last executing test programs: 31.186669115s ago: executing program 4 (id=245): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x1a, 0xda, 0x65, 0x40, 0xb48, 0x2003, 0x9d13, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb1, 0x3e, 0x6d}}]}}]}}, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x6, 0x4d, &(0x7f00000011c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x8, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x0, 0x0, 0x10}}}}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 29.243618327s ago: executing program 4 (id=247): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="696f636861727365743d617363696900f1652c696f1e716b917365743d757466382c6e6f7672732c74000020acdc6ccf12fc2289215e4cf0690f9e7a280306dca93a9e0c471dcca261ecbfef7d2c689c923248fa9b4088a7ae1c236c0610e0d94663276aaad729233c1b8662d91bda299ad42d27bce2aaf403b00e01f9b18db781ff3c0e179108254e55b32dbedc4116bf5bf3179d05c6725190d783d5d996242d8e14ddb0d65017e6819f0264081c08d474216c5976e81757a9521f170a4fda7988bef80456155b5c7874a0806025ff017cc12aa9f4022ffb459047d400b694f592011b0a434741ebe55eb13ee21c2b4d6012211be0be85440646438465f71ba617c3cdf70e2436ac56ee186c66dff01181bf5bbecb2b386676fa6691ca7ad5276878e264f82cbcb33e48949bb7a132bbbe11cb4a7f2f0eb6fe1744f39baab9cd2eefc26500d0fc199810cd3dfdde4a37ef0bdc0d0f72baa7093d5e8e02f9f68e6d0d6ec9f15247880affc233ffcd9fb5168e62a3eeae33a1058afc2fff1216bcb998bc736307324ab146be1c2e5df28280b4e33e69c89f28e0ed16a470d41354698bf8bcfb0facce28c75ef863bf59210be9d4b1d2c2b623ec67e408fc872f5bef51c9d8d41f45b0cd1ff0787c29a4e0eb2ca772757e5f40a8c1988b514214217b5aa93f3f92d0db4a8b05364e5c5fe1692519d7e25ea9f3e40724b5de8e1649946162d3e77c09530e4277d5a392f5e2ac0493dc8fc120618c1166b24d865240c27551a349cc001ae3a56e522b1b3e4a2045075dff6f9514b24a000000000000000000", @ANYRESOCT, @ANYRES8, @ANYRESDEC, @ANYRESHEX], 0x9, 0xc64, &(0x7f0000001f80)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000001500)='kfree\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) symlinkat(&(0x7f00000001c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file6\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000b80)='./file6\x00', 0xffffffffffffff9c, &(0x7f0000000bc0)='./file7\x00', 0x0) (fail_nth: 9) 28.349650411s ago: executing program 4 (id=250): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x1a) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000002340)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0xb8, 0x5, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0xff, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x5}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x0, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220f00000003a8407a730b93bf0280b3"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x81044804, &(0x7f0000000400)={0x1}) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0x40184810, 0x0) 27.742716361s ago: executing program 2 (id=253): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x20, r1, 0x309, 0x0, 0x0, {0x21}, [@ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x20}, 0x1, 0xf000000}, 0x0) 26.872026974s ago: executing program 2 (id=256): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="580000000206010800000000000000000000000014000780080011400000000005001500000000000500010006000000050005000a00000005000400000000000900020073797a31000000000c000300686173683a697008"], 0x58}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000100)=0x7fff) mount(&(0x7f0000000100), &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000080)='trans=rdma,') syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x800) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r1) syz_usb_connect(0x0, 0x172, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000e6bef1403c419681e01f0000000109026001010000000009049a0000020600000724060000ba4f05240004000d240f0108000000ff"], 0x0) madvise(&(0x7f0000098000/0x3000)=nil, 0x3000, 0x19) pselect6(0x40, &(0x7f00000007c0)={0xff, 0x0, 0x0, 0x2, 0x800000000000004}, 0x0, 0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="090d0000000000f0ff0007"], 0x58}}, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) syz_mount_image$sysv(&(0x7f00000000c0), &(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2008055, &(0x7f0000005e00)=ANY=[@ANYRES8], 0x1, 0x9e7a, &(0x7f000000fcc0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x101600, 0x138) getdents64(r3, 0x0, 0x0) 23.909713811s ago: executing program 4 (id=259): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x0, 0xd6e}}) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x0, 0x0, 0x101}}) 23.79160973s ago: executing program 4 (id=261): syz_mount_image$reiserfs(&(0x7f0000000540), &(0x7f0000000140)='./file0\x00', 0x10, &(0x7f00000001c0), 0xfa, 0x1119, &(0x7f0000003600)="$eJzs2b9qFUEUB+Df7F5NupW1XwJaWEhIuD6AKRRua6uNSEAwVS4Iiq/hG/gWvoKmsg/ptQhYCis3e9f8IaCSG0H4Ptids2dn9uyUMxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABYmCRfS3K7StoxVyUpSdcdzI6SdGP+1qe6SsmT3dn80f708TxJfdK9PE02TrqUJO32nfV22k7b7fbBw527n+dv3r56vre3u7/8TEmXw+OVzqKMt/psrqy0BgAAAPy3+itr8v71n1S6eU31AQAAgN9Z9X4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwN/qm9O4HYMqSUm67mB2lKS7ZNyNf/R/AAAAwNWVVHnWXJYftgFO3c+XpvzKL9rvZRFv5UNzYSAAAABwzsuP5x77tWVw9nz9Rz9YrLvvZTKsy9eHdxuZZHNziJdNvu0kdZKtC7UOj9+9GK/S18na9cwJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfrIDByQAAAAAgv6/bkegAAAAAAAAAAAAAAAAAAAAAAAAAAAXBQAA//+XOeFM") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) dup(r0) (async) r1 = dup(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x38, &(0x7f0000000580)=@framed={{}, [@cb_func, @snprintf, @ringbuf_query, @jmp, @map_fd, @kfunc, @printk, @ringbuf_output, @printk={@s}, @ringbuf_query, @alu]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x2000000, 0x0, 0x1, 0x0, &(0x7f0000000000)) (async) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x2000000, 0x0, 0x1, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000002c0)={[{@huge_always}]}) chdir(&(0x7f0000000140)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r3, 0x0) ftruncate(r3, 0xc17a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000140), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000340)=ANY=[@ANYRESOCT=r0, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000340)=ANY=[@ANYRESOCT=r0, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r5}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r5}, 0x10) pause() llistxattr(0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8946, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) ftruncate(r1, 0x3f5e00) socket$inet_sctp(0x2, 0x1, 0x84) (async) r6 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'veth1\x00'}) setsockopt$inet_sctp_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f0000000200)={0x0, 0x3ff, 0x89, "ddfc6ef1b70b61edc42fe23efa46ea1f750f252fe2a1e485738bee8ff3f202e3a68dde46a86f6c59d4a825ce330d25cb0093404d431e88559a04c9eb0b7951a289a9545667d20ce51aa2edc5cbfdbf343c84d21da3454b1bd1f0bbad73ce11c03994e6c4ea911b33450e8cc6003e2694e12040344a01e8d08097a67c027f0313a4eb25de8f33995782"}, 0x91) 22.810698282s ago: executing program 4 (id=267): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000000c0)=0x41) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd02000040", 0x6}], 0x1, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='veth1_virt_wifi\x00', 0x10) connect$inet6(r4, &(0x7f0000004540)={0xa, 0x0, 0x0, @dev}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000000100), 0x40000c4, 0x7ffffff7) 8.516877572s ago: executing program 0 (id=306): ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8936, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="5c00000014006b", 0x7}, {&(0x7f00000017c0)="00000000ffffffff1f01a0c9a1171aa56a72700000c073e99f8f2ffed6bd642c1238663e9e5189a46cb56c776afa8ec3d4d4d9c0648fc18bad3a6b5656235d60cb5af5c5a69e10ed9fd4ea", 0x4b}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) 7.743735966s ago: executing program 0 (id=308): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x1a) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000002340)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0xb8, 0x5, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0xff, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x5}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x0, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220f00000003a8407a730b93bf0280b3"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x81044804, &(0x7f0000000400)) 7.651399884s ago: executing program 2 (id=285): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/287], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x2}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0xffff0000}, 0x48) 7.526561394s ago: executing program 2 (id=309): socket$caif_stream(0x25, 0x1, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x1, 0xa}, {0x0, 0x0, 0xffff, 0x0, 0x7}}}}, 0x17) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f00000000c0), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r5 = getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)) prlimit64(r5, 0x0, 0x0, &(0x7f0000000000)) tkill(0x0, 0x33) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x100, 0x0) getdents(r6, 0x0, 0x18) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) recvmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/32, 0x5}}], 0x196, 0x0, 0x0) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) 6.720877662s ago: executing program 1 (id=310): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f00000001c0)={0x7, 'bridge0\x00', {0x1008034}, 0x1}) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x40000, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="b80001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff000000000100000000000000"], 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c400000019000100000000000000000000000000000000000000000000000000000000000000000000000000e900000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0xc4}}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)='X', 0x1}, {&(0x7f0000000100)="0b149fc4cf62fbaf8ad2ab852f721615df397dc7879d14dd1580b05dfa3e9dbad2774e5464b1a9bcb0ed077636ee191a8fca14b3509797b932855cf7b1610e3711745264c19483761d0ccf9c94e1838114803cdfc0ed9b1666141cde0814d72082dd8f95341a9a7189b4e5c18b8c78f176ee7e76c5784c368eb761a2ecd13ec77bbb5a8623c987b409035158c73f56e523e9423712e1a37ab84fd24fe04c6baa2543d508675b7fcc0834ad37466ba83cd08dafb178b417b766d4fbc78a", 0xbd}, {&(0x7f0000000240)="b38a4a522a496d1ef5bacef2f0335569dac27306f6fc2602a0ee327c7bd0c670fa9fabd4dd8078175f4ca9bd6b38742e49f354f5dfed47231c4eac67ec5a2fdd66f6f39bb96befcc88c0f6317a576663f3cb73ae6a3a00eed618679266002ff232d7791d59dd24202deb4218e790aee90b685955162a3d1c45dcb31148f83543c5bf7af10b0f050be70041593da601f44eb7395bcb1d219612c138327d2494bdcc6456617cd225f051a3d6666e789ea18ff0cc7d5732325a01e57cd7", 0xff4a}, {&(0x7f0000000440)="86f290e660e313fb928776c162ff3366de5dff3034e8630efd6bbc470ba6dd8b7cc4989473a3b10067c2fd060104f401565e94733fc5d7b0c1d9e23c188f92b935bc2c700583c6e11a84a1cf9f4f008d336d4cefeb0a46a0a1ccc5e4fbaad4fb3a7899817c7ee8bd5ec05cfa11e913084c91594ab494bf4ad712bdf160d5db613c7c1f7271af87a1dcc5ff54850b2f833a0d902ae8580ae27c91afde269e5d4b904c5906b6f4b77eb859f1fedf9f53621b28d957", 0x56}], 0x4) recvmmsg(r0, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000400), 0x0, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000000200)=""/55, 0x37}}], 0x3, 0x0, 0x0) 6.37871937s ago: executing program 1 (id=312): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000500)={0x7ffe, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 6.279530508s ago: executing program 1 (id=313): openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @multicast1, @initdev}, &(0x7f00000000c0)=0xc) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @multicast1, @initdev}, &(0x7f00000000c0)=0xc) socket$inet_udplite(0x2, 0x2, 0x88) (async) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) socket(0x10, 0x80002, 0x0) (async) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="44000000110029080d8ddd8dd8d6fa0007000000", @ANYRES32=r5, @ANYBLOB="00000000000000001c001a800800068004000500080000003e"], 0x44}}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="44000000110029080d8ddd8dd8d6fa0007000000", @ANYRES32=r5, @ANYBLOB="00000000000000001c001a800800068004000500080000003e"], 0x44}}, 0x0) r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MIF(r7, 0x29, 0xcb, &(0x7f0000001400)={0xffffffffffffffff, 0x1, 0x80, r5, 0x3}, 0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x4, 0x4b, 0x2, 0xde6d, 0x2e, @local, @private2, 0x78c0, 0xac69fd0ebfaae918, 0x1, 0x7ff}}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vxcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vxcan0\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)={0x0, @multicast2}, &(0x7f0000000240)=0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wg1\x00', 0x0}) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r12}, 0x10) syz_mount_image$jfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x8000, &(0x7f0000000240)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0x0, @ANYBLOB=',resize,nodiscard,usrquota,errors=remount-ro,discard,resize=0x0000000000000000,gid=', @ANYRESHEX=0x0, @ANYBLOB=',errors=continue,iocharset=macgaelic,uid=', @ANYRESHEX=0x0, @ANYBLOB=',noquota,grpquota,nointegrity,uid=', @ANYRESDEC=0x0, @ANYBLOB=',smackfstransmute=noquota,uid=', @ANYRES64=r3, @ANYBLOB=',permit_directio,id=\x00\x00', @ANYRESDEC=r4, @ANYBLOB="2c77626a5f75736572275d24b3412c000000000000"], 0x3, 0x61ac, &(0x7f00000003c0)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040), &(0x7f0000000040)=ANY=[], 0x1001, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) r14 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r15 = socket(0x1, 0x1, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r14, @ANYBLOB="010700000000000000000c00000008000300", @ANYRES32=r16], 0x1c}}, 0x0) r17 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r18, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route(r17, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r19}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x1}, @IFLA_BOND_MIN_LINKS={0x8}]}}}]}, 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000000780)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)={0x228, r2, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xb8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xb1, 0x4, "67659b09f5ad722533ff9c61dc8b41f3130e03252208be1a6c0f4b3a378700dd65008af0d896c3c6c85c437284af851307af9c098a61a64a8dd17513d717a9cce7a1d86f537c5367c764cb23dde701d6e88f443730a6208f3e1a6489901e73e4d5f866a3b44d03e8b82ead41de0e0c8701ed15a8359eec3ca470a5cdceea9500da81dcdc8707158631862e4a2fecc84baab7b6153f6b0cf9c9d31eb7beaba62028b02b3661d6b97171f4f8ba69"}]}, @ETHTOOL_A_DEBUG_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x6c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x42f}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '#\x98&-[}\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '$\v[\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff}]}]}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x14, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xdb}]}, @ETHTOOL_A_DEBUG_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r19}]}]}, 0x228}, 0x1, 0x0, 0x0, 0x80}, 0x8000) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 5.167262251s ago: executing program 0 (id=314): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) mknod(&(0x7f0000000540)='./file1\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r5 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) 5.026539382s ago: executing program 1 (id=315): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000000c0)=0x41) pwritev(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='veth1_virt_wifi\x00', 0x10) connect$inet6(r4, &(0x7f0000004540)={0xa, 0x0, 0x0, @dev}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000000100), 0x40000c4, 0x7ffffff7) 5.010134864s ago: executing program 0 (id=316): ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8936, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="5c00000014006b", 0x7}, {&(0x7f00000017c0)="00000000ffffffff1f01a0c9a1171aa56a72700000c073e99f8f2ffed6bd642c1238663e9e5189a46cb56c776afa8ec3d4d4d9c0648fc18bad3a6b5656235d60cb5af5c5a69e10ed9fd4ea", 0x4b}, {0x0}], 0x3, 0x0, 0x0, 0x1f00c00e}, 0x0) 4.896009283s ago: executing program 0 (id=317): syz_mount_image$reiserfs(&(0x7f0000000540), &(0x7f0000000140)='./file0\x00', 0x10, &(0x7f00000001c0), 0xfa, 0x1119, &(0x7f0000003600)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) syz_mount_image$ext4(&(0x7f00000007c0)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x10000, &(0x7f00000001c0), 0x1, 0x546, &(0x7f0000000200)="$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") sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000780)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000340)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x100000, &(0x7f0000000440)=ANY=[], 0x1, 0x0, 0x0) rmdir(&(0x7f0000001100)='./file1\x00') r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="180200000000200000000000000000008500000036000000950000000000000049db185086ea6334aa453ec969352991eb38f162575a68c0e574b1758d28a5aa8e86720031a818d25477fc738a2157e500171427cceeb8adc298f40b9affaa9ceb28e1ac72f4d412696ddf196f7380423f5d1cff072e84bf03770a9bf0bede62157b45b5a2ef59cea5048ffb"], &(0x7f00000000c0)='GPL\x00', 0x5, 0xc5, &(0x7f00000001c0)=""/197}, 0x80) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r1, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000280)=ANY=[], 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r4 = dup(r3) ftruncate(r4, 0x3f5e00) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='rdma.current\x00', 0x275a, 0x0) 3.738662669s ago: executing program 2 (id=318): socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000e00)=""/4083, 0xff9) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, 