last executing test programs: 15.544102405s ago: executing program 3 (id=106): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) quotactl_fd$Q_SYNC(r2, 0xffffffff80000100, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x40) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2, @in=@loopback}}, {{@in=@dev}}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="28000000020801020000000000000000010000051400048008000240000000bc0930ef986941e72b0a98f9a7c71590e8841860b9bebb0b41c677f629696faeaa4d4410d94662a8334dfb4dfedc150997c1daec078e898589964c0e12bf8ed1216463151c7f7547987f"], 0x28}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40000c1) openat(0xffffffffffffff9c, 0x0, 0x46200, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r4, 0x40045402, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000180)={{0x3, 0x1, 0xfe, 0x0, 0x1000}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCBRADDBR(r5, 0x89a0, &(0x7f0000000000)='bridge0\x00') mount(0x0, &(0x7f0000000100)='./sys\x00', 0x0, 0x0, 0x0) 9.382553264s ago: executing program 0 (id=123): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c00)=@filter={'filter\x00', 0xe, 0x4, 0x368, 0xffffffff, 0xf8, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2b0, 0x2b0, 0x2b0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ipv6header={{}, {0x9, 0xc1, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1c8}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@AUDIT}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@LOG={0x0, 'LOG\x00', 0x0, {0xf7, 0x0, "d100975bb89532d2d5cb43525b50e520cda9cd2249f70741246d1fe722b1"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0xfffffffffffffdab, '\x00', 0x0, 0xffffffff}}}}, 0xff12) socket$kcm(0x10, 0x2, 0x0) unshare(0x8040480) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e000000040000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184"], 0xfdef) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.swap.events\x00', 0x275a, 0x0) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x7fff, 0x0) sendfile(r3, r4, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e80)={0x0, 0x0}, &(0x7f0000000ec0)=0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001580)=ANY=[@ANYBLOB="2400000645350d0027bd7000fbdbdf250a3f20ab0202c8050070000008001900", @ANYRES32=r5, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4048005}, 0x10) getgid() r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x24000800) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="4000000003060300000000000000000001000007090002fc73797a3100000000050001000703"], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x28880) 9.010538252s ago: executing program 0 (id=125): setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000200)={0x40, 0x17, 0x1, "1f"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000bc0)={0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="e01506"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f00000010c0)={0x10, &(0x7f0000000300)={0x40, 0xa, 0x2, 'HT'}, 0x0, 0x0}) 8.25032277s ago: executing program 3 (id=127): unshare(0x28000600) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) dup2(r0, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) write(r1, &(0x7f0000000100)="5000000018000106010000000000000002180000fe04000100000000080001000a000300080004000100000006001500060000001c001600180001000800010004000000090002007465737400000000", 0x50) 8.067397068s ago: executing program 3 (id=129): ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000000c0)={'dt2801\x00', [0x300, 0xc0000000, 0x3, 0x1, 0x5cf874af, 0x4, 0xb, 0x6, 0xa0, 0x55, 0x5, 0xd, 0x1, 0xfffffffc, 0x10000b, 0x5, 0x5, 0x4007a, 0x3, 0x2000000, 0x89, 0x12, 0x7f, 0x0, 0x5, 0x18, 0x1, 0x2000008, 0xa6b3, 0x0, 0x7]}) 7.8305414s ago: executing program 3 (id=130): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000300)='./bus\x00', 0x2010414, &(0x7f0000000c00)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRESOCT, @ANYBLOB="b58208b37a58446284048f26b79953e521b27c3a5dbc8e7fcd644e2caaa1acc91237f4447b548c7caab7ede0f978d175cd8108db49a660493d3511a7f6d67dba109d4f769a1cddfc97c554c8d7c38ecae48c95955fb02bcd2da02935ab9658f576b9d2526dd40f73035883f2f7d388f9cb004bcef6c90d011afc4849d7d7ee3abdf4dfa36378701a61a8f83187960881d90cf42cae6384fa916f5df9e11d2546c01011f28c9be1a2a5aa2139ef29be6d87c8d93fce5239580e58fe24d4304f196fa0d43d7aeb4dc3da644ba32b1e61734c4211811d81d78f283d637a78b107898d59c7048fa04ea6e0ebe491f42f2f32bd531eeb8e2659d2", @ANYRESHEX, @ANYRES64], 0x1, 0x2d3, &(0x7f00000010c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0xffffffffffffffe2, &(0x7f00000002c0)=0x20000002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket(0xa, 0x3, 0x87) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x18, r3}) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x8936, &(0x7f0000000000)) 7.196789741s ago: executing program 1 (id=131): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c75650063"], 0x0, 0x8e}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="bfa200000000000007020000fcffffff620200000000000018110000", @ANYRES32=r1, @ANYBLOB="000000000000000085000000010000001500070000000000bf06000000000000bf610000000000000701000004000000850000005d000000bf610000000000000701000004000000850000005e000000b70000000000000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000002000)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7.171582752s ago: executing program 3 (id=132): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000100000)=""/8192, 0x2000, 0x800, 0x0, 0x1}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x2, r2, 0x0, 0x0}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x80000000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68) r3 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x5, 0x1a4}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r3, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_io_uring_setup(0x867, &(0x7f0000000140)={0x0, 0x27f5, 0x4, 0x1, 0x35d}, 0x0, 0x0, 0x0) 7.030541218s ago: executing program 1 (id=133): r0 = socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0x609, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88aefe86, 0x40000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x50}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0xffe4) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003601008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r7], 0x5c}}, 0x40) 6.903094405s ago: executing program 3 (id=135): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) quotactl_fd$Q_SYNC(r2, 0xffffffff80000100, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x40) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2, @in=@loopback}}, {{@in=@dev}}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="28000000020801020000000000000000010000051400048008000240000000bc0930ef986941e72b0a98f9a7c71590e8841860b9bebb0b41c677f629696faeaa4d4410d94662a8334dfb4dfedc150997c1daec078e898589964c0e12bf8ed1216463151c7f7547987f"], 0x28}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40000c1) openat(0xffffffffffffff9c, 0x0, 0x46200, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r4, 0x40045402, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000180)={{0x3, 0x1, 0xfe, 0x0, 0x1000}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCBRADDBR(r5, 0x89a0, &(0x7f0000000000)='bridge0\x00') mount(0x0, &(0x7f0000000100)='./sys\x00', 0x0, 0x0, 0x0) 6.350538582s ago: executing program 0 (id=136): r0 = io_uring_setup(0x664b, &(0x7f0000000500)) creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x8400, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) lsetxattr$security_capability(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380), 0x0, 0x0, 0x2) read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x228000, 0x0, 0x9, 0x8}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000041c0)="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", 0x2000, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f000000a3c0)="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", 0x2000, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 6.238523107s ago: executing program 1 (id=138): mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000000002}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r6, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) 5.239731656s ago: executing program 0 (id=140): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x2, 0x300}, {0x6e}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.407511286s ago: executing program 2 (id=141): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c75650063"], 0x0, 0x8e}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="bfa200000000000007020000fcffffff620200000000000018110000", @ANYRES32=r1, @ANYBLOB="000000000000000085000000010000001500070000000000bf06000000000000bf610000000000000701000004000000850000005d000000bf610000000000000701000004000000850000005e000000b70000000000000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000002000)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.223115145s ago: executing program 0 (id=142): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000040)='./file1\x00', 0x301c8ca, &(0x7f00000017c0)=ANY=[@ANYBLOB='nonumtail=0,nonumtail=0,nfs,uni_xlate=0,utf8=0,quiet,shortname=lower,uni_xlate=1,rodir,iocharset=utf8,utf8=0,utf8=0,check=strict,codepage=775,iocharset=cp864,nonumtail=0,dmask=000000000000000000004,uni_xlate=0,\x00\x00\x00', @ANYRES64, @ANYRES16=0x0], 0x2, 0x2ba, &(0x7f0000000900)="$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") socket(0x10, 0x803, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x5b5f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_RECVMSG={0xa, 0x26, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000001fc0)={0x0, 0x0, &(0x7f0000001f40)=[{0x0}, {0x0}], 0x2}, 0x0, 0x40000000, 0x0, {0x3}}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r4 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000006b80)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="e000000010000b0500000000000000006f6d88040000002ffaa46c88bca90000002b0e13e735a3184f1b3d6da2f1acfac0ee50d2b184b27db1f302de337c0004060000000000bf852c89867f6691b01b2d44e4ff2d2d28732c28bd9423debbb86f9dba4a2d0600be076c02262600c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100100000000000000a0912086d9f4606d2e4cc898739222c5d3a83cb6b707f3336336ebb7d68100000011000080a64a6f8911da357ba3"], 0xe0}, {&(0x7f0000009fc0)=ANY=[], 0x3400}, {&(0x7f0000000140)=ANY=[], 0x90}], 0x3}, 0x0) 4.205350066s ago: executing program 1 (id=143): r0 = openat$comedi(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'dt2801\x00', [0x300, 0xc0000000, 0x3, 0x1, 0x5cf874af, 0x4, 0xb, 0x6, 0xa0, 0x55, 0x5, 0xd, 0x1, 0xfffffffc, 0x10000b, 0x5, 0x5, 0x4007a, 0x3, 0x2000000, 0x89, 0x12, 0x7f, 0x0, 0x5, 0x18, 0x1, 0x2000008, 0xa6b3, 0x0, 0x7]}) 4.070463522s ago: executing program 2 (id=144): syz_emit_ethernet(0x46, &(0x7f0000000080)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "b33883", 0x10, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], @ndisc_ra={0xc0}}}}}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_aout(r0, 0x0, 0x5b) socket$kcm(0x1e, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) socket$key(0xf, 0x3, 0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff07bbbf7f00931c07b2fd"], 0x1c}}, 0x0) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000000)) recvmmsg$unix(r4, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1004}], 0x1}}], 0x8, 0x34000, 0x0) 3.454736003s ago: executing program 1 (id=145): setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000200)={0x40, 0x17, 0x1, "1f"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000bc0)={0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="e01506"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f00000010c0)={0x10, &(0x7f0000000300)={0x40, 0xa, 0x2, 'HT'}, 0x0, 0x0}) 3.061248351s ago: executing program 0 (id=146): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1038, 0x1410, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x0, 0x7, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket(0x11, 0x3, 0x300) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x4400, &(0x7f00000003c0)=ANY=[], 0x82, 0x22e, &(0x7f0000000940)="$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") rename(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000480)='./file0/file0\x00') ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'hsr0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000140)="01154e000100001122334455892fca01000188fb", 0x22, 0x44011, &(0x7f0000000040)={0x11, 0x0, r2, 0x0, 0x0, 0x0}, 0x14) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0022180000000501150025ff0904a101959530263b7b49760829309102c0"], 0x0}, 0x0) 2.540117007s ago: executing program 2 (id=147): unshare(0x28000600) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) dup2(r0, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) write(r1, 0x0, 0x0) 2.28253442s ago: executing program 2 (id=148): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @random="790c7edd3d8d"}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000380)={0xa, 0x4e21, 0x1, @loopback, 0x400014}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) recvfrom$inet6(r4, &(0x7f00000000c0)=""/3, 0x3, 0x300, 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0x10000008ebc, 0x0) dup(r2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000000)='3', 0x4e) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict]}}, &(0x7f0000001b80)=""/4090, 0x26, 0xffa, 0xa}, 0x28) 1.525241916s ago: executing program 2 (id=149): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000040)='./file1\x00', 0x301c8ca, &(0x7f00000017c0)=ANY=[@ANYBLOB='nonumtail=0,nonumtail=0,nfs,uni_xlate=0,utf8=0,quiet,shortname=lower,uni_xlate=1,rodir,iocharset=utf8,utf8=0,utf8=0,check=strict,codepage=775,iocharset=cp864,nonumtail=0,dmask=000000000000000000004,uni_xlate=0,\x00\x00\x00', @ANYRES64, @ANYRES16=0x0], 0x2, 0x2ba, &(0x7f0000000900)="$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") socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x5b5f, 0x10000, 0x0, 0x51}, 0x0, 0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(0x0, 0x0, r1, &(0x7f0000000280)=@IORING_OP_RECVMSG={0xa, 0x26, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000001fc0)={0x0, 0x0, &(0x7f0000001f40)}, 0x0, 0x40000000, 0x0, {0x3}}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000006b80)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="e000000010000b0500000000000000006f6d88040000002ffaa46c88bca90000002b0e13e735a3184f1b3d6da2f1acfac0ee50d2b184b27db1f302de337c0004060000000000bf852c89867f6691b01b2d44e4ff2d2d28732c28bd9423debbb86f9dba4a2d0600"], 0xe0}], 0x1}, 0x0) 267.975498ms ago: executing program 2 (id=150): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@nombcache}, {}, {@delalloc}, {@grpid}, {@init_itable}, {@resuid}, {@grpid}, {@quota}, {@nomblk_io_submit}]}, 0x1, 0x56a, &(0x7f00000015c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000092000/0x4000)=nil, 0x4000, 0x0, 0x11, r2, 0x5737c000) fallocate(0xffffffffffffffff, 0x10, 0x6, 0x10001) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'veth0_vlan\x00'}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4c0000001000ffa4e7c29167fbe48ab0aaff2abd", @ANYRES32=0x0, @ANYBLOB="f8a65f05218a04002400128009000100766c616e000000001400028006000100030200000600050088a8000008000500", @ANYBLOB, @ANYRES64=r0, @ANYRES8=0x0], 0x4c}, 0x1, 0x200000000000000, 0x0, 0x240400d5}, 0x2000c000) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000040)={0x0, 'veth0_vlan\x00', {0xffe}}) 0s ago: executing program 1 (id=151): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x2, 0x300}, {0x6e}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.46' (ED25519) to the list of known hosts. [ 88.013415][ T5766] cgroup: Unknown subsys name 'net' [ 88.153253][ T5766] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 90.029130][ T5766] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 92.276754][ T1193] cfg80211: failed to load regulatory.db [ 92.373983][ T5787] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 92.403368][ T5799] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 92.413966][ T5799] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 92.421738][ T5799] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 92.428340][ T5794] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.441553][ T5797] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 92.449960][ T5794] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 92.455267][ T5799] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.464945][ T5794] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 92.465938][ T5787] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 92.476247][ T5794] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 92.481608][ T5799] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 92.487944][ T5797] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 92.501362][ T5787] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 92.501746][ T5794] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 92.517718][ T5797] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.523183][ T5787] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 92.529019][ T5797] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 92.532357][ T5787] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 92.547098][ T5787] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 92.547100][ T5797] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 92.561628][ T5787] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 92.584600][ T5787] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 92.594687][ T5787] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 93.092104][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 93.188891][ T5782] chnl_net:caif_netlink_parms(): no params data found [ 93.240558][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 93.276579][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 93.344308][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.352384][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.359984][ T5783] bridge_slave_0: entered allmulticast mode [ 93.367824][ T5783] bridge_slave_0: entered promiscuous mode [ 93.407750][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.416721][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.425486][ T5783] bridge_slave_1: entered allmulticast mode [ 93.432501][ T5783] bridge_slave_1: entered promiscuous mode [ 93.527520][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.549129][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.556566][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.564458][ T5782] bridge_slave_0: entered allmulticast mode [ 93.571900][ T5782] bridge_slave_0: entered promiscuous mode [ 93.590657][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.598133][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.605493][ T5782] bridge_slave_1: entered allmulticast mode [ 93.612515][ T5782] bridge_slave_1: entered promiscuous mode [ 93.622327][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.653227][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.660453][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.668649][ T5784] bridge_slave_0: entered allmulticast mode [ 93.676583][ T5784] bridge_slave_0: entered promiscuous mode [ 93.706636][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.714453][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.721628][ T5781] bridge_slave_0: entered allmulticast mode [ 93.729190][ T5781] bridge_slave_0: entered promiscuous mode [ 93.737747][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.745089][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.752286][ T5781] bridge_slave_1: entered allmulticast mode [ 93.759966][ T5781] bridge_slave_1: entered promiscuous mode [ 93.770374][ T5783] team0: Port device team_slave_0 added [ 93.780236][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.787773][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.795076][ T5784] bridge_slave_1: entered allmulticast mode [ 93.802132][ T5784] bridge_slave_1: entered promiscuous mode [ 93.843866][ T5783] team0: Port device team_slave_1 added [ 93.865664][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.912122][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.924588][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.948130][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.961355][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.971872][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.979196][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.005417][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.019211][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.026336][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.052706][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.067711][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.098894][ T5782] team0: Port device team_slave_0 added [ 94.146200][ T5782] team0: Port device team_slave_1 added [ 94.170141][ T5784] team0: Port device team_slave_0 added [ 94.192186][ T5781] team0: Port device team_slave_0 added [ 94.206708][ T5781] team0: Port device team_slave_1 added [ 94.237191][ T5784] team0: Port device team_slave_1 added [ 94.281719][ T5783] hsr_slave_0: entered promiscuous mode [ 94.289229][ T5783] hsr_slave_1: entered promiscuous mode [ 