, @void, @value}, 0x94) writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x1}], 0x1) r6 = accept4$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x4000000000000a1, 0x2, 0x0) 0s ago: executing program 3 (id=360): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="040f0004010b08"], 0x49) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/wireless\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/204, 0xcc}, {&(0x7f0000000200)=""/247, 0xf7}], 0x2, 0xa2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@gettclass={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0x0, 0x5}}}, 0x24}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) chown(0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) openat$kvm(0xffffff9c, &(0x7f0000000100), 0x305080, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_io_uring_setup(0x2ddd, &(0x7f00000006c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xe1, &(0x7f0000000280), &(0x7f0000000180)=0x0, &(0x7f0000000380)) syz_io_uring_submit(r8, r7, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}) io_uring_enter(r6, 0x381b, 0x0, 0x0, 0x0, 0x0) recvfrom(r4, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r5, 0x1) times(&(0x7f0000000000)) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0xffffffffffffffaa) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r10, 0x0, 0x2, 0x0, 0x0) sigaltstack(&(0x7f0000000300)={&(0x7f0000000400)=""/238, 0x80000001, 0xee}, &(0x7f0000000340)={&(0x7f00000009c0)=""/4096, 0x0, 0x1000}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x74}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) kernel console output (not intermixed with test programs): p219 could not be added: 12 [ 81.330907][ T3967] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.350217][ T3795] loop3: p220 size 8388608 extends beyond EOD, truncated [ 81.363836][ T3994] loop0: detected capacity change from 0 to 512 [ 81.380227][ T3967] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.431785][ T3795] loop3: p221 size 8388608 extends beyond EOD, truncated [ 81.452490][ T3795] loop3: p222 size 8388608 extends beyond EOD, truncated [ 81.494636][ T3967] device bridge_slave_0 entered promiscuous mode [ 81.504573][ T3994] EXT4-fs (loop0): Ignoring removed oldalloc option [ 81.538118][ T3967] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.574657][ T3795] loop3: p223 size 8388608 extends beyond EOD, truncated [ 81.585308][ T3967] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.595089][ T1075] cfg80211: failed to load regulatory.db [ 81.629899][ T3967] device bridge_slave_1 entered promiscuous mode [ 81.684174][ T3795] loop3: p224 size 8388608 extends beyond EOD, truncated [ 81.715651][ T3994] EXT4-fs error (device loop0): ext4_xattr_inode_iget:400: comm syz.0.62: Parent and EA inode have the same ino 15 [ 81.801206][ T3795] loop3: p225 size 8388608 extends beyond EOD, truncated [ 81.815677][ T3994] EXT4-fs error (device loop0): ext4_xattr_inode_iget:400: comm syz.0.62: Parent and EA inode have the same ino 15 [ 81.855137][ T3795] loop3: p226 size 8388608 extends beyond EOD, truncated [ 81.918970][ T3795] loop3: p227 size 8388608 extends beyond EOD, truncated [ 81.947344][ T3994] EXT4-fs (loop0): 1 orphan inode deleted [ 81.953104][ T3994] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,bsdgroups,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,mb_optimize_scan=0x0000000000000001,oldalloc,resuid=0x000000000000ee01,,errors=continue. Quota mode: none. [ 82.053375][ T3967] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.067732][ T3795] loop3: p228 size 8388608 extends beyond EOD, truncated [ 82.081023][ T3795] loop3: p229 size 8388608 extends beyond EOD, truncated [ 82.148452][ T3795] loop3: p230 size 8388608 extends beyond EOD, truncated [ 82.194132][ T3795] loop3: p231 size 8388608 extends beyond EOD, truncated [ 82.205790][ T3967] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.253084][ T3795] loop3: p232 size 8388608 extends beyond EOD, truncated [ 82.285159][ T3795] loop3: p233 size 8388608 extends beyond EOD, truncated [ 82.312755][ T3795] loop3: p234 size 8388608 extends beyond EOD, truncated [ 82.330841][ T1075] usb 2-1: USB disconnect, device number 5 [ 82.385973][ T3795] loop3: p235 size 8388608 extends beyond EOD, truncated [ 82.397154][ T1075] iowarrior 2-1:0.0: I/O-Warror #0 now disconnected [ 82.453968][ T3795] loop3: p236 size 8388608 extends beyond EOD, truncated [ 82.516010][ T3967] team0: Port device team_slave_0 added [ 82.545236][ T3795] loop3: p237 size 8388608 extends beyond EOD, truncated [ 82.548684][ T3967] team0: Port device team_slave_1 added [ 82.605481][ T3795] loop3: p238 size 8388608 extends beyond EOD, truncated [ 82.625079][ T3795] loop3: p239 size 8388608 extends beyond EOD, truncated [ 82.737772][ T3795] loop3: p240 size 8388608 extends beyond EOD, truncated [ 82.774336][ T4024] loop2: detected capacity change from 0 to 2048 [ 82.793923][ T3795] loop3: p241 size 8388608 extends beyond EOD, truncated [ 82.818928][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 82.868264][ T3795] loop3: p242 size 8388608 extends beyond EOD, truncated [ 82.877205][ T4024] loop2: p1 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 [ 82.879655][ T4024] loop2: p4 size 8388608 extends beyond EOD, [ 82.974496][ T3967] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.005410][ T3795] loop3: p243 size 8388608 extends beyond EOD, truncated [ 83.014919][ T3967] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.056253][ T3795] loop3: p244 size 8388608 extends beyond EOD, truncated [ 83.083339][ T3795] loop3: p245 size 8388608 extends beyond EOD, truncated [ 83.110885][ T3795] loop3: p246 size 8388608 extends beyond EOD, truncated [ 83.123961][ T3967] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.144686][ T3795] loop3: p247 size 8388608 extends beyond EOD, truncated [ 83.153228][ T4042] netlink: 'syz.1.72': attribute type 29 has an invalid length. [ 83.163999][ T3795] loop3: p248 size 8388608 extends beyond EOD, truncated [ 83.172259][ T4042] netlink: 'syz.1.72': attribute type 29 has an invalid length. [ 83.181672][ T3795] loop3: p249 size 8388608 extends beyond EOD, truncated [ 83.193695][ T3967] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.202472][ T3967] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.230613][ T3795] loop3: p250 size 8388608 extends beyond EOD, truncated [ 83.245962][ T3795] loop3: p251 size 8388608 extends beyond EOD, truncated [ 83.268147][ T3795] loop3: p252 size 8388608 extends beyond EOD, truncated [ 83.275728][ T3967] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.292978][ T3795] loop3: p253 size 8388608 extends beyond EOD, truncated [ 83.304920][ T3795] loop3: p254 size 8388608 extends beyond EOD, truncated [ 83.314341][ T4044] netlink: 'syz.1.72': attribute type 29 has an invalid length. [ 83.345049][ T3795] loop3: p255 size 8388608 extends beyond EOD, truncated [ 83.346670][ T1075] Bluetooth: hci5: command 0x041b tx timeout [ 83.396680][ T4024] truncated [ 83.417209][ T4024] loop2: p5 size 8388608 extends beyond EOD, truncated [ 83.509823][ T4049] netlink: 28 bytes leftover after parsing attributes in process `syz.1.73'. [ 83.540728][ T4024] loop2: p6 size 8388608 extends beyond EOD, truncated [ 83.551974][ T4024] loop2: p7 size 8388608 extends beyond EOD, truncated [ 83.560449][ T4024] loop2: p8 size 8388608 extends beyond EOD, truncated [ 83.571399][ T3967] device hsr_slave_0 entered promiscuous mode [ 83.607337][ T4024] loop2: p9 size 8388608 extends beyond EOD, truncated [ 83.645857][ T3967] device hsr_slave_1 entered promiscuous mode [ 83.691196][ T3967] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.769602][ T3967] Cannot create hsr debugfs directory [ 83.874347][ T4024] loop2: p10 size 8388608 extends beyond EOD, truncated [ 83.895627][ T4024] loop2: p11 size 8388608 extends beyond EOD, truncated [ 83.948628][ T4024] loop2: p12 size 8388608 extends beyond EOD, truncated [ 83.982522][ T4024] loop2: p13 size 8388608 extends beyond EOD, truncated [ 83.998214][ T4024] loop2: p14 size 8388608 extends beyond EOD, truncated [ 84.014914][ T4024] loop2: p15 size 8388608 extends beyond EOD, truncated [ 84.027120][ T4024] loop2: p16 size 8388608 extends beyond EOD, truncated [ 84.072659][ T4024] loop2: p17 size 8388608 extends beyond EOD, truncated [ 84.251399][ T4024] loop2: p18 size 8388608 extends beyond EOD, truncated [ 84.289448][ T4024] loop2: p19 size 8388608 extends beyond EOD, truncated [ 84.351003][ T4024] loop2: p20 size 8388608 extends beyond EOD, truncated [ 84.370197][ T4065] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 84.397173][ T4024] loop2: p21 size 8388608 extends beyond EOD, truncated [ 84.407098][ T4024] loop2: p22 size 8388608 extends beyond EOD, truncated [ 84.460444][ T4024] loop2: p23 size 8388608 extends beyond EOD, truncated [ 84.498516][ T4024] loop2: p24 size 8388608 extends beyond EOD, truncated [ 84.521926][ T3967] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.544472][ T4024] loop2: p25 size 8388608 extends beyond EOD, truncated [ 84.564636][ T4069] netlink: 104 bytes leftover after parsing attributes in process `syz.1.80'. [ 84.576682][ T4024] loop2: p26 size 8388608 extends beyond EOD, truncated [ 84.616928][ T4024] loop2: p27 size 8388608 extends beyond EOD, truncated [ 84.664985][ T3967] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.678667][ T4070] loop0: detected capacity change from 0 to 512 [ 84.699595][ T4024] loop2: p28 size 8388608 extends beyond EOD, truncated [ 84.732274][ T4024] loop2: p29 size 8388608 extends beyond EOD, truncated [ 84.759032][ T4024] loop2: p30 size 8388608 extends beyond EOD, truncated [ 84.807162][ T4070] EXT4-fs (loop0): Ignoring removed oldalloc option [ 84.820943][ T4024] loop2: p31 size 8388608 extends beyond EOD, truncated [ 84.845833][ T4024] loop2: p32 size 8388608 extends beyond EOD, truncated [ 84.859042][ T3967] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.897277][ T4070] EXT4-fs error (device loop0): ext4_xattr_inode_iget:400: comm syz.0.79: Parent and EA inode have the same ino 15 [ 84.919273][ T4024] loop2: p33 size 8388608 extends beyond EOD, truncated [ 84.951819][ T4070] EXT4-fs error (device loop0): ext4_xattr_inode_iget:400: comm syz.0.79: Parent and EA inode have the same ino 15 [ 84.964785][ T4070] EXT4-fs (loop0): 1 orphan inode deleted [ 84.970962][ T4070] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,bsdgroups,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,mb_optimize_scan=0x0000000000000001,oldalloc,resuid=0x000000000000ee01,,errors=continue. Quota mode: none. [ 85.054473][ T3967] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.126410][ T4024] loop2: p34 size 8388608 extends beyond EOD, truncated [ 85.140143][ T4024] loop2: p35 size 8388608 extends beyond EOD, truncated [ 85.148805][ T4024] loop2: p36 size 8388608 extends beyond EOD, truncated [ 85.163602][ T4024] loop2: p37 size 8388608 extends beyond EOD, truncated [ 85.184905][ T4024] loop2: p38 size 8388608 extends beyond EOD, truncated [ 85.206303][ T4024] loop2: p39 size 8388608 extends beyond EOD, truncated [ 85.236275][ T4024] loop2: p40 size 8388608 extends beyond EOD, truncated [ 85.249134][ T4083] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 85.269523][ T4024] loop2: p41 size 8388608 extends beyond EOD, truncated [ 85.303652][ T4024] loop2: p42 size 8388608 extends beyond EOD, truncated [ 85.336202][ T4024] loop2: p43 size 8388608 extends beyond EOD, truncated [ 85.363483][ T4085] netlink: 28 bytes leftover after parsing attributes in process `syz.4.84'. [ 85.371397][ T4024] loop2: p44 size 8388608 extends beyond EOD, truncated [ 85.393729][ T4024] loop2: p45 size 8388608 extends beyond EOD, truncated [ 85.411973][ T4024] loop2: p46 size 8388608 extends beyond EOD, truncated [ 85.428481][ T23] Bluetooth: hci5: command 0x040f tx timeout [ 85.460784][ T4024] loop2: p47 size 8388608 extends beyond EOD, truncated [ 85.479910][ T4024] loop2: p48 size 8388608 extends beyond EOD, truncated [ 85.509465][ T4024] loop2: p49 size 8388608 extends beyond EOD, truncated [ 85.556297][ T3967] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 85.580166][ T4024] loop2: p50 size 8388608 extends beyond EOD, truncated [ 85.604619][ T3967] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 85.621508][ T4024] loop2: p51 size 8388608 extends beyond EOD, truncated [ 85.627705][ T3967] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 85.647497][ T4024] loop2: p52 size 8388608 extends beyond EOD, truncated [ 85.674110][ T3967] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 85.681338][ T4024] loop2: p53 size 8388608 extends beyond EOD, truncated [ 85.711289][ T4024] loop2: p54 size 8388608 extends beyond EOD, truncated [ 85.750592][ T4091] device veth1_macvtap left promiscuous mode [ 85.769741][ T4024] loop2: p55 size 8388608 extends beyond EOD, truncated [ 85.791585][ T4024] loop2: p56 size 8388608 extends beyond EOD, truncated [ 85.798862][ T4091] device macsec0 entered promiscuous mode [ 85.846785][ T4024] loop2: p57 size 8388608 extends beyond EOD, truncated [ 85.876207][ T4024] loop2: p58 size 8388608 extends beyond EOD, truncated [ 85.908115][ T4024] loop2: p59 size 8388608 extends beyond EOD, truncated [ 85.967046][ T4024] loop2: p60 size 8388608 extends beyond EOD, truncated [ 85.974785][ T4096] device veth1_macvtap entered promiscuous mode [ 85.997105][ T4024] loop2: p61 size 8388608 extends beyond EOD, truncated [ 86.007087][ T4096] device macsec0 left promiscuous mode [ 86.015002][ T4024] loop2: p62 size 8388608 extends beyond EOD, truncated [ 86.040754][ T4024] loop2: p63 size 8388608 extends beyond EOD, truncated [ 86.104147][ T4024] loop2: p64 size 8388608 extends beyond EOD, truncated [ 86.123404][ T4024] loop2: p65 size 8388608 extends beyond EOD, truncated [ 86.170695][ T4024] loop2: p66 size 8388608 extends beyond EOD, truncated [ 86.208611][ T4024] loop2: p67 size 8388608 extends beyond EOD, truncated [ 86.248113][ T4024] loop2: p68 size 8388608 extends beyond EOD, truncated [ 86.266111][ T4024] loop2: p69 size 8388608 extends beyond EOD, truncated [ 86.289121][ T4024] loop2: p70 size 8388608 extends beyond EOD, truncated [ 86.344781][ T4024] loop2: p71 size 8388608 extends beyond EOD, truncated [ 86.377894][ T4024] loop2: p72 size 8388608 extends beyond EOD, truncated [ 86.401129][ T3967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.419079][ T4024] loop2: p73 size 8388608 extends beyond EOD, truncated [ 86.435377][ T4024] loop2: p74 size 8388608 extends beyond EOD, truncated [ 86.445297][ T4024] loop2: p75 size 8388608 extends beyond EOD, truncated [ 86.473326][ T3846] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 86.483610][ T3846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 86.492252][ T4024] loop2: p76 size 8388608 extends beyond EOD, truncated [ 86.512065][ T4024] loop2: p77 size 8388608 extends beyond EOD, truncated [ 86.525350][ T3967] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.554306][ T1233] device hsr_slave_0 left promiscuous mode [ 86.568186][ T1233] device hsr_slave_1 left promiscuous mode [ 86.574451][ T4024] loop2: p78 size 8388608 extends beyond EOD, truncated [ 86.583097][ T1233] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.602037][ T4024] loop2: p79 size 8388608 extends beyond EOD, truncated [ 86.631635][ T4024] loop2: p80 size 8388608 extends beyond EOD, truncated [ 86.641987][ T1233] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.656757][ T1075] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 86.665331][ T4024] loop2: p81 size 8388608 extends beyond EOD, truncated [ 86.678183][ T1233] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.685612][ T4024] loop2: p82 size 8388608 extends beyond EOD, truncated [ 86.701430][ T1233] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.711223][ T4024] loop2: p83 size 8388608 extends beyond EOD, truncated [ 86.727857][ T4024] loop2: p84 size 8388608 extends beyond EOD, truncated [ 86.742677][ T1233] device bridge_slave_1 left promiscuous mode [ 86.752880][ T1233] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.766089][ T4024] loop2: p85 size 8388608 extends beyond EOD, truncated [ 86.798659][ T4024] loop2: p86 size 8388608 extends beyond EOD, truncated [ 86.814570][ T4024] loop2: p87 size 8388608 extends beyond EOD, truncated [ 86.825490][ T1233] device bridge_slave_0 left promiscuous mode [ 86.832571][ T4024] loop2: p88 size 8388608 extends beyond EOD, truncated [ 86.847392][ T4024] loop2: p89 size 8388608 extends beyond EOD, truncated [ 86.857014][ T1233] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.867201][ T4024] loop2: p90 size 8388608 extends beyond EOD, truncated [ 86.895864][ T4024] loop2: p91 size 8388608 extends beyond EOD, truncated [ 86.912526][ T4024] loop2: p92 size 8388608 extends beyond EOD, truncated [ 86.932052][ T1233] device veth1_macvtap left promiscuous mode [ 86.938806][ T4024] loop2: p93 size 8388608 extends beyond EOD, truncated [ 86.948173][ T1075] usb 2-1: Using ep0 maxpacket: 8 [ 86.954775][ T1233] device veth0_macvtap left promiscuous mode [ 86.960720][ T4115] loop0: detected capacity change from 0 to 512 [ 86.971335][ T4024] loop2: p94 size 8388608 extends beyond EOD, truncated [ 86.982433][ T1233] device veth1_vlan left promiscuous mode [ 86.996183][ T4024] loop2: p95 size 8388608 extends beyond EOD, truncated [ 87.007918][ T1233] device veth0_vlan left promiscuous mode [ 87.020446][ T4115] EXT4-fs (loop0): Ignoring removed oldalloc option [ 87.031656][ T4024] loop2: p96 size 8388608 extends beyond EOD, truncated [ 87.054849][ T4115] EXT4-fs error (device loop0): ext4_xattr_inode_iget:400: comm syz.0.96: Parent and EA inode have the same ino 15 [ 87.067831][ T1075] usb 2-1: descriptor type invalid, skip [ 87.073894][ T4024] loop2: p97 size 8388608 extends beyond EOD, truncated [ 87.083642][ T4115] EXT4-fs error (device loop0): ext4_xattr_inode_iget:400: comm syz.0.96: Parent and EA inode have the same ino 15 [ 87.098640][ T4115] EXT4-fs (loop0): 1 orphan inode deleted [ 87.106309][ T4024] loop2: p98 size 8388608 extends beyond EOD, truncated [ 87.110831][ T4115] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,bsdgroups,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,mb_optimize_scan=0x0000000000000001,oldalloc,resuid=0x000000000000ee01,,errors=continue. Quota mode: none. [ 87.142081][ T4024] loop2: p99 size 8388608 extends beyond EOD, truncated [ 87.187132][ T1075] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.200826][ T4024] loop2: p100 size 8388608 extends beyond EOD, truncated [ 87.208642][ T1075] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 87.238005][ T4024] loop2: p101 size 8388608 extends beyond EOD, truncated [ 87.255654][ T4024] loop2: p102 size 8388608 extends beyond EOD, truncated [ 87.273615][ T4024] loop2: p103 size 8388608 extends beyond EOD, truncated [ 87.292319][ T4024] loop2: p104 size 8388608 extends beyond EOD, truncated [ 87.301878][ T4024] loop2: p105 size 8388608 extends beyond EOD, truncated [ 87.320699][ T4024] loop2: p106 size 8388608 extends beyond EOD, truncated [ 87.350965][ T4024] loop2: p107 size 8388608 extends beyond EOD, truncated [ 87.377289][ T4024] loop2: p108 size 8388608 extends beyond EOD, truncated [ 87.395449][ T4024] loop2: p109 size 8388608 extends beyond EOD, truncated [ 87.407046][ T1075] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 87.424246][ T1075] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.432854][ T4024] loop2: p110 size 8388608 extends beyond EOD, truncated [ 87.451871][ T1075] usb 2-1: Product: syz [ 87.460469][ T4024] loop2: p111 size 8388608 extends beyond EOD, truncated [ 87.469478][ T1075] usb 2-1: Manufacturer: syz [ 87.474303][ T1075] usb 2-1: SerialNumber: syz [ 87.493067][ T4024] loop2: p112 size 8388608 extends beyond EOD, truncated [ 87.513767][ T4024] loop2: p113 size 8388608 extends beyond EOD, truncated [ 87.523341][ T21] Bluetooth: hci5: command 0x0419 tx timeout [ 87.539178][ T4024] loop2: p114 size 8388608 extends beyond EOD, truncated [ 87.559178][ T4024] loop2: p115 size 8388608 extends beyond EOD, truncated [ 87.587999][ T4024] loop2: p116 size 8388608 extends beyond EOD, truncated [ 87.602810][ T4024] loop2: p117 size 8388608 extends beyond EOD, truncated [ 87.623407][ T4024] loop2: p118 size 8388608 extends beyond EOD, truncated [ 87.643543][ T4024] loop2: p119 size 8388608 extends beyond EOD, truncated [ 87.667634][ T4024] loop2: p120 size 8388608 extends beyond EOD, truncated [ 87.689415][ T4024] loop2: p121 size 8388608 extends beyond EOD, truncated [ 87.704745][ T4024] loop2: p122 size 8388608 extends beyond EOD, truncated [ 87.714494][ T4024] loop2: p123 size 8388608 extends beyond EOD, truncated [ 87.733009][ T4024] loop2: p124 size 8388608 extends beyond EOD, truncated [ 87.746055][ T1233] team0 (unregistering): Port device team_slave_1 removed [ 87.753764][ T4024] loop2: p125 size 8388608 extends beyond EOD, truncated [ 87.772296][ T1233] team0 (unregistering): Port device team_slave_0 removed [ 87.779086][ T4024] loop2: p126 size 8388608 extends beyond EOD, truncated [ 87.796238][ T4024] loop2: p127 size 8388608 extends beyond EOD, truncated [ 87.810035][ T4024] loop2: p128 size 8388608 extends beyond EOD, truncated [ 87.810603][ T1233] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 87.823989][ T1075] cdc_ncm 2-1:1.0: bind() failure [ 87.843486][ T1075] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 87.853619][ T1075] cdc_ncm 2-1:1.1: bind() failure [ 87.864399][ T4024] loop2: p129 size 8388608 extends beyond EOD, truncated [ 87.883466][ T1233] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 87.885345][ T1075] usb 2-1: USB disconnect, device number 6 [ 87.905216][ T4024] loop2: p130 size 8388608 extends beyond EOD, truncated [ 87.924840][ T4024] loop2: p131 size 8388608 extends beyond EOD, truncated [ 87.935570][ T4024] loop2: p132 size 8388608 extends beyond EOD, truncated [ 87.946055][ T4024] loop2: p133 size 8388608 extends beyond EOD, truncated [ 87.955812][ T4024] loop2: p134 size 8388608 extends beyond EOD, truncated [ 87.985533][ T4024] loop2: p135 size 8388608 extends beyond EOD, truncated [ 87.994012][ T4024] loop2: p136 size 8388608 extends beyond EOD, truncated [ 88.023571][ T4024] loop2: p137 size 8388608 extends beyond EOD, truncated [ 88.044681][ T4024] loop2: p138 size 8388608 extends beyond EOD, truncated [ 88.055019][ T4024] loop2: p139 size 8388608 extends beyond EOD, truncated [ 88.071638][ T4024] loop2: p140 size 8388608 extends beyond EOD, truncated [ 88.085904][ T4024] loop2: p141 size 8388608 extends beyond EOD, truncated [ 88.102889][ T4024] loop2: p142 size 8388608 extends beyond EOD, truncated [ 88.181529][ T4024] loop2: p143 size 8388608 extends beyond EOD, truncated [ 88.194518][ T4024] loop2: p144 size 8388608 extends beyond EOD, truncated [ 88.203320][ T4024] loop2: p145 size 8388608 extends beyond EOD, truncated [ 88.211444][ T4024] loop2: p146 size 8388608 extends beyond EOD, truncated [ 88.220007][ T4024] loop2: p147 size 8388608 extends beyond EOD, truncated [ 88.228087][ T4024] loop2: p148 size 8388608 extends beyond EOD, truncated [ 88.236161][ T4024] loop2: p149 size 8388608 extends beyond EOD, truncated [ 88.244824][ T4024] loop2: p150 size 8388608 extends beyond EOD, truncated [ 88.258213][ T4024] loop2: p151 size 8388608 extends beyond EOD, truncated [ 88.269665][ T4024] loop2: p152 size 8388608 extends beyond EOD, truncated [ 88.284125][ T4024] loop2: p153 size 8388608 extends beyond EOD, truncated [ 88.294594][ T4024] loop2: p154 size 8388608 extends beyond EOD, truncated [ 88.319987][ T4024] loop2: p155 size 8388608 extends beyond EOD, truncated [ 88.342657][ T4024] loop2: p156 size 8388608 extends beyond EOD, truncated [ 88.369602][ T4024] loop2: p157 size 8388608 extends beyond EOD, truncated [ 88.390298][ T4024] loop2: p158 size 8388608 extends beyond EOD, truncated [ 88.399079][ T1233] bond0 (unregistering): Released all slaves [ 88.403700][ T4024] loop2: p159 size 8388608 extends beyond EOD, truncated [ 88.415853][ T4024] loop2: p160 size 8388608 extends beyond EOD, truncated [ 88.442184][ T4024] loop2: p161 size 8388608 extends beyond EOD, truncated [ 88.469936][ T4024] loop2: p162 size 8388608 extends beyond EOD, truncated [ 88.491447][ T4024] loop2: p163 size 8388608 extends beyond EOD, truncated [ 88.505430][ T4024] loop2: p164 size 8388608 extends beyond EOD, truncated [ 88.515401][ T4024] loop2: p165 size 8388608 extends beyond EOD, truncated [ 88.529501][ T4024] loop2: p166 size 8388608 extends beyond EOD, truncated [ 88.545338][ T4024] loop2: p167 size 8388608 extends beyond EOD, truncated [ 88.559083][ T4113] netlink: 28 bytes leftover after parsing attributes in process `syz.4.95'. [ 88.574806][ T4024] loop2: p168 size 8388608 extends beyond EOD, truncated [ 88.586346][ T3846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 88.604917][ T4024] loop2: p169 size 8388608 extends beyond EOD, truncated [ 88.607589][ T3846] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 88.624092][ T4024] loop2: p170 size 8388608 extends beyond EOD, truncated [ 88.650278][ T3846] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.657382][ T3846] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.666201][ T4024] loop2: p171 size 8388608 extends beyond EOD, truncated [ 88.702350][ T3846] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 88.737175][ T4024] loop2: p172 size 8388608 extends beyond EOD, truncated [ 88.783894][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 88.807815][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 88.812929][ T1293] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 88.867937][ T4024] loop2: p173 size 8388608 extends beyond EOD, truncated [ 88.881695][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.888825][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.905112][ T4024] loop2: p174 size 8388608 extends beyond EOD, truncated [ 88.934058][ T4024] loop2: p175 size 8388608 extends beyond EOD, truncated [ 88.990790][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 89.001949][ T4024] loop2: p176 size 8388608 extends beyond EOD, truncated [ 89.031080][ T4024] loop2: p177 size 8388608 extends beyond EOD, truncated [ 89.059153][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 89.073080][ T4024] loop2: p178 size 8388608 extends beyond EOD, truncated [ 89.106717][ T1293] usb 2-1: Using ep0 maxpacket: 8 [ 89.171771][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 89.180131][ T4024] loop2: p179 size 8388608 extends beyond EOD, truncated [ 89.223027][ T4024] loop2: p180 size 8388608 extends beyond EOD, truncated [ 89.226973][ T1293] usb 2-1: config 0 has an invalid interface number: 143 but max is 0 [ 89.290967][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 89.365283][ T1293] usb 2-1: config 0 has no interface number 0 [ 89.404502][ T1293] usb 2-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 89.432628][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 89.444242][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 89.453791][ T1293] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.510301][ T4024] loop2: p181 size 8388608 extends beyond EOD, truncated [ 89.578246][ T1293] usb 2-1: config 0 descriptor?? [ 89.587275][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 89.638113][ T4024] loop2: p182 size 8388608 extends beyond EOD, truncated [ 89.693806][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 89.782251][ T4024] loop2: p183 size 8388608 extends beyond EOD, truncated [ 89.792843][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 89.817093][ T1293] viperboard 2-1:0.143: version 0.00 found at bus 002 address 007 [ 89.900271][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 89.972160][ T1293] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 90.025802][ T4024] loop2: p184 size 8388608 extends beyond EOD, truncated [ 90.038255][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 90.087377][ T1293] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5 [ 90.119575][ T3967] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 90.203410][ T4024] loop2: p185 size 8388608 extends beyond EOD, truncated [ 90.231204][ T4024] loop2: p186 size 8388608 extends beyond EOD, truncated [ 90.297093][ T1293] usb 2-1: USB disconnect, device number 7 [ 90.317775][ T4024] loop2: p187 size 8388608 extends beyond EOD, truncated [ 90.344882][ T4024] loop2: p188 size 8388608 extends beyond EOD, truncated [ 90.413910][ T4024] loop2: p189 size 8388608 extends beyond EOD, truncated [ 90.443899][ T4024] loop2: p190 size 8388608 extends beyond EOD, truncated [ 90.475623][ T4024] loop2: p191 size 8388608 extends beyond EOD, truncated [ 90.601781][ T4024] loop2: p192 size 8388608 extends beyond EOD, truncated [ 90.625284][ T4142] loop0: detected capacity change from 0 to 512 [ 90.638833][ T4024] loop2: p193 size 8388608 extends beyond EOD, truncated [ 90.681372][ T4142] EXT4-fs (loop0): Ignoring removed oldalloc option [ 90.729551][ T4024] loop2: p194 size 8388608 extends beyond EOD, truncated [ 90.847277][ T4024] loop2: p195 size 8388608 extends beyond EOD, truncated [ 90.897276][ T4142] EXT4-fs error (device loop0): ext4_xattr_inode_iget:400: comm syz.0.107: Parent and EA inode have the same ino 15 [ 90.961914][ T4024] loop2: p196 size 8388608 extends beyond EOD, truncated [ 90.990348][ T4142] EXT4-fs error (device loop0): ext4_xattr_inode_iget:400: comm syz.0.107: Parent and EA inode have the same ino 15 [ 91.014315][ T4024] loop2: p197 size 8388608 extends beyond EOD, truncated [ 91.027968][ T4142] EXT4-fs (loop0): 1 orphan inode deleted [ 91.033974][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 91.050107][ T4024] loop2: p198 size 8388608 extends beyond EOD, truncated [ 91.064497][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 91.098054][ T4142] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,bsdgroups,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,mb_optimize_scan=0x0000000000000001,oldalloc,resuid=0x000000000000ee01,,errors=continue. Quota mode: none. [ 91.128501][ T4024] loop2: p199 size 8388608 extends beyond EOD, truncated [ 91.158208][ T4024] loop2: p200 size 8388608 extends beyond EOD, truncated [ 91.215673][ T3967] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.263750][ T4024] loop2: p201 size 8388608 extends beyond EOD, truncated [ 91.313290][ T4024] loop2: p202 size 8388608 extends beyond EOD, truncated [ 91.394279][ T4024] loop2: p203 size 8388608 extends beyond EOD, truncated [ 91.414228][ T1207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 91.439309][ T4024] loop2: p204 size 8388608 extends beyond EOD, truncated [ 91.510796][ T1207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 91.540196][ T4154] bridge0: port 3(team0) entered blocking state [ 91.558572][ T4024] loop2: p205 size 8388608 extends beyond EOD, truncated [ 91.590922][ T4154] bridge0: port 3(team0) entered disabled state [ 91.627223][ T4024] loop2: p206 size 8388608 extends beyond EOD, truncated [ 91.644549][ T4024] loop2: p207 size 8388608 extends beyond EOD, truncated [ 91.677365][ T4024] loop2: p208 size 8388608 extends beyond EOD, truncated [ 91.685175][ T4024] loop2: p209 size 8388608 extends beyond EOD, truncated [ 91.706062][ T4024] loop2: p210 size 8388608 extends beyond EOD, truncated [ 91.716736][ T3611] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 91.728917][ T4024] loop2: p211 size 8388608 extends beyond EOD, truncated [ 91.745845][ T4154] device team0 entered promiscuous mode [ 91.750700][ T4024] loop2: p212 size 8388608 