0x0, 0x6be353c8bfdbcadb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000001f00)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e80)=ANY=[@ANYBLOB='\f\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042cbd7000fddbdf250d0000000500330002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20040090}, 0x40480c0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) unshare(0x2c060000) io_setup(0x7, &(0x7f0000000280)) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000580)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100e8ffffff000000001e0000002000018008000100", @ANYRES32=r6, @ANYBLOB="14000200776731"], 0x34}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={0x0, 0x21c}}, 0x0) 3.73376492s ago: executing program 1 (id=319): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000980)='./bus\x00', 0x800700, &(0x7f00000019c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x2005}}, {@journal_dev={'journal_dev', 0x3d, 0x8200}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200}}, {@usrjquota}]}, 0x3, 0x44a, &(0x7f0000000400)="$eJzs281vG0UbAPBn10n6vv1KKOWjpUCgQkR8JE1aoAcuIJA4FIEEh3IMTlpVdRvUBIlWFQ0IlQsSqgRnxBGJv4AbFwSckLjCHVWqoJcWTkG73m1t106b1rFD/ftJm8x4x555PDve2R07gIE1nv1JIrZGxG8RMVrPNhcYr/+7evls9e/LZ6tJrKy89WeSl7ty+Wy1LFo+b0uRmUgj0k+SopJmi6fPHJ+t1eZPFfmppRPvTS2ePvPssROzR+ePzp+cOXjwwP7pF56fea4rcWZxXdn94cKeXa+9c+H16uEL7/70bdbercX+xji6ZTwL/K+VXOu+J7pdWZ9ta0gnQ31sCGtSiYisu4bz8T8albjeeaPx6sd9bRywrrJz06bOu5dXgLtYEv1uAdAf5Yk+u/4ttx5NPTaESy/VL4CyuK8WW33PUKRFmeGW69tuGo+Iw8v/fJVtsU73IQAAGn1W/fJQPNNu/pfG/Q3lthdrKGMRcU9E7IiIeyNiZ0TcF5GXfSAiHlxj/a1LQzfOf9KLtxXYLcrmfy8Wa1vN879y9hdjlSK3LY9/ODlyrDa/r3hPJmJ4U5afXqWO71/59fNO+xrnf9mW1V/OBYt2XBxquUE3N7s0m09Ku+DSRxG7h9rFn1xbCUgiYldE7F7bS28vE8ee+mZPp0I3j38VXVhnWvk64sl6/y9HS/ylZPX1yan/RW1+31R5VNzo51/Ov9mp/juKvwuy/t/cfPy3FhlLGtdrF9dex/nfP+14TXO7x/9I8nbeLyPFYx/MLi2dmo4YSQ7l+abHZ64/t8yX5bP4J/a2H/87iudk9TwUEdlB/HBEPBIRjxZtfywiHo+IvavE/+PLnfdthP6fa/v5d+34b+n/tScqx3/4rlP9t9b/B/LURPFI/vl3E7fawDt57wAAAOC/Is2/A5+kk9fSaTo5Wf8O/87YnNYWFpeePrLw/sm5+nflx2I4Le90jTbcD51OlotXrOdninvF5f79xX3jLyr/z/OT1YXaXJ9jh0G3pcP4z/xR6XfrgHXXbh1tZqQPDQF6rnX8p83Zc2/0sjFAT/m9Ngyum4z/tFftAHrP+R8GV7vxf64lby0A7k7O/zC4jH8YXMY/DC7jHwbSnfyuX2KQE5FuiGZIrFOi359MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3fFvAAAA//+uEO7O") socket$inet6(0xa, 0x2, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) syz_emit_ethernet(0x58, &(0x7f00000009c0)={@random="5aa5adbad8c4", @multicast, @val={@void, {0x8100, 0x1, 0x1}}, {@mpls_uc={0x8847, {[{0x0, 0x0, 0x1}, {0x8001}, {0x8}, {0x2}], @llc={@llc={0xaa, 0x42, "b3db", "6a5bfaa4d7fb5cf6c5b44e0e96af2dbe016ba88e05bd9b4544c4afab27290fdd9029cf624f186e6e47fe14b03b6edc940eaf"}}}}}}, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) pipe2$9p(0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000380)='./file0\x00', 0x800, &(0x7f0000000100)=ANY=[], 0x0, 0x1d2, &(0x7f0000000700)="$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") ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000000)=0xd, 0x4) syz_emit_ethernet(0x4a, &(0x7f00000007c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\f\n5', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f00000000c0)={0x29, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x7fffffff}]}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000540)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x0, 0x0, 0x200}}}}}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c00000014a2b6c8e0d360e6dd00010000000000000a00000a000000", @ANYRES32=r3, @ANYBLOB="14000100fe8000"/20], 0x2c}}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) dup3(0xffffffffffffffff, r5, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) 2.558559768s ago: executing program 3 (id=321): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)={0x0, 0x0, 0x0, r2}) r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x20, 0x0, 0x0, r3}) 2.29160688s ago: executing program 0 (id=322): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) eventfd2(0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1000000000000000100100000010017c145bfeb79e25ddefe9e011c6a6727400000e000000"], 0x20}, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f0000000380)=0xa, 0x4) sendmsg$inet_sctp(r1, &(0x7f00000002c0)={&(0x7f0000000200)=@in={0x2, 0x0, @multicast2}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000240)="02", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000840000000f6d86410f3a763600000000ea8757c8ce949500"/41], 0x18, 0x884}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x98, &(0x7f00000000c0)=""/152}, 0x90) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r5 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev, 0x0, 0x0, 0x0, 0x400}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', r6, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @local}}) socket$netlink(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x15, 0x2, 0x8, 0x3, 0x2a8, r4, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x5}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000003480)={{r7}, &(0x7f0000003400), &(0x7f0000003440)='%pS \x00'}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r7, 0x0, 0x0}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000011140100000000000027000008003e0003000000080001000000000008004b0028000000"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$sock_int(r3, 0x1, 0x0, &(0x7f0000000240)=0x8000, 0x4) r9 = socket$unix(0x1, 0x1, 0x0) bind$unix(r9, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r9, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffffe6, 0x0, 0x0, 0x18fae6fad8906d26) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 2.277853121s ago: executing program 2 (id=323): socket$inet(0x2, 0x4000000000000001, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9}, 0x48) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 2.210598837s ago: executing program 1 (id=324): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x1a) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000002340)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0xb8, 0x5, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0xff, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x5}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x0, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220f00000003a8407a730b93bf0280b3"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x81044804, &(0x7f0000000400)) 2.085108017s ago: executing program 3 (id=325): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) mknod(&(0x7f0000000540)='./file1\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r5 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) 1.862750806s ago: executing program 3 (id=326): ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8936, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="5c00000014006b", 0x7}, {&(0x7f00000017c0)="00000000ffffffff1f01a0c9a1171aa56a72700000c073e99f8f2ffed6bd642c1238663e9e5189a46cb56c776afa8ec3d4d4d9c0648fc18bad3a6b5656235d60cb5af5c5a69e10ed9fd4ea", 0x4b}, {0x0}], 0x3, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.775642653s ago: executing program 3 (id=327): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000080)={[0xffffffffffffffff]}, 0x0, 0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) setxattr$incfs_size(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), 0x0, 0xfb, 0x0) 1.298673873s ago: executing program 3 (id=328): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYRES64=r2], &(0x7f0000000440)='syzkaller\x00', 0x0, 0xfffffffffffffecb, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) prctl$PR_SET_MM(0x41555856, 0xf7354000, &(0x7f0000ffa000/0x3000)=nil) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r6, 0x0, 0x484, &(0x7f0000000400)=""/69, &(0x7f0000000180)=0x45) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x175}, 0x1c) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f00000000c0)=[{0x0}], 0x1) 0s ago: executing program 3 (id=329): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000000c0)=0x41) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='veth1_virt_wifi\x00', 0x10) connect$inet6(r4, &(0x7f0000004540)={0xa, 0x0, 0x0, @dev}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000000100), 0x40000c4, 0x7ffffff7) kernel console output (not intermixed with test programs): with address 0x1, skipping [ 80.237648][ T4378] syz.4.137[4378] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 80.237736][ T4378] syz.4.137[4378] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 80.240172][ T7] usb 1-1: config 0 interface 39 altsetting 0 has 7 endpoint descriptors, different from the interface descriptor's value: 11 [ 80.282723][ T7] usb 1-1: too many endpoints for config 0 interface 184 altsetting 51: 152, using maximum allowed: 30 [ 80.294146][ T7] usb 1-1: config 0 interface 184 altsetting 51 has 4 endpoint descriptors, different from the interface descriptor's value: 152 [ 80.307808][ T7] usb 1-1: config 0 interface 213 altsetting 204 has a duplicate endpoint with address 0xD, skipping [ 80.318989][ T7] usb 1-1: config 0 interface 213 altsetting 204 has a duplicate endpoint with address 0x4, skipping [ 80.331567][ T7] usb 1-1: config 0 interface 213 altsetting 204 has a duplicate endpoint with address 0x2, skipping [ 80.342836][ T7] usb 1-1: config 0 interface 213 altsetting 204 has a duplicate endpoint with address 0x81, skipping [ 80.353867][ T7] usb 1-1: config 0 interface 213 altsetting 204 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 80.365056][ T7] usb 1-1: config 0 interface 213 altsetting 204 has a duplicate endpoint with address 0x4, skipping [ 80.375964][ T7] usb 1-1: config 0 interface 213 altsetting 204 has a duplicate endpoint with address 0x5, skipping [ 80.386853][ T7] usb 1-1: config 0 interface 213 altsetting 204 has an invalid endpoint with address 0x26, skipping [ 80.397742][ T7] usb 1-1: config 0 interface 213 altsetting 204 has a duplicate endpoint with address 0x4, skipping [ 80.408649][ T7] usb 1-1: config 0 interface 213 altsetting 204 has 9 endpoint descriptors, different from the interface descriptor's value: 8 [ 80.421908][ T7] usb 1-1: config 0 interface 184 has no altsetting 0 [ 80.429185][ T7] usb 1-1: config 0 interface 213 has no altsetting 0 [ 80.459553][ T4360] netlink: 72 bytes leftover after parsing attributes in process `syz.3.134'. [ 80.478925][ T4378] FAULT_INJECTION: forcing a failure. [ 80.478925][ T4378] name failslab, interval 1, probability 0, space 0, times 0 [ 80.511054][ T4378] CPU: 0 PID: 4378 Comm: syz.4.137 Not tainted 5.15.164-syzkaller #0 [ 80.519154][ T4378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 80.529207][ T4378] Call Trace: [ 80.532485][ T4378] [ 80.535399][ T4378] dump_stack_lvl+0x1e3/0x2d0 [ 80.540059][ T4378] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 80.545677][ T4378] ? panic+0x860/0x860 [ 80.549734][ T4378] should_fail+0x38a/0x4c0 [ 80.554136][ T4378] should_failslab+0x5/0x20 [ 80.558621][ T4378] slab_pre_alloc_hook+0x53/0xc0 [ 80.563546][ T4378] kmem_cache_alloc_trace+0x49/0x290 [ 80.568846][ T4378] ? tcf_action_init_1+0x1d2/0x7f0 [ 80.573972][ T4378] tcf_action_init_1+0x1d2/0x7f0 [ 80.578924][ T4378] ? tc_action_load_ops+0x550/0x550 [ 80.584114][ T4378] ? _raw_read_unlock+0x24/0x40 [ 80.588949][ T4378] ? tc_action_load_ops+0x2a6/0x550 [ 80.594136][ T4378] ? __lock_acquire+0x1295/0x1ff0 [ 80.599143][ T4378] ? __nla_parse+0x3c/0x50 [ 80.603542][ T4378] tcf_action_init+0x2f3/0x750 [ 80.608289][ T4378] ? tcf_action_init_1+0x7f0/0x7f0 [ 80.613394][ T4378] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 80.619372][ T4378] ? apparmor_capable+0x12e/0x190 [ 80.624380][ T4378] ? __nla_parse+0x3c/0x50 [ 80.628781][ T4378] tc_ctl_action+0x49b/0xd00 [ 80.633363][ T4378] ? tcf_free_cookie_rcu+0x40/0x40 [ 80.638454][ T4378] ? __mutex_lock_common+0x15a0/0x25a0 [ 80.643929][ T4378] ? tcf_free_cookie_rcu+0x40/0x40 [ 80.649022][ T4378] rtnetlink_rcv_msg+0x993/0xee0 [ 80.653945][ T4378] ? rtnetlink_bind+0x80/0x80 [ 80.658611][ T4378] ? __local_bh_enable_ip+0x164/0x1f0 [ 80.663960][ T4378] ? lockdep_hardirqs_on+0x94/0x130 [ 80.669137][ T4378] ? __local_bh_enable_ip+0x164/0x1f0 [ 80.674488][ T4378] ? local_bh_enable+0x5/0x20 [ 80.679151][ T4378] ? _local_bh_enable+0xa0/0xa0 [ 80.683987][ T4378] ? __dev_queue_xmit+0x1c56/0x3230 [ 80.689175][ T4378] ? __copy_skb_header+0x47b/0x600 [ 80.694268][ T4378] ? dev_queue_xmit+0x20/0x20 [ 80.698929][ T4378] ? memcpy+0x3c/0x60 [ 80.702892][ T4378] ? __copy_skb_header+0x47b/0x600 [ 80.707989][ T4378] netlink_rcv_skb+0x1cf/0x410 [ 80.712735][ T4378] ? rtnetlink_bind+0x80/0x80 [ 80.717391][ T4378] ? netlink_ack+0xb10/0xb10 [ 80.721970][ T4378] netlink_unicast+0x7b6/0x980 [ 80.726724][ T4378] ? netlink_detachskb+0x90/0x90 [ 80.731643][ T4378] ? __virt_addr_valid+0x3bb/0x460 [ 80.736739][ T4378] ? 0xffffffff81000000 [ 80.740871][ T4378] ? __check_object_size+0x300/0x410 [ 80.746166][ T4378] ? bpf_lsm_netlink_send+0x5/0x10 [ 80.751260][ T4378] netlink_sendmsg+0xa30/0xd60 [ 80.756014][ T4378] ? netlink_getsockopt+0x5b0/0x5b0 [ 80.761195][ T4378] ? aa_sock_msg_perm+0x91/0x150 [ 80.766117][ T4378] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 80.771381][ T4378] ? security_socket_sendmsg+0x7d/0xa0 [ 80.776819][ T4378] ? netlink_getsockopt+0x5b0/0x5b0 [ 80.781998][ T4378] ____sys_sendmsg+0x59e/0x8f0 [ 80.786745][ T4378] ? iovec_from_user+0x300/0x390 [ 80.791669][ T4378] ? __sys_sendmsg_sock+0x30/0x30 [ 80.796685][ T4378] ___sys_sendmsg+0x252/0x2e0 [ 80.801344][ T4378] ? __sys_sendmsg+0x260/0x260 [ 80.806116][ T4378] ? __fdget+0x191/0x220 [ 80.810342][ T4378] __se_sys_sendmsg+0x19a/0x260 [ 80.815174][ T4378] ? __x64_sys_sendmsg+0x80/0x80 [ 80.820096][ T4378] ? syscall_enter_from_user_mode+0x2e/0x240 [ 80.826055][ T4378] ? lockdep_hardirqs_on+0x94/0x130 [ 80.831233][ T4378] ? syscall_enter_from_user_mode+0x2e/0x240 [ 80.837193][ T4378] do_syscall_64+0x3b/0xb0 [ 80.841588][ T4378] ? clear_bhb_loop+0x15/0x70 [ 80.846246][ T4378] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 80.852121][ T4378] RIP: 0033:0x7f65ab5bc3b9 [ 80.856520][ T4378] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.876105][ T4378] RSP: 002b:00007f65a9a3b048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 80.884498][ T4378] RAX: ffffffffffffffda RBX: 00007f65ab74af80 RCX: 00007f65ab5bc3b9 [ 80.892449][ T4378] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000004 [ 80.900398][ T4378] RBP: 00007f65a9a3b0a0 R08: 0000000000000000 R09: 0000000000000000 [ 80.908345][ T4378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.916296][ T4378] R13: 000000000000000b R14: 00007f65ab74af80 R15: 00007ffd7fd1d718 [ 80.924257][ T4378] [ 80.934985][ T1074] Bluetooth: hci0: command 0x040f tx timeout [ 81.009613][ T4387] FAULT_INJECTION: forcing a failure. [ 81.009613][ T4387] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 81.020744][ T7] usb 1-1: Dual-Role OTG device on HNP port [ 81.050679][ T7] usb 1-1: New USB device found, idVendor=05cc, idProduct=3362, bcdDevice=31.fe [ 81.059748][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.098745][ T7] usb 1-1: Product: á½å«­ï³æ““‮㰇渋ﱊé¡æ¾œä½²ì“œÖ‡áºì¨¦æž¥è響캊缠룉衿墟୮養뎡霖ïšã¶ë™µç‘žíŒ¿ë¬¢ì®µí‰„홧踀䄕뿑崼鲹눗髞ë‚弎苎句Ӡ検橪釥湦疡âŒêªœéº£ï’™è„˜æ·à­”煉磶è„ê«Šé’Ÿå–⒵䄖롲꧸æ‰æ„¢âž’꼮颶 [ 81.139907][ T7] usb 1-1: Manufacturer: ⊠[ 81.146408][ T7] usb 1-1: SerialNumber: syz [ 81.169582][ T4387] CPU: 1 PID: 4387 Comm: syz.2.138 Not tainted 5.15.164-syzkaller #0 [ 81.177688][ T4387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 81.187751][ T4387] Call Trace: [ 81.191125][ T4387] [ 81.194059][ T4387] dump_stack_lvl+0x1e3/0x2d0 [ 81.195667][ T7] usb 1-1: config 0 descriptor?? [ 81.198742][ T4387] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 81.198768][ T4387] ? panic+0x860/0x860 [ 81.198786][ T4387] ? validate_chain+0x112/0x5930 [ 81.207510][ T4391] loop3: detected capacity change from 0 to 256 [ 81.209317][ T4387] ? validate_chain+0x112/0x5930 [ 81.209348][ T4387] should_fail+0x38a/0x4c0 [ 81.233863][ T4387] _copy_from_user+0x2d/0x170 [ 81.238550][ T4387] iovec_from_user+0x13b/0x390 [ 81.243330][ T4387] __import_iovec+0x72/0x4b0 [ 81.247929][ T4387] ? __ia32_sys_shutdown+0x60/0x60 [ 81.253055][ T4387] import_iovec+0xe6/0x120 [ 81.257466][ T4387] ___sys_sendmsg+0x215/0x2e0 [ 81.262129][ T4387] ? __sys_sendmsg+0x260/0x260 [ 81.266901][ T4387] ? __fdget+0x191/0x220 [ 81.271127][ T4387] __se_sys_sendmsg+0x19a/0x260 [ 81.276047][ T4387] ? __x64_sys_sendmsg+0x80/0x80 [ 81.280972][ T4387] ? syscall_enter_from_user_mode+0x2e/0x240 [ 81.286930][ T4387] ? lockdep_hardirqs_on+0x94/0x130 [ 81.292109][ T4387] ? syscall_enter_from_user_mode+0x2e/0x240 [ 81.298075][ T4387] do_syscall_64+0x3b/0xb0 [ 81.302470][ T4387] ? clear_bhb_loop+0x15/0x70 [ 81.307133][ T4387] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 81.313091][ T4387] RIP: 0033:0x7f8ed447a3b9 [ 81.317489][ T4387] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.337072][ T4387] RSP: 002b:00007f8ed28d8048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 81.345468][ T4387] RAX: ffffffffffffffda RBX: 00007f8ed4609058 RCX: 00007f8ed447a3b9 [ 81.353442][ T4387] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000004 [ 81.361397][ T4387] RBP: 00007f8ed28d80a0 R08: 0000000000000000 R09: 0000000000000000 [ 81.369348][ T4387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.377298][ T4387] R13: 000000000000006e R14: 00007f8ed4609058 R15: 00007fff0aa94e88 [ 81.385258][ T4387] [ 81.391751][ T4338] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 81.398868][ T4338] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 81.429004][ T4338] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 81.489177][ T4394] FAULT_INJECTION: forcing a failure. [ 81.489177][ T4394] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 81.531721][ T4391] FAT-fs (loop3): Unrecognized mount option "codepage=<66" or missing value [ 81.606263][ T4394] CPU: 