94.308834][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.316015][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.342289][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.366734][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.374060][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.400934][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.415246][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.422253][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.450703][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.465521][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.472525][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.499036][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.512120][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.519576][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.547952][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.560390][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.570549][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.597424][ T5786] Bluetooth: hci1: command tx timeout [ 94.597445][ T5797] Bluetooth: hci2: command tx timeout [ 94.610278][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.673699][ T5797] Bluetooth: hci3: command tx timeout [ 94.679416][ T5797] Bluetooth: hci0: command tx timeout [ 94.744283][ T5784] hsr_slave_0: entered promiscuous mode [ 94.751058][ T5784] hsr_slave_1: entered promiscuous mode [ 94.758610][ T5784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.767280][ T5784] Cannot create hsr debugfs directory [ 94.801005][ T5782] hsr_slave_0: entered promiscuous mode [ 94.808001][ T5782] hsr_slave_1: entered promiscuous mode [ 94.814628][ T5782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.822229][ T5782] Cannot create hsr debugfs directory [ 94.879506][ T5781] hsr_slave_0: entered promiscuous mode [ 94.886279][ T5781] hsr_slave_1: entered promiscuous mode [ 94.892446][ T5781] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.903236][ T5781] Cannot create hsr debugfs directory [ 95.232926][ T5783] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 95.276749][ T5783] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 95.286632][ T5783] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 95.315747][ T5783] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 95.442735][ T5782] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.458413][ T5782] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.472168][ T5782] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.484534][ T5782] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.614960][ T5784] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 95.633980][ T5784] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 95.648701][ T5784] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 95.659754][ T5784] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 95.749481][ T5781] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 95.764095][ T5781] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 95.781462][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.791212][ T5781] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 95.817066][ T5781] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 95.860060][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.887104][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.894689][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.910868][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.936289][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.943541][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.985546][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.015708][ T3006] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.022949][ T3006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.054987][ T3006] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.062198][ T3006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.160441][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.238298][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.310252][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.317555][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.357818][ T3006] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.365084][ T3006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.389590][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.498393][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.550074][ T3006] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.557307][ T3006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.598038][ T1123] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.605281][ T1123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.673549][ T5797] Bluetooth: hci2: command tx timeout [ 96.673566][ T5786] Bluetooth: hci1: command tx timeout [ 96.721564][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.755987][ T5786] Bluetooth: hci0: command tx timeout [ 96.758970][ T5797] Bluetooth: hci3: command tx timeout [ 96.842104][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.969204][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.980417][ T5783] veth0_vlan: entered promiscuous mode [ 97.019125][ T5783] veth1_vlan: entered promiscuous mode [ 97.062591][ T5782] veth0_vlan: entered promiscuous mode [ 97.106205][ T5782] veth1_vlan: entered promiscuous mode [ 97.186115][ T5783] veth0_macvtap: entered promiscuous mode [ 97.205830][ T5783] veth1_macvtap: entered promiscuous mode [ 97.217304][ T5784] veth0_vlan: entered promiscuous mode [ 97.244359][ T5784] veth1_vlan: entered promiscuous mode [ 97.276594][ T5782] veth0_macvtap: entered promiscuous mode [ 97.321384][ T5784] veth0_macvtap: entered promiscuous mode [ 97.331558][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.347995][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.361263][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.371507][ T5782] veth1_macvtap: entered promiscuous mode [ 97.402462][ T5783] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.416617][ T5783] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.425476][ T5783] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.434349][ T5783] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.448461][ T5784] veth1_macvtap: entered promiscuous mode [ 97.486237][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.498052][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.510162][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.521748][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.534429][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.544341][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.557046][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.569143][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.601783][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.614324][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.626812][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.637130][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.648995][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.659290][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.669834][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.682421][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.711519][ T5782] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.727637][ T5782] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.738219][ T5782] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.747083][ T5782] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.769124][ T5781] veth0_vlan: entered promiscuous mode [ 97.798433][ T5784] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.807750][ T5784] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.816936][ T5784] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.825751][ T5784] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.859149][ T5781] veth1_vlan: entered promiscuous mode [ 97.908059][ T1029] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.916222][ T1029] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.997904][ T1029] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.008556][ T1029] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.069093][ T5781] veth0_macvtap: entered promiscuous mode [ 98.111451][ T5781] veth1_macvtap: entered promiscuous mode [ 98.136209][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.166385][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.207844][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.236423][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.295490][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.306769][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.317780][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.331996][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.342290][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.361968][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.375981][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.401982][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.413649][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.416159][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.428589][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.443574][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.459013][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.469633][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.481728][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.495012][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.623728][ T5851] syz.1.2: attempt to access beyond end of device [ 98.623728][ T5851] nbd1: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 98.637393][ T5851] gfs2: error 10 reading superblock [ 98.709081][ T5851] syz.1.2[5851]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 98.753093][ T5797] Bluetooth: hci1: command tx timeout [ 98.763589][ T5797] Bluetooth: hci2: command tx timeout [ 98.819521][ T5851] loop1: detected capacity change from 0 to 2048 [ 98.830196][ T5781] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.862605][ T5797] Bluetooth: hci0: command tx timeout [ 98.882547][ T5797] Bluetooth: hci3: command tx timeout [ 98.896617][ T5851] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 98.930525][ T5781] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.977378][ T5781] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.041884][ T5781] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.472210][ T2988] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.500631][ T2988] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.627349][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.652518][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.749612][ T2988] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.771871][ T2988] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.007804][ T5786] Bluetooth: hci1: command tx timeout [ 101.013392][ T5792] Bluetooth: hci3: command tx timeout [ 101.018818][ T5792] Bluetooth: hci0: command tx timeout [ 101.024687][ T5797] Bluetooth: hci2: command tx