extends beyond EOD, truncated [ 91.803926][ T4024] loop2: p213 size 8388608 extends beyond EOD, truncated [ 91.832468][ T4024] loop2: p214 size 8388608 extends beyond EOD, truncated [ 91.840384][ T3607] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 91.850410][ T4154] device team_slave_0 entered promiscuous mode [ 91.925216][ T4024] loop2: p215 size 8388608 extends beyond EOD, truncated [ 91.940423][ T4024] loop2: p216 size 8388608 extends beyond EOD, truncated [ 91.950403][ T4154] device team_slave_1 entered promiscuous mode [ 91.974473][ T4024] loop2: p217 size 8388608 extends beyond EOD, truncated [ 91.996775][ T3611] usb 2-1: too many configurations: 65, using maximum allowed: 8 [ 92.048915][ T4154] bridge0: port 3(team0) entered blocking state [ 92.055492][ T4154] bridge0: port 3(team0) entered forwarding state [ 92.084644][ T4024] loop2: p218 size 8388608 extends beyond EOD, truncated [ 92.128192][ T3607] usb 1-1: Using ep0 maxpacket: 32 [ 92.181941][ T4024] loop2: p219 size 8388608 extends beyond EOD, truncated [ 92.245567][ T4024] loop2: p220 size 8388608 extends beyond EOD, truncated [ 92.249860][ T3967] device veth0_vlan entered promiscuous mode [ 92.256671][ T3607] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.332346][ T3607] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.349177][ T4024] loop2: p221 size 8388608 extends beyond EOD, truncated [ 92.369422][ T4024] loop2: p222 size 8388608 extends beyond EOD, truncated [ 92.378114][ T1207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 92.385881][ T3607] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 92.405791][ T1207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 92.417534][ T4166] Zero length message leads to an empty skb [ 92.473010][ T4024] loop2: p223 size 8388608 extends beyond EOD, truncated [ 92.482092][ T3607] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.493584][ T1207] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 92.519190][ T4024] loop2: p224 size 8388608 extends beyond EOD, truncated [ 92.531866][ T1207] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 92.550729][ T3607] usb 1-1: config 0 descriptor?? [ 92.604165][ T4024] loop2: p225 size 8388608 extends beyond EOD, truncated [ 92.647658][ T3967] device veth1_vlan entered promiscuous mode [ 92.657760][ T3607] hub 1-1:0.0: USB hub found [ 92.669716][ T4024] loop2: p226 size 8388608 extends beyond EOD, truncated [ 92.695509][ T4024] loop2: p227 size 8388608 extends beyond EOD, truncated [ 92.706765][ T3611] usb 2-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 92.720993][ T3611] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.721281][ T4024] loop2: p228 size 8388608 extends beyond EOD, truncated [ 92.775283][ T4024] loop2: p229 size 8388608 extends beyond EOD, truncated [ 92.800264][ T3847] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 92.825021][ T4170] loop4: detected capacity change from 0 to 128 [ 92.833364][ T4024] loop2: p230 size 8388608 extends beyond EOD, truncated [ 92.843959][ T3847] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 92.854267][ T3611] usb 2-1: Found UVC 0.00 device (046d:08c1) [ 92.866077][ T4024] loop2: p231 size 8388608 extends beyond EOD, truncated [ 92.874086][ T3607] hub 1-1:0.0: 1 port detected [ 92.884659][ T3611] usb 2-1: No valid video chain found. [ 92.913672][ T3967] device veth0_macvtap entered promiscuous mode [ 92.954272][ T4024] loop2: p232 size 8388608 extends beyond EOD, truncated [ 92.970171][ T26] audit: type=1800 audit(1728328831.058:5): pid=4170 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.115" name="bus" dev="loop4" ino=1048592 res=0 errno=0 [ 93.065180][ T3967] device veth1_macvtap entered promiscuous mode [ 93.104033][ T4024] loop2: p233 size 8388608 extends beyond EOD, truncated [ 93.162705][ T3608] usb 2-1: USB disconnect, device number 8 [ 93.224583][ T4024] loop2: p234 size 8388608 extends beyond EOD, truncated [ 93.278314][ T3967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.339324][ T4024] loop2: p235 size 8388608 extends beyond EOD, truncated [ 93.440768][ T4024] loop2: p236 size 8388608 extends beyond EOD, truncated [ 93.450458][ T3967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.480983][ T4024] loop2: p237 size 8388608 extends beyond EOD, truncated [ 93.497825][ T4172] attempt to access beyond end of device [ 93.497825][ T4172] loop4: rw=0, want=240, limit=128 [ 93.542981][ T3967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.572305][ T4024] loop2: p238 size 8388608 extends beyond EOD, truncated [ 93.609391][ T3967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.674704][ T4024] loop2: p239 size 8388608 extends beyond EOD, truncated [ 93.761647][ T3967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.783737][ T4024] loop2: p240 size 8388608 extends beyond EOD, truncated [ 93.870517][ T3967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.885406][ T4024] loop2: p241 size 8388608 extends beyond EOD, truncated [ 93.988551][ T3967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.002437][ T4024] loop2: p242 size 8388608 extends beyond EOD, truncated [ 94.059147][ T4024] loop2: p243 size 8388608 extends beyond EOD, truncated [ 94.118840][ T3967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.144670][ T4024] loop2: p244 size 8388608 extends beyond EOD, truncated [ 94.217535][ T4024] loop2: p245 size 8388608 extends beyond EOD, truncated [ 94.237987][ T3967] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.266767][ T3607] hub 1-1:0.0: hub_hub_status failed (err = -32) [ 94.273227][ T3607] hub 1-1:0.0: config failed, can't get hub status (err -32) [ 94.317229][ T1207] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 94.325715][ T1207] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 94.350015][ T4024] loop2: p246 size 8388608 extends beyond EOD, truncated [ 94.440447][ T1207] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 94.457405][ T4024] loop2: p247 size 8388608 extends beyond EOD, truncated [ 94.506876][ T3607] usbhid 1-1:0.0: can't add hid device: -32 [ 94.514389][ T3607] usbhid: probe of 1-1:0.0 failed with error -32 [ 94.527264][ T1207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 94.548421][ T4024] loop2: p248 size 8388608 extends beyond EOD, truncated [ 94.559360][ T3967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.593428][ T4024] loop2: p249 size 8388608 extends beyond EOD, truncated [ 94.600253][ T3967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.612732][ T4024] loop2: p250 size 8388608 extends beyond EOD, truncated [ 94.647402][ T4024] loop2: p251 size 8388608 extends beyond EOD, truncated [ 94.664678][ T3967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.691185][ T4024] loop2: p252 size 8388608 extends beyond EOD, truncated [ 94.705563][ T3967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.735343][ T3967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.736805][ T4024] loop2: p253 size 8388608 extends beyond EOD, [ 94.755583][ T3967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.796464][ T3967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.814696][ T4024] truncated [ 94.815782][ T3967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.840722][ T3967] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.851033][ T4024] loop2: p254 size 8388608 extends beyond EOD, truncated [ 94.944505][ T1207] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 94.963277][ T4024] loop2: p255 size 8388608 extends beyond EOD, truncated [ 94.981598][ T1207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 95.008232][ T4024] loop2: p255 could not be added: 12 [ 95.022784][ T3967] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.090839][ T3967] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.155096][ T3967] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.164444][ T3967] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.256578][ T3640] Bluetooth: hci4: command 0x0409 tx timeout [ 96.477043][ T3611] usb 1-1: USB disconnect, device number 4 [ 96.815311][ T4171] chnl_net:caif_netlink_parms(): no params data found [ 97.201299][ T4201] netlink: 4 bytes leftover after parsing attributes in process `syz.1.120'. [ 97.446763][ T23] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 97.706707][ T23] usb 2-1: Using ep0 maxpacket: 8 [ 98.031812][ T3611] Bluetooth: hci4: command 0x041b tx timeout [ 98.047857][ T4201] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan2: link becomes ready [ 98.107386][ T23] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 98.115443][ T23] usb 2-1: config 0 has no interface number 0 [ 98.126636][ T23] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 98.138531][ T23] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 98.149820][ T3847] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.166913][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.191154][ T405] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.218620][ T3847] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.341909][ T405] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.347721][ T23] usb 2-1: config 0 descriptor?? [ 98.375957][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 98.423873][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 98.447977][ T23] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 98.631544][ T4207] loop0: detected capacity change from 0 to 2048 [ 98.807518][ T3609] usb 2-1: USB disconnect, device number 9 [ 98.815452][ T3609] iowarrior 2-1:0.1: I/O-Warror #0 now disconnected [ 99.141508][ T4171] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.157260][ T4171] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.176922][ T4223] loop0: detected capacity change from 0 to 256 [ 99.196556][ T4171] device bridge_slave_0 entered promiscuous mode [ 99.216033][ T4171] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.238597][ T4223] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001034b, chksum : 0x6322ccb6, utbl_chksum : 0xe619d30d) [ 99.246244][ T4171] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.292829][ T4171] device bridge_slave_1 entered promiscuous mode [ 99.316670][ T26] audit: type=1800 audit(1728328837.398:6): pid=4223 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.123" name="bus" dev="loop0" ino=1048595 res=0 errno=0 [ 99.466127][ T4171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.486230][ T4232] loop4: detected capacity change from 0 to 128 [ 99.509641][ T4171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.569171][ T26] audit: type=1800 audit(1728328837.658:7): pid=4232 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.129" name="bus" dev="loop4" ino=1048596 res=0 errno=0 [ 99.724545][ T4171] team0: Port device team_slave_0 added [ 99.777425][ T4233] attempt to access beyond end of device [ 99.777425][ T4233] loop4: rw=0, want=240, limit=128 [ 99.796407][ T4171] team0: Port device team_slave_1 added [ 99.872013][ T4171] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.931522][ T4171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.036723][ T4171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.056572][ T3611] Bluetooth: hci4: command 0x040f tx timeout [ 100.104471][ T4171] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.161933][ T4171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.253778][ T4244] loop4: detected capacity change from 0 to 512 [ 100.267818][ T4171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.303063][ T4242] netlink: 28 bytes leftover after parsing attributes in process `syz.3.124'. [ 100.324615][ T4244] EXT4-fs (loop4): Ignoring removed oldalloc option [ 100.371916][ T4244] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.133: Parent and EA inode have the same ino 15 [ 100.476524][ T4244] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.133: Parent and EA inode have the same ino 15 [ 100.499764][ T4244] EXT4-fs (loop4): 1 orphan inode deleted [ 100.505540][ T4244] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,bsdgroups,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,mb_optimize_scan=0x0000000000000001,oldalloc,resuid=0x000000000000ee01,,errors=continue. Quota mode: none. [ 100.508199][ T4171] device hsr_slave_0 entered promiscuous mode [ 100.581675][ T4171] device hsr_slave_1 entered promiscuous mode [ 100.604377][ T4171] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 100.629590][ T4171] Cannot create hsr debugfs directory [ 100.705031][ T3028] ODEBUG: Out of memory. ODEBUG disabled [ 100.714935][ T3611] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 100.888249][ T1233] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.055251][ T4052] udevd[4052]: inotify_add_watch(7, /dev/loop3p40, 10) failed: No such file or directory [ 101.055843][ T3792] udevd[3792]: inotify_add_watch(7, /dev/loop3p45, 10) failed: No such file or directory [ 101.074298][ T4045] udevd[4045]: inotify_add_watch(7, /dev/loop3p41, 10) failed: No such file or directory [ 101.079801][ T3561] udevd[3561]: inotify_add_watch(7, /dev/loop3p46, 10) failed: No such file or directory [ 101.088681][ T3563] udevd[3563]: inotify_add_watch(7, /dev/loop3p42, 10) failed: No such file or directory [ 101.103997][ T4046] udevd[4046]: inotify_add_watch(7, /dev/loop3p47, 10) failed: No such file or directory [ 101.108474][ T3890] udevd[3890]: inotify_add_watch(7, /dev/loop3p43, 10) failed: No such file or directory [ 101.123346][ T3883] udevd[3883]: inotify_add_watch(7, /dev/loop3p44, 10) failed: No such file or directory [ 101.146789][ T3611] usb 4-1: Using ep0 maxpacket: 32 [ 101.160128][ T4054] udevd[4054]: inotify_add_watch(7, /dev/loop3p48, 10) failed: No such file or directory [ 101.160879][ T4051] udevd[4051]: inotify_add_watch(7, /dev/loop3p49, 10) failed: No such file or directory [ 101.267021][ T3611] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.288663][ T3611] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.308902][ T3611] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 101.339081][ T3611] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.406416][ T1233] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.426253][ T3611] usb 4-1: config 0 descriptor?? [ 101.477651][ T3611] hub 4-1:0.0: USB hub found [ 101.590881][ T4264] loop0: detected capacity change from 0 to 256 [ 101.608416][ T1233] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.699683][ T4264] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001034b, chksum : 0x6322ccb6, utbl_chksum : 0xe619d30d) [ 101.721293][ T3611] hub 4-1:0.0: 1 port detected [ 101.734610][ T1233] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.136636][ T3640] Bluetooth: hci4: command 0x0419 tx timeout [ 102.496320][ T4275] loop4: detected capacity change from 0 to 128 [ 102.565918][ T4278] netlink: 28 bytes leftover after parsing attributes in process `syz.0.144'. [ 102.600956][ T26] audit: type=1800 audit(1728328840.688:8): pid=4275 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.143" name="bus" dev="loop4" ino=1048597 res=0 errno=0 [ 102.713920][ T4273] netlink: 4 bytes leftover after parsing attributes in process `syz.1.142'. [ 102.785859][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan3: link becomes ready [ 102.909207][ T1293] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 103.053950][ T4281] attempt to access beyond end of device [ 103.053950][ T4281] loop4: rw=0, want=240, limit=128 [ 103.129230][ T4284] loop0: detected capacity change from 0 to 512 [ 103.136621][ T3611] hub 4-1:0.0: hub_hub_status failed (err = -32) [ 103.143024][ T3611] hub 4-1:0.0: config failed, can't get hub status (err -32) [ 103.196711][ T1293] usb 2-1: Using ep0 maxpacket: 8 [ 103.279072][ T4284] EXT4-fs (loop0): Ignoring removed oldalloc option [ 103.337127][ T1293] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 