0 PID: 4394 Comm: syz.4.140 Not tainted 5.15.164-syzkaller #0 [ 81.614369][ T4394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 81.624426][ T4394] Call Trace: [ 81.627715][ T4394] [ 81.630641][ T4394] dump_stack_lvl+0x1e3/0x2d0 [ 81.635323][ T4394] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 81.640949][ T4394] ? panic+0x860/0x860 [ 81.645024][ T4394] ? snprintf+0xd6/0x120 [ 81.649285][ T4394] should_fail+0x38a/0x4c0 [ 81.653713][ T4394] _copy_to_user+0x2d/0x130 [ 81.658217][ T4394] simple_read_from_buffer+0xc6/0x150 [ 81.663600][ T4394] proc_fail_nth_read+0x1a3/0x210 [ 81.668626][ T4394] ? proc_fault_inject_write+0x390/0x390 [ 81.674260][ T4394] ? fsnotify_perm+0x442/0x590 [ 81.679022][ T4394] ? proc_fault_inject_write+0x390/0x390 [ 81.684650][ T4394] vfs_read+0x2fc/0xe10 [ 81.688812][ T4394] ? kernel_read+0x1f0/0x1f0 [ 81.693394][ T4394] ? bpf_send_signal_common+0x2d8/0x420 [ 81.698947][ T4394] ? __fget_files+0x413/0x480 [ 81.703638][ T4394] ? mutex_lock_nested+0x17/0x20 [ 81.708752][ T4394] ? __fdget_pos+0x2cb/0x380 [ 81.713348][ T4394] ? ksys_read+0x77/0x2c0 [ 81.717677][ T4394] ksys_read+0x1a2/0x2c0 [ 81.721922][ T4394] ? print_irqtrace_events+0x210/0x210 [ 81.727381][ T4394] ? vfs_write+0xe50/0xe50 [ 81.731807][ T4394] ? rcu_is_watching+0x11/0xa0 [ 81.736575][ T4394] ? syscall_enter_from_user_mode+0x14b/0x240 [ 81.742645][ T4394] do_syscall_64+0x3b/0xb0 [ 81.747057][ T4394] ? clear_bhb_loop+0x15/0x70 [ 81.751734][ T4394] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 81.757628][ T4394] RIP: 0033:0x7f65ab5badfc [ 81.762044][ T4394] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8d 02 00 48 [ 81.781648][ T4394] RSP: 002b:00007f65a99f9040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 81.790066][ T4394] RAX: ffffffffffffffda RBX: 00007f65ab74b130 RCX: 00007f65ab5badfc [ 81.798034][ T4394] RDX: 000000000000000f RSI: 00007f65a99f90b0 RDI: 0000000000000007 [ 81.806007][ T4394] RBP: 00007f65a99f90a0 R08: 0000000000000000 R09: 0000000000000000 [ 81.813982][ T4394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.821956][ T4394] R13: 000000000000006e R14: 00007f65ab74b130 R15: 00007ffd7fd1d718 [ 81.830029][ T4394] [ 82.012038][ T7] usb 1-1: [ueagle-atm] ADSL device founded vid (0X5CC) pid (0X3362) Rev (0X31FE): ADI930 [ 82.138236][ T4186] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.150551][ T13] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 82.173900][ T4186] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.227973][ T4186] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.276892][ T4186] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 82.520773][ T13] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 82.520798][ T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.520812][ T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.520824][ T13] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 82.520845][ T13] usb 4-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 82.520859][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.523062][ T13] usb 4-1: config 0 descriptor?? [ 82.668838][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.769942][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.813693][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.814245][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.828942][ T1077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.829523][ T1077] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.829842][ T1077] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.829911][ T1077] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.831435][ T1077] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.860409][ T1077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.861271][ T1077] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.861621][ T1077] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.861656][ T1077] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.222965][ T1077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 83.390416][ T1077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 83.509362][ T1077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.519323][ T1077] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.524747][ T1077] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 83.614910][ T1304] Bluetooth: hci0: command 0x0419 tx timeout [ 83.692922][ T13] kye 0003:0458:501A.0004: unknown main item tag 0x0 [ 83.694169][ T3991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.694859][ T3991] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.696275][ T13] kye 0003:0458:501A.0004: hidraw0: USB HID v0.00 Device [HID 0458:501a] on usb-dummy_hcd.3-1/input0 [ 83.696304][ T13] kye 0003:0458:501A.0004: tablet-enabling feature report not found [ 83.696318][ T13] kye 0003:0458:501A.0004: tablet enabling failed [ 83.750465][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 83.751106][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.751582][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 83.752474][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.760093][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 83.838053][ T7] usb 1-1: [ueagle-atm] pre-firmware device, uploading firmware [ 83.838132][ T7] usb 1-1: [ueagle-atm] loading firmware ueagle-atm/adi930.fw [ 83.843956][ T7] usb 1-1: [ueagle-atm] ADSL device founded vid (0X5CC) pid (0X3362) Rev (0X31FE): ADI930 [ 83.843985][ T7] usb 1-1: [ueagle-atm] pre-firmware device, uploading firmware [ 83.844033][ T7] usb 1-1: [ueagle-atm] loading firmware ueagle-atm/adi930.fw [ 83.867910][ T7] usb 1-1: [ueagle-atm] ADSL device founded vid (0X5CC) pid (0X3362) Rev (0X31FE): ADI930 [ 83.867939][ T7] usb 1-1: [ueagle-atm] pre-firmware device, uploading firmware [ 83.867980][ T7] usb 1-1: [ueagle-atm] loading firmware ueagle-atm/adi930.fw [ 83.894574][ T7] usb 1-1: USB disconnect, device number 6 [ 83.935332][ T1304] usb 4-1: USB disconnect, device number 3 [ 84.081005][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 84.081145][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.088962][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.136947][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 84.137508][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.161694][ T1077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.162249][ T1077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.162821][ T1077] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.163256][ T1077] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.167272][ T4186] device veth0_vlan entered promiscuous mode [ 84.190431][ T4186] device veth1_vlan entered promiscuous mode [ 84.245659][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 84.246246][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 84.246730][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.247190][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.261506][ T4186] device veth0_macvtap entered promiscuous mode [ 84.264915][ T4186] device veth1_macvtap entered promiscuous mode [ 84.295283][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.295306][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.295315][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.295327][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.295335][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.295347][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.295355][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.295367][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.296500][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.296607][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.297128][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 84.297612][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.298079][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.307916][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.307935][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.307945][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.307957][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.307965][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.307977][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.307987][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.307998][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.309018][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.309109][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.309605][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.318988][ T4186] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.319022][ T4186] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.319047][ T4186] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.319071][ T4186] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.469878][ T3786] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.469938][ T3786] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.477813][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.487432][ T4458] FAULT_INJECTION: forcing a failure. [ 84.487432][ T4458] name failslab, interval 1, probability 0, space 0, times 0 [ 84.487459][ T4458] CPU: 0 PID: 4458 Comm: syz.3.148 Not tainted 5.15.164-syzkaller #0 [ 84.487477][ T4458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 84.487487][ T4458] Call Trace: [ 84.487493][ T4458] [ 84.487500][ T4458] dump_stack_lvl+0x1e3/0x2d0 [ 84.487526][ T4458] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 84.487543][ T4458] ? panic+0x860/0x860 [ 84.487563][ T4458] ? __might_sleep+0xc0/0xc0 [ 84.487582][ T4458] ? __local_bh_enable_ip+0x164/0x1f0 [ 84.487603][ T4458] should_fail+0x38a/0x4c0 [ 84.487623][ T4458] should_failslab+0x5/0x20 [ 84.487640][ T4458] slab_pre_alloc_hook+0x53/0xc0 [ 84.487662][ T4458] kmem_cache_alloc_node+0x49/0x2c0 [ 84.487678][ T4458] ? __alloc_skb+0xdd/0x590 [ 84.487700][ T4458] __alloc_skb+0xdd/0x590 [ 84.487720][ T4458] netlink_ack+0x33c/0xb10 [ 84.487749][ T4458] ? netlink_dump+0xc40/0xc40 [ 84.487776][ T4458] netlink_rcv_skb+0x24c/0x410 [ 84.487795][ T4458] ? rtnetlink_bind+0x80/0x80 [ 84.487814][ T4458] ? netlink_ack+0xb10/0xb10 [ 84.487845][ T4458] netlink_unicast+0x7b6/0x980 [ 84.487871][ T4458] ? netlink_detachskb+0x90/0x90 [ 84.487888][ T4458] ? __virt_addr_valid+0x3bb/0x460 [ 84.487905][ T4458] ? 0xffffffff81000000 [ 84.487918][ T4458] ? __check_object_size+0x300/0x410 [ 84.487938][ T4458] ? bpf_lsm_netlink_send+0x5/0x10 [ 84.487957][ T4458] netlink_sendmsg+0xa30/0xd60 [ 84.487986][ T4458] ? netlink_getsockopt+0x5b0/0x5b0 [ 84.488011][ T4458] ? aa_sock_msg_perm+0x91/0x150 [ 84.488030][ T4458] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 84.488045][ T4458] ? security_socket_sendmsg+0x7d/0xa0 [ 84.488061][ T4458] ? netlink_getsockopt+0x5b0/0x5b0 [ 84.488081][ T4458] ____sys_sendmsg+0x59e/0x8f0 [ 84.488098][ T4458] ? iovec_from_user+0x300/0x390 [ 84.488121][ T4458] ? __sys_sendmsg_sock+0x30/0x30 [ 84.488153][ T4458] ___sys_sendmsg+0x252/0x2e0 [ 84.488175][ T4458] ? __sys_sendmsg+0x260/0x260 [ 84.488231][ T4458] ? __fdget+0x191/0x220 [ 84.488252][ T4458] __se_sys_sendmsg+0x19a/0x260 [ 84.488272][ T4458] ? __x64_sys_sendmsg+0x80/0x80 [ 84.488298][ T4458] ? syscall_enter_from_user_mode+0x2e/0x240 [ 84.488317][ T4458] ? lockdep_hardirqs_on+0x94/0x130 [ 84.488335][ T4458] ? syscall_enter_from_user_mode+0x2e/0x240 [ 84.488357][ T4458] do_syscall_64+0x3b/0xb0 [ 84.488378][ T4458] ? clear_bhb_loop+0x15/0x70 [ 84.488399][ T4458] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 84.488417][ T4458] RIP: 0033:0x7f37ec9b93b9 [ 84.488431][ T4458] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.488444][ T4458] RSP: 002b:00007f37eae38048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 84.488464][ T4458] RAX: ffffffffffffffda RBX: 00007f37ecb47f80 RCX: 00007f37ec9b93b9 [ 84.488476][ T4458] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000003 [ 84.488487][ T4458] RBP: 00007f37eae380a0 R08: 0000000000000000 R09: 0000000000000000 [ 84.488498][ T4458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.488509][ T4458] R13: 000000000000000b R14: 00007f37ecb47f80 R15: 00007fffad1aa588 [ 84.488533][ T4458] [ 84.589784][ T3812] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.589842][ T3812] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.593377][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 84.708559][ T4462] loop2: detected capacity change from 0 to 4096 [ 84.780363][ T4470] loop1: detected capacity change from 0 to 512 [ 84.819061][ T4462] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 84.819161][ T4462] NILFS (loop2): unrecognized mount option "ÿÿ0x00000000000000000x00000000000000001844674407370955161501777777777777777777777ÿÿÿÿÿÿ0x0000000000000000" [ 84.842389][ T3588] udevd[3588]: incorrect nilfs2 checksum on /dev/loop2 [ 84.866886][ T4470] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 84.866987][ T4470] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038 (0x7fffffff) [ 84.906992][ T4471] loop3: detected capacity change from 0 to 8192 [ 85.036481][ T4471] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 85.036572][ T4471] REISERFS (device loop3): using ordered data mode [ 85.036582][ T4471] reiserfs: using flush barriers [ 85.042658][ T4471] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 85.241238][ T4483] FAULT_INJECTION: forcing a failure. [ 85.241238][ T4483] name failslab, interval 1, probability 0, space 0, times 0 [ 85.263810][ T4471] REISERFS (device loop3): checking transaction log (loop3) [ 85.663992][ T4483] CPU: 1 PID: 4483 Comm: syz.2.152 Not tainted 5.15.164-syzkaller #0 [ 85.728936][ T4471] REISERFS (device loop3): Using r5 hash to sort names [ 85.732839][ T4483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 85.732853][ T4483] Call Trace: [ 85.732859][ T4483] [ 85.732867][ T4483] dump_stack_lvl+0x1e3/0x2d0 [ 85.732892][ T4483] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 85.732908][ T4483] ? panic+0x860/0x860 [ 85.732926][ T4483] ? __might_sleep+0xc0/0xc0 [ 85.732944][ T4483] ? netlink_insert+0xcac/0x1280 [ 85.732965][ T4483] should_fail+0x38a/0x4c0 [ 85.732986][ T4483] should_failslab+0x5/0x20 [ 85.733003][ T4483] slab_pre_alloc_hook+0x53/0xc0 [ 85.733025][ T4483] kmem_cache_alloc_node+0x49/0x2c0 [ 85.733041][ T4483] ? __alloc_skb+0xdd/0x590 [ 85.733063][ T4483] __alloc_skb+0xdd/0x590 [ 85.733083][ T4483] netlink_sendmsg+0x6f8/0xd60 [ 85.733112][ T4483] ? netlink_getsockopt+0x5b0/0x5b0 [ 85.733132][ T4483] ? aa_sock_msg_perm+0x91/0x150 [ 85.750171][ T4471] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 85.762986][ T4483] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 85.763013][ T4483] ? security_socket_sendmsg+0x7d/0xa0 [ 85.763028][ T4483] ? netlink_getsockopt+0x5b0/0x5b0 [ 85.763049][ T4483] ____sys_sendmsg+0x59e/0x8f0 [ 85.763067][ T4483] ? iovec_from_user+0x300/0x390 [ 85.763090][ T4483] ? __sys_sendmsg_sock+0x30/0x30 [ 85.763119][ T4483] ___sys_sendmsg+0x252/0x2e0 [ 85.763140][ T4483] ? __sys_sendmsg+0x260/0x260 [ 85.763193][ T4483] ? __fdget+0x191/0x220 [ 85.763213][ T4483] __se_sys_sendmsg+0x19a/0x260 [ 85.763236][ T4483] ? __x64_sys_sendmsg+0x80/0x80 [ 85.931968][ T4471] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 4 0(1) DIR], item_len 35, item_location 2769, free_space(entry_count) 2 [ 85.944209][ T4483] ? syscall_enter_from_user_mode+0x2e/0x240 [ 85.944243][ T4483] ? lockdep_hardirqs_on+0x94/0x130 [ 85.944259][ T4483] ? syscall_enter_from_user_mode+0x2e/0x240 [ 85.944277][ T4483] do_syscall_64+0x3b/0xb0 [ 85.944292][ T4483] ? clear_bhb_loop+0x15/0x70 [ 85.944310][ T4483] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 85.944328][ T4483] RIP: 0033:0x7f8ed447a3b9 [ 85.944343][ T4483] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.944355][ T4483] RSP: 002b:00007f8ed28f9048 EFLAGS: 00000246 [ 85.984544][ T4471] REISERFS error (device loop3): vs-5150 search_by_key: invalid format found in block 548. Fsck? [ 85.989343][ T4483] ORIG_RAX: 000000000000002e [ 85.989355][ T4483] RAX: ffffffffffffffda RBX: 00007f8ed4608f80 RCX: 00007f8ed447a3b9 [ 85.989368][ T4483] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000006 [ 85.989378][ T4483] RBP: 00007f8ed28f90a0 R08: 0000000000000000 R09: 0000000000000000 [ 85.994310][ T4471] REISERFS (device loop3): Remounting filesystem read-only [ 85.995557][ T4483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.995572][ T4483] R13: 000000000000000b R14: 00007f8ed4608f80 R15: 00007fff0aa94e88 [ 85.995597][ T4483] [ 86.000292][ T4471] REISERFS error (device loop3): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 4 0x0 SD] stat data [ 86.391934][ T4471] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 4 0(1) DIR], item_len 35, item_location 2769, free_space(entry_count) 2 [ 86.458876][ T4471] REISERFS error (device loop3): vs-5150 search_by_key: invalid format found in block 548. Fsck? [ 86.458955][ T4471] REISERFS error (device loop3): zam-7001 reiserfs_find_entry: io error [ 86.464414][ T4471] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 4 0(1) DIR], item_len 35, item_location 2769, free_space(entry_count) 2 [ 86.464479][ T4471] REISERFS error (device loop3): vs-5150 search_by_key: invalid format found in block 548. Fsck? [ 86.464494][ T4471] REISERFS error (device loop3): zam-7001 reiserfs_find_entry: io error [ 87.636703][ T4532] loop0: detected capacity change from 0 to 256 [ 87.692369][ T4536] device macvlan3 entered promiscuous mode [ 87.722099][ T4536] team0: Port device macvlan3 added [ 87.799090][ T4549] syz.1.163[4549] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 87.799173][ T4549] syz.1.163[4549] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 87.867571][ T4554] FAULT_INJECTION: forcing a failure. [ 87.867571][ T4554] name failslab, interval 1, probability 0, space 0, times 0 [ 87.867607][ T4554] CPU: 1 PID: 4554 Comm: syz.3.158 Not tainted 