timeout [ 101.919353][ T5864] xt_policy: output policy not valid in PREROUTING and INPUT [ 102.350313][ T5859] vlan2: entered promiscuous mode [ 102.356481][ T5859] bridge0: entered promiscuous mode [ 102.393281][ T28] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 102.871777][ T28] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 102.883788][ T28] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 102.897261][ T28] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 102.906606][ T28] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.920613][ T28] usb 4-1: config 0 descriptor?? [ 102.928758][ T5867] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 102.943965][ T28] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 103.301403][ T5883] loop1: detected capacity change from 0 to 1024 [ 103.317634][ T5883] ======================================================= [ 103.317634][ T5883] WARNING: The mand mount option has been deprecated and [ 103.317634][ T5883] and is ignored by this kernel. Remove the mand [ 103.317634][ T5883] option from the mount to silence this warning. [ 103.317634][ T5883] ======================================================= [ 103.367501][ T5883] EXT4-fs: Ignoring removed bh option [ 103.409991][ T5883] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 103.484440][ T5889] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5782] was attempted by ""[5889] [ 103.641323][ T5883] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.034018][ T5887] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 104.200330][ T5892] loop3: detected capacity change from 0 to 256 [ 104.395921][ T5895] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 104.785052][ T5881] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.794346][ T5881] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.123014][ T5874] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 105.333108][ T5874] usb 1-1: Using ep0 maxpacket: 16 [ 105.338840][ T5881] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.352666][ T5874] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 105.366363][ T5874] usb 1-1: config 1 has no interface number 0 [ 105.372728][ T5874] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 105.423346][ T5874] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 105.426949][ T5881] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.452962][ T8] usb 4-1: USB disconnect, device number 2 [ 105.470904][ T5874] usb 1-1: config 1 interface 105 has no altsetting 0 [ 105.495832][ T5874] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 105.507863][ T5874] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 105.521412][ T5874] usb 1-1: Product: syz [ 105.527089][ T5874] usb 1-1: Manufacturer: syz [ 105.531835][ T5874] usb 1-1: SerialNumber: syz [ 105.560022][ T5899] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 105.573242][ T5899] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 105.993095][ T3451] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 106.001988][ T5899] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 106.015463][ T5899] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 106.151535][ T5881] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.161515][ T5881] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.170733][ T5881] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.179958][ T5881] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.206421][ T3451] usb 4-1: unable to get BOS descriptor or descriptor too short [ 106.225194][ T3451] usb 4-1: config 189 has an invalid interface number: 127 but max is 0 [ 106.244545][ T3451] usb 4-1: config 189 has no interface number 0 [ 106.250913][ T3451] usb 4-1: config 189 interface 127 has no altsetting 0 [ 106.262103][ T3451] usb 4-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=61.9f [ 106.279317][ T3451] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.302043][ T3451] usb 4-1: Product: syz [ 106.306633][ T3451] usb 4-1: Manufacturer: syz [ 106.311281][ T3451] usb 4-1: SerialNumber: syz [ 106.442398][ T5874] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 106.606843][ T5783] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 106.670417][ T5874] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 106.734236][ T3451] usbserial_generic 4-1:189.127: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 106.774106][ T3451] usbserial_generic 4-1:189.127: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 106.790503][ T5874] aqc111 1-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 36:1c:60:51:0f:80 [ 106.804950][ T3451] usbserial_generic 4-1:189.127: device has no bulk endpoints [ 106.841748][ T5874] usb 1-1: USB disconnect, device number 2 [ 106.859163][ T3451] usb 4-1: USB disconnect, device number 3 [ 106.895140][ T5874] aqc111 1-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 107.084932][ T5874] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 107.112415][ T5874] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 107.136778][ T5874] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 107.211637][ T5920] loop2: detected capacity change from 0 to 2048 [ 107.296615][ T5921] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 107.494691][ T5920] syz.2.17: attempt to access beyond end of device [ 107.494691][ T5920] loop2: rw=0, sector=281474976710722, nr_sectors = 2 limit=2048 [ 107.521886][ T5920] NILFS (loop2): I/O error reading b-tree node block (ino=16, blocknr=15) [ 107.718115][ T5926] loop1: detected capacity change from 0 to 128 [ 107.757239][ T5926] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 107.784205][ T5928] FAULT_INJECTION: forcing a failure. [ 107.784205][ T5928] name failslab, interval 1, probability 0, space 0, times 1 [ 107.794299][ T5874] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 107.815421][ T5928] CPU: 1 PID: 5928 Comm: syz.3.21 Not tainted syzkaller #0 [ 107.822633][ T5926] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 107.831771][ T5928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 107.831804][ T5928] Call Trace: [ 107.831814][ T5928] [ 107.831824][ T5928] dump_stack_lvl+0x18c/0x250 [ 107.831874][ T5928] ? show_regs_print_info+0x20/0x20 [ 107.858295][ T5928] ? load_image+0x420/0x420 [ 107.862862][ T5928] ? __might_sleep+0xe0/0xe0 [ 107.867518][ T5928] ? __lock_acquire+0x7d80/0x7d80 [ 107.872612][ T5928] should_fail_ex+0x394/0x4c0 [ 107.877367][ T5928] should_failslab+0x9/0x20 [ 107.881930][ T5928] slab_pre_alloc_hook+0x59/0x300 [ 107.887023][ T5928] ? d_instantiate+0x6f/0x90 [ 107.891683][ T5928] kmem_cache_alloc+0x5a/0x2c0 [ 107.896519][ T5928] ? alloc_empty_file+0x9e/0x1d0 [ 107.901516][ T5928] alloc_empty_file+0x9e/0x1d0 [ 107.906338][ T5928] alloc_file+0x5b/0x600 [ 107.910649][ T5928] alloc_file_pseudo+0x184/0x210 [ 107.915686][ T5928] ? fput+0x1a0/0x1a0 [ 107.919751][ T5928] ? pfn_swap_entry_to_page+0x390/0x390 [ 107.925396][ T5928] hugetlb_file_setup+0x3d0/0x610 [ 107.930489][ T5928] ksys_mmap_pgoff+0x1e6/0x720 [ 107.935323][ T5928] do_syscall_64+0x55/0xb0 [ 107.939802][ T5928] ? clear_bhb_loop+0x40/0x90 [ 107.944532][ T5928] ? clear_bhb_loop+0x40/0x90 [ 107.949276][ T5928] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 107.955233][ T5928] RIP: 0033:0x7f4fddd9e159 [ 107.959732][ T5928] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.979402][ T5928] RSP: 002b:00007f4fdeccb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 107.987917][ T5928] RAX: ffffffffffffffda RBX: 00007f4fde025fa0 RCX: 00007f4fddd9e159 [ 107.996118][ T5928] RDX: 0000000000000004 RSI: 0000000000004000 RDI: 0000200000200000 [ 108.004146][ T5928] RBP: 00007f4fdde3503b R08: ffffffffffffffff R09: 0000000000000000 [ 108.012182][ T5928] R10: 000200000006c832 R11: 0000000000000246 R12: 0000000000000000 [ 108.020214][ T5928] R13: 00007f4fde026038 R14: 00007f4fde025fa0 R15: 00007ffcdc355358 [ 108.028264][ T5928] [ 108.063193][ T5874] usb 1-1: config 36 interface 0 altsetting 0 has an invalid endpoint with address 0x7C, skipping [ 108.100708][ T5874] usb 1-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 108.112826][ T5874] usb 1-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 108.137974][ T5874] usb 1-1: Manufacturer: syz [ 108.170225][ T5874] usb 1-1: SerialNumber: syz [ 110.007293][ T5952] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 112.042845][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 112.357318][ T5968] loop3: detected capacity change from 0 to 128 [ 112.419957][ T5968] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 112.531045][ T5968] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 113.318032][ T5874] usbhid 1-1:36.0: couldn't find an input interrupt endpoint [ 113.550013][ T5973] veth0: entered promiscuous mode [ 113.617639][ T5847] usb 1-1: USB disconnect, device number 3 [ 113.674387][ T5975] FAULT_INJECTION: forcing a failure. [ 113.674387][ T5975] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 113.734028][ T5975] CPU: 1 PID: 5975 Comm: syz.3.33 Not tainted syzkaller #0 [ 113.741369][ T5975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 113.751499][ T5975] Call Trace: [ 113.754840][ T5975] [ 113.757820][ T5975] dump_stack_lvl+0x18c/0x250 [ 113.762582][ T5975] ? show_regs_print_info+0x20/0x20 [ 113.767844][ T5975] ? load_image+0x420/0x420 [ 113.772405][ T5975] ? __might_fault+0xaa/0x120 [ 113.777140][ T5975] ? __lock_acquire+0x7d80/0x7d80 [ 113.782245][ T5975] ? __virt_addr_valid+0x10c/0x380 [ 113.787435][ T5975] should_fail_ex+0x394/0x4c0 [ 113.792192][ T5975] _copy_to_user+0x2f/0xa0 [ 113.796669][ T5975] bpf_verifier_vlog+0x432/0x840 [ 113.801679][ T5975] btf_verifier_log+0x11e/0x1a0 [ 113.806600][ T5975] ? btf_parse_graph_root+0xb00/0xb00 [ 113.812018][ T5975] ? btf_sec_info_cmp+0x5d/0x100 [ 113.817004][ T5975] __btf_verifier_log_type+0x457/0x690 [ 113.822550][ T5975] ? btf_int_show+0x2810/0x2810 [ 113.827457][ T5975] btf_ref_type_check_meta+0x7a/0x430 [ 113.832880][ T5975] btf_check_all_metas+0x371/0xaf0 [ 113.838041][ T5975] btf_parse_type_sec+0xfc/0x1960 [ 113.843101][ T5975] ? btf_check_sec_info+0x350/0x350 [ 113.848364][ T5975] ? __virt_addr_valid+0x10c/0x380 [ 113.853521][ T5975] ? btf_verifier_log+0x1a0/0x1a0 [ 113.858615][ T5975] ? btf_parse_hdr+0x545/0x700 [ 113.863417][ T5975] ? btf_parse_str_sec+0x20d/0x2a0 [ 113.868588][ T5975] btf_new_fd+0x440/0x9e0 [ 113.872964][ T5975] ? bpf_btf_show_fdinfo+0x80/0x80 [ 113.878157][ T5975] ? capable+0x88/0xe0 [ 113.882277][ T5975] __sys_bpf+0x670/0x890 [ 113.886558][ T5975] ? bpf_link_show_fdinfo+0x560/0x560 [ 113.891977][ T5975] ? lock_chain_count+0x20/0x20 [ 113.896878][ T5975] __x64_sys_bpf+0x7c/0x90 [ 113.901337][ T5975] do_syscall_64+0x55/0xb0 [ 113.905809][ T5975] ? clear_bhb_loop+0x40/0x90 [ 113.910540][ T5975] ? clear_bhb_loop+0x40/0x90 [ 113.915275][ T5975] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 