103.346736][ T3611] usbhid 4-1:0.0: can't add hid device: -32 [ 103.352749][ T3611] usbhid: probe of 4-1:0.0 failed with error -32 [ 103.401609][ T1293] usb 2-1: config 0 has no interface number 0 [ 103.423891][ T1293] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 103.429299][ T4284] EXT4-fs error (device loop0): ext4_xattr_inode_iget:400: comm syz.0.145: Parent and EA inode have the same ino 15 [ 103.448094][ T4284] EXT4-fs error (device loop0): ext4_xattr_inode_iget:400: comm syz.0.145: Parent and EA inode have the same ino 15 [ 103.461331][ T1293] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 103.471567][ T4284] EXT4-fs (loop0): 1 orphan inode deleted [ 103.477355][ T1293] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.489996][ T1293] usb 2-1: config 0 descriptor?? [ 103.530991][ T1293] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 103.559538][ T4284] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,bsdgroups,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,mb_optimize_scan=0x0000000000000001,oldalloc,resuid=0x000000000000ee01,,errors=continue. Quota mode: none. [ 103.818738][ T3608] usb 2-1: USB disconnect, device number 10 [ 103.946900][ T1075] usb 4-1: USB disconnect, device number 4 [ 104.013630][ T3608] iowarrior 2-1:0.1: I/O-Warror #0 now disconnected [ 104.281278][ T4171] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 104.331171][ T4171] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 104.476269][ T4171] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 104.596011][ T4171] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 104.898253][ T4171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.114947][ T3846] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 105.138259][ T3846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 105.337336][ T4171] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.375106][ T3846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 105.402661][ T3846] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 105.420442][ T3846] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.427583][ T3846] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.497009][ T3846] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 105.620682][ T1207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 105.642684][ T1207] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 105.656045][ T1075] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 105.728851][ T1207] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.735952][ T1207] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.757102][ T4314] loop3: detected capacity change from 0 to 256 [ 105.799955][ T1207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 105.809540][ T1207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 105.901333][ T4314] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001034b, chksum : 0x6322ccb6, utbl_chksum : 0xe619d30d) [ 105.926711][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 105.943011][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 106.041764][ T1233] device hsr_slave_0 left promiscuous mode [ 106.051787][ T1233] device hsr_slave_1 left promiscuous mode [ 106.067138][ T1075] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 106.113560][ T1233] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.122658][ T1075] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 106.146612][ T4321] loop1: detected capacity change from 0 to 128 [ 106.217281][ T1075] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 106.271181][ T1075] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 106.496487][ T26] audit: type=1800 audit(1728328844.438:9): pid=4321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.156" name="bus" dev="loop1" ino=1048598 res=0 errno=0 [ 106.496873][ T1233] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.651538][ T1233] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.677095][ T1075] usb 5-1: New USB device found, idVendor=1949, idProduct=85a5, bcdDevice=a3.3a [ 106.727734][ T1075] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.732819][ T1233] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.735758][ T1075] usb 5-1: Product: syz [ 106.747555][ T1075] usb 5-1: Manufacturer: syz [ 106.752170][ T1075] usb 5-1: SerialNumber: syz [ 106.769101][ T1075] usb 5-1: config 0 descriptor?? [ 106.781100][ T1233] device bridge_slave_1 left promiscuous mode [ 106.805411][ T1233] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.821782][ T1075] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 106.861392][ T1075] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input7 [ 106.879952][ T1233] device bridge_slave_0 left promiscuous mode [ 106.905835][ T1233] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.978179][ T1233] device vlan0 left promiscuous mode [ 107.004733][ T1233] device veth1_macvtap left promiscuous mode [ 107.021339][ T1233] device veth0_macvtap left promiscuous mode [ 107.036808][ T1233] device veth1_vlan left promiscuous mode [ 107.043126][ T3609] usb 5-1: USB disconnect, device number 6 [ 107.053763][ T1233] device veth0_vlan left promiscuous mode [ 107.055997][ T3609] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 107.240149][ T1233] team0 (unregistering): Port device macvlan2 removed [ 107.326639][ T3611] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 107.411639][ T1233] team0 (unregistering): Port device team_slave_1 removed [ 107.435684][ T1233] team0 (unregistering): Port device team_slave_0 removed [ 107.454949][ T1233] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.480515][ T1233] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.571755][ T1233] bond0 (unregistering): Released all slaves [ 107.576685][ T3611] usb 2-1: Using ep0 maxpacket: 8 [ 107.646111][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 107.655533][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 107.674462][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 107.691741][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 107.706848][ T3611] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 107.726613][ T3611] usb 2-1: config 0 has no interface number 0 [ 107.735495][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 107.755718][ T3611] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 107.756347][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 107.766993][ T3608] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 107.775633][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 107.789831][ T3611] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 107.805026][ T3611] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.822032][ T4326] netlink: 4 bytes leftover after parsing attributes in process `syz.1.158'. [ 107.841384][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan4: link becomes ready [ 107.858926][ T4171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 107.900902][ T3611] usb 2-1: config 0 descriptor?? [ 107.940826][ T3611] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 108.026743][ T3608] usb 1-1: Using ep0 maxpacket: 32 [ 108.146803][ T3608] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.161964][ T4171] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.171920][ T3608] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.177767][ T3609] usb 2-1: USB disconnect, device number 11 [ 108.182247][ T1207] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 108.187776][ C1] iowarrior 2-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 108.206924][ T3608] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 108.216102][ T3608] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.229059][ T1207] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 108.245676][ T3608] usb 1-1: config 0 descriptor?? [ 108.252348][ T3609] iowarrior 2-1:0.1: I/O-Warror #0 now disconnected [ 108.277034][ T1207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 108.315827][ T1207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 108.333058][ T3608] hub 1-1:0.0: USB hub found [ 108.386156][ T1207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 108.395345][ T1207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 108.406152][ T1207] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 108.418747][ T1207] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 108.431568][ T4171] device veth0_vlan entered promiscuous mode [ 108.454877][ T4171] device veth1_vlan entered promiscuous mode [ 108.482501][ T1207] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 108.497140][ T1207] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 108.505624][ T1207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 108.520663][ T1207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 108.537474][ T4171] device veth0_macvtap entered promiscuous mode [ 108.558183][ T3608] hub 1-1:0.0: 1 port detected [ 108.575766][ T4171] device veth1_macvtap entered promiscuous mode [ 108.608562][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.626147][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.642453][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.654716][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.670840][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.683598][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.700629][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.714063][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.729707][ T4171] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.743523][ T3847] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 108.755775][ T3847] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 108.771244][ T3847] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 108.783431][ T3847] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 108.799439][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.817120][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.833101][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.845274][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.868897][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.888811][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.902763][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.915970][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.949634][ T4171] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.984198][ T3847] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 109.012229][ T3847] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 109.066058][ T4171] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.105230][ T4171] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.158897][ T4171] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.193914][ T4171] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.253827][ T4357] loop4: detected capacity change from 0 to 256 [ 109.376736][ T4357] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001034b, chksum : 0x6322ccb6, utbl_chksum : 0xe619d30d) [ 109.452092][ T3846] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.479374][ T3846] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.513952][ T1207] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.527409][ T1207] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.541686][ T3847] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 109.557079][ T3847] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 109.678922][ T4365] loop3: detected capacity change from 0 to 128 [ 110.163896][ T26] audit: type=1800 audit(1728328848.218:10): pid=4363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.168" name="bus" dev="loop3" ino=1048601 res=0 errno=0 [ 110.184594][ T3608] hub 1-1:0.0: hub_hub_status failed (err = -32) [ 110.201578][ T3608] hub 1-1:0.0: config failed, can't get hub status (err -32) [ 110.366811][ T3608] usbhid 1-1:0.0: can't add hid device: -32 [ 110.374322][ T3608] usbhid: probe of 1-1:0.0 failed with error -32 [ 110.826136][ T4377] loop4: detected capacity change from 0 to 512 [ 110.938544][ T4377] EXT4-fs (loop4): Ignoring removed oldalloc option [ 111.038901][ T4377] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.172: Parent and EA inode have the same ino 15 [ 111.069209][ T4377] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.172: Parent and EA inode have the same ino 15 [ 111.082821][ T4377] EXT4-fs (loop4): 1 orphan inode deleted [ 111.093333][ T3639] usb 1-1: USB disconnect, device number 5 [ 111.100430][ T4377] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,bsdgroups,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,mb_optimize_scan=0x0000000000000001,oldalloc,resuid=0x000000000000ee01,,errors=continue. Quota mode: none. [ 111.952405][ T4400] loop2: detected capacity change from 0 to 256 [ 112.079329][ T4400] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001034b, chksum : 0x6322ccb6, utbl_chksum : 0xe619d30d) [ 112.266556][ T4403] loop4: detected capacity change from 0 to 128 [ 112.649501][ T26] audit: type=1800 audit(1728328850.638:11): pid=4403 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.181" name="bus" dev="loop4" ino=1048602 res=0 errno=0 [ 112.789469][ T26] audit: type=1800 audit(1728328850.768:12): pid=4400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.180" name="bus" dev="loop2" ino=1048603 res=0 errno=0 [ 113.216642][ T3607] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 113.315798][ T26] audit: type=1326 audit(1728328851.388:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4427 comm="syz.2.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2809df2ff9 code=0x7ffc0000 [ 113.415374][ T26] audit: type=1326 audit(1728328851.428:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4427 comm="syz.2.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f2809df2ff9 code=0x7ffc0000 [ 113.454270][ T4429] loop1: detected capacity change from 0 to 512 [ 113.591749][ T26] audit: type=1326 audit(1728328851.428:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4427 comm="syz.2.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2809df2ff9 code=0x7ffc0000 [ 113.615424][ T26] audit: type=1326 audit(1728328851.428:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4427 comm="syz.2.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2809df2ff9 code=0x7ffc0000 [ 113.639803][ T3607] usb 4-1: Using ep0 maxpacket: 32 [ 113.645301][ T26] audit: type=1326 audit(1728328851.438:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4427 comm="syz.2.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f2809df2ff9 code=0x7ffc0000 [ 113.746643][ T4434] loop2: detected capacity change from 0 to 128 [ 113.807187][ T3607] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.898936][ T3607] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.995108][ T3607] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 114.047262][ T3607] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.157274][ T26] audit: type=1326 audit(1728328851.438:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4427 comm="syz.2.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2809df2ff9 code=0x7ffc0000 [ 114.201762][ T3607] usb 4-1: config 0 descriptor?? [ 114.294542][ T4429] EXT4-fs (loop1): Ignoring removed oldalloc option [ 114.307067][ T26] audit: type=1326 audit(1728328851.438:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4427 comm="syz.2.