5.15.164-syzkaller #0 [ 87.867626][ T4554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 87.867635][ T4554] Call Trace: [ 87.867641][ T4554] [ 87.867649][ T4554] dump_stack_lvl+0x1e3/0x2d0 [ 87.867674][ T4554] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 87.867692][ T4554] ? panic+0x860/0x860 [ 87.867722][ T4554] should_fail+0x38a/0x4c0 [ 87.867747][ T4554] should_failslab+0x5/0x20 [ 87.867764][ T4554] slab_pre_alloc_hook+0x53/0xc0 [ 87.867787][ T4554] __kmalloc+0x6e/0x300 [ 87.867802][ T4554] ? tomoyo_encode+0x26b/0x530 [ 87.867828][ T4554] tomoyo_encode+0x26b/0x530 [ 87.867852][ T4554] tomoyo_mount_permission+0x31e/0xb20 [ 87.867874][ T4554] ? kmem_cache_free+0x91/0x1f0 [ 87.867892][ T4554] ? kasan_set_track+0x62/0x80 [ 87.867909][ T4554] ? kasan_set_track+0x4b/0x80 [ 87.867926][ T4554] ? kasan_set_free_info+0x1f/0x40 [ 87.867941][ T4554] ? slab_free_freelist_hook+0xdd/0x160 [ 87.867958][ T4554] ? kmem_cache_free+0x91/0x1f0 [ 87.867973][ T4554] ? user_path_at_empty+0x12b/0x180 [ 87.867993][ T4554] ? tomoyo_get_name+0x530/0x530 [ 87.868058][ T4554] ? lockdep_hardirqs_on+0x94/0x130 [ 87.868085][ T4554] security_sb_mount+0x88/0xc0 [ 87.868109][ T4554] path_mount+0xbd/0x10a0 [ 87.868131][ T4554] ? user_path_at_empty+0x12b/0x180 [ 87.868152][ T4554] __se_sys_mount+0x2d5/0x3c0 [ 87.868173][ T4554] ? __x64_sys_mount+0xc0/0xc0 [ 87.868190][ T4554] ? syscall_enter_from_user_mode+0x2e/0x240 [ 87.868209][ T4554] ? lockdep_hardirqs_on+0x94/0x130 [ 87.868228][ T4554] ? __x64_sys_mount+0x1c/0xc0 [ 87.868245][ T4554] do_syscall_64+0x3b/0xb0 [ 87.868258][ T4554] ? clear_bhb_loop+0x15/0x70 [ 87.868277][ T4554] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 87.868294][ T4554] RIP: 0033:0x7f37ec9b93b9 [ 87.868309][ T4554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.868322][ T4554] RSP: 002b:00007f37eae38048 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 87.868343][ T4554] RAX: ffffffffffffffda RBX: 00007f37ecb47f80 RCX: 00007f37ec9b93b9 [ 87.868355][ T4554] RDX: 0000000020000180 RSI: 0000000020000140 RDI: 0000000000000000 [ 87.868367][ T4554] RBP: 00007f37eae380a0 R08: 0000000020000000 R09: 0000000000000000 [ 87.868378][ T4554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.868388][ T4554] R13: 000000000000000b R14: 00007f37ecb47f80 R15: 00007fffad1aa588 [ 87.868414][ T4554] [ 87.887901][ T4556] loop0: detected capacity change from 0 to 512 [ 87.933018][ T4556] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 88.083089][ T4549] Zero length message leads to an empty skb [ 88.187698][ T4556] EXT4-fs (loop0): #blocks per group too big: 16384 [ 88.248935][ T4576] FAULT_INJECTION: forcing a failure. [ 88.248935][ T4576] name failslab, interval 1, probability 0, space 0, times 0 [ 88.259411][ T4567] loop3: detected capacity change from 0 to 1024 [ 88.286063][ T4576] CPU: 1 PID: 4576 Comm: syz.2.170 Not tainted 5.15.164-syzkaller #0 [ 88.294187][ T4576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 88.304248][ T4576] Call Trace: [ 88.307529][ T4576] [ 88.310462][ T4576] dump_stack_lvl+0x1e3/0x2d0 [ 88.315151][ T4576] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 88.320794][ T4576] ? panic+0x860/0x860 [ 88.324864][ T4576] ? __might_sleep+0xc0/0xc0 [ 88.329434][ T4576] ? netlink_insert+0xcac/0x1280 [ 88.334359][ T4576] should_fail+0x38a/0x4c0 [ 88.338764][ T4576] should_failslab+0x5/0x20 [ 88.343450][ T4576] slab_pre_alloc_hook+0x53/0xc0 [ 88.348391][ T4576] kmem_cache_alloc_node+0x49/0x2c0 [ 88.353579][ T4576] ? __alloc_skb+0xdd/0x590 [ 88.358084][ T4576] __alloc_skb+0xdd/0x590 [ 88.362414][ T4576] netlink_sendmsg+0x6f8/0xd60 [ 88.367217][ T4576] ? netlink_getsockopt+0x5b0/0x5b0 [ 88.372401][ T4576] ? aa_sock_msg_perm+0x91/0x150 [ 88.377323][ T4576] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 88.382586][ T4576] ? security_socket_sendmsg+0x7d/0xa0 [ 88.388022][ T4576] ? netlink_getsockopt+0x5b0/0x5b0 [ 88.393208][ T4576] ____sys_sendmsg+0x59e/0x8f0 [ 88.397953][ T4576] ? iovec_from_user+0x300/0x390 [ 88.402873][ T4576] ? __sys_sendmsg_sock+0x30/0x30 [ 88.407893][ T4576] ___sys_sendmsg+0x252/0x2e0 [ 88.412552][ T4576] ? __sys_sendmsg+0x260/0x260 [ 88.417324][ T4576] ? __fdget+0x191/0x220 [ 88.421548][ T4576] __se_sys_sendmsg+0x19a/0x260 [ 88.426381][ T4576] ? __x64_sys_sendmsg+0x80/0x80 [ 88.431308][ T4576] ? syscall_enter_from_user_mode+0x2e/0x240 [ 88.437330][ T4576] ? lockdep_hardirqs_on+0x94/0x130 [ 88.442532][ T4576] ? syscall_enter_from_user_mode+0x2e/0x240 [ 88.448508][ T4576] do_syscall_64+0x3b/0xb0 [ 88.452909][ T4576] ? clear_bhb_loop+0x15/0x70 [ 88.457570][ T4576] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 88.463441][ T4576] RIP: 0033:0x7f8ed447a3b9 [ 88.467835][ T4576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.487416][ T4576] RSP: 002b:00007f8ed28f9048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 88.495805][ T4576] RAX: ffffffffffffffda RBX: 00007f8ed4608f80 RCX: 00007f8ed447a3b9 [ 88.503757][ T4576] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000004 [ 88.511706][ T4576] RBP: 00007f8ed28f90a0 R08: 0000000000000000 R09: 0000000000000000 [ 88.519654][ T4576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.527602][ T4576] R13: 000000000000000b R14: 00007f8ed4608f80 R15: 00007fff0aa94e88 [ 88.535561][ T4576] [ 88.564171][ T4567] hfsplus: unable to parse mount options [ 89.505008][ T4556] loop0: detected capacity change from 0 to 4096 [ 89.582691][ T4556] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 89.688159][ T4599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.744675][ T4599] bond0: (slave rose0): Enslaving as an active interface with an up link [ 89.783784][ T4601] netlink: 12 bytes leftover after parsing attributes in process `syz.1.175'. [ 89.813044][ T4601] tipc: Started in network mode [ 89.855133][ T4601] tipc: Node identity , cluster identity 8 [ 89.876851][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 90.430611][ T7] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 90.810800][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.840635][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.880678][ T7] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 90.930177][ T7] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 90.984470][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.006362][ T4643] fuse: Unknown parameter '000000000000000000000000x0000000000000007' [ 91.037402][ T7] usb 1-1: config 0 descriptor?? [ 91.096751][ T4613] loop3: detected capacity change from 0 to 40427 [ 91.170113][ T4613] F2FS-fs (loop3): invalid crc value [ 91.185671][ T4643] xt_recent: hitcount (39939) is larger than allowed maximum (255) [ 91.202293][ T4632] loop1: detected capacity change from 0 to 32768 [ 91.216741][ T4643] netlink: 8 bytes leftover after parsing attributes in process `syz.4.184'. [ 91.241402][ T4613] F2FS-fs (loop3): Found nat_bits in checkpoint [ 91.257893][ T4654] loop2: detected capacity change from 0 to 8 [ 91.307617][ T4629] udc-core: couldn't find an available UDC or it's busy [ 91.331004][ T4629] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 91.347724][ T25] audit: type=1800 audit(1722586807.866:52): pid=4654 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.185" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 91.409847][ T4613] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 91.438690][ T4632] XFS (loop1): Mounting V5 Filesystem [ 91.499860][ T3570] attempt to access beyond end of device [ 91.499860][ T3570] loop3: rw=2049, want=45104, limit=40427 [ 91.622457][ T7] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 91.635338][ T4671] loop2: detected capacity change from 0 to 4096 [ 91.657372][ T7] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 91.707968][ T4632] XFS (loop1): Ending clean mount [ 91.719699][ T7] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 91.723390][ T4671] ntfs: volume version 3.1. [ 91.745789][ T4671] ntfs: (device loop2): ntfs_read_locked_inode(): $INDEX_ROOT attribute is missing. [ 91.756852][ T4671] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x5 as bad. Run chkdsk. [ 91.779943][ T4671] ntfs: (device loop2): load_system_files(): Failed to load root directory. [ 91.796628][ T4671] ntfs: (device loop2): ntfs_fill_super(): Failed to load system files. [ 91.939522][ T25] audit: type=1804 audit(1722586808.456:53): pid=4632 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.183" name="/newroot/7/file0/bus" dev="loop1" ino=9290 res=1 errno=0 [ 92.039348][ T4632] XFS (loop1): User initiated shutdown received. [ 92.051262][ T4632] XFS (loop1): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x10c/0x150 (fs/xfs/xfs_fsops.c:481). Shutting down filesystem. [ 92.074344][ T4688] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 92.133901][ T4632] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 92.279351][ T4699] loop4: detected capacity change from 0 to 512 [ 92.289582][ T4186] XFS (loop1): Unmounting Filesystem [ 92.942955][ T3571] usb 1-1: USB disconnect, device number 7 [ 93.406870][ T4722] loop1: detected capacity change from 0 to 512 [ 93.448868][ T4690] loop2: detected capacity change from 0 to 40427 [ 93.478416][ T4722] EXT4-fs (loop1): #blocks per group too big: 16384 [ 93.514926][ T4690] F2FS-fs (loop2): invalid crc value [ 93.538173][ T4690] F2FS-fs (loop2): Found nat_bits in checkpoint [ 93.588542][ T4725] loop0: detected capacity change from 0 to 4096 [ 93.596098][ T4690] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 93.630604][ T7] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 93.674153][ T4725] ntfs: (device loop0): parse_ntfs_boot_sector(): Mft record size (32768) exceeds the PAGE_SIZE on your system (4096). This is not supported. Sorry. [ 93.741832][ T4729] loop1: detected capacity change from 0 to 4096 [ 93.825690][ T4729] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 93.872376][ T4731] loop0: detected capacity change from 0 to 512 [ 93.890721][ T7] usb 4-1: Using ep0 maxpacket: 16 [ 93.908562][ T4731] EXT4-fs (loop0): Ignoring removed nobh option [ 93.915226][ T4731] EXT4-fs (loop0): Journaled quota options ignored when QUOTA feature is enabled [ 93.970025][ T4731] EXT4-fs (loop0): 1 orphan inode deleted [ 93.977499][ T4731] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,resuid=0x0000000000000000,errors=remount-ro,nobh,sysvgroups,delalloc,usrjquota=./file1,. Quota mode: writeback. [ 94.010882][ T7] usb 4-1: New USB device found, idVendor=2001, idProduct=4002, bcdDevice=df.bf [ 94.031786][ T4731] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038 (0x7fffffff) [ 94.047521][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.070144][ T7] usb 4-1: config 0 descriptor?? [ 95.460736][ T7] pegasus: probe of 4-1:0.0 failed with error -32 [ 96.395585][ T3851] attempt to access beyond end of device [ 96.395585][ T3851] loop2: rw=2049, want=45104, limit=40427 [ 96.468387][ T3571] usb 4-1: USB disconnect, device number 4 [ 96.585531][ T4749] FAULT_INJECTION: forcing a failure. [ 96.585531][ T4749] name failslab, interval 1, probability 0, space 0, times 0 [ 96.599385][ T4749] CPU: 1 PID: 4749 Comm: syz.1.201 Not tainted 5.15.164-syzkaller #0 [ 96.607464][ T4749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 96.617523][ T4749] Call Trace: [ 96.620803][ T4749] [ 96.623731][ T4749] dump_stack_lvl+0x1e3/0x2d0 [ 96.628405][ T4749] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 96.634031][ T4749] ? panic+0x860/0x860 [ 96.638118][ T4749] should_fail+0x38a/0x4c0 [ 96.642552][ T4749] should_failslab+0x5/0x20 [ 96.647055][ T4749] slab_pre_alloc_hook+0x53/0xc0 [ 96.651995][ T4749] ? __sigqueue_alloc+0x3be/0x4d0 [ 96.657021][ T4749] kmem_cache_alloc+0x3f/0x280 [ 96.661795][ T4749] __sigqueue_alloc+0x3be/0x4d0 [ 96.666655][ T4749] __send_signal+0x21f/0xd40 [ 96.671262][ T4749] group_send_sig_info+0x260/0x2d0 [ 96.676379][ T4749] ? lockdep_assert_task_sighand_held+0x280/0x280 [ 96.682799][ T4749] ? read_lock_is_recursive+0x10/0x10 [ 96.688162][ T4749] bpf_send_signal_common+0x2d8/0x420 [ 96.693537][ T4749] ? rcu_lock_release+0x20/0x20 [ 96.698368][ T4749] ? read_lock_is_recursive+0x10/0x10 [ 96.703720][ T4749] ? __context_tracking_exit+0x4c/0x80 [ 96.709174][ T4749] bpf_send_signal+0x15/0x20 [ 96.713752][ T4749] bpf_prog_8cc4ff36b5985b6a+0x15/0x758 [ 96.719279][ T4749] bpf_trace_run2+0x19e/0x340 [ 96.723948][ T4749] ? bpf_trace_run1+0x2f0/0x2f0 [ 96.728792][ T4749] ? print_irqtrace_events+0x210/0x210 [ 96.734229][ T4749] ? vtime_user_exit+0x2d1/0x400 [ 96.739151][ T4749] __bpf_trace_sys_enter+0x60/0x70 [ 96.744248][ T4749] syscall_enter_from_user_mode+0x202/0x240 [ 96.750122][ T4749] do_syscall_64+0x1e/0xb0 [ 96.754515][ T4749] ? clear_bhb_loop+0x15/0x70 [ 96.759191][ T4749] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 96.765063][ T4749] RIP: 0033:0x7f69339d63b9 [ 96.769456][ T4749] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.789037][ T4749] RSP: 002b:00007f6931e55048 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 96.797431][ T4749] RAX: ffffffffffffffda RBX: 00007f6933b64f80 RCX: 00007f69339d63b9 [ 96.805380][ T4749] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020627000 [ 96.813328][ T4749] RBP: 00007f6931e550a0 R08: 0000000000000000 R09: 0000000000000000 [ 96.821275][ T4749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.829309][ T4749] R13: 000000000000000b R14: 00007f6933b64f80 R15: 00007ffe4764ac68 [ 96.837267][ T4749] [ 96.970134][ T4747] loop4: detected capacity change from 0 to 8192 [ 97.034562][ T4747] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 97.056567][ T4747] REISERFS (device loop4): using ordered data mode [ 97.068498][ T4757] loop1: detected capacity change from 0 to 64 [ 97.071149][ T4747] reiserfs: using flush barriers [ 97.089299][ T4747] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 97.111591][ T4747] REISERFS (device loop4): checking transaction log (loop4) [ 97.133206][ T4747] REISERFS (device loop4): Using r5 hash to sort names [ 97.146816][ T4747] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 97.160773][ T3571] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 97.165738][ T4762] fuse: Unknown parameter '000000000000000000000000x0000000000000007' [ 97.278423][ T4747] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 4 0(1) DIR], item_len 35, item_location 2769, free_space(entry_count) 2 [ 97.297498][ T4747] REISERFS error (device loop4): vs-5150 search_by_key: invalid format found in block 548. Fsck? [ 97.310591][ T4747] REISERFS (device loop4): Remounting filesystem read-only [ 97.312246][ T26] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 97.319112][ T4747] REISERFS error (device loop4): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 4 0x0 SD] stat data [ 97.340059][ T4762] xt_recent: hitcount (39939) is larger than allowed maximum (255) [ 97.362959][ T4763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.197'. [ 97.376104][ T4747] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 4 0(1) DIR], item_len 35, item_location 2769, free_space(entry_count) 2 [ 97.416858][ T4747] REISERFS error (device loop4): vs-5150 search_by_key: invalid format found in block 548. Fsck? [ 97.437993][ T4747] REISERFS error (device loop4): zam-7001 reiserfs_find_entry: io error [ 97.449969][ T4766] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 4 0(1) DIR], item_len 35, item_location 2769, free_space(entry_count) 2 [ 97.472295][ T4766] REISERFS error (device loop4): vs-5150 search_by_key: invalid format found in block 548. Fsck? [ 97.483757][ T4766] REISERFS error (device loop4): zam-7001 reiserfs_find_entry: io error [ 97.515608][ T4757] MINIX-fs: bad superblock or unable to read bitmaps [ 97.658031][ T4768] IPVS: set_ctl: invalid protocol: 0 172.30.0.5:0 [ 97.666953][ T4757] loop1: detected capacity change from 0 to 256 [ 97.764508][ T7] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 97.800777][ T3571] usb 4-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=9d.13 [ 97.847280][ T3571] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.856455][ T3571] usb 4-1: Product: syz [ 97.861173][ T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.873118][ T3571] usb 4-1: Manufacturer: syz [ 97.877789][ T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.889071][ T3571] usb 4-1: SerialNumber: syz [ 97.910553][ T26] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 97.937751][ T3571] usb 4-1: config 0 descriptor?? [ 97.952849][ T26] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 97.962824][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.982248][ T26] usb 1-1: config 0 descriptor?? [ 97.992725][ T3571] ttusbir 4-1:0.0: cannot find expected altsetting [ 98.151269][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.173123][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.194079][ T7] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 98.197496][ T3571] usb 4-1: USB disconnect, device number 5 [ 98.209554][ T7] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 98.227289][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.232078][ T4759] udc-core: couldn't find an available UDC or it's busy [ 98.263430][ T4759] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 98.285199][ T7] usb 3-1: config 0 descriptor?? [ 98.521972][ T26] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 98.534315][ T4765] udc-core: couldn't find an available UDC or it's busy [ 98.542110][ T4765] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 98.542795][ T26] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 98.577432][ T26] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 98.738904][ T4774] 9pnet: Insufficient options for proto=fd [ 98.756891][ T4776] FAULT_INJECTION: forcing a failure. [ 98.756891][ T4776] name failslab, interval 1, probability 0, space 0, times 0 [ 98.792581][ T7] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 98.807828][ T4776] CPU: 