113.921238][ T5975] RIP: 0033:0x7f4fddd9e159 [ 113.925700][ T5975] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.945403][ T5975] RSP: 002b:00007f4fdecaa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 113.953878][ T5975] RAX: ffffffffffffffda RBX: 00007f4fde026090 RCX: 00007f4fddd9e159 [ 113.961887][ T5975] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 0000000000000012 [ 113.969932][ T5975] RBP: 00007f4fdde3503b R08: 0000000000000000 R09: 0000000000000000 [ 113.978071][ T5975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.986093][ T5975] R13: 00007f4fde026128 R14: 00007f4fde026090 R15: 00007ffcdc355358 [ 113.994208][ T5975] [ 114.052703][ T5977] loop0: detected capacity change from 0 to 256 [ 114.969022][ T5972] veth0: left promiscuous mode [ 115.657313][ T5993] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 116.461294][ T5979] loop2: detected capacity change from 0 to 32768 [ 116.570724][ T5979] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 116.692348][ T5979] XFS (loop2): Ending clean mount [ 116.747215][ T5979] XFS (loop2): Quotacheck needed: Please wait. [ 116.826751][ T5979] XFS (loop2): Quotacheck: Done. [ 117.071507][ T6012] Zero length message leads to an empty skb [ 117.265250][ T5996] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 117.456009][ T5996] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 117.561689][ T5996] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 117.599190][ T5996] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 117.607095][ T5784] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 117.623027][ T5996] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 117.633677][ T5996] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 117.658290][ T5996] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 117.665350][ T5996] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 117.677004][ T5996] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 117.692590][ T5996] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 117.699867][ T5996] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 117.720194][ T5996] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 117.740853][ T5998] loop1: detected capacity change from 0 to 1024 [ 117.759835][ T5998] EXT4-fs: Ignoring removed nomblk_io_submit option [ 117.914597][ T5998] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.986297][ T6018] loop3: detected capacity change from 0 to 128 [ 118.001972][ T5998] vlan3: entered allmulticast mode [ 118.007388][ T6018] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 118.053021][ T6018] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 118.067999][ T5998] veth0_vlan: entered allmulticast mode [ 118.449777][ T5783] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.603866][ T5787] Bluetooth: hci1: command 0x0c1a tx timeout [ 118.742947][ T5907] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 119.633232][ T5787] Bluetooth: hci2: command 0x0c1a tx timeout [ 119.716087][ T5787] Bluetooth: hci3: command 0x0c1a tx timeout [ 119.723464][ T5787] Bluetooth: hci0: command 0x0c1a tx timeout [ 119.927202][ T6032] loop3: detected capacity change from 0 to 256 [ 120.811122][ T5797] Bluetooth: hci1: command 0x0c1a tx timeout [ 121.142172][ T5907] usb 3-1: config 36 interface 0 altsetting 0 has an invalid endpoint with address 0x7C, skipping [ 121.176246][ T5907] usb 3-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 121.190806][ T5907] usb 3-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 121.199292][ T5907] usb 3-1: Manufacturer: syz [ 121.209968][ T5907] usb 3-1: SerialNumber: syz [ 121.223630][ T5882] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 121.423069][ T5882] usb 1-1: Using ep0 maxpacket: 8 [ 121.450211][ T5882] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 121.463651][ T5907] usbhid 3-1:36.0: couldn't find an input interrupt endpoint [ 121.486696][ T5882] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.499652][ T5907] usb 3-1: USB disconnect, device number 2 [ 121.518667][ T5882] usb 1-1: Product: syz [ 121.525756][ T5882] usb 1-1: Manufacturer: syz [ 121.545925][ T5882] usb 1-1: SerialNumber: syz [ 121.570878][ T5882] usb 1-1: config 0 descriptor?? [ 121.589676][ T5882] gspca_main: se401-2.14.0 probing 047d:5003 [ 121.628615][ T6044] loop2: detected capacity change from 0 to 4096 [ 121.682606][ T6044] ntfs3: loop2: ino=0, mi_enum_attr [ 121.713755][ T5797] Bluetooth: hci2: command 0x0c1a tx timeout [ 121.758622][ T6044] ntfs3: loop2: ino=0, mi_enum_attr [ 121.793536][ T5797] Bluetooth: hci0: command 0x0c1a tx timeout [ 121.799690][ T5787] Bluetooth: hci3: command 0x0c1a tx timeout [ 122.204161][ T5882] gspca_se401: ExtraFeatures: 255 [ 122.215951][ T6048] loop1: detected capacity change from 0 to 256 [ 122.354401][ T6050] fuse: root generation should be zero [ 122.547875][ T5882] input: se401 as /devices/platform/dummy_hcd.0/usb1/1-1/input/input6 [ 122.684984][ T6058] loop2: detected capacity change from 0 to 128 [ 122.727909][ T6058] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 122.746915][ T5874] usb 1-1: USB disconnect, device number 4 [ 122.802913][ T6058] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 122.833049][ T5787] Bluetooth: hci1: command 0x0c1a tx timeout [ 123.211193][ T6064] loop3: detected capacity change from 0 to 256 [ 124.021292][ T5787] Bluetooth: hci2: command 0x0c1a tx timeout [ 124.027661][ T5797] Bluetooth: hci3: command 0x0c1a tx timeout [ 124.034141][ T5787] Bluetooth: hci0: command 0x0c1a tx timeout [ 124.372588][ T3451] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 124.772342][ T6084] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 125.634519][ T3451] usb 2-1: config 36 interface 0 altsetting 0 has an invalid endpoint with address 0x7C, skipping [ 125.660104][ T3451] usb 2-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 125.688687][ T3451] usb 2-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 125.713098][ T3451] usb 2-1: Manufacturer: syz [ 125.717787][ T3451] usb 2-1: SerialNumber: syz [ 126.228496][ T6101] veth0: entered promiscuous mode [ 127.184290][ T6103] FAULT_INJECTION: forcing a failure. [ 127.184290][ T6103] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 127.233633][ T6103] CPU: 0 PID: 6103 Comm: syz.3.67 Not tainted syzkaller #0 [ 127.240933][ T6103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 127.251034][ T6103] Call Trace: [ 127.254383][ T6103] [ 127.257354][ T6103] dump_stack_lvl+0x18c/0x250 [ 127.262120][ T6103] ? show_regs_print_info+0x20/0x20 [ 127.267371][ T6103] ? load_image+0x420/0x420 [ 127.271958][ T6103] ? __might_fault+0xaa/0x120 [ 127.276670][ T6103] ? __lock_acquire+0x7d80/0x7d80 [ 127.281712][ T6103] should_fail_ex+0x394/0x4c0 [ 127.286446][ T6103] _copy_from_user+0x2f/0xe0 [ 127.291092][ T6103] restore_altstack+0xaf/0x4e0 [ 127.295899][ T6103] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 127.301930][ T6103] ? __lock_acquire+0x7d80/0x7d80 [ 127.307010][ T6103] ? __ia32_sys_sigaltstack+0x2a0/0x2a0 [ 127.312629][ T6103] ? _raw_spin_unlock_irq+0x23/0x50 [ 127.317887][ T6103] ? lockdep_hardirqs_on+0x98/0x150 [ 127.322914][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 127.323125][ T6103] __ia32_sys_rt_sigreturn+0x239/0x850 [ 127.336805][ T6103] ? x64_setup_rt_frame+0xc30/0xc30 [ 127.342077][ T6103] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 127.348112][ T6103] ? lock_chain_count+0x20/0x20 [ 127.353032][ T6103] ? lockdep_hardirqs_on+0x98/0x150 [ 127.358271][ T6103] do_syscall_64+0x55/0xb0 [ 127.362757][ T6103] ? clear_bhb_loop+0x40/0x90 [ 127.367488][ T6103] ? clear_bhb_loop+0x40/0x90 [ 127.372227][ T6103] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 127.378174][ T6103] RIP: 0033:0x7f4fddd3f4d9 [ 127.382629][ T6103] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 127.382940][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 127.402249][ T6103] RSP: 002b:00007f4fdeca9b40 EFLAGS: 00000206 ORIG_RAX: 000000000000000f [ 127.413868][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 127.418881][ T6103] RAX: ffffffffffffffda RBX: 00007f4fde026098 RCX: 00007f4fddd3f4d9 [ 127.435166][ T6103] RDX: 00007f4fdeca9b40 RSI: 00007f4fdeca9c70 RDI: 0000000000000021 [ 127.443154][ T6103] RBP: 00007f4fde026090 R08: 0000000000000000 R09: 0000000000000000 [ 127.451138][ T6103] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 127.459149][ T6103] R13: 00007f4fde026128 R14: 00007ffcdc355270 R15: 00007ffcdc355358 [ 127.467163][ T6103] [ 127.618390][ T6103] veth0: left promiscuous mode [ 127.777053][ T6110] loop0: detected capacity change from 0 to 128 [ 127.792436][ T6112] loop3: detected capacity change from 0 to 256 [ 127.814494][ T6110] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 127.890167][ T6110] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 128.137474][ T6116] syz.2.71 uses obsolete (PF_INET,SOCK_PACKET) [ 129.330537][ T6126] loop0: detected capacity change from 0 to 512 [ 129.352414][ T6126] EXT4-fs: Ignoring removed oldalloc option [ 129.526104][ T6126] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.666482][ T6126] EXT4-fs: Cannot change journaled quota options when quota turned on [ 129.778163][ T5782] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.046094][ T6141] veth0: entered promiscuous mode [ 130.115436][ T3451] usbhid 2-1:36.0: couldn't find an input interrupt endpoint [ 130.134706][ T3451] usb 2-1: USB disconnect, device number 2 [ 130.193878][ T6146] FAULT_INJECTION: forcing a failure. [ 130.193878][ T6146] name failslab, interval 1, probability 0, space 0, times 0 [ 130.217931][ T6146] CPU: 0 PID: 6146 Comm: syz.0.78 Not tainted syzkaller #0 [ 130.225233][ T6146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 130.235339][ T6146] Call Trace: [ 130.238680][ T6146] [ 130.241655][ T6146] dump_stack_lvl+0x18c/0x250 [ 130.246406][ T6146] ? show_regs_print_info+0x20/0x20 [ 130.251671][ T6146] ? load_image+0x420/0x420 [ 130.256273][ T6146] ? __might_sleep+0xe0/0xe0 [ 130.260932][ T6146] ? __lock_acquire+0x7d80/0x7d80 [ 130.266022][ T6146] should_fail_ex+0x394/0x4c0 [ 130.270767][ T6146] should_failslab+0x9/0x20 [ 130.275344][ T6146] slab_pre_alloc_hook+0x59/0x300 [ 130.280438][ T6146] ? memcg_alloc_slab_cgroups+0x85/0x120 [ 130.286162][ T6146] ? memcg_alloc_slab_cgroups+0x85/0x120 [ 130.291850][ T6146] __kmem_cache_alloc_node+0x53/0x250 [ 130.297313][ T6146] ? memcg_alloc_slab_cgroups+0x85/0x120 [ 130.303011][ T6146] __kmalloc_node+0xa6/0x240 [ 130.307690][ T6146] memcg_alloc_slab_cgroups+0x85/0x120 [ 130.313215][ T6146] slab_post_alloc_hook+0xec/0x4d0 [ 130.318413][ T6146] ? d_instantiate+0x6f/0x90 [ 130.323061][ T6146] kmem_cache_alloc+0x17e/0x2c0 [ 130.328005][ T6146] ? alloc_empty_file+0x9e/0x1d0 [ 130.333005][ T6146] alloc_empty_file+0x9e/0x1d0 [ 130.337832][ T6146] alloc_file+0x5b/0x600 [ 130.342152][ T6146] alloc_file_pseudo+0x184/0x210 [ 130.347158][ T6146] ? fput+0x1a0/0x1a0 [ 130.351249][ T6146] ? _raw_spin_unlock+0x28/0x40 [ 130.356173][ T6146] anon_inode_getfd+0xca/0x1c0 [ 130.361016][ T6146] btf_new_fd+0x848/0x9e0 [ 130.365425][ T6146] ? bpf_btf_show_fdinfo+0x80/0x80 [ 130.370880][ T6146] ? capable+0x88/0xe0 [ 130.375023][ T6146] __sys_bpf+0x670/0x890 [ 130.379332][ T6146] ? bpf_link_show_fdinfo+0x560/0x560 [ 130.384786][ T6146] ? lock_chain_count+0x20/0x20 [ 130.389722][ T6146] __x64_sys_bpf+0x7c/0x90 [ 130.394204][ T6146] do_syscall_64+0x55/0xb0 [ 130.398687][ T6146] ? clear_bhb_loop+0x40/0x90 [ 130.403465][ T6146] ? clear_bhb_loop+0x40/0x90 [ 130.408263][ T6146] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 130.414223][ T6146] RIP: 0033:0x7f2b5419e159 [ 130.418693][ T6146] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.438358][ T6146] RSP: 002b:00007f2b523f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 130.446902][ T6146] RAX: ffffffffffffffda RBX: 00007f2b54426090 RCX: 00007f2b5419e159 [ 130.454932][ T6146] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 0000000000000012 [ 130.462959][ T6146] RBP: 00007f2b5423503b R08: 0000000000000000 R09: 0000000000000000 [ 130.471003][ T6146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.479038][ T6146] R13: 00007f2b54426128 R14: 00007f2b54426090 R15: 00007ffc64aeee38 [ 130.487085][ T6146] [ 130.516694][ T6148] loop1: detected capacity change from 0 to 128 [ 130.526346][ T6148] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 130.546398][ T6148] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 130.973148][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 131.319352][ T9] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 131.328682][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.012879][ T9] usb 3-1: Product: syz [ 132.017138][ T9] usb 3-1: Manufacturer: syz [ 132.022000][ T9] usb 3-1: SerialNumber: syz [ 132.101468][ T9] usb 3-1: config 0 descriptor?? [ 132.206662][ T6166] loop1: detected capacity change from 0 to 64 [ 132.386566][ T6170] loop3: detected capacity change from 0 to 256 [ 132.754672][ T5846] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 132.955540][ T5846] usb 2-1: config 36 interface 0 altsetting 0 has an invalid endpoint with address 0x7C, skipping [ 132.975072][ T5846] usb 2-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 132.989713][ T5846] usb 2-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 132.999950][ T5846] usb 2-1: Manufacturer: syz [ 133.008232][ T5846] usb 2-1: SerialNumber: syz [ 133.037327][ T6140] veth0: left promiscuous mode [ 133.260028][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.266970][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.283405][ T9] usb 3-1: Firmware version (0.0) predates our first public release. [ 133.291559][ T9] usb 3-1: Please update to version 0.2 or newer [ 133.638576][ T9] usb 3-1: USB disconnect, device number 3 [ 133.837285][ T6191] loop0: detected capacity change from 0 to 128 [ 133.887984][ T6191] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 133.932448][ T6191] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 134.290855][ T5846] usbhid 2-1:36.0: couldn't find an input interrupt endpoint [ 134.305393][ T5846] usb 2-1: USB disconnect, device number 3 [ 134.875668][ T6202] loop1: detected capacity change from 0 to 256 [ 135.004203][ T6204] veth0: entered promiscuous mode [ 135.127215][ T6204] FAULT_INJECTION: forcing a failure. [ 135.127215][ T6204] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 135.189982][ T6204] CPU: 1 PID: 6204 Comm: syz.0.99 Not tainted syzkaller #0 [ 135.197286][ T6204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 135.207394][ T6204] Call Trace: [ 135.210731][ T6204] [ 135.213711][ T6204] dump_stack_lvl+0x18c/0x250 [ 135.218468][ T6204] ? show_regs_print_info+0x20/0x20 [ 135.223737][ T6204] ? load_image+0x420/0x420 [ 135.228300][ T6204] ? __might_fault+0xaa/0x120 [ 135.233039][ T6204] ? __lock_acquire+0x7d80/0x7d80 [ 135.238211][ T6204] ? __virt_addr_valid+0x10c/0x380 [ 135.243394][ T6204] should_fail_ex+0x394/0x4c0 [ 135.248143][ T6204] _copy_to_user+0x2f/0xa0 [ 135.252637][ T6204] bpf_verifier_vlog+0x432/0x840 [ 135.257655][ T6204] __btf_verifier_log+0xe3/0x140 [ 135.262751][ T6204] ? btf_check_sec_info+0x350/0x350 [ 135.268022][ T6204] ? __lock_acquire+0x7d80/0x7d80 [ 135.273114][ T6204] ? __virt_addr_valid+0x10c/0x380 [ 135.278290][ T6204] ? btf_parse_hdr+0x1f0/0x700 [ 135.283131][ T6204] btf_parse_hdr+0x358/0x700 [ 135.287792][ T6204] btf_new_fd+0x397/0x9e0 [ 135.292184][ T6204] ? bpf_btf_show_fdinfo+0x80/0x80 [ 135.297378][ T6204] ? capable+0x88/0xe0 [ 135.301508][ T6204] __sys_bpf+0x670/0x890 [ 135.305795][ T6204] ? bpf_link_show_fdinfo+0x560/0x560 [ 135.311216][ T6204] ? lock_chain_count+0x20/0x20 [ 135.316115][ T6204] __x64_sys_bpf+0x7c/0x90 [ 135.320566][ T6204] do_syscall_64+0x55/0xb0 [ 135.325016][ T6204] ? clear_bhb_loop+0x40/0x90 [ 135.329728][ T6204] ? clear_bhb_loop+0x40/0x90 [ 135.334439][ T6204] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 135.340373][ T6204] RIP: 0033:0x7f2b5419e159 [ 135.344823][ T6204] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.364458][ T6204] RSP: 002b:00007f2b54f96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 135.372911][ T6204] RAX: ffffffffffffffda RBX: 00007f2b54425fa0 RCX: 00007f2b5419e159 [ 135.380906][ T6204] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 0000000000000012 [ 135.388902][ T6204] RBP: 00007f2b5423503b R08: 0000000000000000 R09: 0000000000000000 [ 135.396908][ T6204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.404910][ T6204] R13: 00007f2b54426038 R14: 00007f2b54425fa0 R15: 00007ffc64aeee38 [ 135.412929][ T6204] [ 135.450947][ T6203] veth0: left promiscuous mode [ 135.653708][ T6209] loop0: detected capacity change from 0 to 256 [ 136.857780][ T6198] loop2: detected capacity change from 0 to 32768 [ 136.868710][ T6200] loop3: detected capacity change from 0 to 40427 [ 136.916315][ T6200] F2FS-fs (loop3): build fault injection attr: rate: 174, type: 0x7ffff [ 137.719869][ T6232] loop2: detected capacity change from 0 to 128 [ 137.741043][ T6232] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 137.804004][ T6232] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 138.099569][ T6234] veth0: entered promiscuous mode [ 138.292623][ T6234] FAULT_INJECTION: forcing a failure. [ 138.292623][ T6234] name failslab, interval 1, probability 0, space 0, times 0 [ 138.343924][ T6234] CPU: 0 PID: 6234 Comm: syz.1.109 Not tainted syzkaller #0 [ 138.351307][ T6234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 138.361410][ T6234] Call Trace: [ 138.364861][ T6234] [ 138.367837][ T6234] dump_stack_lvl+0x18c/0x250 [ 138.372585][ T6234] ? show_regs_print_info+0x20/0x20 [ 138.377839][ T6234] ? load_image+0x420/0x420 [ 138.382392][ T6234] ? __might_sleep+0xe0/0xe0 [ 138.387037][ T6234] ? __lock_acquire+0x7d80/0x7d80 [ 138.392148][ T6234] should_fail_ex+0x394/0x4c0 [ 138.396886][ T6234] should_failslab+0x9/0x20 [ 138.401528][ T6234] slab_pre_alloc_hook+0x59/0x300 [ 138.406610][ T6234] ? d_instantiate+0x6f/0x90 [ 138.411244][ T6234] kmem_cache_alloc+0x5a/0x2c0 [ 138.416064][ T6234] ? alloc_empty_file+0x9e/0x1d0 [ 138.421053][ T6234] alloc_empty_file+0x9e/0x1d0 [ 138.425866][ T6234] alloc_file+0x5b/0x600 [ 138.430159][ T6234] alloc_file_pseudo+0x184/0x210 [ 138.435148][ T6234] ? fput+0x1a0/0x1a0 [ 138.439170][ T6234] ? _raw_spin_unlock+0x28/0x40 [ 138.444084][ T6234] anon_inode_getfd+0xca/0x1c0 [ 138.448906][ T6234] btf_new_fd+0x848/0x9e0 [ 138.453293][ T6234] ? bpf_btf_show_fdinfo+0x80/0x80 [ 138.458458][ T6234] ? capable+0x88/0xe0 [ 138.462618][ T6234] __sys_bpf+0x670/0x890 [ 138.466910][ T6234] ? bpf_link_show_fdinfo+0x560/0x560 [ 138.472346][ T6234] ? lock_chain_count+0x20/0x20 [ 138.477263][ T6234] __x64_sys_bpf+0x7c/0x90 [ 138.481771][ T6234] do_syscall_64+0x55/0xb0 [ 138.486246][ T6234] ? clear_bhb_loop+0x40/0x90 [ 138.490980][ T6234] ? clear_bhb_loop+0x40/0x90 [ 138.495719][ T6234] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 138.501666][ T6234] RIP: 0033:0x7f36d519e159 [ 138.506132][ T6234] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.525792][ T6234] RSP: 002b:00007f36d5fc7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 138.534267][ T6234] RAX: ffffffffffffffda RBX: 00007f36d5425fa0 RCX: 00007f36d519e159 [ 138.542282][ T6234] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 0000000000000012 [ 138.550302][ T6234] RBP: 00007f36d523503b R08: 0000000000000000 R09: 0000000000000000 [ 138.558321][ T6234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 138.566330][ T6234] R13: 00007f36d5426038 R14: 00007f36d5425fa0 R15: 00007ffe32ebb5c8 [ 138.574367][ T6234] [ 138.935246][ T6233] veth0: left promiscuous mode [ 140.203658][ T6240] loop2: detected capacity change from 0 to 32768 [ 140.510301][ T6240] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 140.811244][ T6263] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 141.444964][ T6264] loop0: detected capacity change from 0 to 128 [ 141.601183][ T6264] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 141.654824][ T6264] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 141.718055][ T6240] syz.2.111 (6240) used greatest stack depth: 17816 bytes left [ 142.054310][ T5784] ocfs2: Unmounting device (7,2) on (node local) [ 142.233322][ T5847] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 142.477525][ T5847] usb 2-1: Using ep0 maxpacket: 8 [ 142.528153][ T5847] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 142.567774][ T5847] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.592841][ T5847] usb 2-1: Product: syz [ 142.636940][ T5847] usb 2-1: Manufacturer: syz [ 142.714935][ T5847] usb 2-1: SerialNumber: syz [ 142.900854][ T5847] usb 2-1: config 0 descriptor?? [ 143.075147][ T5847] gspca_main: se401-2.14.0 probing 047d:5003 [ 143.383551][ T6276] netlink: 24 bytes leftover after parsing attributes in process `syz.0.123'. [ 143.706425][ T5847] gspca_se401: ExtraFeatures: 255 [ 143.817080][ T5847] input: se401 as /devices/platform/dummy_hcd.1/usb2/2-1/input/input7 [ 143.872946][ T5847] usb 2-1: USB disconnect, device number 4 [ 144.062874][ T5846] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 144.258616][ T5846] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 144.269135][ T5846] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.393174][ T5846] usb 1-1: Product: syz [ 144.397433][ T5846] usb 1-1: Manufacturer: syz [ 144.402073][ T5846] usb 1-1: SerialNumber: syz [ 144.412077][ T5846] usb 1-1: config 0 descriptor?? [ 144.979453][ T6294] loop3: detected capacity change from 0 to 128 [ 145.011332][ T6294] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 145.099497][ T6294] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 145.513225][ T5846] usb 1-1: Firmware version (0.0) predates our first public release. [ 145.532083][ T5846] usb 1-1: Please update to version 0.2 or newer [ 145.686476][ T6285] loop2: detected capacity change from 0 to 32768 [ 145.764785][ T27] audit: type=1800 audit(1789428813.212:2): pid=6285 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.126" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 145.858785][ T5846] usb 1-1: USB disconnect, device number 5 [ 145.872146][ T6303] netlink: 'syz.1.133': attribute type 1 has an invalid length. [ 145.993874][ T6303] 8021q: adding VLAN 0 to HW filter on device bond1 [ 146.009495][ T6305] loop2: detected capacity change from 0 to 1764 [ 146.190423][ T6305] nullb0: [CUMANA/ADFS] p1 [ADFS] p1 [ 146.203470][ T6305] nullb0: partition table partially beyond EOD, truncated [ 146.211142][ T6305] nullb0: p1 size 1652452772 extends beyond EOD, truncated [ 146.233444][ T6310] bond1: (slave gretap1): making interface the new active one [ 146.250404][ T6310] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 147.451053][ T6323] loop2: detected capacity change from 0 to 1024 [ 147.474253][ T6323] EXT4-fs: Ignoring removed nomblk_io_submit option [ 147.550578][ T6323] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.608531][ T6323] vlan2: entered allmulticast mode [ 147.640839][ T6323] veth0_vlan: entered allmulticast mode [ 148.311169][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.639321][ T6337] loop0: detected capacity change from 0 to 256 [ 150.362895][ T5829] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 150.492372][ T6353] veth0: entered promiscuous mode [ 150.555871][ T6353] FAULT_INJECTION: forcing a failure. [ 150.555871][ T6353] name failslab, interval 1, probability 0, space 0, times 0 [ 150.572916][ T5847] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 150.594253][ T5829] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 150.607639][ T6353] CPU: 1 PID: 6353 Comm: syz.2.148 Not tainted syzkaller #0 [ 150.615013][ T6353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 150.617413][ T5829] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.625095][ T6353] Call Trace: [ 150.625108][ T6353] [ 150.625118][ T6353] dump_stack_lvl+0x18c/0x250 [ 150.625156][ T6353] ? show_regs_print_info+0x20/0x20 [ 150.649439][ T6353] ? load_image+0x420/0x420 [ 150.654004][ T6353] ? __might_sleep+0xe0/0xe0 [ 150.658777][ T6353] ? __lock_acquire+0x7d80/0x7d80 [ 150.662935][ T5829] usb 2-1: Product: syz [ 150.663844][ T6353] should_fail_ex+0x394/0x4c0 [ 150.672755][ T6353] should_failslab+0x9/0x20 [ 150.677318][ T6353] slab_pre_alloc_hook+0x59/0x300 [ 150.682417][ T6353] kmem_cache_alloc+0x5a/0x2c0 [ 150.682935][ T5829] usb 2-1: Manufacturer: syz [ 150.687225][ T6353] ? security_file_alloc+0x34/0x120 [ 150.697090][ T6353] security_file_alloc+0x34/0x120 [ 150.702179][ T6353] init_file+0x94/0x1f0 [ 150.706389][ T6353] alloc_empty_file+0xb7/0x1d0 [ 150.711210][ T6353] alloc_file+0x5b/0x600 [ 150.713822][ T5829] usb 2-1: SerialNumber: syz [ 150.715498][ T6353] alloc_file_pseudo+0x184/0x210 [ 150.725102][ T6353] ? fput+0x1a0/0x1a0 [ 150.729135][ T6353] ? _raw_spin_unlock+0x28/0x40 [ 150.734051][ T6353] anon_inode_getfd+0xca/0x1c0 [ 150.738883][ T6353] btf_new_fd+0x848/0x9e0 [ 150.743281][ T6353] ? bpf_btf_show_fdinfo+0x80/0x80 [ 150.748458][ T6353] ? capable+0x88/0xe0 [ 150.752594][ T6353] __sys_bpf+0x670/0x890 [ 150.755902][ T5829] usb 2-1: config 0 descriptor?? [ 150.756874][ T6353] ? bpf_link_show_fdinfo+0x560/0x560 [ 150.767305][ T6353] ? lock_chain_count+0x20/0x20 [ 150.772244][ T6353] __x64_sys_bpf+0x7c/0x90 [ 150.776744][ T6353] do_syscall_64+0x55/0xb0 [ 150.781222][ T6353] ? clear_bhb_loop+0x40/0x90 [ 150.785969][ T6353] ? clear_bhb_loop+0x40/0x90 [ 150.790703][ T6353] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 150.796668][ T6353] RIP: 0033:0x7f75fa19e159 [ 150.801129][ T6353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.820790][ T6353] RSP: 002b:00007f75fb065028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 150.829265][ T6353] RAX: ffffffffffffffda RBX: 00007f75fa425fa0 RCX: 00007f75fa19e159 [ 150.837285][ T6353] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 0000000000000012 [ 150.845305][ T6353] RBP: 00007f75fa23503b R08: 0000000000000000 R09: 0000000000000000 [ 150.853327][ T6353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 150.861349][ T6353] R13: 00007f75fa426038 R14: 00007f75fa425fa0 R15: 00007ffc6ad53878 [ 150.862986][ T5847] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.869368][ T6353] [ 150.903596][ T5847] usb 1-1: config 0 interface 0 has no altsetting 0 [ 150.911202][ T5847] usb 1-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 150.942823][ T5847] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.993426][ T5847] usb 1-1: config 0 descriptor?? [ 151.116679][ T6352] veth0: left promiscuous mode [ 151.260655][ T6355] loop2: detected capacity change from 0 to 256 [ 151.415379][ T6351] loop0: detected capacity change from 0 to 128 [ 152.431423][ T5829] usb 2-1: Firmware version (0.0) predates our first public release. [ 152.445035][ T5847] steelseries 0003:1038:1410.0001: unknown main item tag 0x3 [ 152.454346][ T5829] usb 2-1: Please update to version 0.2 or newer [ 152.465124][ T5847] steelseries 0003:1038:1410.0001: No inputs registered, leaving [ 152.480972][ T5847] steelseries 0003:1038:1410.0001: hidraw0: USB HID v0.00 Joystick [HID 1038:1410] on usb-dummy_hcd.0-1/input0 [ 152.494957][ T5847] steelseries 0003:1038:1410.0001: implement() called with too large value 64 (n: 0)! (kworker/0:5) [ 152.673060][ T5829] usb 2-1: USB disconnect, device number 5 [ 152.693066][ T5847] usb 1-1: USB disconnect, device number 6 [ 152.701535][ T5847] ================================================================== [ 152.709652][ T5847] BUG: KASAN: slab-out-of-bounds in __lock_acquire+0x10c/0x7d80 [ 152.717342][ T5847] Read of size 8 at addr ffff88802efa11d0 by task kworker/0:5/5847 [ 152.725281][ T5847] [ 152.727644][ T5847] CPU: 0 PID: 5847 Comm: kworker/0:5 Not tainted syzkaller #0 [ 152.735149][ T5847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 152.745267][ T5847] Workqueue: usb_hub_wq hub_event [ 152.750351][ T5847] Call Trace: [ 152.753665][ T5847] [ 152.756637][ T5847] dump_stack_lvl+0x18c/0x250 [ 152.761376][ T5847] ? __lock_acquire+0x7d80/0x7d80 [ 152.766451][ T5847] ? show_regs_print_info+0x20/0x20 [ 152.771736][ T5847] ? load_image+0x420/0x420 [ 152.776288][ T5847] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 152.782301][ T5847] ? __virt_addr_valid+0x10c/0x380 [ 152.787449][ T5847] ? __virt_addr_valid+0x10c/0x380 [ 152.792591][ T5847] ? __virt_addr_valid+0x10c/0x380 [ 152.797735][ T5847] print_report+0xa8/0x210 [ 152.802180][ T5847] ? __lock_acquire+0x10c/0x7d80 [ 152.807146][ T5847] kasan_report+0x117/0x150 [ 152.811686][ T5847] ? __lock_acquire+0x10c/0x7d80 [ 152.816694][ T5847] __lock_acquire+0x10c/0x7d80 [ 152.821550][ T5847] ? hid_destroy_device+0x6a/0x100 [ 152.826737][ T5847] ? verify_lock_unused+0x140/0x140 [ 152.831980][ T5847] ? verify_lock_unused+0x140/0x140 [ 152.837233][ T5847] ? mark_lock+0x94/0x320 [ 152.841605][ T5847] ? verify_lock_unused+0x140/0x140 [ 152.846830][ T5847] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 152.852851][ T5847] lock_acquire+0x19e/0x420 [ 152.857391][ T5847] ? steelseries_remove+0x84/0x180 [ 152.862524][ T5847] ? mark_lock+0x94/0x320 [ 152.866884][ T5847] ? read_lock_is_recursive+0x20/0x20 [ 152.872279][ T5847] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 152.878282][ T5847] ? __lock_acquire+0x7d80/0x7d80 [ 152.883339][ T5847] _raw_spin_lock_irqsave+0xb4/0x100 [ 152.888650][ T5847] ? steelseries_remove+0x84/0x180 [ 152.893784][ T5847] ? _raw_spin_lock+0x40/0x40 [ 152.898492][ T5847] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 152.904426][ T5847] ? _raw_spin_unlock+0x40/0x40 [ 152.909311][ T5847] ? steelseries_probe+0xe00/0xe00 [ 152.914455][ T5847] steelseries_remove+0x84/0x180 [ 152.919449][ T5847] hid_device_remove+0xbe/0x1c0 [ 152.924344][ T5847] ? hid_device_probe+0x5b0/0x5b0 [ 152.929399][ T5847] device_release_driver_internal+0x408/0x6f0 [ 152.935516][ T5847] bus_remove_device+0x43b/0x520 [ 152.940486][ T5847] ? bus_probe_device+0x260/0x260 [ 152.945540][ T5847] ? up_write+0x1be/0x410 [ 152.949892][ T5847] ? kernfs_remove_by_name_ns+0x117/0x150 [ 152.955643][ T5847] device_del+0x51f/0x910 [ 152.960008][ T5847] ? usbhid_disconnect+0x97/0xc0 [ 152.964978][ T5847] ? kill_device+0x160/0x160 [ 152.969599][ T5847] ? _raw_spin_lock_irq+0xbb/0xf0 [ 152.974648][ T5847] hid_destroy_device+0x6a/0x100 [ 152.979622][ T5847] usbhid_disconnect+0x9f/0xc0 [ 152.984413][ T5847] usb_unbind_interface+0x204/0x870 [ 152.989673][ T5847] ? kernfs_remove_by_name_ns+0x117/0x150 [ 152.995426][ T5847] ? usb_driver_release_interface+0x1c0/0x1c0 [ 153.001521][ T5847] device_release_driver_internal+0x458/0x6f0 [ 153.007614][ T5847] bus_remove_device+0x43b/0x520 [ 153.012598][ T5847] ? bus_probe_device+0x260/0x260 [ 153.017664][ T5847] ? up_write+0x1be/0x410 [ 153.022023][ T5847] ? kernfs_remove_by_name_ns+0x117/0x150 [ 153.027793][ T5847] device_del+0x51f/0x910 [ 153.032156][ T5847] ? device_release+0xbc/0x1e0 [ 153.036954][ T5847] ? kill_device+0x160/0x160 [ 153.041662][ T5847] ? kobject_put+0x421/0x450 [ 153.046287][ T5847] usb_disable_device+0x3ee/0x8a0 [ 153.051355][ T5847] usb_disconnect+0x340/0x8a0 [ 153.056066][ T5847] hub_event+0x1d69/0x4a80 [ 153.060528][ T5847] ? hub_post_resume+0x120/0x120 [ 153.065682][ T5847] ? read_lock_is_recursive+0x20/0x20 [ 153.071104][ T5847] ? _raw_spin_unlock_irq+0x23/0x50 [ 153.076345][ T5847] ? process_scheduled_works+0x975/0x1600 [ 153.082100][ T5847] ? process_scheduled_works+0x975/0x1600 [ 153.087855][ T5847] process_scheduled_works+0xa60/0x1600 [ 153.093450][ T5847] ? worker_attach_to_pool+0x370/0x370 [ 153.098972][ T5847] ? assign_work+0x3cc/0x5d0 [ 153.103597][ T5847] worker_thread+0xa5e/0xfe0 [ 153.108221][ T5847] ? _raw_spin_unlock+0x40/0x40 [ 153.113115][ T5847] ? __kthread_parkme+0x71/0x1c0 [ 153.118089][ T5847] kthread+0x2fa/0x390 [ 153.122189][ T5847] ? pr_cont_work+0x550/0x550 [ 153.126906][ T5847] ? kthread_blkcg+0xd0/0xd0 [ 153.131525][ T5847] ret_from_fork+0x48/0x80 [ 153.135967][ T5847] ? kthread_blkcg+0xd0/0xd0 [ 153.140578][ T5847] ret_from_fork_asm+0x11/0x20 [ 153.145379][ T5847] [ 153.148432][ T5847] [ 153.150776][ T5847] Allocated by task 5847: [ 153.155120][ T5847] kasan_set_track+0x4e/0x70 [ 153.159747][ T5847] __kasan_kmalloc+0x8f/0xa0 [ 153.164364][ T5847] steelseries_probe+0x1e1/0xe00 [ 153.169326][ T5847] hid_device_probe+0x283/0x5b0 [ 153.174204][ T5847] really_probe+0x247/0xae0 [ 153.178733][ T5847] __driver_probe_device+0x1f5/0x390 [ 153.184037][ T5847] driver_probe_device+0x4f/0x420 [ 153.189100][ T5847] __device_attach_driver+0x2ca/0x510 [ 153.194497][ T5847] bus_for_each_drv+0x252/0x2e0 [ 153.199380][ T5847] __device_attach+0x2c1/0x420 [ 153.204168][ T5847] bus_probe_device+0x180/0x260 [ 153.209051][ T5847] device_add+0x87c/0xc40 [ 153.213420][ T5847] hid_add_device+0x365/0x500 [ 153.218133][ T5847] usbhid_probe+0xe43/0x1260 [ 153.222769][ T5847] usb_probe_interface+0x6eb/0xcf0 [ 153.227914][ T5847] really_probe+0x247/0xae0 [ 153.232446][ T5847] __driver_probe_device+0x1f5/0x390 [ 153.237752][ T5847] driver_probe_device+0x4f/0x420 [ 153.242835][ T5847] __device_attach_driver+0x2ca/0x510 [ 153.248332][ T5847] bus_for_each_drv+0x252/0x2e0 [ 153.253234][ T5847] __device_attach+0x2c1/0x420 [ 153.258020][ T5847] bus_probe_device+0x180/0x260 [ 153.262958][ T5847] device_add+0x87c/0xc40 [ 153.267314][ T5847] usb_set_configuration+0x1ad0/0x2150 [ 153.272812][ T5847] usb_generic_driver_probe+0x8d/0x150 [ 153.278304][ T5847] usb_probe_device+0x12a/0x260 [ 153.283274][ T5847] really_probe+0x247/0xae0 [ 153.287845][ T5847] __driver_probe_device+0x1f5/0x390 [ 153.293172][ T5847] driver_probe_device+0x4f/0x420 [ 153.298229][ T5847] __device_attach_driver+0x2ca/0x510 [ 153.303630][ T5847] bus_for_each_drv+0x252/0x2e0 [ 153.308544][ T5847] __device_attach+0x2c1/0x420 [ 153.313349][ T5847] bus_probe_device+0x180/0x260 [ 153.318243][ T5847] device_add+0x87c/0xc40 [ 153.322623][ T5847] usb_new_device+0x995/0x1550 [ 153.327418][ T5847] hub_event+0x29d5/0x4a80 [ 153.331952][ T5847] process_scheduled_works+0xa60/0x1600 [ 153.337534][ T5847] worker_thread+0xa5e/0xfe0 [ 153.342150][ T5847] kthread+0x2fa/0x390 [ 153.346241][ T5847] ret_from_fork+0x48/0x80 [ 153.350709][ T5847] ret_from_fork_asm+0x11/0x20 [ 153.355506][ T5847] [ 153.357851][ T5847] Last potentially related work creation: [ 153.363672][ T5847] kasan_save_stack+0x3e/0x60 [ 153.368482][ T5847] __kasan_record_aux_stack+0xaf/0xc0 [ 153.373901][ T5847] insert_work+0x3d/0x310 [ 153.378260][ T5847] __queue_work+0xbfd/0xfd0 [ 153.382792][ T5847] queue_work_on+0x128/0x1f0 [ 153.387420][ T5847] inet6addr_event+0xa0/0xd0 [ 153.392043][ T5847] notifier_call_chain+0x18f/0x380 [ 153.397189][ T5847] atomic_notifier_call_chain+0xda/0x180 [ 153.402857][ T5847] ipv6_add_addr+0xde2/0x10d0 [ 153.407556][ T5847] inet6_addr_add+0x563/0xb30 [ 153.412259][ T5847] inet6_rtm_newaddr+0x6fd/0x9d0 [ 153.417219][ T5847] rtnetlink_rcv_msg+0x843/0xf90 [ 153.422187][ T5847] netlink_rcv_skb+0x235/0x4c0 [ 153.426992][ T5847] netlink_unicast+0x7b1/0x930 [ 153.431784][ T5847] netlink_sendmsg+0x8d0/0xbf0 [ 153.436574][ T5847] __sys_sendto+0x4a9/0x6b0 [ 153.441114][ T5847] __x64_sys_sendto+0xde/0xf0 [ 153.445820][ T5847] do_syscall_64+0x55/0xb0 [ 153.450266][ T5847] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 153.456192][ T5847] [ 153.458548][ T5847] Second to last potentially related work creation: [ 153.465148][ T5847] kasan_save_stack+0x3e/0x60 [ 153.469851][ T5847] __kasan_record_aux_stack+0xaf/0xc0 [ 153.475274][ T5847] insert_work+0x3d/0x310 [ 153.479629][ T5847] __queue_work+0xbfd/0xfd0 [ 153.484155][ T5847] queue_work_on+0x128/0x1f0 [ 153.488767][ T5847] call_usermodehelper_exec+0x283/0x4a0 [ 153.494335][ T5847] kobject_uevent_env+0x684/0x890 [ 153.499381][ T5847] kernel_add_sysfs_param+0xfb/0x120 [ 153.504692][ T5847] param_sysfs_builtin+0x1fd/0x2b0 [ 153.509835][ T5847] param_sysfs_builtin_init+0x2d/0x30 [ 153.515255][ T5847] do_one_initcall+0x242/0x790 [ 153.520048][ T5847] do_initcall_level+0x13d/0x1f0 [ 153.525050][ T5847] do_initcalls+0x69/0xd0 [ 153.529419][ T5847] kernel_init_freeable+0x3d9/0x560 [ 153.534646][ T5847] kernel_init+0x1d/0x1c0 [ 153.538999][ T5847] ret_from_fork+0x48/0x80 [ 153.543463][ T5847] ret_from_fork_asm+0x11/0x20 [ 153.548273][ T5847] [ 153.550611][ T5847] The buggy address belongs to the object at ffff88802efa1100 [ 153.550611][ T5847] which belongs to the cache kmalloc-192 of size 192 [ 153.564688][ T5847] The buggy address is located 72 bytes to the right of [ 153.564688][ T5847] allocated 136-byte region [ffff88802efa1100, ffff88802efa1188) [ 153.579295][ T5847] [ 153.581664][ T5847] The buggy address belongs to the physical page: [ 153.588106][ T5847] page:ffffea0000bbe840 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2efa1 [ 153.598279][ T5847] flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff) [ 153.605845][ T5847] page_type: 0xffffffff() [ 153.610230][ T5847] raw: 00fff00000000800 ffff888017c41a00 ffffea0000b61740 dead000000000002 [ 153.618831][ T5847] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 153.627456][ T5847] page dumped because: kasan: bad access detected [ 153.633908][ T5847] page_owner tracks the page as allocated [ 153.639647][ T5847] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 1, tgid 1 (swapper/0), ts 26780478808, free_ts 0 [ 153.656359][ T5847] post_alloc_hook+0x1c1/0x200 [ 153.661161][ T5847] get_page_from_freelist+0x2181/0x22a0 [ 153.666733][ T5847] __alloc_pages+0x1f0/0x460 [ 153.671346][ T5847] alloc_page_interleave+0x24/0x1e0 [ 153.676568][ T5847] alloc_slab_page+0x5d/0x180 [ 153.681264][ T5847] new_slab+0x87/0x2d0 [ 153.685459][ T5847] ___slab_alloc+0xc5c/0x12f0 [ 153.690158][ T5847] __kmem_cache_alloc_node+0x11f/0x250 [ 153.695658][ T5847] __kmalloc_node_track_caller+0xa4/0x230 [ 153.701420][ T5847] krealloc+0x86/0x120 [ 153.705524][ T5847] add_sysfs_param+0xe8/0x940 [ 153.710236][ T5847] kernel_add_sysfs_param+0xaf/0x120 [ 153.715548][ T5847] param_sysfs_builtin+0x1fd/0x2b0 [ 153.720696][ T5847] param_sysfs_builtin_init+0x2d/0x30 [ 153.726100][ T5847] do_one_initcall+0x242/0x790 [ 153.730906][ T5847] do_initcall_level+0x13d/0x1f0 [ 153.735884][ T5847] page_owner free stack trace missing [ 153.741280][ T5847] [ 153.743623][ T5847] Memory state around the buggy address: [ 153.749287][ T5847] ffff88802efa1080: 00 fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 153.757371][ T5847] ffff88802efa1100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 153.765457][ T5847] >ffff88802efa1180: 00 fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 153.773537][ T5847] ^ [ 153.780237][ T5847] ffff88802efa1200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 153.788331][ T5847] ffff88802efa1280: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 153.796420][ T5847] ================================================================== [ 153.804513][ T5847] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 153.811730][ T5847] CPU: 0 PID: 5847 Comm: kworker/0:5 Not tainted syzkaller #0 [ 153.819204][ T5847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 153.829280][ T5847] Workqueue: usb_hub_wq hub_event [ 153.834343][ T5847] Call Trace: [ 153.837650][ T5847] [ 153.840611][ T5847] dump_stack_lvl+0x18c/0x250 [ 153.845331][ T5847] ? show_regs_print_info+0x20/0x20 [ 153.850561][ T5847] ? load_image+0x420/0x420 [ 153.855102][ T5847] panic+0x2ca/0x720 [ 153.859025][ T5847] ? bpf_jit_dump+0xd0/0xd0 [ 153.863555][ T5847] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 153.869476][ T5847] ? _raw_spin_unlock+0x40/0x40 [ 153.874352][ T5847] ? print_memory_metadata+0x314/0x400 [ 153.879850][ T5847] ? __lock_acquire+0x10c/0x7d80 [ 153.884814][ T5847] check_panic_on_warn+0x84/0xa0 [ 153.889781][ T5847] ? __lock_acquire+0x10c/0x7d80 [ 153.894745][ T5847] end_report+0x6f/0x130 [ 153.899012][ T5847] kasan_report+0x128/0x150 [ 153.903543][ T5847] ? __lock_acquire+0x10c/0x7d80 [ 153.908539][ T5847] __lock_acquire+0x10c/0x7d80 [ 153.913348][ T5847] ? hid_destroy_device+0x6a/0x100 [ 153.918506][ T5847] ? verify_lock_unused+0x140/0x140 [ 153.923739][ T5847] ? verify_lock_unused+0x140/0x140 [ 153.928968][ T5847] ? mark_lock+0x94/0x320 [ 153.933345][ T5847] ? verify_lock_unused+0x140/0x140 [ 153.938581][ T5847] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 153.944607][ T5847] lock_acquire+0x19e/0x420 [ 153.949151][ T5847] ? steelseries_remove+0x84/0x180 [ 153.954293][ T5847] ? mark_lock+0x94/0x320 [ 153.958659][ T5847] ? read_lock_is_recursive+0x20/0x20 [ 153.964065][ T5847] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 153.970076][ T5847] ? __lock_acquire+0x7d80/0x7d80 [ 153.975130][ T5847] _raw_spin_lock_irqsave+0xb4/0x100 [ 153.980451][ T5847] ? steelseries_remove+0x84/0x180 [ 153.985582][ T5847] ? _raw_spin_lock+0x40/0x40 [ 153.990280][ T5847] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 153.996202][ T5847] ? _raw_spin_unlock+0x40/0x40 [ 154.001084][ T5847] ? steelseries_probe+0xe00/0xe00 [ 154.006216][ T5847] steelseries_remove+0x84/0x180 [ 154.011179][ T5847] hid_device_remove+0xbe/0x1c0 [ 154.016066][ T5847] ? hid_device_probe+0x5b0/0x5b0 [ 154.021120][ T5847] device_release_driver_internal+0x408/0x6f0 [ 154.027230][ T5847] bus_remove_device+0x43b/0x520 [ 154.032200][ T5847] ? bus_probe_device+0x260/0x260 [ 154.037270][ T5847] ? up_write+0x1be/0x410 [ 154.041639][ T5847] ? kernfs_remove_by_name_ns+0x117/0x150 [ 154.047407][ T5847] device_del+0x51f/0x910 [ 154.051768][ T5847] ? usbhid_disconnect+0x97/0xc0 [ 154.056735][ T5847] ? kill_device+0x160/0x160 [ 154.061364][ T5847] ? _raw_spin_lock_irq+0xbb/0xf0 [ 154.066431][ T5847] hid_destroy_device+0x6a/0x100 [ 154.071412][ T5847] usbhid_disconnect+0x9f/0xc0 [ 154.076221][ T5847] usb_unbind_interface+0x204/0x870 [ 154.081482][ T5847] ? kernfs_remove_by_name_ns+0x117/0x150 [ 154.087256][ T5847] ? usb_driver_release_interface+0x1c0/0x1c0 [ 154.093377][ T5847] device_release_driver_internal+0x458/0x6f0 [ 154.099495][ T5847] bus_remove_device+0x43b/0x520 [ 154.104485][ T5847] ? bus_probe_device+0x260/0x260 [ 154.109920][ T5847] ? up_write+0x1be/0x410 [ 154.114357][ T5847] ? kernfs_remove_by_name_ns+0x117/0x150 [ 154.120120][ T5847] device_del+0x51f/0x910 [ 154.124489][ T5847] ? device_release+0xbc/0x1e0 [ 154.129300][ T5847] ? kill_device+0x160/0x160 [ 154.133932][ T5847] ? kobject_put+0x421/0x450 [ 154.138558][ T5847] usb_disable_device+0x3ee/0x8a0 [ 154.143656][ T5847] usb_disconnect+0x340/0x8a0 [ 154.148381][ T5847] hub_event+0x1d69/0x4a80 [ 154.152873][ T5847] ? hub_post_resume+0x120/0x120 [ 154.157856][ T5847] ? read_lock_is_recursive+0x20/0x20 [ 154.163270][ T5847] ? _raw_spin_unlock_irq+0x23/0x50 [ 154.168511][ T5847] ? process_scheduled_works+0x975/0x1600 [ 154.174269][ T5847] ? process_scheduled_works+0x975/0x1600 [ 154.180033][ T5847] process_scheduled_works+0xa60/0x1600 [ 154.185636][ T5847] ? worker_attach_to_pool+0x370/0x370 [ 154.191136][ T5847] ? assign_work+0x3cc/0x5d0 [ 154.195765][ T5847] worker_thread+0xa5e/0xfe0 [ 154.200401][ T5847] ? _raw_spin_unlock+0x40/0x40 [ 154.205306][ T5847] ? __kthread_parkme+0x71/0x1c0 [ 154.210284][ T5847] kthread+0x2fa/0x390 [ 154.214391][ T5847] ? pr_cont_work+0x550/0x550 [ 154.219107][ T5847] ? kthread_blkcg+0xd0/0xd0 [ 154.223729][ T5847] ret_from_fork+0x48/0x80 [ 154.228184][ T5847] ? kthread_blkcg+0xd0/0xd0 [ 154.232807][ T5847] ret_from_fork_asm+0x11/0x20 [ 154.237633][ T5847] [ 154.241272][ T5847] Kernel Offset: disabled [ 154.245618][ T5847] Rebooting in 86400 seconds..