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2809df2ff9 code=0x7ffc0000 [ 114.308395][ T3607] hub 4-1:0.0: USB hub found [ 114.375716][ T4429] EXT4-fs error (device loop1): ext4_xattr_inode_iget:400: comm syz.1.190: Parent and EA inode have the same ino 15 [ 114.402522][ T4442] loop0: detected capacity change from 0 to 256 [ 114.430145][ T4429] EXT4-fs error (device loop1): ext4_xattr_inode_iget:400: comm syz.1.190: Parent and EA inode have the same ino 15 [ 114.453321][ T4429] EXT4-fs (loop1): 1 orphan inode deleted [ 114.462915][ T4429] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,bsdgroups,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,mb_optimize_scan=0x0000000000000001,oldalloc,resuid=0x000000000000ee01,,errors=continue. Quota mode: none. [ 114.494359][ T26] audit: type=1800 audit(1728328852.578:20): pid=4434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.194" name="bus" dev="loop2" ino=1048604 res=0 errno=0 [ 114.561301][ T4442] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001034b, chksum : 0x6322ccb6, utbl_chksum : 0xe619d30d) [ 114.576710][ T3607] hub 4-1:0.0: 1 port detected [ 115.956610][ T3607] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 115.964313][ T3607] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 116.106668][ T3607] usbhid 4-1:0.0: can't add hid device: -71 [ 116.112820][ T3607] usbhid: probe of 4-1:0.0 failed with error -71 [ 116.187884][ T3607] usb 4-1: USB disconnect, device number 5 [ 116.828074][ T4481] loop4: detected capacity change from 0 to 128 [ 117.415547][ T4483] loop0: detected capacity change from 0 to 256 [ 117.514923][ T4483] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001034b, chksum : 0x6322ccb6, utbl_chksum : 0xe619d30d) [ 117.690535][ T4487] loop4: detected capacity change from 0 to 512 [ 117.804272][ T4487] EXT4-fs (loop4): Ignoring removed oldalloc option [ 117.848439][ T4487] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.211: Parent and EA inode have the same ino 15 [ 117.864278][ T4487] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.211: Parent and EA inode have the same ino 15 [ 117.889467][ T4487] EXT4-fs (loop4): 1 orphan inode deleted [ 117.895381][ T4487] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,bsdgroups,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,mb_optimize_scan=0x0000000000000001,oldalloc,resuid=0x000000000000ee01,,errors=continue. Quota mode: none. [ 117.963041][ T4489] netlink: 4 bytes leftover after parsing attributes in process `syz.1.212'. [ 117.979982][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan5: link becomes ready [ 118.217782][ T3611] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 118.266543][ T3639] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 118.566830][ T3639] usb 2-1: Using ep0 maxpacket: 8 [ 118.686743][ T3639] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 118.706130][ T3639] usb 2-1: config 0 has no interface number 0 [ 118.716914][ T3611] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 118.735988][ T3639] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 118.753208][ T3611] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 118.763562][ T3639] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 118.782637][ T3611] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 118.792225][ T3639] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.806602][ T3611] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.824389][ T3639] usb 2-1: config 0 descriptor?? [ 118.858497][ T4493] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 118.920829][ T4514] loop4: detected capacity change from 0 to 128 [ 119.432601][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 119.432618][ T26] audit: type=1800 audit(1728328857.508:24): pid=4514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.221" name="bus" dev="loop4" ino=1048608 res=0 errno=0 [ 119.478822][ T3639] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 119.504625][ T3639] usb 2-1: USB disconnect, device number 12 [ 119.539600][ T3639] iowarrior 2-1:0.1: I/O-Warror #0 now disconnected [ 119.628973][ T4517] device macsec0 entered promiscuous mode [ 119.647233][ T4517] device veth1_macvtap left promiscuous mode [ 119.676513][ T1293] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 119.738988][ T4517] device macsec0 left promiscuous mode [ 119.782339][ T21] usb 4-1: USB disconnect, device number 6 [ 119.916615][ T1293] usb 1-1: Using ep0 maxpacket: 32 [ 120.036702][ T1293] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.056474][ T1293] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.083947][ T1293] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 120.119901][ T1293] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.141161][ T1293] usb 1-1: config 0 descriptor?? [ 120.177751][ T1293] hub 1-1:0.0: USB hub found [ 120.276151][ T4528] loop2: detected capacity change from 0 to 256 [ 120.331985][ T4528] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001034b, chksum : 0x6322ccb6, utbl_chksum : 0xe619d30d) [ 120.396743][ T1293] hub 1-1:0.0: 1 port detected [ 120.417783][ T26] audit: type=1800 audit(1728328858.508:25): pid=4528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.227" name="bus" dev="loop2" ino=1048609 res=0 errno=0 [ 121.109530][ T4540] loop4: detected capacity change from 0 to 512 [ 121.156665][ T1293] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 121.165493][ T1293] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 121.184904][ T4540] EXT4-fs (loop4): Ignoring removed oldalloc option [ 121.340119][ T4540] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.230: Parent and EA inode have the same ino 15 [ 121.376582][ T1293] usbhid 1-1:0.0: can't add hid device: -71 [ 121.382566][ T1293] usbhid: probe of 1-1:0.0 failed with error -71 [ 121.393273][ T4540] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.230: Parent and EA inode have the same ino 15 [ 121.430987][ T4540] EXT4-fs (loop4): 1 orphan inode deleted [ 121.463193][ T4540] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,bsdgroups,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,mb_optimize_scan=0x0000000000000001,oldalloc,resuid=0x000000000000ee01,,errors=continue. Quota mode: none. [ 121.493440][ T1293] usb 1-1: USB disconnect, device number 6 [ 121.630012][ T4547] loop3: detected capacity change from 0 to 128 [ 122.139304][ T26] audit: type=1800 audit(1728328860.228:26): pid=4546 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.232" name="bus" dev="loop3" ino=1048610 res=0 errno=0 [ 122.464583][ T4552] netlink: 4 bytes leftover after parsing attributes in process `syz.1.234'. [ 122.515079][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan6: link becomes ready [ 122.856760][ T1293] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 122.936732][ T3608] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 123.037827][ T4573] loop4: detected capacity change from 0 to 256 [ 123.147481][ T4573] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001034b, chksum : 0x6322ccb6, utbl_chksum : 0xe619d30d) [ 123.177337][ T3608] usb 2-1: Using ep0 maxpacket: 8 [ 123.220427][ T26] audit: type=1800 audit(1728328861.308:27): pid=4573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.241" name="bus" dev="loop4" ino=1048611 res=0 errno=0 [ 123.241729][ T1293] usb 4-1: config 4 has an invalid descriptor of length 160, skipping remainder of the config [ 123.259481][ T1293] usb 4-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 123.297315][ T3608] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 123.308480][ T3608] usb 2-1: config 0 has no interface number 0 [ 123.314613][ T3608] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 123.351731][ T3608] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 123.375644][ T3608] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.396671][ T1293] usb 4-1: New USB device found, idVendor=8ee9, idProduct=1cfa, bcdDevice=d5.4a [ 123.417696][ T3608] usb 2-1: config 0 descriptor?? [ 123.430380][ T1293] usb 4-1: New USB device strings: Mfr=153, Product=190, SerialNumber=0 [ 123.441272][ T1293] usb 4-1: Product: syz [ 123.445531][ T1293] usb 4-1: Manufacturer: syz [ 123.484290][ T3608] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 123.709852][ T3607] usb 2-1: USB disconnect, device number 13 [ 123.746102][ T3607] iowarrior 2-1:0.1: I/O-Warror #0 now disconnected [ 123.851015][ T1293] usb 4-1: USB disconnect, device number 7 [ 124.034467][ T4580] loop2: detected capacity change from 0 to 128 [ 124.240264][ T26] audit: type=1800 audit(1728328862.298:28): pid=4580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.243" name="bus" dev="loop2" ino=1048612 res=0 errno=0 [ 124.866524][ T3609] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 124.944984][ T4601] loop4: detected capacity change from 0 to 512 [ 125.006730][ T3608] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 125.026752][ T4601] EXT4-fs (loop4): Ignoring removed oldalloc option [ 125.065806][ T4601] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.250: Parent and EA inode have the same ino 15 [ 125.086357][ T4601] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.250: Parent and EA inode have the same ino 15 [ 125.142815][ T4601] EXT4-fs (loop4): 1 orphan inode deleted [ 125.162127][ T4601] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,bsdgroups,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,mb_optimize_scan=0x0000000000000001,oldalloc,resuid=0x000000000000ee01,,errors=continue. Quota mode: none. [ 125.188625][ T3609] usb 2-1: Using ep0 maxpacket: 32 [ 125.206152][ T3572] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:11715' [ 125.216348][ T3572] CPU: 0 PID: 3572 Comm: kworker/u5:2 Not tainted 5.15.167-syzkaller #0 [ 125.224680][ T3572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 125.234745][ T3572] Workqueue: hci2 hci_rx_work [ 125.239460][ T3572] Call Trace: [ 125.242732][ T3572] [ 125.245653][ T3572] dump_stack_lvl+0x1e3/0x2d0 [ 125.250331][ T3572] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 125.255962][ T3572] ? panic+0x860/0x860 [ 125.260046][ T3572] ? sysfs_create_dir_ns+0x282/0x390 [ 125.265337][ T3572] sysfs_create_dir_ns+0x2c6/0x390 [ 125.270465][ T3572] ? sysfs_warn_dup+0xa0/0xa0 [ 125.275172][ T3572] ? do_raw_spin_unlock+0x137/0x8b0 [ 125.280401][ T3572] kobject_add_internal+0x6e0/0xe00 [ 125.285607][ T3572] kobject_add+0x14e/0x210 [ 125.290017][ T3572] ? device_add+0x3c2/0xfd0 [ 125.294513][ T3572] ? kobject_init+0x1d0/0x1d0 [ 125.299181][ T3572] ? __raw_spin_lock_init+0x41/0x100 [ 125.304550][ T3572] ? get_device_parent+0x128/0x400 [ 125.309658][ T3572] device_add+0x476/0xfd0 [ 125.313987][ T3572] hci_conn_add_sysfs+0xe4/0x1f0 [ 125.318922][ T3572] le_conn_complete_evt+0xc15/0x1500 [ 125.324210][ T3572] ? cs_le_create_conn+0x5f0/0x5f0 [ 125.329378][ T3572] hci_le_meta_evt+0xd86/0x3f50 [ 125.334239][ T3572] ? __lock_acquire+0x1ff0/0x1ff0 [ 125.339257][ T3572] ? __mutex_lock_common+0x444/0x25a0 [ 125.344629][ T3572] ? hci_remote_host_features_evt+0x280/0x280 [ 125.350695][ T3572] ? __mutex_unlock_slowpath+0x218/0x750 [ 125.356336][ T3572] ? hci_event_packet+0x3b4/0x1550 [ 125.361456][ T3572] ? mutex_unlock+0x10/0x10 [ 125.365977][ T3572] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 125.371952][ T3572] ? print_irqtrace_events+0x210/0x210 [ 125.377414][ T3572] hci_event_packet+0xc41/0x1550 [ 125.382366][ T3572] ? rcu_lock_release+0x20/0x20 [ 125.387224][ T3572] ? hci_send_to_monitor+0x99/0x4d0 [ 125.392418][ T3572] hci_rx_work+0x232/0x990 [ 125.396923][ T3572] process_one_work+0x8a1/0x10c0 [ 125.401870][ T3572] ? worker_detach_from_pool+0x260/0x260 [ 125.407510][ T3572] ? _raw_spin_lock_irqsave+0x120/0x120 [ 125.413048][ T3572] ? kthread_data+0x4e/0xc0 [ 125.417546][ T3572] ? wq_worker_running+0x97/0x170 [ 125.422569][ T3572] worker_thread+0xaca/0x1280 [ 125.427260][ T3572] kthread+0x3f6/0x4f0 [ 125.431319][ T3572] ? rcu_lock_release+0x20/0x20 [ 125.436181][ T3572] ? kthread_blkcg+0xd0/0xd0 [ 125.440772][ T3572] ret_from_fork+0x1f/0x30 [ 125.445215][ T3572] [ 125.452649][ T3572] kobject_add_internal failed for hci2:11715 with -EEXIST, don't try to register things with the same name in the same directory. [ 125.457214][ T3609] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.466109][ T3572] Bluetooth: hci2: failed to register connection device [ 125.610601][ T3609] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.653084][ T4606] loop3: detected capacity change from 0 to 256 [ 125.666523][ T3609] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 125.701750][ T3609] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.723271][ T4606] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001034b, chksum : 0x6322ccb6, utbl_chksum : 0xe619d30d) [ 125.735966][ T3609] usb 2-1: config 0 descriptor?? [ 125.786736][ T3608] usb 3-1: New USB device found, idVendor=13d3, idProduct=3333, bcdDevice=84.ed [ 125.793769][ T3609] hub 2-1:0.0: USB hub found [ 125.795884][ T3608] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.795909][ T3608] usb 3-1: Product: syz [ 125.795925][ T3608] usb 3-1: Manufacturer: syz [ 125.835277][ T26] audit: type=1800 audit(1728328863.918:29): pid=4606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.252" name="bus" dev="loop3" ino=1048613 res=0 errno=0 [ 125.912707][ T3608] usb 3-1: SerialNumber: syz [ 125.927227][ T3608] usb 3-1: config 0 descriptor?? [ 125.969761][ T3608] r8712u: register rtl8712_netdev_ops to netdev_ops [ 125.994235][ T3608] usb 3-1: r8712u: USB_SPEED_HIGH with 0 endpoints [ 125.997988][ T3609] hub 2-1:0.0: 1 port detected [ 126.625050][ T4616] program syz.2.248 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 126.696788][ T3608] usb 3-1: r8712u: Boot from EFUSE: Autoload Failed [ 126.705103][ T3608] usb 3-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 126.729565][ T3608] usb 3-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 126.800554][ T4616] device bond0 entered promiscuous mode [ 126.836680][ T4616] device bond_slave_0 entered promiscuous mode [ 126.860440][ T4616] device bond_slave_1 entered promiscuous mode [ 126.892343][ T3609] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 126.908450][ T3609] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 127.027696][ T4625] netlink: 4 bytes leftover after parsing attributes in process `syz.3.257'. [ 127.040522][ T1293] usb 3-1: USB disconnect, device number 6 [ 127.049461][ T4625] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan2: link becomes ready [ 127.063858][ T3609] usbhid 2-1:0.0: can't add hid device: -71 [ 127.086850][ T3609] usbhid: probe of 2-1:0.0 failed with error -71 [ 127.134191][ T3609] usb 2-1: USB disconnect, device number 14 [ 127.370880][ T4635] loop4: detected capacity change from 0 to 128 [ 127.657939][ T3608] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 127.809463][ T26] audit: type=1800 audit(1728328865.898:30): pid=4634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.259" name="bus" dev="loop4" ino=1048614 res=0 errno=0 [ 127.830012][ C1] vkms_vblank_simulate: vblank timer overrun [ 128.076541][ T3608] usb 4-1: Using ep0 maxpacket: 8 [ 128.197153][ T3608] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 128.220242][ T3608] usb 4-1: config 0 has no interface number 0 [ 128.239434][ T3608] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 128.256517][ T1293] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 128.297199][ T3608] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 128.349605][ T3608] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.486197][ T3608] usb 4-1: config 0 descriptor?? [ 128.546648][ T1293] usb 2-1: Using ep0 maxpacket: 16 [ 129.179807][ T4658] loop4: detected capacity change from 0 to 512 [ 129.208295][ T3608] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 129.242354][ T4663] loop2: detected capacity change from 0 to 256 [ 129.280271][ T3608] usb 4-1: USB disconnect, device number 8 [ 129.303053][ T4658] EXT4-fs (loop4): Ignoring removed oldalloc option [ 129.336736][ T1293] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 129.383961][ T4663] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001034b, chksum : 0x6322ccb6, utbl_chksum : 0xe619d30d) [ 129.388340][ T3608] iowarrior 