1 PID: 4776 Comm: syz.1.210 Not tainted 5.15.164-syzkaller #0 [ 98.809431][ T7] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 98.815932][ T4776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 98.816047][ T4776] Call Trace: [ 98.816055][ T4776] [ 98.816062][ T4776] dump_stack_lvl+0x1e3/0x2d0 [ 98.816090][ T4776] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 98.816108][ T4776] ? panic+0x860/0x860 [ 98.816129][ T4776] ? __might_sleep+0xc0/0xc0 [ 98.816149][ T4776] ? rcu_is_watching+0x11/0xa0 [ 98.816171][ T4776] should_fail+0x38a/0x4c0 [ 98.816202][ T4776] should_failslab+0x5/0x20 [ 98.816219][ T4776] slab_pre_alloc_hook+0x53/0xc0 [ 98.816238][ T4776] ? ptlock_alloc+0x1c/0x60 [ 98.834014][ T7] plantronics 0003:047F:FFFF.0007: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 98.837245][ T4776] kmem_cache_alloc+0x3f/0x280 [ 98.837279][ T4776] ptlock_alloc+0x1c/0x60 [ 98.837298][ T4776] pte_alloc_one+0xd1/0x360 [ 98.907818][ T4776] ? rcu_lock_release+0x20/0x20 [ 98.912675][ T4776] __pte_alloc+0x75/0x210 [ 98.917003][ T4776] ? remove_device_exclusive_entry+0xbf0/0xbf0 [ 98.923141][ T4776] ? free_pgtables+0x2a0/0x2a0 [ 98.927893][ T4776] handle_mm_fault+0x4d7f/0x5950 [ 98.932848][ T4776] ? numa_migrate_prep+0x1a0/0x1a0 [ 98.937974][ T4776] ? vmacache_find+0x4ed/0x590 [ 98.942721][ T4776] ? vmacache_update+0x9f/0xf0 [ 98.947470][ T4776] exc_page_fault+0x271/0x700 [ 98.952135][ T4776] asm_exc_page_fault+0x22/0x30 [ 98.956967][ T4776] RIP: 0033:0x7f693389ab63 [ 98.961362][ T4776] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 98.980951][ T4776] RSP: 002b:00007f6931e544b0 EFLAGS: 00010206 [ 98.987002][ T4776] RAX: 0000000000000000 RBX: 00007f6931e54550 RCX: 00007f6929a35000 [ 98.994961][ T4776] RDX: 00007f6931e546f0 RSI: 000000000000000d RDI: 00007f6931e545f0 [ 99.002942][ T4776] RBP: 000000000000013c R08: 000000000000000a R09: 000000000000039a [ 99.010929][ T4776] R10: 00000000000003b0 R11: 00007f6931e54550 R12: 00007f6931e54550 [ 99.018910][ T4776] R13: 00007f6933a56440 R14: 00000000000000eb R15: 00007f6931e545f0 [ 99.026907][ T4776] [ 99.033636][ T4776] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 99.069108][ T4776] loop1: detected capacity change from 0 to 4096 [ 99.111384][ T4776] ntfs3: Invalid value for uid. [ 99.203534][ T7] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 99.312801][ T4785] loop3: detected capacity change from 0 to 2048 [ 99.436648][ T4785] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 99.450848][ T7] usb 5-1: Using ep0 maxpacket: 16 [ 99.570710][ T7] usb 5-1: New USB device found, idVendor=2001, idProduct=4002, bcdDevice=df.bf [ 99.580949][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.591887][ T7] usb 5-1: config 0 descriptor?? [ 100.558677][ T3652] usb 3-1: USB disconnect, device number 3 [ 100.581984][ T4798] usb usb8: usbfs: process 4798 (syz.3.219) did not claim interface 0 before use [ 100.647809][ T4803] 9pnet: Insufficient options for proto=fd [ 100.660721][ T4448] usb 1-1: reset high-speed USB device number 8 using dummy_hcd [ 100.763572][ T4814] loop3: detected capacity change from 0 to 2048 [ 100.860088][ T4814] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 2016: 0xe1 != 0x1b [ 100.901933][ T4814] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 101.092518][ T26] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 101.611505][ T3992] usb 1-1: USB disconnect, device number 8 [ 101.740689][ T7] pegasus: probe of 5-1:0.0 failed with error -32 [ 102.170564][ T7] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 102.281242][ T3992] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 102.330655][ T26] usb 2-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=9d.13 [ 102.339949][ T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.348070][ T26] usb 2-1: Product: syz [ 102.352291][ T26] usb 2-1: Manufacturer: syz [ 102.356889][ T26] usb 2-1: SerialNumber: syz [ 102.377652][ T26] usb 2-1: config 0 descriptor?? [ 102.397988][ T4836] chnl_net:caif_netlink_parms(): no params data found [ 102.435439][ T26] ttusbir 2-1:0.0: cannot find expected altsetting [ 102.455638][ T4836] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.462929][ T4836] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.470682][ T4836] device bridge_slave_0 entered promiscuous mode [ 102.488028][ T144] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.500321][ T4836] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.508079][ T4836] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.516196][ T4836] device bridge_slave_1 entered promiscuous mode [ 102.530004][ T144] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.540741][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.552806][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.562735][ T7] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 102.576176][ T7] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 102.585296][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.596833][ T7] usb 3-1: config 0 descriptor?? [ 102.608940][ T144] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.623040][ T4836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.647356][ T1304] usb 2-1: USB disconnect, device number 6 [ 102.649324][ T4836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.653546][ T3992] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.653576][ T3992] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.653597][ T3992] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 102.653630][ T3992] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 102.653651][ T3992] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.662522][ T3992] usb 1-1: config 0 descriptor?? [ 102.733616][ T144] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.759139][ T4836] team0: Port device team_slave_0 added [ 102.768379][ T4836] team0: Port device team_slave_1 added [ 102.771364][ T3618] usb 5-1: USB disconnect, device number 5 [ 102.827993][ T4836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.835344][ T4836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.849280][ T4830] udc-core: couldn't find an available UDC or it's busy [ 102.868654][ T4836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.869798][ T4830] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 102.883960][ T4836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.899877][ T4836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.926145][ T4836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.962339][ T4832] udc-core: couldn't find an available UDC or it's busy [ 102.971061][ T4832] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 102.997408][ T4836] device hsr_slave_0 entered promiscuous mode [ 103.004291][ T4836] device hsr_slave_1 entered promiscuous mode [ 103.012261][ T4836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 103.020041][ T4836] Cannot create hsr debugfs directory [ 103.144935][ T7] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 103.163093][ T7] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 103.188388][ T7] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 103.209258][ T3992] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 103.216835][ T3618] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 103.233658][ T3992] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 103.274817][ T3992] plantronics 0003:047F:FFFF.0009: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 103.479887][ T4863] netlink: 8 bytes leftover after parsing attributes in process `syz.1.235'. [ 103.597595][ T3618] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.620775][ T3618] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.641762][ T3618] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 103.665834][ T3618] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 103.699841][ T3618] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.747320][ T3618] usb 5-1: config 0 descriptor?? [ 103.959187][ T144] device hsr_slave_0 left promiscuous mode [ 103.972478][ T144] device hsr_slave_1 left promiscuous mode [ 103.982297][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.989727][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.992946][ T4845] udc-core: couldn't find an available UDC or it's busy [ 104.123150][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 104.220229][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.247220][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.272675][ T4845] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 104.341630][ T144] device team0 left promiscuous mode [ 104.552081][ T144] device team_slave_0 left promiscuous mode [ 104.619171][ T1077] Bluetooth: hci1: command 0x0409 tx timeout [ 104.628214][ T144] device team_slave_1 left promiscuous mode [ 104.635335][ T144] bridge0: port 3(team0) entered disabled state [ 104.651726][ T7] usb 1-1: USB disconnect, device number 9 [ 104.658170][ T144] device bridge_slave_1 left promiscuous mode [ 104.667148][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.679824][ T144] device bridge_slave_0 left promiscuous mode [ 104.689594][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.730428][ T144] device veth1_macvtap left promiscuous mode [ 104.737907][ T144] device veth0_macvtap left promiscuous mode [ 104.744723][ T144] device veth1_vlan left promiscuous mode [ 104.750566][ T144] device veth0_vlan left promiscuous mode [ 105.023909][ T3618] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 105.034382][ T3618] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 105.045861][ T3618] plantronics 0003:047F:FFFF.000A: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 105.706333][ T3992] usb 3-1: USB disconnect, device number 4 [ 105.762474][ T1304] usb 5-1: USB disconnect, device number 6 [ 105.826266][ T4913] loop0: detected capacity change from 0 to 8192 [ 105.856701][ T144] team0 (unregistering): Port device team_slave_1 removed [ 105.874649][ T144] team0 (unregistering): Port device team_slave_0 removed [ 105.890978][ T4913] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 105.900274][ T4913] REISERFS (device loop0): using ordered data mode [ 105.907411][ T4913] reiserfs: using flush barriers [ 105.908816][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 105.929447][ T4913] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 105.946893][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 105.947502][ T4913] REISERFS (device loop0): checking transaction log (loop0) [ 105.967750][ T4913] REISERFS (device loop0): Using r5 hash to sort names [ 105.975320][ T4913] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 106.056003][ T144] bond0 (unregistering): Released all slaves [ 106.120338][ T4913] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 4 0(1) DIR], item_len 35, item_location 2769, free_space(entry_count) 2 [ 106.136330][ T4913] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 548. Fsck? [ 106.151722][ T4913] REISERFS (device loop0): Remounting filesystem read-only [ 106.161251][ T3992] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 106.170670][ T4913] REISERFS error (device loop0): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 4 0x0 SD] stat data [ 106.191567][ T4913] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 4 0(1) DIR], item_len 35, item_location 2769, free_space(entry_count) 2 [ 106.213818][ T4913] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 548. Fsck? [ 106.227819][ T4913] REISERFS error (device loop0): zam-7001 reiserfs_find_entry: io error [ 106.266857][ T4916] loop1: detected capacity change from 0 to 512 [ 106.291361][ T4836] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 106.303698][ T4836] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 106.306199][ T4913] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 4 0(1) DIR], item_len 35, item_location 2769, free_space(entry_count) 2 [ 106.328536][ T4836] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 106.332334][ T4913] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 548. Fsck? [ 106.350136][ T4913] REISERFS error (device loop0): zam-7001 reiserfs_find_entry: io error [ 106.360576][ T4836] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 106.367402][ T4916] EXT4-fs (loop1): #blocks per group too big: 16384 [ 106.455600][ T3992] usb 3-1: Using ep0 maxpacket: 16 [ 106.513188][ T4836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.538265][ T1077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 106.559873][ T1077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 106.572038][ T4836] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.583966][ T3992] usb 3-1: New USB device found, idVendor=2001, idProduct=4002, bcdDevice=df.bf [ 106.594579][ T1077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 106.603530][ T3992] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.609521][ T1077] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 106.624613][ T4922] loop1: detected capacity change from 0 to 4096 [ 106.626990][ T1077] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.638023][ T1077] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.640569][ T3618] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 106.656856][ T3992] usb 3-1: config 0 descriptor?? [ 106.660000][ T3652] Bluetooth: hci1: command 0x041b tx timeout [ 106.680796][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 106.691937][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 106.706621][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 106.717203][ T3616] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.718343][ T4922] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 106.724307][ T3616] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.725212][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 106.750143][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 106.759386][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 106.775406][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 106.798758][ T1077] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 106.815936][ T1077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 106.825977][ T1077] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 106.835492][ T1077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 106.845221][ T1077] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 106.859237][ T1077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 106.869164][ T1077] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 106.883247][ T4836] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 106.988828][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 107.001529][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 107.014574][ T4836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.037287][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 107.049847][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 107.071682][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 107.080867][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 107.091437][ T4836] device veth0_vlan entered promiscuous mode [ 107.102464][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 107.110266][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 107.122118][ T4836] device veth1_vlan entered promiscuous mode [ 107.146956][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 107.155963][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 107.164434][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 107.173666][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 107.184401][ T4836] device veth0_macvtap entered promiscuous mode [ 107.190767][ T3618] usb 5-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=9d.13 [ 107.193397][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 107.204284][ T3618] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.216157][ T4836] device veth1_macvtap entered promiscuous mode [ 107.233242][ T3618] usb 5-1: Product: syz [ 107.236148][ T4836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.247874][ T3618] usb 5-1: Manufacturer: syz [ 107.247894][ T3618] usb 5-1: SerialNumber: syz [ 107.261035][ T4836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.261421][ T3618] usb 5-1: config 0 descriptor?? [ 107.271014][ T4836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.287053][ T4836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.297025][ T4836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.307581][ T4836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.317584][ T4836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.324982][ T3618] ttusbir 5-1:0.0: cannot find expected altsetting [ 107.329534][ T4836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.346540][ T4836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.356320][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 107.374327][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 107.388824][ T4836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.408485][ T4836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.419364][ T4836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.430201][ T4836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.447313][ T4836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.459168][ T4836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.469426][ T4836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.480263][ T4836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.491805][ T4836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.501833][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 107.511402][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 107.522758][ T4836] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.534822][ T4836] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.544210][ T4836] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.553218][ T4836] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.030674][ T3992] pegasus: probe of 3-1:0.0 failed with error -32 [ 108.372318][ T4931] loop4: detected capacity change from 0 to 2048 [ 108.449073][ T4931] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 2016: 0xe1 != 0x1b [ 108.467205][ T4931] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 108.515636][ T4931] FAULT_INJECTION: forcing a failure. [ 108.515636][ T4931] name failslab, interval 1, probability 0, space 0, times 0 [ 108.530563][ T4931] CPU: 0 PID: 4931 Comm: syz.4.247 Not tainted 5.15.164-syzkaller #0 [ 108.538639][ T4931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 108.548762][ T4931] Call Trace: [ 108.552022][ T4931] [ 108.554963][ T4931] dump_stack_lvl+0x1e3/0x2d0 [ 108.559624][ T4931] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 108.565242][ T4931] ? panic+0x860/0x860 [ 108.569303][ T4931] ? __might_sleep+0xc0/0xc0 [ 108.573869][ T4931] ? bpf_trace_run2+0x222/0x340 [ 108.578702][ T4931] should_fail+0x38a/0x4c0 [ 108.583101][ T4931] should_failslab+0x5/0x20 [ 108.587582][ T4931] slab_pre_alloc_hook+0x53/0xc0 [ 108.592514][ T4931] __kmalloc+0x6e/0x300 [ 108.596666][ T4931] ? tomoyo_realpath_from_path+0xd8/0x5e0 [ 108.602375][ T4931] tomoyo_realpath_from_path+0xd8/0x5e0 [ 108.607899][ T4931] ? full_name_hash+0x8f/0xe0 [ 108.612646][ T4931] tomoyo_path2_perm+0x3a6/0xb00 [ 108.617570][ T4931] ? tomoyo_check_mkdev_acl+0x480/0x480 [ 108.623100][ T4931] ? __lock_acquire+0x1ff0/0x1ff0 [ 108.628119][ T4931] ? do_raw_spin_lock+0x14a/0x370 [ 108.633135][ T4931] ? d_splice_alias+0x10f/0x330 [ 108.637963][ T4931] ? udf_lookup+0x2b8/0x370 [ 108.642450][ T4931] ? d_alloc+0x194/0x1d0 [ 108.646708][ T4931] tomoyo_path_rename+0x148/0x190 [ 108.651730][ T4931] ? tomoyo_path_link+0x170/0x170 [ 108.656747][ T4931] ? hook_path_rename+0x109/0x340 [ 108.661758][ T4931] security_path_rename+0x1f7/0x2a0 [ 108.666939][ T4931] do_renameat2+0x9b6/0x1700 [ 108.671529][ T4931] ? fsnotify_move+0x4f0/0x4f0 [ 108.676276][ T4931] ? __virt_addr_valid+0x3bb/0x460 [ 108.681372][ T4931] ? __phys_addr_symbol+0x2b/0x70 [ 108.686392][ T4931] ? 0xffffffff81000000 [ 108.690547][ T4931] ? getname_flags+0x1ec/0x4e0 [ 108.695322][ T4931] __x64_sys_renameat2+0xce/0xe0 [ 108.700266][ T4931] do_syscall_64+0x3b/0xb0 [ 108.704666][ T4931] ? clear_bhb_loop+0x15/0x70 [ 108.709329][ T4931] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 108.715207][ T4931] RIP: 0033:0x7f65ab5bc3b9 [ 108.719612][ T4931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.739196][ T4931] RSP: 002b:00007f65a9a3b048 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 108.740742][ T1077] Bluetooth: hci1: command 0x040f tx timeout [ 108.747593][ T4931] RAX: ffffffffffffffda RBX: 00007f65ab74af80 RCX: 00007f65ab5bc3b9 [ 108.747637][ T4931] RDX: ffffffffffffff9c RSI: 0000000020000b80 RDI: ffffffffffffff9c [ 108.769502][ T4931] RBP: 00007f65a9a3b0a0 R08: 0000000000000000 R09: 0000000000000000 [ 108.777456][ T4931] R10: 0000000020000bc0 R11: 0000000000000246 R12: 0000000000000001 [ 108.785408][ T4931] R13: 000000000000000b R14: 00007f65ab74af80 R15: 00007ffd7fd1d718 [ 108.793384][ T4931] [ 109.028362][ T3571] usb 3-1: USB disconnect, device number 5 [ 109.120908][ T4931] ERROR: Out of memory at tomoyo_realpath_from_path. [ 109.190449][ T4937] FAULT_INJECTION: forcing a failure. [ 109.190449][ T4937] name failslab, interval 1, probability 0, space 0, times 0 [ 109.210622][ T4937] CPU: 0 PID: 4937 Comm: syz.2.249 Not tainted 5.15.164-syzkaller #0 [ 109.218722][ T4937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 109.228760][ T4937] Call Trace: [ 109.232022][ T4937] [ 109.234933][ T4937] dump_stack_lvl+0x1e3/0x2d0 [ 109.239614][ T4937] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 109.245245][ T4937] ? panic+0x860/0x860 [ 109.249301][ T4937] ? __lock_acquire+0x1295/0x1ff0 [ 109.254330][ T4937] should_fail+0x38a/0x4c0 [ 109.258747][ T4937] should_failslab+0x5/0x20 [ 109.263238][ T4937] slab_pre_alloc_hook+0x53/0xc0 [ 109.268159][ T4937] ? skb_clone+0x1bb/0x350 [ 109.272559][ T4937] kmem_cache_alloc+0x3f/0x280 [ 109.277314][ T4937] skb_clone+0x1bb/0x350 [ 109.281541][ T4937] __netlink_deliver_tap+0x375/0x760 [ 109.286817][ T4937] netlink_deliver_tap+0x16c/0x180 [ 109.291912][ T4937] netlink_unicast+0x788/0x980 [ 109.296662][ T4937] ? netlink_detachskb+0x90/0x90 [ 109.301760][ T4937] ? __virt_addr_valid+0x3bb/0x460 [ 109.306853][ T4937] ? 0xffffffff81000000 [ 109.310992][ T4937] ? __check_object_size+0x300/0x410 [ 109.316262][ T4937] ? bpf_lsm_netlink_send+0x5/0x10 [ 109.321355][ T4937] netlink_sendmsg+0xa30/0xd60 [ 109.326110][ T4937] ? netlink_getsockopt+0x5b0/0x5b0 [ 109.331291][ T4937] ? aa_sock_msg_perm+0x91/0x150 [ 109.336210][ T4937] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 109.341474][ T4937] ? security_socket_sendmsg+0x7d/0xa0 [ 109.346911][ T4937] ? netlink_getsockopt+0x5b0/0x5b0 [ 109.352089][ T4937] ____sys_sendmsg+0x59e/0x8f0 [ 109.356836][ T4937] ? iovec_from_user+0x300/0x390 [ 109.361761][ T4937] ? __sys_sendmsg_sock+0x30/0x30 [ 109.366791][ T4937] ___sys_sendmsg+0x252/0x2e0 [ 109.371457][ T4937] ? __sys_sendmsg+0x260/0x260 [ 109.376230][ T4937] ? __fdget+0x191/0x220 [ 109.380453][ T4937] __se_sys_sendmsg+0x19a/0x260 [ 109.385287][ T4937] ? __x64_sys_sendmsg+0x80/0x80 [ 109.390213][ T4937] ? syscall_enter_from_user_mode+0x2e/0x240 [ 109.396176][ T4937] ? lockdep_hardirqs_on+0x94/0x130 [ 109.401354][ T4937] ? syscall_enter_from_user_mode+0x2e/0x240 [ 109.407316][ T4937] do_syscall_64+0x3b/0xb0 [ 109.411712][ T4937] ? clear_bhb_loop+0x15/0x70 [ 109.416372][ T4937] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 109.422243][ T4937] RIP: 0033:0x7f8ed447a3b9 [ 109.426639][ T4937] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.446231][ T4937] RSP: 002b:00007f8ed28f9048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 109.454644][ T4937] RAX: ffffffffffffffda RBX: 00007f8ed4608f80 RCX: 00007f8ed447a3b9 [ 109.462598][ T4937] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000006 [ 109.470552][ T4937] RBP: 00007f8ed28f90a0 R08: 0000000000000000 R09: 0000000000000000 [ 109.478501][ T4937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.486450][ T4937] R13: 000000000000000b R14: 00007f8ed4608f80 R15: 00007fff0aa94e88 [ 109.494413][ T4937] [ 109.512881][ T3992] usb 5-1: USB disconnect, device number 7 [ 109.663964][ T4937] team0: Port device team_slave_0 removed [ 109.970771][ T3812] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.989436][ T3812] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.126648][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 110.479519][ T3812] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.574001][ T3812] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.601770][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 110.679212][ T3992] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 110.830880][ T3652] Bluetooth: hci1: command 0x0419 tx timeout [ 111.164408][ T1074] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 111.364220][ T1304] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 111.375076][ T3992] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.412680][ T3992] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.472788][ T3992] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 111.487030][ T3992] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 111.497259][ T3992] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.605260][ T3992] usb 5-1: config 0 descriptor?? [ 111.670701][ T1074] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.688020][ T1074] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.708529][ T1074] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 111.728623][ T1074] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 111.738116][ T1074] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.754344][ T1074] usb 1-1: config 0 descriptor?? [ 111.800708][ T1304] usb 3-1: config 0 has an invalid interface number: 154 but max is 0 [ 111.814977][ T1304] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 111.828289][ T1304] usb 3-1: config 0 has no interface number 0 [ 111.837285][ T1304] usb 3-1: New USB device found, idVendor=413c, idProduct=8196, bcdDevice=1f.e0 [ 111.850345][ T1304] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.863429][ T4942] udc-core: couldn't find an available UDC or it's busy [ 111.873747][ T4942] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 111.888904][ T1304] usb 3-1: config 0 descriptor?? [ 111.900737][ T3571] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 111.937952][ T1304] qmi_wwan 3-1:0.154: bogus CDC Union: master=0, slave=0 [ 112.012599][ T4963] udc-core: couldn't find an available UDC or it's busy [ 112.022882][ T4963] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 112.122777][ T3992] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 112.134955][ T3992] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 112.137255][ T4968] loop2: detected capacity change from 0 to 128 [ 112.149365][ T3992] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 112.175113][ T3571] usb 4-1: Using ep0 maxpacket: 16 [ 112.262644][ T1074] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 112.285348][ T4968] attempt to access beyond end of device [ 112.285348][ T4968] loop2: rw=0, want=6491538, limit=128 [ 112.287197][ T1074] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 112.298483][ T3571] usb 4-1: New USB device found, idVendor=2001, idProduct=4002, bcdDevice=df.bf [ 112.312545][ T1074] plantronics 0003:047F:FFFF.000C: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 112.329051][ T4968] Buffer I/O error on dev loop2, logical block 3245768, async page read [ 112.351010][ T3571] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.357609][ T4968] attempt to access beyond end of device [ 112.357609][ T4968] loop2: rw=0, want=17666808, limit=128 [ 112.382732][ T4968] Buffer I/O error on dev loop2, logical block 8833403, async page read [ 112.397165][ T4968] attempt to access beyond end of device [ 112.397165][ T4968] loop2: rw=0, want=26539620, limit=128 [ 112.402301][ T3571] usb 4-1: config 0 descriptor?? [ 112.408683][ T4968] Buffer I/O error on dev loop2, logical block 13269809, async page read [ 112.434653][ T4968] attempt to access beyond end of device [ 112.434653][ T4968] loop2: rw=0, want=16147214, limit=128 [ 112.473317][ T4968] Buffer I/O error on dev loop2, logical block 8073606, async page read [ 112.506952][ T4968] attempt to access beyond end of device [ 112.506952][ T4968] loop2: rw=0, want=6491544, limit=128 [ 112.540567][ T4968] Buffer I/O error on dev loop2, logical block 3245771, async page read [ 112.548989][ T4968] attempt to access beyond end of device [ 112.548989][ T4968] loop2: rw=0, want=17668344, limit=128 [ 112.586778][ T4968] Buffer I/O error on dev loop2, logical block 8834171, async page read [ 112.597089][ T4968] attempt to access beyond end of device [ 112.597089][ T4968] loop2: rw=0, want=26932836, limit=128 [ 112.609415][ T4968] Buffer I/O error on dev loop2, logical block 13466417, async page read [ 112.619757][ T4968] attempt to access beyond end of device [ 112.619757][ T4968] loop2: rw=0, want=16147214, limit=128 [ 112.634857][ T4968] Buffer I/O error on dev loop2, logical block 8073606, async page read [ 112.648296][ T4968] attempt to access beyond end of device [ 112.648296][ T4968] loop2: rw=0, want=6491550, limit=128 [ 112.664489][ T4968] Buffer I/O error on dev loop2, logical block 3245774, async page read [ 112.674537][ T4968] attempt to access beyond end of device [ 112.674537][ T4968] loop2: rw=0, want=17669880, limit=128 [ 112.692888][ T4968] Buffer I/O error on dev loop2, logical block 8834939, async page read [ 113.480760][ T4942] usb 5-1: string descriptor 0 read error: -71 [ 113.532453][ T3992] usb 1-1: USB disconnect, device number 10 [ 113.610660][ T1074] usb 5-1: reset high-speed USB device number 8 using dummy_hcd [ 113.877170][ T4991] loop4: detected capacity change from 0 to 8192 [ 113.995348][ T4991] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 114.039512][ T4991] REISERFS (device loop4): using ordered data mode [ 114.080621][ T4991] reiserfs: using flush barriers [ 114.114986][ T4991] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 114.181890][ T4448] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 114.196401][ T4991] REISERFS (device loop4): checking transaction log (loop4) [ 114.242224][ T4991] REISERFS (device loop4): Using r5 hash to sort names [ 114.254690][ T4991] REISERFS (device loop4): using 3.5.x disk format [ 114.270879][ T4991] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 114.360162][ T5002] process 'syz.0.265' launched './file1' with NULL argv: empty string added [ 114.440558][ T4448] usb 2-1: Using ep0 maxpacket: 16 [ 114.467383][ T5003] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 4 0(1) DIR], item_len 35, item_location 3657, free_space(entry_count) 2 [ 114.485296][ T7] usb 5-1: USB disconnect, device number 8 [ 114.525831][ T5003] REISERFS error (device loop4): vs-5150 search_by_key: invalid format found in block 532. Fsck? [ 114.560712][ T4448] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.627651][ T5003] REISERFS (device loop4): Remounting filesystem read-only [ 114.770945][ T4448] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79 [ 114.818110][ T4448] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.943395][ T4448] usb 2-1: Product: syz [ 114.995891][ T4448] usb 2-1: Manufacturer: syz [ 115.058768][ T4448] usb 2-1: SerialNumber: syz [ 115.202711][ T4448] usb 2-1: config 0 descriptor?? [ 115.553869][ T4448] usb 2-1: Not enough endpoints found in device, aborting! [ 115.779114][ T26] usb 2-1: USB disconnect, device number 7 [ 115.830570][ T3313] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 116.046012][ T3571] pegasus 4-1:0.0: can't locate MII phy, using default [ 116.095691][ T3571] pegasus 4-1:0.0: eth1, D-Link DSB-650TX, ee:a1:de:0d:dc:33 [ 116.112653][ T3571] usb 4-1: USB disconnect, device number 6 [ 116.226202][ T3313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.260633][ T3313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.271545][ T3313] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 116.310579][ T3313] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 116.319637][ T3313] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.360261][ T3313] usb 1-1: config 0 descriptor?? [ 116.692507][ T5018] udc-core: couldn't find an available UDC or it's busy [ 116.830004][ T5018] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 117.031211][ T1304] usb 3-1: string descriptor 0 read error: -32 [ 117.045433][ T1304] qmi_wwan: probe of 3-1:0.154 failed with error -22 [ 117.322298][ T3313] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 117.330136][ T3313] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 117.372113][ T3313] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 117.752737][ T1304] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 117.784930][ T5029] loop3: detected capacity change from 0 to 32768 [ 117.892520][ T5029] syz.3.273 uses obsolete (PF_INET,SOCK_PACKET) [ 117.926402][ T5029] capability: warning: `syz.3.273' uses deprecated v2 capabilities in a way that may be insecure [ 117.973426][ T25] audit: type=1804 audit(1722586834.496:54): pid=5029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.273" name="/newroot/3/bus/bus" dev="loop3" ino=7 res=1 errno=0 [ 118.050675][ T25] audit: type=1800 audit(1722586834.496:55): pid=5029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.273" name="bus" dev="loop3" ino=7 res=0 errno=0 [ 118.130858][ T1304] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.147494][ T1304] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.168472][ T1304] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 118.195845][ T1304] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 118.215071][ T1304] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.242978][ T1304] usb 2-1: config 0 descriptor?? [ 118.497261][ T5031] udc-core: couldn't find an available UDC or it's busy [ 118.520785][ T5031] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 118.641371][ T5018] usb 1-1: string descriptor 0 read error: -2 [ 118.772332][ T1304] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 118.801123][ T1304] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving [ 118.805858][ T5038] loop3: detected capacity change from 0 to 256 [ 118.821691][ T1304] plantronics 0003:047F:FFFF.000E: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 118.862444][ T5038] FAT-fs (loop3): Unrecognized mount option "iocqarset=cp861" or missing value [ 119.058116][ T3571] usb 2-1: USB disconnect, device number 8 [ 119.245952][ T5042] loop0: detected capacity change from 0 to 1024 [ 119.461607][ T7] usb 1-1: USB disconnect, device number 11 [ 119.741011][ T5053] binder: 5052:5053 ioctl c0306201 20000580 returned -14 [ 119.879017][ T5056] loop3: detected capacity change from 0 to 8192 [ 120.908884][ T5056] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 120.975673][ T5056] REISERFS (device loop3): using ordered data mode [ 121.012961][ T5056] reiserfs: using flush barriers [ 121.060813][ T5056] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 121.128876][ T5056] REISERFS (device loop3): checking transaction log (loop3) [ 121.161650][ T5056] REISERFS (device loop3): Using r5 hash to sort names [ 121.168865][ T5056] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 121.355885][ T5075] netlink: 44 bytes leftover after parsing attributes in process `syz.1.288'. [ 121.454746][ T5073] FAULT_INJECTION: forcing a failure. [ 121.454746][ T5073] name failslab, interval 1, probability 0, space 0, times 0 [ 121.520662][ T5073] CPU: 1 PID: 5073 Comm: syz.0.287 Not tainted 5.15.164-syzkaller #0 [ 121.528768][ T5073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 121.538820][ T5073] Call Trace: [ 121.542092][ T5073] [ 121.545010][ T5073] dump_stack_lvl+0x1e3/0x2d0 [ 121.549690][ T5073] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 121.555317][ T5073] ? panic+0x860/0x860 [ 121.559383][ T5073] ? __might_sleep+0xc0/0xc0 [ 121.563972][ T5073] should_fail+0x38a/0x4c0 [ 121.568386][ T5073] should_failslab+0x5/0x20 [ 121.572880][ T5073] slab_pre_alloc_hook+0x53/0xc0 [ 121.577816][ T5073] __kmalloc+0x6e/0x300 [ 121.581964][ T5073] ? tomoyo_encode+0x26b/0x530 [ 121.586733][ T5073] tomoyo_encode+0x26b/0x530 [ 121.591337][ T5073] tomoyo_realpath_from_path+0x5a2/0x5e0 [ 121.596981][ T5073] tomoyo_path_number_perm+0x225/0x810 [ 121.602428][ T5073] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 121.607894][ T5073] ? __fget_files+0x413/0x480 [ 121.612560][ T5073] security_file_ioctl+0x6d/0xa0 [ 121.617482][ T5073] __se_sys_ioctl+0x47/0x160 [ 121.622056][ T5073] do_syscall_64+0x3b/0xb0 [ 121.626450][ T5073] ? clear_bhb_loop+0x15/0x70 [ 121.631107][ T5073] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 121.636980][ T5073] RIP: 0033:0x7f10bb92e3b9 [ 121.641388][ T5073] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.660972][ T5073] RSP: 002b:00007f10b9dad048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 121.669366][ T5073] RAX: ffffffffffffffda RBX: 00007f10bbabcf80 RCX: 00007f10bb92e3b9 [ 121.677317][ T5073] RDX: 0000000020000080 RSI: 00000000c4c85513 RDI: 0000000000000004 [ 121.685266][ T5073] RBP: 00007f10b9dad0a0 R08: 0000000000000000 R09: 0000000000000000 [ 121.693214][ T5073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.701192][ T5073] R13: 000000000000000b R14: 00007f10bbabcf80 R15: 00007ffca148cb58 [ 121.709152][ T5073] [ 121.766733][ T5073] ERROR: Out of memory at tomoyo_realpath_from_path. [ 121.774008][ T5056] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 4 0(1) DIR], item_len 35, item_location 2769, free_space(entry_count) 2 [ 121.820114][ T5056] REISERFS error (device loop3): vs-5150 search_by_key: invalid format found in block 548. Fsck? [ 121.850573][ T5056] REISERFS (device loop3): Remounting filesystem read-only [ 121.857820][ T5056] REISERFS error (device loop3): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 4 0x0 SD] stat data [ 121.908997][ T5056] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 4 0(1) DIR], item_len 35, item_location 2769, free_space(entry_count) 2 [ 121.949838][ T5056] REISERFS error (device loop3): vs-5150 search_by_key: invalid format found in block 548. Fsck? [ 121.995779][ T5077] chnl_net:caif_netlink_parms(): no params data found [ 122.040774][ T5056] REISERFS error (device loop3): zam-7001 reiserfs_find_entry: io error [ 122.126342][ T5083] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 4 0(1) DIR], item_len 35, item_location 2769, free_space(entry_count) 2 [ 122.155722][ T5083] REISERFS error (device loop3): vs-5150 search_by_key: invalid format found in block 548. Fsck? [ 122.177460][ T5083] REISERFS error (device loop3): zam-7001 reiserfs_find_entry: io error [ 122.220625][ T3652] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 122.238851][ T5077] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.258891][ T5077] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.267287][ T5077] device bridge_slave_0 entered promiscuous mode [ 122.275924][ T5077] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.283504][ T5077] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.291651][ T5077] device bridge_slave_1 entered promiscuous mode [ 122.374351][ T5077] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.401800][ T5077] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.420780][ T4835] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 122.483468][ T5100] netlink: 'syz.3.294': attribute type 13 has an invalid length. [ 122.498375][ T5100] macvtap0: refused to change device tx_queue_len [ 122.508402][ T5077] team0: Port device team_slave_0 added [ 122.544173][ T5077] team0: Port device team_slave_1 added [ 122.624479][ T5077] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.640626][ T5077] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.646533][ T3652] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.690697][ T4835] usb 1-1: Using ep0 maxpacket: 16 [ 122.885467][ T5077] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.950935][ T4835] usb 1-1: config index 0 descriptor too short (expected 65535, got 36) [ 123.011765][ T4835] usb 1-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 123.101424][ T5077] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.148655][ T4835] usb 1-1: config 255 has an invalid descriptor of length 32, skipping remainder of the config [ 123.195023][ T5077] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.300134][ T4835] usb 1-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 123.307257][ T3652] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.322122][ T3652] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 123.335503][ T3652] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 123.344673][ T3652] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.350630][ T4835] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 123.355549][ T5077] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.373387][ T3652] usb 2-1: config 0 descriptor?? [ 123.406845][ T4835] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.499689][ T5077] device hsr_slave_0 entered promiscuous mode [ 123.517051][ T5077] device hsr_slave_1 entered promiscuous mode [ 123.537165][ T5077] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 123.546802][ T5077] Cannot create hsr debugfs directory [ 123.622179][ T5081] udc-core: couldn't find an available UDC or it's busy [ 123.643433][ T5081] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 123.753821][ T5077] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.767079][ T3571] Bluetooth: hci5: command 0x0409 tx timeout [ 123.780893][ T4835] usb 1-1: string descriptor 0 read error: -71 [ 123.802876][ T4835] usb 1-1: USB disconnect, device number 12 [ 123.880310][ T5077] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.891059][ T26] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 123.922640][ T3652] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 123.941078][ T3652] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving [ 123.977647][ T5077] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.988940][ T3652] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 124.102934][ T5077] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.216116][ T4835] usb 2-1: USB disconnect, device number 9 [ 124.298969][ T5077] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 124.320890][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.334045][ T5077] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 124.350617][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.370614][ T26] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 124.393766][ T26] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 124.414008][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.434808][ T5077] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 124.449789][ T26] usb 4-1: config 0 descriptor?? [ 124.467637][ T5077] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 124.576043][ T4448] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 124.633407][ T5077] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.663838][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 124.672214][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 124.683552][ T5077] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.697766][ T5108] udc-core: couldn't find an available UDC or it's busy [ 124.715753][ T5108] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 124.721535][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 124.741540][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 124.760217][ T3571] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.767351][ T3571] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.780609][ T4448] usb 1-1: device descriptor read/64, error -71 [ 124.810866][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 124.819658][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 124.841759][ T3571] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.848833][ T3571] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.051570][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 125.062762][ T26] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 125.820501][ C0] sched: RT throttling activated [ 125.878908][ T26] plantronics 0003:047F:FFFF.0010: No inputs registered, leaving [ 126.009991][ T5077] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 126.033559][ T1077] Bluetooth: hci5: command 0x041b tx timeout [ 126.054126][ T26] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 126.120340][ T26] usb 4-1: USB disconnect, device number 7 [ 126.150645][ T5077] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 126.229805][ T3313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 126.248212][ T3313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 126.260583][ T4448] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 126.264284][ T3313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 126.296837][ T3313] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 126.306388][ T3313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 126.320972][ T3313] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 126.329503][ T3313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 126.339108][ T3313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 126.348142][ T3313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 126.359122][ T3313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 126.420872][ T1077] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 126.428786][ T1077] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 126.450819][ T4448] usb 1-1: device descriptor read/64, error -71 [ 126.575162][ T5124] netlink: 830 bytes leftover after parsing attributes in process `syz.3.302'. [ 126.590921][ T4448] usb usb1-port1: attempt power cycle [ 126.668397][ T154] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.730930][ T154] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.788837][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 126.788975][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 126.792532][ T5077] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.800029][ T154] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.926122][ T1077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 126.926678][ T1077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 126.932402][ T154] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.937068][ T5119] chnl_net:caif_netlink_parms(): no params data found [ 126.953150][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 126.953772][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 126.954390][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 126.954824][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 126.966237][ T5077] device veth0_vlan entered promiscuous mode [ 127.002223][ T4448] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 127.011129][ T5077] device veth1_vlan entered promiscuous mode [ 127.098533][ T4448] usb 1-1: device descriptor read/8, error -71 [ 127.179178][ T5077] device veth0_macvtap entered promiscuous mode [ 127.180619][ T3313] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 127.181147][ T3313] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 127.181655][ T3313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 127.182158][ T3313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 127.182854][ T3313] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 127.186408][ T5077] device veth1_macvtap entered promiscuous mode [ 127.208388][ T5119] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.208427][ T5119] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.209377][ T5119] device bridge_slave_0 entered promiscuous mode [ 127.212664][ T5119] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.212720][ T5119] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.213623][ T5119] device bridge_slave_1 entered promiscuous mode [ 127.216392][ T5077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.216412][ T5077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.216422][ T5077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.216435][ T5077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.216445][ T5077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.216458][ T5077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.216467][ T5077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.216478][ T5077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.216488][ T5077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.216500][ T5077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.217646][ T5077] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.219964][ T5077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.219984][ T5077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.219994][ T5077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.220006][ T5077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.220017][ T5077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.220029][ T5077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.220039][ T5077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.220051][ T5077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.220061][ T5077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.220073][ T5077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.231665][ T5077] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.242388][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 127.243021][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 127.243594][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 127.244140][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 127.244658][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 127.293582][ T5077] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.293619][ T5077] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.293646][ T5077] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.293672][ T5077] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.360805][ T4448] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 127.578348][ T5142] 9pnet: Insufficient options for proto=fd [ 127.732126][ T5145] 9pnet: Insufficient options for proto=fd [ 127.774697][ T5119] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 127.873421][ T5119] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 128.091939][ T26] Bluetooth: hci5: command 0x040f tx timeout [ 128.127565][ T5119] team0: Port device team_slave_0 added [ 128.159192][ T4192] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.231235][ T4192] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.252293][ T5119] team0: Port device team_slave_1 added [ 128.330773][ T3571] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 128.338487][ T3313] Bluetooth: hci3: command 0x0409 tx timeout [ 128.356656][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 128.391403][ T4192] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.433032][ T5119] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 128.440007][ T5119] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.481369][ T4192] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.643503][ T5119] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 128.750897][ T3571] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.802912][ T3571] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 128.887265][ T3571] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 128.950601][ T3571] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.001145][ T3571] usb 4-1: config 0 descriptor?? [ 129.195229][ T4448] usb 1-1: device not accepting address 16, error -71 [ 129.232894][ T4448] usb usb1-port1: unable to enumerate USB device [ 129.726824][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 129.737550][ T5119] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 129.771895][ T5119] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.815079][ T5119] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 129.892897][ T3571] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving [ 129.913259][ T3571] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 130.029020][ T5119] device hsr_slave_0 entered promiscuous mode [ 130.044555][ T5119] device hsr_slave_1 entered promiscuous mode [ 130.054108][ T5119] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 130.063551][ T5119] Cannot create hsr debugfs directory [ 130.095007][ T3571] usb 4-1: USB disconnect, device number 8 [ 130.101047][ T21] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 130.155724][ T3587] Bluetooth: hci5: ACL packet for unknown connection handle 0 [ 130.166070][ T1077] Bluetooth: hci5: command 0x0419 tx timeout [ 130.316893][ T5179] udc-core: couldn't find an available UDC or it's busy [ 130.324082][ T5179] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 130.401393][ T3571] Bluetooth: hci3: command 0x041b tx timeout [ 130.521566][ T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.624171][ T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.865573][ T21] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 130.973663][ T21] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 130.983315][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.007018][ T21] usb 1-1: config 0 descriptor?? [ 131.035226][ T5187] netlink: 12 bytes leftover after parsing attributes in process `syz.1.310'. [ 131.254225][ T5169] udc-core: couldn't find an available UDC or it's busy [ 