4-1:0.1: I/O-Warror #0 now disconnected [ 129.551918][ T4658] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.264: Parent and EA inode have the same ino 15 [ 129.577130][ T1293] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 129.586202][ T1293] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.603485][ T4658] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.264: Parent and EA inode have the same ino 15 [ 129.623894][ T1293] usb 2-1: Product: syz [ 129.637248][ T4658] EXT4-fs (loop4): 1 orphan inode deleted [ 129.643097][ T1293] usb 2-1: Manufacturer: syz [ 129.643120][ T1293] usb 2-1: SerialNumber: syz [ 129.645077][ T1293] usb 2-1: config 0 descriptor?? [ 129.655888][ T26] audit: type=1800 audit(1728328867.738:31): pid=4663 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.266" name="bus" dev="loop2" ino=1048615 res=0 errno=0 [ 129.690270][ T4658] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,bsdgroups,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,mb_optimize_scan=0x0000000000000001,oldalloc,resuid=0x000000000000ee01,,errors=continue. Quota mode: none. [ 129.715892][ C1] vkms_vblank_simulate: vblank timer overrun [ 129.888807][ T3570] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:11715' [ 129.898755][ T3570] CPU: 1 PID: 3570 Comm: kworker/u5:1 Not tainted 5.15.167-syzkaller #0 [ 129.907349][ T3570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 129.917419][ T3570] Workqueue: hci2 hci_rx_work [ 129.922099][ T3570] Call Trace: [ 129.925366][ T3570] [ 129.928306][ T3570] dump_stack_lvl+0x1e3/0x2d0 [ 129.932981][ T3570] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 129.938612][ T3570] ? panic+0x860/0x860 [ 129.942706][ T3570] ? sysfs_create_dir_ns+0x282/0x390 [ 129.947990][ T3570] sysfs_create_dir_ns+0x2c6/0x390 [ 129.953098][ T3570] ? sysfs_warn_dup+0xa0/0xa0 [ 129.957770][ T3570] ? do_raw_spin_unlock+0x137/0x8b0 [ 129.962967][ T3570] kobject_add_internal+0x6e0/0xe00 [ 129.968166][ T3570] kobject_add+0x14e/0x210 [ 129.972575][ T3570] ? device_add+0x3c2/0xfd0 [ 129.977083][ T3570] ? kobject_init+0x1d0/0x1d0 [ 129.981783][ T3570] ? __raw_spin_lock_init+0x41/0x100 [ 129.987058][ T3570] ? get_device_parent+0x128/0x400 [ 129.992165][ T3570] device_add+0x476/0xfd0 [ 129.996505][ T3570] hci_conn_add_sysfs+0xe4/0x1f0 [ 130.001439][ T3570] le_conn_complete_evt+0xc15/0x1500 [ 130.006722][ T3570] ? cs_le_create_conn+0x5f0/0x5f0 [ 130.011839][ T3570] hci_le_meta_evt+0xd86/0x3f50 [ 130.016694][ T3570] ? __lock_acquire+0x1ff0/0x1ff0 [ 130.021732][ T3570] ? __mutex_lock_common+0x444/0x25a0 [ 130.027109][ T3570] ? hci_remote_host_features_evt+0x280/0x280 [ 130.033184][ T3570] ? __mutex_unlock_slowpath+0x218/0x750 [ 130.038828][ T3570] ? hci_event_packet+0x3b4/0x1550 [ 130.043944][ T3570] ? mutex_unlock+0x10/0x10 [ 130.048444][ T3570] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 130.054420][ T3570] ? print_irqtrace_events+0x210/0x210 [ 130.059879][ T3570] hci_event_packet+0xc41/0x1550 [ 130.064823][ T3570] ? rcu_lock_release+0x20/0x20 [ 130.069676][ T3570] ? hci_send_to_monitor+0x99/0x4d0 [ 130.074871][ T3570] hci_rx_work+0x232/0x990 [ 130.079286][ T3570] process_one_work+0x8a1/0x10c0 [ 130.084229][ T3570] ? worker_detach_from_pool+0x260/0x260 [ 130.089858][ T3570] ? _raw_spin_lock_irqsave+0x120/0x120 [ 130.095396][ T3570] ? kthread_data+0x4e/0xc0 [ 130.099904][ T3570] ? wq_worker_running+0x97/0x170 [ 130.104927][ T3570] worker_thread+0xaca/0x1280 [ 130.109613][ T3570] kthread+0x3f6/0x4f0 [ 130.113671][ T3570] ? rcu_lock_release+0x20/0x20 [ 130.118512][ T3570] ? kthread_blkcg+0xd0/0xd0 [ 130.123114][ T3570] ret_from_fork+0x1f/0x30 [ 130.127531][ T3570] [ 130.130575][ C1] vkms_vblank_simulate: vblank timer overrun [ 130.142734][ T3570] kobject_add_internal failed for hci2:11715 with -EEXIST, don't try to register things with the same name in the same directory. [ 130.156399][ T3570] Bluetooth: hci2: failed to register connection device [ 131.016527][ T3640] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 131.273045][ T4704] loop0: detected capacity change from 0 to 128 [ 131.405088][ T3640] usb 5-1: Using ep0 maxpacket: 32 [ 131.630957][ T26] audit: type=1800 audit(1728328869.598:32): pid=4704 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.273" name="bus" dev="loop0" ino=1048616 res=0 errno=0 [ 131.798610][ T3608] usb 2-1: USB disconnect, device number 15 [ 132.056740][ T3640] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.159398][ T3640] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.256821][ T3609] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 132.421933][ T3640] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 132.444141][ T3640] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.556744][ T3609] usb 4-1: Using ep0 maxpacket: 8 [ 132.708483][ T3640] usb 5-1: config 0 descriptor?? [ 132.748029][ T3640] hub 5-1:0.0: USB hub found [ 132.778941][ T1391] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.785432][ T1391] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.875029][ T4723] loop2: detected capacity change from 0 to 256 [ 132.932826][ T4723] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001034b, chksum : 0x6322ccb6, utbl_chksum : 0xe619d30d) [ 132.939360][ T3609] usb 4-1: config 0 has no interfaces? [ 132.966683][ T3640] hub 5-1:0.0: 1 port detected [ 133.011416][ T3609] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 133.028762][ T26] audit: type=1800 audit(1728328871.118:33): pid=4723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.279" name="bus" dev="loop2" ino=1048617 res=0 errno=0 [ 133.064322][ T3609] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.082239][ T3609] usb 4-1: config 0 descriptor?? [ 133.372909][ T4728] netlink: 4 bytes leftover after parsing attributes in process `syz.0.280'. [ 133.426547][ T4728] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan3: link becomes ready [ 133.447351][ T3607] usb 4-1: USB disconnect, device number 9 [ 133.726551][ T1293] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 133.866631][ T3640] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 133.873021][ T3640] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 133.966716][ T1293] usb 1-1: Using ep0 maxpacket: 8 [ 133.986820][ T3640] usbhid 5-1:0.0: can't add hid device: -71 [ 133.994337][ T3640] usbhid: probe of 5-1:0.0 failed with error -71 [ 134.037936][ T3640] usb 5-1: USB disconnect, device number 7 [ 134.086745][ T1293] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 134.097874][ T1293] usb 1-1: config 0 has no interface number 0 [ 134.105108][ T1293] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 134.116961][ T1293] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 134.126237][ T1293] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.142165][ T1293] usb 1-1: config 0 descriptor?? [ 134.180241][ T4738] loop3: detected capacity change from 0 to 512 [ 134.190604][ T1293] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 134.266947][ T4738] EXT4-fs (loop3): Ignoring removed oldalloc option [ 134.292457][ T4738] EXT4-fs error (device loop3): ext4_xattr_inode_iget:400: comm syz.3.282: Parent and EA inode have the same ino 15 [ 134.309799][ T4738] EXT4-fs error (device loop3): ext4_xattr_inode_iget:400: comm syz.3.282: Parent and EA inode have the same ino 15 [ 134.323883][ T4738] EXT4-fs (loop3): 1 orphan inode deleted [ 134.329861][ T3608] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 134.347716][ T4738] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,bsdgroups,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,mb_optimize_scan=0x0000000000000001,oldalloc,resuid=0x000000000000ee01,,errors=continue. Quota mode: none. [ 134.430244][ T1293] usb 1-1: USB disconnect, device number 7 [ 134.436488][ C0] iowarrior 1-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 134.455365][ T1293] iowarrior 1-1:0.1: I/O-Warror #0 now disconnected [ 134.562282][ T4745] loop4: detected capacity change from 0 to 128 [ 135.026542][ T3608] usb 2-1: Using ep0 maxpacket: 16 [ 135.082865][ T26] audit: type=1800 audit(1728328873.138:34): pid=4744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.285" name="bus" dev="loop4" ino=1048618 res=0 errno=0 [ 135.176635][ T3608] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 135.366804][ T3608] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 135.393916][ T3608] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.423997][ T3608] usb 2-1: Product: syz [ 135.436978][ T3608] usb 2-1: Manufacturer: syz [ 135.443783][ T3608] usb 2-1: SerialNumber: syz [ 135.469453][ T3608] usb 2-1: config 0 descriptor?? [ 135.664936][ T4760] netlink: 28 bytes leftover after parsing attributes in process `syz.3.290'. [ 135.771306][ T3608] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 135.786655][ T3846] usb 2-1: Failed to submit usb control message: -71 [ 135.797272][ T3846] usb 2-1: unable to send the bmi data to the device: -71 [ 135.808899][ T3608] usb 2-1: USB disconnect, device number 16 [ 135.821615][ T3846] usb 2-1: unable to get target info from device [ 135.876770][ T3846] usb 2-1: could not get target info (-71) [ 135.926326][ T3846] usb 2-1: could not probe fw (-71) [ 136.005918][ T4772] AppArmor: change_hat: Invalid input 'p' [ 136.067748][ T4774] loop4: detected capacity change from 0 to 256 [ 136.171219][ T4774] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001034b, chksum : 0x6322ccb6, utbl_chksum : 0xe619d30d) [ 136.297657][ T26] audit: type=1800 audit(1728328874.388:35): pid=4774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.292" name="bus" dev="loop4" ino=1048619 res=0 errno=0 [ 136.503663][ T4792] loop1: detected capacity change from 0 to 128 [ 136.710335][ T3608] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 136.888500][ T26] audit: type=1800 audit(1728328874.858:36): pid=4792 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.297" name="bus" dev="loop1" ino=1048620 res=0 errno=0 [ 137.104538][ T3608] usb 3-1: Using ep0 maxpacket: 32 [ 137.124037][ T4787] netlink: 'syz.3.298': attribute type 1 has an invalid length. [ 137.226666][ T3608] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.248768][ T3608] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.276094][ T3608] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 137.286939][ T4799] loop1: detected capacity change from 0 to 512 [ 137.293458][ T3608] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.340301][ T3608] usb 3-1: config 0 descriptor?? [ 137.380814][ T4799] EXT4-fs (loop1): Ignoring removed oldalloc option [ 137.397611][ T3608] hub 3-1:0.0: USB hub found [ 137.442136][ T4799] EXT4-fs error (device loop1): ext4_xattr_inode_iget:400: comm syz.1.299: Parent and EA inode have the same ino 15 [ 137.474073][ T4799] EXT4-fs error (device loop1): ext4_xattr_inode_iget:400: comm syz.1.299: Parent and EA inode have the same ino 15 [ 137.515654][ T4799] EXT4-fs (loop1): 1 orphan inode deleted [ 137.522500][ T4799] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,bsdgroups,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,mb_optimize_scan=0x0000000000000001,oldalloc,resuid=0x000000000000ee01,,errors=continue. Quota mode: none. [ 137.605171][ T3570] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:11715' [ 137.606689][ T3608] hub 3-1:0.0: 1 port detected [ 137.615672][ T3570] CPU: 1 PID: 3570 Comm: kworker/u5:1 Not tainted 5.15.167-syzkaller #0 [ 137.628460][ T3570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 137.638524][ T3570] Workqueue: hci1 hci_rx_work [ 137.643205][ T3570] Call Trace: [ 137.646482][ T3570] [ 137.649411][ T3570] dump_stack_lvl+0x1e3/0x2d0 [ 137.654088][ T3570] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 137.659715][ T3570] ? panic+0x860/0x860 [ 137.663784][ T3570] ? sysfs_create_dir_ns+0x282/0x390 [ 137.669094][ T3570] sysfs_create_dir_ns+0x2c6/0x390 [ 137.674220][ T3570] ? sysfs_warn_dup+0xa0/0xa0 [ 137.678903][ T3570] ? do_raw_spin_unlock+0x137/0x8b0 [ 137.684121][ T3570] kobject_add_internal+0x6e0/0xe00 [ 137.689348][ T3570] kobject_add+0x14e/0x210 [ 137.693794][ T3570] ? device_add+0x3c2/0xfd0 [ 137.698328][ T3570] ? kobject_init+0x1d0/0x1d0 [ 137.703008][ T3570] ? __raw_spin_lock_init+0x41/0x100 [ 137.708303][ T3570] ? get_device_parent+0x128/0x400 [ 137.713429][ T3570] device_add+0x476/0xfd0 [ 137.717777][ T3570] hci_conn_add_sysfs+0xe4/0x1f0 [ 137.722713][ T3570] le_conn_complete_evt+0xc15/0x1500 [ 137.728034][ T3570] ? cs_le_create_conn+0x5f0/0x5f0 [ 137.733155][ T3570] hci_le_meta_evt+0xd86/0x3f50 [ 137.738025][ T3570] ? __lock_acquire+0x1ff0/0x1ff0 [ 137.743079][ T3570] ? __mutex_lock_common+0x444/0x25a0 [ 137.748475][ T3570] ? hci_remote_host_features_evt+0x280/0x280 [ 137.754552][ T3570] ? __mutex_unlock_slowpath+0x218/0x750 [ 137.760184][ T3570] ? hci_event_packet+0x3b4/0x1550 [ 137.765304][ T3570] ? mutex_unlock+0x10/0x10 [ 137.769806][ T3570] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 137.775784][ T3570] ? print_irqtrace_events+0x210/0x210 [ 137.781258][ T3570] hci_event_packet+0xc41/0x1550 [ 137.786214][ T3570] ? rcu_lock_release+0x20/0x20 [ 137.791074][ T3570] ? hci_send_to_monitor+0x99/0x4d0 [ 137.796276][ T3570] hci_rx_work+0x232/0x990 [ 137.800698][ T3570] process_one_work+0x8a1/0x10c0 [ 137.805670][ T3570] ? worker_detach_from_pool+0x260/0x260 [ 137.811331][ T3570] ? _raw_spin_lock_irqsave+0x120/0x120 [ 137.817027][ T3570] ? kthread_data+0x4e/0xc0 [ 137.821550][ T3570] ? wq_worker_running+0x97/0x170 [ 137.826581][ T3570] worker_thread+0xaca/0x1280 [ 137.831277][ T3570] kthread+0x3f6/0x4f0 [ 137.835340][ T3570] ? rcu_lock_release+0x20/0x20 [ 137.840190][ T3570] ? kthread_blkcg+0xd0/0xd0 [ 137.844780][ T3570] ret_from_fork+0x1f/0x30 [ 137.849202][ T3570] [ 137.854014][ T3570] kobject_add_internal failed for hci1:11715 with -EEXIST, don't try to register things with the same name in the same directory. [ 137.867481][ T3570] Bluetooth: hci1: failed to register connection device [ 138.362742][ T4813] netlink: 4 bytes leftover after parsing attributes in process `syz.1.303'. [ 138.404896][ T4813] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan7: link becomes ready [ 138.495206][ T4819] loop2: detected capacity change from 0 to 7 [ 138.504306][ T4819] Dev loop2: unable to read RDB block 7 [ 138.513471][ T4819] loop2: unable to read partition table [ 138.520116][ T4819] loop2: partition table beyond EOD, truncated [ 138.527211][ T4819] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 138.716615][ T3639] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 138.968491][ T3639] usb 2-1: Using ep0 maxpacket: 8 [ 138.976847][ T3608] hub 3-1:0.0: hub_hub_status failed (err = -32) [ 138.985412][ T3608] hub 3-1:0.0: config failed, can't get hub status (err -32) [ 139.082885][ T4825] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 139.102978][ T3639] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 139.111312][ T3608] usbhid 3-1:0.0: can't add hid device: -32 [ 139.118135][ T3608] usbhid: probe of 3-1:0.0 failed with error -32 [ 139.126932][ T3639] usb 2-1: config 0 has no interface number 0 [ 139.136084][ T3639] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 139.147688][ T3639] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 139.158381][ T3639] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.173274][ T3639] usb 2-1: config 0 descriptor?? [ 139.225817][ T3639] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 139.420348][ T3607] usb 2-1: USB disconnect, device number 17 [ 139.441281][ T3607] iowarrior 2-1:0.1: I/O-Warror #0 now disconnected [ 139.576708][ T4837] loop2: detected capacity change from 0 to 128 [ 139.613494][ T3612] usb 3-1: USB disconnect, device number 7 [ 139.826155][ T1075] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 140.233009][ T1075] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 