131.290177][ T5169] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 131.298255][ T3571] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 131.493410][ T154] device hsr_slave_0 left promiscuous mode [ 131.507880][ T154] device hsr_slave_1 left promiscuous mode [ 131.529618][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.541273][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.559393][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.560596][ T3571] usb 4-1: Using ep0 maxpacket: 16 [ 131.572286][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.576138][ T21] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 131.590701][ T154] device bridge_slave_1 left promiscuous mode [ 131.596920][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.599794][ T21] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving [ 131.622870][ T154] device bridge_slave_0 left promiscuous mode [ 131.642543][ T21] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 131.642783][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.718420][ T154] device veth1_macvtap left promiscuous mode [ 131.731103][ T3571] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 131.744793][ T154] device veth0_macvtap left promiscuous mode [ 131.746504][ T3571] usb 4-1: config 0 has no interfaces? [ 131.765351][ T154] device veth1_vlan left promiscuous mode [ 131.785001][ T154] device veth0_vlan left promiscuous mode [ 131.854952][ T21] usb 1-1: USB disconnect, device number 17 [ 131.927555][ T5201] loop1: detected capacity change from 0 to 32768 [ 131.950779][ T3571] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79 [ 131.966451][ T3571] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.009291][ T3571] usb 4-1: Product: syz [ 132.014905][ T5200] ERROR: (device loop1): dbAlloc: the hint is outside the map [ 132.014905][ T5200] [ 132.024465][ T3571] usb 4-1: Manufacturer: syz [ 132.039909][ T3571] usb 4-1: SerialNumber: syz [ 132.065999][ T3571] usb 4-1: config 0 descriptor?? [ 132.185623][ T154] team0 (unregistering): Port device team_slave_1 removed [ 132.210298][ T154] team0 (unregistering): Port device team_slave_0 removed [ 132.234706][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 132.258957][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 132.402922][ T154] bond0 (unregistering): Released all slaves [ 132.448002][ T5205] 9pnet: Insufficient options for proto=fd [ 132.455648][ T5205] 9pnet: Insufficient options for proto=fd [ 132.482201][ T3313] Bluetooth: hci3: command 0x040f tx timeout [ 132.489223][ T1210] read_mapping_page failed! [ 132.494324][ T1210] ERROR: (device loop1): txCommit: [ 132.494324][ T1210] [ 132.525502][ T1210] jfs_write_inode: jfs_commit_inode failed! [ 132.585949][ T5119] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 132.644700][ T5119] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 132.690996][ T5119] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 132.724327][ T1391] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.731814][ T1391] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.773037][ T5119] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 132.948598][ T5211] loop0: detected capacity change from 0 to 8192 [ 133.419462][ T5211] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 133.564923][ T5211] REISERFS (device loop0): using ordered data mode [ 133.593273][ T5119] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.760732][ T5211] reiserfs: using flush barriers [ 133.766824][ T5211] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 133.793963][ T5211] REISERFS (device loop0): checking transaction log (loop0) [ 133.837605][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 133.851578][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 133.872748][ T5119] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.894048][ T5211] REISERFS (device loop0): Using r5 hash to sort names [ 133.911813][ T5228] loop1: detected capacity change from 0 to 512 [ 133.927231][ T5211] REISERFS (device loop0): using 3.5.x disk format [ 133.937356][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 133.950856][ T5211] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 133.975912][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 134.012276][ T3571] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.019364][ T3571] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.024947][ T5228] EXT4-fs (loop1): Invalid journal IO priority (must be 0-7) [ 134.216263][ T3313] usb 4-1: USB disconnect, device number 9 [ 134.224656][ T1077] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 134.233172][ T1077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 134.241892][ T1077] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 134.244322][ T5211] overlayfs: upper fs needs to support d_type. [ 134.250938][ T1077] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.263986][ T1077] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.277466][ T5234] loop3: detected capacity change from 0 to 256 [ 134.426923][ T1077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 134.823133][ T5239] overlayfs: upper fs needs to support d_type. [ 134.831165][ T1077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 134.908511][ T5211] overlayfs: upper fs does not support tmpfile. [ 134.910109][ T1077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 134.924326][ T5228] loop1: detected capacity change from 0 to 8 [ 134.931591][ T5239] overlayfs: upper fs does not support tmpfile. [ 134.956125][ T5211] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 134.973285][ T1077] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 135.019882][ T5239] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 135.027981][ T1077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 135.057286][ T1077] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 135.093319][ T5228] SQUASHFS error: zlib decompression failed, data probably corrupt [ 135.101369][ T5228] SQUASHFS error: Failed to read block 0x9b: -5 [ 135.108162][ T5228] SQUASHFS error: Unable to read metadata cache entry [99] [ 135.110898][ T5239] overlayfs: failed to set xattr on upper [ 135.115416][ T5228] SQUASHFS error: Unable to read inode 0x127 [ 135.137161][ T5211] overlayfs: failed to set xattr on upper [ 135.148711][ T1077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 135.171638][ T1077] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 135.190566][ T5211] overlayfs: ...falling back to index=off,metacopy=off. [ 135.204334][ T5239] overlayfs: ...falling back to index=off,metacopy=off. [ 135.204787][ T5119] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 135.236673][ T3652] Bluetooth: hci3: command 0x0419 tx timeout [ 135.328995][ T5119] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 135.371580][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 135.379761][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 135.421409][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 135.543701][ T5259] 9pnet: Insufficient options for proto=fd [ 135.577273][ T5259] 9pnet: Insufficient options for proto=fd [ 135.640869][ T3619] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 135.852081][ T5270] loop3: detected capacity change from 0 to 512 [ 135.917192][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 135.955165][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 135.991390][ T5119] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.017786][ T5270] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 136.041200][ T5270] ext4 filesystem being mounted at /19/bus supports timestamps until 2038 (0x7fffffff) [ 136.051102][ T3619] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.089319][ T3619] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.175565][ T3619] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 136.234611][ T3619] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 136.274648][ T3619] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.342348][ T3619] usb 2-1: config 0 descriptor?? [ 136.444551][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 136.457986][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 136.726850][ T5250] udc-core: couldn't find an available UDC or it's busy [ 137.336015][ T5250] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 137.376510][ T5119] device veth0_vlan entered promiscuous mode [ 137.462670][ T5119] device veth1_vlan entered promiscuous mode [ 137.552188][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 137.587076][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 137.622399][ T3619] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 137.639504][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 137.641785][ T3619] plantronics 0003:047F:FFFF.0013: No inputs registered, leaving [ 137.680111][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 137.701205][ T3619] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 137.708495][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 137.906236][ T3614] usb 1-1: [UEAGLE-ATM] firmware is not available [ 137.913223][ T3617] usb 1-1: [UEAGLE-ATM] firmware is not available [ 137.922233][ T3615] ------------[ cut here ]------------ [ 137.941656][ T4393] usb 1-1: [UEAGLE-ATM] firmware is not available [ 137.942707][ T13] usb 1-1: [UEAGLE-ATM] firmware is not available [ 137.955244][ T3615] sysfs group 'power' not found for kobject 'ueagle-atm!adi930.fw' [ 137.956931][ T3991] usb 1-1: [UEAGLE-ATM] firmware is not available [ 138.143451][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 138.204550][ T3615] WARNING: CPU: 1 PID: 3615 at fs/sysfs/group.c:281 sysfs_remove_group+0x179/0x2a0 [ 138.515180][ T3615] Modules linked in: [ 138.543716][ T3615] CPU: 1 PID: 3615 Comm: kworker/1:6 Not tainted 5.15.164-syzkaller #0 [ 138.598159][ T5119] device veth0_macvtap entered promiscuous mode [ 138.624133][ T3615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 138.656208][ T5119] device veth1_macvtap entered promiscuous mode [ 138.668259][ T3615] Workqueue: events request_firmware_work_func [ 138.691508][ T3615] RIP: 0010:sysfs_remove_group+0x179/0x2a0 [ 138.710672][ T3615] Code: 8b 36 4c 89 e0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 e7 e8 2a b1 cc ff 49 8b 14 24 48 c7 c7 c0 bc 99 8a 4c 89 f6 e8 c7 7f 4e ff <0f> 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 21 dd 82 ff [ 138.728127][ T5119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.767512][ T5119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.795254][ T3615] RSP: 0018:ffffc90002f67940 EFLAGS: 00010246 [ 138.813759][ T5119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.819270][ T3615] RAX: b9b93e55bb68e500 RBX: ffff88807826d038 RCX: ffff88801fffd940 [ 138.846946][ T5119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.858866][ T3615] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 138.867153][ T5119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.883523][ T3615] RBP: dffffc0000000000 R08: ffffffff8166892c R09: ffffed10173667a8 [ 138.907303][ T5119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.909719][ T3615] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88807826d008 [ 138.929739][ T5119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.959223][ T5119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.960517][ T3615] R13: 1ffffffff15f5e9c R14: ffffffff8afaf4c0 R15: ffff888062e11e80 [ 138.986709][ T5119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.018216][ T5119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.020522][ T3615] FS: 0000000000000000(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 [ 139.055565][ T5119] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.060531][ T3615] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 139.069364][ T3615] CR2: 00007f2919d6f2d8 CR3: 000000005c7c8000 CR4: 00000000003506e0 [ 139.088749][ T5119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.122959][ T3615] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 139.131902][ T5119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.140528][ T3615] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 139.149939][ T3615] Call Trace: [ 139.157125][ T5119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.160978][ T3615] [ 139.170466][ T3615] ? __warn+0x15b/0x300 [ 139.187483][ T5119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.204013][ T5119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.220589][ T3615] ? sysfs_remove_group+0x179/0x2a0 [ 139.225822][ T3615] ? report_bug+0x1b7/0x2e0 [ 139.230339][ T3615] ? handle_bug+0x3d/0x70 [ 139.236610][ T5119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.260534][ T3615] ? exc_invalid_op+0x16/0x40 [ 139.265261][ T3615] ? asm_exc_invalid_op+0x16/0x20 [ 139.265766][ T5119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.270304][ T3615] ? __wake_up_klogd+0xcc/0x100 [ 139.270330][ T3615] ? sysfs_remove_group+0x179/0x2a0 [ 139.311058][ T5119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.339913][ T5119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.360579][ T3615] ? sysfs_unmerge_group+0x108/0x130 [ 139.365922][ T3615] device_del+0x2f1/0xbd0 [ 139.368467][ T5119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.370265][ T3615] ? kill_device+0x160/0x160 [ 139.408349][ T5119] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.439072][ T5119] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.440530][ T3615] ? swake_up_all_locked+0x95/0x170 [ 139.465913][ T5119] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.470533][ T3615] firmware_fallback_sysfs+0x9ab/0xc90 [ 139.480085][ T3615] _request_firmware+0xbb1/0x1200 [ 139.495941][ T5119] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.509199][ T3615] request_firmware_work_func+0x126/0x270 [ 139.517101][ T5119] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.535976][ T3615] ? request_firmware_nowait+0x450/0x450 [ 139.550516][ T3615] ? do_raw_spin_unlock+0x137/0x8b0 [ 139.555839][ T3615] process_one_work+0x8a1/0x10c0 [ 139.570606][ T3615] ? worker_detach_from_pool+0x260/0x260 [ 139.596825][ T3615] ? _raw_spin_lock_irqsave+0x120/0x120 [ 139.618582][ T3615] ? kthread_data+0x4e/0xc0 [ 139.633324][ T3615] ? wq_worker_running+0x97/0x170 [ 139.649579][ T3615] worker_thread+0xaca/0x1280 [ 139.661234][ T3615] kthread+0x3f6/0x4f0 [ 139.669822][ T3615] ? rcu_lock_release+0x20/0x20 [ 139.676226][ T4192] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.696308][ T4192] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.709672][ T3615] ? kthread_blkcg+0xd0/0xd0 [ 139.721959][ T3615] ret_from_fork+0x1f/0x30 [ 139.734277][ T5311] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.756048][ T3615] [ 139.759128][ T3615] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 139.766407][ T3615] CPU: 1 PID: 3615 Comm: kworker/1:6 Not tainted 5.15.164-syzkaller #0 [ 139.771864][ T5311] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.774646][ T3615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 139.774661][ T3615] Workqueue: events request_firmware_work_func [ 139.798121][ T3615] Call Trace: [ 139.801408][ T3615] [ 139.804345][ T3615] dump_stack_lvl+0x1e3/0x2d0 [ 139.809034][ T3615] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 139.814678][ T3615] ? panic+0x860/0x860 [ 139.818766][ T3615] ? sysfs_remove_group+0x150/0x2a0 [ 139.823977][ T3615] ? sysfs_remove_group+0x150/0x2a0 [ 139.829189][ T3615] panic+0x318/0x860 [ 139.833106][ T3615] ? __warn+0x16a/0x300 [ 139.837266][ T3615] ? fb_is_primary_device+0xd0/0xd0 [ 139.842480][ T3615] ? ret_from_fork+0x1f/0x30 [ 139.847081][ T3615] ? sysfs_remove_group+0x179/0x2a0 [ 139.852284][ T3615] __warn+0x2b2/0x300 [ 139.856272][ T3615] ? sysfs_remove_group+0x179/0x2a0 [ 139.861471][ T3615] report_bug+0x1b7/0x2e0 [ 139.865815][ T3615] handle_bug+0x3d/0x70 [ 139.869973][ T3615] exc_invalid_op+0x16/0x40 [ 139.874477][ T3615] asm_exc_invalid_op+0x16/0x20 [ 139.879334][ T3615] RIP: 0010:sysfs_remove_group+0x179/0x2a0 [ 139.885145][ T3615] Code: 8b 36 4c 89 e0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 e7 e8 2a b1 cc ff 49 8b 14 24 48 c7 c7 c0 bc 99 8a 4c 89 f6 e8 c7 7f 4e ff <0f> 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 21 dd 82 ff [ 139.904781][ T3615] RSP: 0018:ffffc90002f67940 EFLAGS: 00010246 [ 139.910862][ T3615] RAX: b9b93e55bb68e500 RBX: ffff88807826d038 RCX: ffff88801fffd940 [ 139.918842][ T3615] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 139.926913][ T3615] RBP: dffffc0000000000 R08: ffffffff8166892c R09: ffffed10173667a8 [ 139.934901][ T3615] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88807826d008 [ 139.942883][ T3615] R13: 1ffffffff15f5e9c R14: ffffffff8afaf4c0 R15: ffff888062e11e80 [ 139.950872][ T3615] ? __wake_up_klogd+0xcc/0x100 [ 139.955835][ T3615] ? sysfs_unmerge_group+0x108/0x130 [ 139.961136][ T3615] device_del+0x2f1/0xbd0 [ 139.965491][ T3615] ? kill_device+0x160/0x160 [ 139.970091][ T3615] ? swake_up_all_locked+0x95/0x170 [ 139.975303][ T3615] firmware_fallback_sysfs+0x9ab/0xc90 [ 139.980789][ T3615] _request_firmware+0xbb1/0x1200 [ 139.985838][ T3615] request_firmware_work_func+0x126/0x270 [ 139.991582][ T3615] ? request_firmware_nowait+0x450/0x450 [ 139.997235][ T3615] ? do_raw_spin_unlock+0x137/0x8b0 [ 140.002454][ T3615] process_one_work+0x8a1/0x10c0 [ 140.007423][ T3615] ? worker_detach_from_pool+0x260/0x260 [ 140.013075][ T3615] ? _raw_spin_lock_irqsave+0x120/0x120 [ 140.018636][ T3615] ? kthread_data+0x4e/0xc0 [ 140.023150][ T3615] ? wq_worker_running+0x97/0x170 [ 140.028199][ T3615] worker_thread+0xaca/0x1280 [ 140.032915][ T3615] kthread+0x3f6/0x4f0 [ 140.036995][ T3615] ? rcu_lock_release+0x20/0x20 [ 140.041852][ T3615] ? kthread_blkcg+0xd0/0xd0 [ 140.046453][ T3615] ret_from_fork+0x1f/0x30 [ 140.050891][ T3615] [ 140.054111][ T3615] Kernel Offset: disabled [ 140.058863][ T3615] Rebooting in 86400 seconds..