140.233045][ T1075] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.235001][ T1075] usb 5-1: config 0 descriptor?? [ 140.278641][ T1075] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 140.446068][ T4846] loop3: detected capacity change from 0 to 512 [ 140.517573][ T3647] hid-generic 0000:0000:0000.0003: unknown main item tag 0x1 [ 140.528864][ T3647] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 140.543081][ T3647] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 140.551754][ T4846] EXT4-fs (loop3): Ignoring removed oldalloc option [ 140.559925][ T3612] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 140.564102][ T3647] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 140.590789][ T3647] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 140.591931][ T4846] EXT4-fs error (device loop3): ext4_xattr_inode_iget:400: comm syz.3.314: Parent and EA inode have the same ino 15 [ 140.614284][ T4846] EXT4-fs error (device loop3): ext4_xattr_inode_iget:400: comm syz.3.314: Parent and EA inode have the same ino 15 [ 140.633213][ T3647] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 140.677131][ T4846] EXT4-fs (loop3): 1 orphan inode deleted [ 140.683245][ T4846] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,bsdgroups,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,mb_optimize_scan=0x0000000000000001,oldalloc,resuid=0x000000000000ee01,,errors=continue. Quota mode: none. [ 140.718246][ T3647] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 140.725720][ T3647] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 140.753342][ T3647] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 141.054554][ T3570] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:11715' [ 141.064612][ T3570] CPU: 1 PID: 3570 Comm: kworker/u5:1 Not tainted 5.15.167-syzkaller #0 [ 141.072978][ T3570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 141.076519][ T3612] usb 3-1: Using ep0 maxpacket: 8 [ 141.083050][ T3570] Workqueue: hci5 hci_rx_work [ 141.083119][ T3570] Call Trace: [ 141.083128][ T3570] [ 141.099070][ T3570] dump_stack_lvl+0x1e3/0x2d0 [ 141.103764][ T3570] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 141.109431][ T3570] ? panic+0x860/0x860 [ 141.113501][ T3570] ? sysfs_create_dir_ns+0x282/0x390 [ 141.118829][ T3570] sysfs_create_dir_ns+0x2c6/0x390 [ 141.123969][ T3570] ? sysfs_warn_dup+0xa0/0xa0 [ 141.128665][ T3570] ? do_raw_spin_unlock+0x137/0x8b0 [ 141.133878][ T3570] kobject_add_internal+0x6e0/0xe00 [ 141.139082][ T3570] kobject_add+0x14e/0x210 [ 141.143494][ T3570] ? device_add+0x3c2/0xfd0 [ 141.148020][ T3570] ? kobject_init+0x1d0/0x1d0 [ 141.152698][ T3570] ? __raw_spin_lock_init+0x41/0x100 [ 141.157996][ T3570] ? get_device_parent+0x128/0x400 [ 141.163108][ T3570] device_add+0x476/0xfd0 [ 141.167452][ T3570] hci_conn_add_sysfs+0xe4/0x1f0 [ 141.172428][ T3570] le_conn_complete_evt+0xc15/0x1500 [ 141.177718][ T3570] ? cs_le_create_conn+0x5f0/0x5f0 [ 141.182837][ T3570] hci_le_meta_evt+0xd86/0x3f50 [ 141.187690][ T3570] ? __lock_acquire+0x1ff0/0x1ff0 [ 141.192730][ T3570] ? __mutex_lock_common+0x444/0x25a0 [ 141.198104][ T3570] ? hci_remote_host_features_evt+0x280/0x280 [ 141.204165][ T3570] ? __mutex_unlock_slowpath+0x218/0x750 [ 141.209788][ T3570] ? hci_event_packet+0x3b4/0x1550 [ 141.214904][ T3570] ? mutex_unlock+0x10/0x10 [ 141.219407][ T3570] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 141.225384][ T3570] ? print_irqtrace_events+0x210/0x210 [ 141.230841][ T3570] hci_event_packet+0xc41/0x1550 [ 141.235789][ T3570] ? rcu_lock_release+0x20/0x20 [ 141.240647][ T3570] ? hci_send_to_monitor+0x99/0x4d0 [ 141.245862][ T3570] hci_rx_work+0x232/0x990 [ 141.250286][ T3570] process_one_work+0x8a1/0x10c0 [ 141.255318][ T3570] ? worker_detach_from_pool+0x260/0x260 [ 141.260972][ T3570] ? _raw_spin_lock_irqsave+0x120/0x120 [ 141.266536][ T3570] ? kthread_data+0x4e/0xc0 [ 141.271065][ T3570] ? wq_worker_running+0x97/0x170 [ 141.276104][ T3570] worker_thread+0xaca/0x1280 [ 141.280800][ T3570] kthread+0x3f6/0x4f0 [ 141.284877][ T3570] ? rcu_lock_release+0x20/0x20 [ 141.289722][ T3570] ? kthread_blkcg+0xd0/0xd0 [ 141.294314][ T3570] ret_from_fork+0x1f/0x30 [ 141.298739][ T3570] [ 141.306354][ T3570] kobject_add_internal failed for hci5:11715 with -EEXIST, don't try to register things with the same name in the same directory. [ 141.319948][ T3570] Bluetooth: hci5: failed to register connection device [ 141.333484][ T3647] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 141.345275][ T3647] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 141.353156][ T3647] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 141.360926][ T1075] gspca_cpia1: usb_control_msg 05, error -110 [ 141.371943][ T3647] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 141.387977][ T3647] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 141.400343][ T3647] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 141.408155][ T1075] gspca_cpia1: usb_control_msg 01, error -32 [ 141.426622][ T3647] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 141.436614][ T1075] gspca_cpia1: usb_control_msg 01, error -32 [ 141.444888][ T3647] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 141.456580][ T1075] gspca_cpia1: usb_control_msg 01, error -32 [ 141.469674][ T3647] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz0 [ 141.479583][ T1075] gspca_cpia1: usb_control_msg 01, error -32 [ 141.485597][ T1075] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0) [ 141.526605][ T3612] usb 3-1: unable to get BOS descriptor or descriptor too short [ 141.860684][ T3612] usb 3-1: string descriptor 0 read error: -22 [ 141.871864][ T3612] usb 3-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 141.890027][ T3612] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.926482][ T3612] usb 3-1: config 0 descriptor?? [ 142.337873][ T3612] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 142.380074][ T3607] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 142.412924][ T3612] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 142.421157][ T3612] dib0700: firmware download failed at 7 with -22 [ 142.432347][ T3612] usb 3-1: USB disconnect, device number 8 [ 142.503901][ T3647] usb 5-1: USB disconnect, device number 8 [ 142.636676][ T3608] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 142.726673][ T1075] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 142.786802][ T3607] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.797876][ T3607] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.807955][ T3607] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 142.817073][ T3607] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.833870][ T3607] usb 1-1: config 0 descriptor?? [ 142.886602][ T3608] usb 2-1: Using ep0 maxpacket: 32 [ 142.976650][ T1075] usb 4-1: Using ep0 maxpacket: 32 [ 143.006658][ T3608] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.022310][ T3608] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.032245][ T3608] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 143.045308][ T3608] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.061221][ T3608] usb 2-1: config 0 descriptor?? [ 143.099180][ T3608] hub 2-1:0.0: USB hub found [ 143.106819][ T1075] usb 4-1: config 0 has an invalid interface number: 131 but max is 0 [ 143.116189][ T1075] usb 4-1: config 0 has no interface number 0 [ 143.122878][ T1075] usb 4-1: config 0 interface 131 has no altsetting 0 [ 143.286853][ T1075] usb 4-1: New USB device found, idVendor=046d, idProduct=d001, bcdDevice=cd.8a [ 143.296087][ T1075] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.307086][ T1075] usb 4-1: Product: syz [ 143.311353][ T1075] usb 4-1: Manufacturer: syz [ 143.316002][ T1075] usb 4-1: SerialNumber: syz [ 143.326712][ T3608] hub 2-1:0.0: 1 port detected [ 143.333183][ T1075] usb 4-1: config 0 descriptor?? [ 143.400520][ T1075] gspca_main: nw80x-2.14.0 probing 046d:d001 [ 143.531982][ T4883] loop4: detected capacity change from 0 to 128 [ 143.796939][ T1075] gspca_nw80x: reg_w err -71 [ 143.803490][ T1075] nw80x: probe of 4-1:0.131 failed with error -71 [ 144.004405][ T1075] usb 4-1: USB disconnect, device number 10 [ 144.056707][ T3607] uclogic 0003:256C:006D.0004: failed retrieving Huion firmware version: -71 [ 144.080430][ T3607] uclogic 0003:256C:006D.0004: failed probing parameters: -71 [ 144.094874][ T3607] uclogic: probe of 0003:256C:006D.0004 failed with error -71 [ 144.121020][ T3607] usb 1-1: USB disconnect, device number 8 [ 144.621261][ T4893] netlink: 4 bytes leftover after parsing attributes in process `syz.4.327'. [ 144.635222][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan2: link becomes ready [ 144.782050][ T4897] loop3: detected capacity change from 0 to 512 [ 144.806615][ T3608] hub 2-1:0.0: hub_hub_status failed (err = -32) [ 144.813602][ T3608] hub 2-1:0.0: config failed, can't get hub status (err -32) [ 144.883228][ T4897] EXT4-fs (loop3): Ignoring removed oldalloc option [ 144.898506][ T4901] netlink: 48 bytes leftover after parsing attributes in process `syz.0.330'. [ 144.911375][ T4901] device veth1_macvtap left promiscuous mode [ 144.936615][ T3607] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 144.936754][ T3608] usbhid 2-1:0.0: can't add hid device: -32 [ 145.001648][ T4897] EXT4-fs error (device loop3): ext4_xattr_inode_iget:400: comm syz.3.328: Parent and EA inode have the same ino 15 [ 145.015123][ T4897] EXT4-fs error (device loop3): ext4_xattr_inode_iget:400: comm syz.3.328: Parent and EA inode have the same ino 15 [ 145.028237][ T4897] EXT4-fs (loop3): 1 orphan inode deleted [ 145.034126][ T4897] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,bsdgroups,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,mb_optimize_scan=0x0000000000000001,oldalloc,resuid=0x000000000000ee01,,errors=continue. Quota mode: none. [ 145.071495][ T3608] usbhid: probe of 2-1:0.0 failed with error -32 [ 145.216675][ T3607] usb 5-1: Using ep0 maxpacket: 8 [ 145.231248][ T3570] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:11715' [ 145.241249][ T3570] CPU: 1 PID: 3570 Comm: kworker/u5:1 Not tainted 5.15.167-syzkaller #0 [ 145.249605][ T3570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 145.259680][ T3570] Workqueue: hci5 hci_rx_work [ 145.264365][ T3570] Call Trace: [ 145.267657][ T3570] [ 145.270587][ T3570] dump_stack_lvl+0x1e3/0x2d0 [ 145.275282][ T3570] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 145.280914][ T3570] ? panic+0x860/0x860 [ 145.284986][ T3570] ? sysfs_create_dir_ns+0x282/0x390 [ 145.290276][ T3570] sysfs_create_dir_ns+0x2c6/0x390 [ 145.295432][ T3570] ? sysfs_warn_dup+0xa0/0xa0 [ 145.300106][ T3570] ? do_raw_spin_unlock+0x137/0x8b0 [ 145.305319][ T3570] kobject_add_internal+0x6e0/0xe00 [ 145.310535][ T3570] kobject_add+0x14e/0x210 [ 145.314950][ T3570] ? device_add+0x3c2/0xfd0 [ 145.319452][ T3570] ? kobject_init+0x1d0/0x1d0 [ 145.324126][ T3570] ? __raw_spin_lock_init+0x41/0x100 [ 145.329411][ T3570] ? get_device_parent+0x128/0x400 [ 145.334535][ T3570] device_add+0x476/0xfd0 [ 145.338887][ T3570] hci_conn_add_sysfs+0xe4/0x1f0 [ 145.343861][ T3570] le_conn_complete_evt+0xc15/0x1500 [ 145.349156][ T3570] ? cs_le_create_conn+0x5f0/0x5f0 [ 145.354275][ T3570] hci_le_meta_evt+0xd86/0x3f50 [ 145.359142][ T3570] ? __lock_acquire+0x1ff0/0x1ff0 [ 145.364189][ T3570] ? __mutex_lock_common+0x444/0x25a0 [ 145.369569][ T3570] ? hci_remote_host_features_evt+0x280/0x280 [ 145.375638][ T3570] ? __mutex_unlock_slowpath+0x218/0x750 [ 145.381308][ T3570] ? hci_event_packet+0x3b4/0x1550 [ 145.386444][ T3570] ? mutex_unlock+0x10/0x10 [ 145.390975][ T3570] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 145.397067][ T3570] ? print_irqtrace_events+0x210/0x210 [ 145.402529][ T3570] hci_event_packet+0xc41/0x1550 [ 145.407474][ T3570] ? rcu_lock_release+0x20/0x20 [ 145.412333][ T3570] ? hci_send_to_monitor+0x99/0x4d0 [ 145.417547][ T3570] hci_rx_work+0x232/0x990 [ 145.421967][ T3570] process_one_work+0x8a1/0x10c0 [ 145.426912][ T3570] ? worker_detach_from_pool+0x260/0x260 [ 145.432543][ T3570] ? _raw_spin_lock_irqsave+0x120/0x120 [ 145.438087][ T3570] ? kthread_data+0x4e/0xc0 [ 145.442585][ T3570] ? wq_worker_running+0x97/0x170 [ 145.447626][ T3570] worker_thread+0xaca/0x1280 [ 145.452339][ T3570] kthread+0x3f6/0x4f0 [ 145.456407][ T3570] ? rcu_lock_release+0x20/0x20 [ 145.461270][ T3570] ? kthread_blkcg+0xd0/0xd0 [ 145.465852][ T3570] ret_from_fork+0x1f/0x30 [ 145.470317][ T3570] [ 145.478016][ T3570] kobject_add_internal failed for hci5:11715 with -EEXIST, don't try to register things with the same name in the same directory. [ 145.491580][ T3570] Bluetooth: hci5: failed to register connection device [ 145.656819][ T3607] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 145.671762][ T3607] usb 5-1: config 0 has no interface number 0 [ 145.684345][ T3607] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 145.695869][ T3607] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 145.705636][ T3607] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.720261][ T3607] usb 5-1: config 0 descriptor?? [ 145.772090][ T3607] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 145.890634][ T3639] usb 2-1: USB disconnect, device number 18 [ 145.967225][ T3639] usb 5-1: USB disconnect, device number 9 [ 145.987596][ T3639] iowarrior 5-1:0.1: I/O-Warror #0 now disconnected [ 146.226673][ T3609] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 146.496591][ T3609] usb 2-1: Using ep0 maxpacket: 16 [ 146.636860][ T3609] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 146.659444][ T3609] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 146.719798][ T4926] loop2: detected capacity change from 0 to 128 [ 146.937757][ T3609] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 146.959041][ T3609] usb 2-1: New USB device strings: Mfr=236, Product=255, SerialNumber=0 [ 147.004555][ T3609] usb 2-1: Product: syz [ 147.027034][ T3609] usb 2-1: Manufacturer: syz [ 147.215272][ T3609] usb 2-1: config 0 descriptor?? [ 147.231718][ T4930] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge0 [ 147.356981][ T4934] netlink: 'syz.3.341': attribute type 10 has an invalid length. [ 147.444883][ T4934] team0: Port device netdevsim0 added [ 147.842805][ T3609] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 147.926600][ T23] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 148.126498][ T3609] usb 4-1: Using ep0 maxpacket: 32 [ 148.216680][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 148.262813][ T3609] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.299790][ T3609] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.332993][ T3609] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 148.342694][ T3609] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.366813][ T23] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 148.682434][ T3609] usb 4-1: config 0 descriptor?? [ 148.687791][ T23] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 148.698289][ T23] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 148.715210][ T23] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 148.744436][ T23] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 148.756794][ T3609] hub 4-1:0.0: USB hub found [ 148.791154][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.966842][ T3609] hub 4-1:0.0: 1 port detected [ 148.993877][ T4956] loop0: detected capacity change from 0 to 512 [ 149.066744][ T23] usb 3-1: GET_CAPABILITIES returned 0 [ 149.074161][ T4956] EXT4-fs (loop0): Ignoring removed oldalloc option [ 149.080848][ T23] usbtmc 3-1:16.0: can't read capabilities [ 149.124388][ T4956] EXT4-fs error (device loop0): ext4_xattr_inode_iget:400: comm syz.0.349: Parent and EA inode have the same ino 15 [ 149.144032][ T4956] EXT4-fs error (device loop0): ext4_xattr_inode_iget:400: comm syz.0.349: Parent and EA inode have the same ino 15 [ 149.168056][ T4956] EXT4-fs (loop0): 1 orphan inode deleted [ 149.173959][ T4956] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,bsdgroups,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,mb_optimize_scan=0x0000000000000001,oldalloc,resuid=0x000000000000ee01,,errors=continue. Quota mode: none. [ 149.234342][ T3570] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:11715' [ 149.244515][ T3570] CPU: 0 PID: 3570 Comm: kworker/u5:1 Not tainted 5.15.167-syzkaller #0 [ 149.252878][ T3570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 149.262944][ T3570] Workqueue: hci3 hci_rx_work [ 149.267646][ T3570] Call Trace: [ 149.270919][ T3570] [ 149.273850][ T3570] dump_stack_lvl+0x1e3/0x2d0 [ 149.278558][ T3570] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 149.284295][ T3570] ? panic+0x860/0x860 [ 149.288365][ T3570] ? sysfs_create_dir_ns+0x282/0x390 [ 149.293648][ T3570] sysfs_create_dir_ns+0x2c6/0x390 [ 149.298764][ T3570] ? sysfs_warn_dup+0xa0/0xa0 [ 149.303456][ T3570] ? do_raw_spin_unlock+0x137/0x8b0 [ 149.308676][ T3570] kobject_add_internal+0x6e0/0xe00 [ 149.313891][ T3570] kobject_add+0x14e/0x210 [ 149.318390][ T3570] ? device_add+0x3c2/0xfd0 [ 149.322889][ T3570] ? kobject_init+0x1d0/0x1d0 [ 149.327556][ T3570] ? __raw_spin_lock_init+0x41/0x100 [ 149.332836][ T3570] ? get_device_parent+0x128/0x400 [ 149.337967][ T3570] device_add+0x476/0xfd0 [ 149.342295][ T3570] hci_conn_add_sysfs+0xe4/0x1f0 [ 149.347224][ T3570] le_conn_complete_evt+0xc15/0x1500 [ 149.352506][ T3570] ? cs_le_create_conn+0x5f0/0x5f0 [ 149.357619][ T3570] hci_le_meta_evt+0xd86/0x3f50 [ 149.362462][ T3570] ? __lock_acquire+0x1ff0/0x1ff0 [ 149.367477][ T3570] ? __mutex_lock_common+0x444/0x25a0 [ 149.372846][ T3570] ? hci_remote_host_features_evt+0x280/0x280 [ 149.379014][ T3570] ? __mutex_unlock_slowpath+0x218/0x750 [ 149.384668][ T3570] ? hci_event_packet+0x3b4/0x1550 [ 149.389795][ T3570] ? mutex_unlock+0x10/0x10 [ 149.394316][ T3570] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 149.400290][ T3570] ? print_irqtrace_events+0x210/0x210 [ 149.405744][ T3570] hci_event_packet+0xc41/0x1550 [ 149.410720][ T3570] ? rcu_lock_release+0x20/0x20 [ 149.415586][ T3570] ? hci_send_to_monitor+0x99/0x4d0 [ 149.420790][ T3570] hci_rx_work+0x232/0x990 [ 149.425212][ T3570] process_one_work+0x8a1/0x10c0 [ 149.430160][ T3570] ? worker_detach_from_pool+0x260/0x260 [ 149.435786][ T3570] ? _raw_spin_lock_irqsave+0x120/0x120 [ 149.441328][ T3570] ? kthread_data+0x4e/0xc0 [ 149.445822][ T3570] ? wq_worker_running+0x97/0x170 [ 149.450839][ T3570] worker_thread+0xaca/0x1280 [ 149.455533][ T3570] kthread+0x3f6/0x4f0 [ 149.459595][ T3570] ? rcu_lock_release+0x20/0x20 [ 149.464436][ T3570] ? kthread_blkcg+0xd0/0xd0 [ 149.469106][ T3570] ret_from_fork+0x1f/0x30 [ 149.473524][ T3570] [ 149.481217][ T3570] kobject_add_internal failed for hci3:11715 with -EEXIST, don't try to register things with the same name in the same directory. [ 149.496573][ T3570] Bluetooth: hci3: failed to register connection device [ 149.516849][ T3640] usb 3-1: USB disconnect, device number 9 [ 149.566600][ T3639] usb 2-1: USB disconnect, device number 19 [ 149.987859][ T4962] netlink: 4 bytes leftover after parsing attributes in process `syz.1.351'. [ 149.996966][ T4965] loop0: detected capacity change from 0 to 256 [ 150.013297][ T4962] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan8: link becomes ready [ 150.074051][ T4965] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001034b, chksum : 0x6322ccb6, utbl_chksum : 0xe619d30d) [ 150.184283][ T26] audit: type=1800 audit(1728328888.268:37): pid=4965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.352" name="bus" dev="loop0" ino=1048624 res=0 errno=0 [ 150.320416][ T4972] loop2: detected capacity change from 0 to 128 [ 150.446721][ T23] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 150.507560][ T26] audit: type=1800 audit(1728328888.588:38): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.354" name="bus" dev="loop2" ino=1048625 res=0 errno=0 [ 150.576966][ T3609] hub 4-1:0.0: hub_hub_status failed (err = -32) [ 150.595507][ T3609] hub 4-1:0.0: config failed, can't get hub status (err -32) [ 150.806896][ T23] usb 2-1: Using ep0 maxpacket: 8 [ 150.914094][ T3609] usbhid 4-1:0.0: can't add hid device: -32 [ 150.927863][ T3609] usbhid: probe of 4-1:0.0 failed with error -32 [ 150.982105][ T23] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 150.997150][ T23] usb 2-1: config 0 has no interface number 0 [ 151.008552][ T4978] input: syz1 as /devices/virtual/input/input8 [ 151.026155][ T23] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 151.088125][ T23] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 151.114467][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.143528][ T23] usb 2-1: config 0 descriptor?? [ 151.189484][ T23] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 151.286547][ T3639] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 151.390381][ T23] usb 2-1: USB disconnect, device number 20 [ 151.419280][ T23] iowarrior 2-1:0.1: I/O-Warror #0 now disconnected [ 151.453293][ T4986] ------------[ cut here ]------------ [ 151.476668][ T4986] WARNING: CPU: 0 PID: 4986 at net/wireless/core.h:220 cfg80211_wireless_stats+0x57d/0x660 [ 151.507293][ T4986] Modules linked in: [ 151.518244][ T3608] usb 4-1: USB disconnect, device number 11 [ 151.526224][ T4986] CPU: 0 PID: 4986 Comm: syz.3.360 Not tainted 5.15.167-syzkaller #0 [ 151.552531][ T4986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 151.583044][ T4986] RIP: 0010:cfg80211_wireless_stats+0x57d/0x660 [ 151.592048][ T3647] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 151.605000][ T26] audit: type=1326 audit(1728328889.678:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4985 comm="syz.3.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0bd2d5ff9 code=0x7ffc0000 [ 151.608927][ T4986] Code: 00 00 65 48 8b 0c 25 28 00 00 00 48 3b 4c 24 60 0f 85 e7 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 73 81 c5 f7 <0f> 0b e9 3c fc ff ff e8 67 81 c5 f7 0f 0b e9 81 fd ff ff e8 5b 81 [ 151.646957][ T3647] Bluetooth: hci4: Injecting HCI hardware error event [ 151.654696][ T3572] Bluetooth: hci4: hardware error 0x00 [ 151.666842][ T3639] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 151.701492][ T3639] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 151.721902][ T26] audit: type=1326 audit(1728328889.718:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4985 comm="syz.3.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=92 compat=0 ip=0x7fc0bd2d5ff9 code=0x7ffc0000 [ 151.759990][ T3639] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 151.806709][ T26] audit: type=1326 audit(1728328889.718:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4985 comm="syz.3.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0bd2d5ff9 code=0x7ffc0000 [ 151.846771][ T4986] RSP: 0018:ffffc900030678a0 EFLAGS: 00010287 [ 151.852920][ T4986] RAX: ffffffff89bad8fd RBX: 0000000000000000 RCX: 0000000000040000 [ 151.894774][ T26] audit: type=1326 audit(1728328889.718:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4985 comm="syz.3.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc0bd2d5ff9 code=0x7ffc0000 [ 151.956851][ T3639] usb 3-1: New USB device found, idVendor=0086, idProduct=0b5b, bcdDevice=e1.c5 [ 151.971752][ T3639] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.981274][ T26] audit: type=1326 audit(1728328889.718:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4985 comm="syz.3.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0bd2d5ff9 code=0x7ffc0000 [ 151.988443][ T4986] RDX: ffffc900103d7000 RSI: 0000000000000f26 RDI: 0000000000000f27 [ 152.010448][ T3639] usb 3-1: Product: syz [ 152.020187][ T3639] usb 3-1: Manufacturer: syz [ 152.029516][ T3639] usb 3-1: SerialNumber: syz [ 152.046207][ T26] audit: type=1326 audit(1728328889.718:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4985 comm="syz.3.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fc0bd2d5ff9 code=0x7ffc0000 [ 152.082925][ T3639] usb 3-1: config 0 descriptor?? [ 152.109527][ T26] audit: type=1326 audit(1728328889.718:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4985 comm="syz.3.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0bd2d5ff9 code=0x7ffc0000 [ 152.122811][ T4986] RBP: ffffc90003067950 R08: ffffffff89bad500 R09: fffff5200060cef9 [ 152.134562][ T3639] usb 3-1: Found UVC 0.00 device syz (0086:0b5b) [ 152.155563][ T3639] usb 3-1: No valid video chain found. [ 152.187835][ T26] audit: type=1326 audit(1728328889.718:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4985 comm="syz.3.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc0bd2d5ff9 code=0x7ffc0000 [ 152.223208][ T4986] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff888022d72000 [ 152.267149][ T4986] R13: ffff888064084000 R14: 1ffff1100c810800 R15: ffff888022d725c0 [ 152.275500][ T4986] FS: 00007fc0bb74e6c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 152.409976][ T4986] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 152.453079][ T4986] CR2: ffffffffffffffff CR3: 0000000069f46000 CR4: 00000000003506e0 [ 152.486576][ T4986] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 152.501554][ T4986] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 152.560692][ T4986] Call Trace: [ 152.564011][ T4986] [ 152.603118][ T4986] ? __warn+0x15b/0x300 [ 152.625804][ T4986] ? cfg80211_wireless_stats+0x57d/0x660 [ 152.634800][ T4986] ? report_bug+0x1b7/0x2e0 [ 152.637208][ T4986] ? handle_bug+0x3d/0x70 [ 152.637236][ T4986] ? exc_invalid_op+0x16/0x40 [ 152.637261][ T4986] ? asm_exc_invalid_op+0x16/0x20 [ 152.637295][ T4986] ? cfg80211_wireless_stats+0x180/0x660 [ 152.637320][ T4986] ? cfg80211_wireless_stats+0x57d/0x660 [ 152.637348][ T4986] ? cfg80211_wireless_stats+0x57d/0x660 [ 152.637380][ T4986] ? cfg80211_wext_giwretry+0x360/0x360 [ 152.637406][ T4986] ? mutex_lock_io_nested+0x60/0x60 [ 152.637438][ T4986] wireless_dev_seq_show+0x49/0x4a0 [ 152.637471][ T4986] ? mutex_lock_nested+0x17/0x20 [ 152.637499][ T4986] seq_read_iter+0x43a/0xd10 [ 152.637545][ T4986] seq_read+0x452/0x5c0 [ 152.637573][ T4986] ? aa_path_link+0xea0/0xea0 [ 152.637603][ T4986] ? seq_open+0x140/0x140 [ 152.637634][ T4986] ? __might_fault+0xb4/0x110 [ 152.637664][ T4986] ? _copy_from_user+0x10f/0x170 [ 152.637688][ T4986] ? end_current_label_crit_section+0x147/0x170 [ 152.637720][ T4986] ? seq_open+0x140/0x140 [ 152.637741][ T4986] proc_reg_read+0x1f9/0x2e0 [ 152.637773][ T4986] do_iter_read+0x4c6/0x760 [ 152.637812][ T4986] do_preadv+0x211/0x350 [ 152.637841][ T4986] ? do_writev+0x470/0x470 [ 152.637880][ T4986] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 152.637911][ T4986] ? vtime_user_exit+0x2d1/0x400 [ 152.637943][ T4986] ? syscall_enter_from_user_mode+0x2e/0x240 [ 152.637970][ T4986] ? lockdep_hardirqs_on+0x94/0x130 [ 152.637997][ T4986] ? syscall_enter_from_user_mode+0x2e/0x240 [ 152.638028][ T4986] do_syscall_64+0x3b/0xb0 [ 152.638049][ T4986] ? clear_bhb_loop+0x15/0x70 [ 152.638071][ T4986] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 152.638099][ T4986] RIP: 0033:0x7fc0bd2d5ff9 [ 152.638121][ T4986] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.638142][ T4986] RSP: 002b:00007fc0bb74e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 152.638170][ T4986] RAX: ffffffffffffffda RBX: 00007fc0bd48df80 RCX: 00007fc0bd2d5ff9 [ 152.638189][ T4986] RDX: 0000000000000002 RSI: 0000000020000080 RDI: 0000000000000003 [ 152.638204][ T4986] RBP: 00007fc0bd348296 R08: 0000000000000000 R09: 0000000000000000 [ 152.638220][ T4986] R10: 00000000000000a2 R11: 0000000000000246 R12: 0000000000000000 [ 152.638235][ T4986] R13: 0000000000000000 R14: 00007fc0bd48df80 R15: 00007ffe1d512f98 [ 152.638269][ T4986] [ 152.638294][ T4986] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 152.638306][ T4986] CPU: 0 PID: 4986 Comm: syz.3.360 Not tainted 5.15.167-syzkaller #0 [ 152.638327][ T4986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 152.638340][ T4986] Call Trace: [ 152.638348][ T4986] [ 152.638356][ T4986] dump_stack_lvl+0x1e3/0x2d0 [ 152.638381][ T4986] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 152.638405][ T4986] ? panic+0x860/0x860 [ 152.638436][ T4986] ? cfg80211_wireless_stats+0x480/0x660 [ 152.638461][ T4986] ? cfg80211_wireless_stats+0x480/0x660 [ 152.638486][ T4986] panic+0x318/0x860 [ 152.638513][ T4986] ? __warn+0x16a/0x300 [ 152.638536][ T4986] ? fb_is_primary_device+0xd0/0xd0 [ 152.638583][ T4986] ? cfg80211_wireless_stats+0x57d/0x660 [ 152.638608][ T4986] __warn+0x2b2/0x300 [ 152.638632][ T4986] ? cfg80211_wireless_stats+0x57d/0x660 [ 152.638656][ T4986] report_bug+0x1b7/0x2e0 [ 152.638687][ T4986] handle_bug+0x3d/0x70 [ 152.638708][ T4986] exc_invalid_op+0x16/0x40 [ 152.638731][ T4986] asm_exc_invalid_op+0x16/0x20 [ 152.638754][ T4986] RIP: 0010:cfg80211_wireless_stats+0x57d/0x660 [ 152.638779][ T4986] Code: 00 00 65 48 8b 0c 25 28 00 00 00 48 3b 4c 24 60 0f 85 e7 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 73 81 c5 f7 <0f> 0b e9 3c fc ff ff e8 67 81 c5 f7 0f 0b e9 81 fd ff ff e8 5b 81 [ 152.638797][ T4986] RSP: 0018:ffffc900030678a0 EFLAGS: 00010287 [ 152.638817][ T4986] RAX: ffffffff89bad8fd RBX: 0000000000000000 RCX: 0000000000040000 [ 152.638833][ T4986] RDX: ffffc900103d7000 RSI: 0000000000000f26 RDI: 0000000000000f27 [ 152.638848][ T4986] RBP: ffffc90003067950 R08: ffffffff89bad500 R09: fffff5200060cef9 [ 152.638864][ T4986] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff888022d72000 [ 152.638880][ T4986] R13: ffff888064084000 R14: 1ffff1100c810800 R15: ffff888022d725c0 [ 152.638904][ T4986] ? cfg80211_wireless_stats+0x180/0x660 [ 152.638927][ T4986] ? cfg80211_wireless_stats+0x57d/0x660 [ 152.638961][ T4986] ? cfg80211_wext_giwretry+0x360/0x360 [ 152.638986][ T4986] ? mutex_lock_io_nested+0x60/0x60 [ 152.639017][ T4986] wireless_dev_seq_show+0x49/0x4a0 [ 152.639048][ T4986] ? mutex_lock_nested+0x17/0x20 [ 152.639073][ T4986] seq_read_iter+0x43a/0xd10 [ 152.639115][ T4986] seq_read+0x452/0x5c0 [ 152.639136][ T4986] ? aa_path_link+0xea0/0xea0 [ 152.639164][ T4986] ? seq_open+0x140/0x140 [ 152.639193][ T4986] ? __might_fault+0xb4/0x110 [ 152.639222][ T4986] ? _copy_from_user+0x10f/0x170 [ 152.639244][ T4986] ? end_current_label_crit_section+0x147/0x170 [ 152.639276][ T4986] ? seq_open+0x140/0x140 [ 152.639295][ T4986] proc_reg_read+0x1f9/0x2e0 [ 152.639324][ T4986] do_iter_read+0x4c6/0x760 [ 152.639361][ T4986] do_preadv+0x211/0x350 [ 152.639388][ T4986] ? do_writev+0x470/0x470 [ 152.639425][ T4986] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 152.639454][ T4986] ? vtime_user_exit+0x2d1/0x400 [ 152.639482][ T4986] ? syscall_enter_from_user_mode+0x2e/0x240 [ 152.639508][ T4986] ? lockdep_hardirqs_on+0x94/0x130 [ 152.639534][ T4986] ? syscall_enter_from_user_mode+0x2e/0x240 [ 152.639569][ T4986] do_syscall_64+0x3b/0xb0 [ 152.639589][ T4986] ? clear_bhb_loop+0x15/0x70 [ 152.639610][ T4986] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 152.639635][ T4986] RIP: 0033:0x7fc0bd2d5ff9 [ 152.639652][ T4986] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.639670][ T4986] RSP: 002b:00007fc0bb74e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 152.639694][ T4986] RAX: ffffffffffffffda RBX: 00007fc0bd48df80 RCX: 00007fc0bd2d5ff9 [ 152.639710][ T4986] RDX: 0000000000000002 RSI: 0000000020000080 RDI: 0000000000000003 [ 152.639724][ T4986] RBP: 00007fc0bd348296 R08: 0000000000000000 R09: 0000000000000000 [ 152.639738][ T4986] R10: 00000000000000a2 R11: 0000000000000246 R12: 0000000000000000 [ 152.639752][ T4986] R13: 0000000000000000 R14: 00007fc0bd48df80 R15: 00007ffe1d512f98 [ 152.639783][ T4986] [ 152.640063][ T4986] Kernel Offset: disabled [ 153.253690][ T4986] Rebooting in 86400 seconds..