last executing test programs: 42.299513346s ago: executing program 3 (id=25): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b703000000000000a500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x18, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000780)=@generic={0x0, r3}, 0x18) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000340)={r2, 0x0, 0x0}, 0x10) 41.787439141s ago: executing program 3 (id=29): ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f00000000c0)={0x1, 0xa27, 0x0, &(0x7f0000000280)}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040)) ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040)={0x7, 0x4, 0x0, 0x125, 0x9}) 41.515793393s ago: executing program 3 (id=31): syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x18410, &(0x7f0000000180)=ANY=[], 0xfd, 0x4b1, &(0x7f0000001d00)="$eJzs201sVNUbx/HfM3c6TIf+/5YXCxgCTTSxgkBfsEBqYnix0YQXLVQj8SWVTrHSdkinKCUgLNWdC5Yu3bpwZdwaEpfGhcEYFibIxs2sxB3m3LlvM5TOjG1nKP1+CJx7zzx3OOc8c+ecM5kRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQjrx6uLfPWt0KAADQTCdPj/QOMP8DALCmnGH/DwAAsJaYPP0u054LJTvhn5dlj0/OXLo8emx44cvaTaaUPD/e/c329Q/sf2nwwMGwXPz65bZNp06fOdx9tDB9cTZfLObHu0dnJs8VxvN1P8NSr6+2yx+A7ukLl8YnJord/XsHKh6+3Hlv3fquzqHB945mwtjRY8PDpxMx6bb//L8/5FEr/Iw8vSDTx99/ayclpbT0sajx2llp7X4ndvmdGD027HdkanJsZs49aKkgKlU5JplwjJqQiyVJSa5dllmePVubPP0g05F9JTslyQvHYbf/wXBd7WmFtNu6SurRKsjZY2ydPH0g0619nXojGFc//xnpaqsbhxWXDu7/gpXsTf/9wN1P7m3z+Fvdr89MFBKxlgruqNU+PzTTY/7elJWnU/4dX7IR7Wx1c9Bk7fI0LVPmq0/8dYX8delTQwd27DyUXGFsqfE8LnZvcHPVMye3BUsHS7k/y98v1Cdrnv6U6f5vWf+8J5wDpBsPFrvwj6Y0DyvNPE3J9M+1klnVvtRL7O8jq33uX9n2t2ePFi7Oz06e/2huwcdz2cMfFudmx84t/HB57+ola2rtY6ulGtuS5ay84/v801J0XbAH+F/5LG7NN1fj10JPVRlKvn7qOa57F9vAOsq1yczTXZkm3t9anmeUa3hs1gKX/2GZiqWfLcx0kP90+SyR/5fj8ctaZRnxc/v/8uda4Vpi29nNj6pfify7Nrn8vyPTkb+3Bp9plPPvVcW6uC6Z3r25PYhLZVxcOuxO+RknJqfyvS72gUwbfwpj5cfmgthNcWyfiy3K9MWtytj1QezmOLbfxd6W6c6vC8c+HccOuNh5l6873WFszsXuCGK74ti95wpT47WG1eW/X6a3r79mYZ8fmf/E/X+jqow8lPPFj5cr/52JuhtBXs8G+U/XyP+XMs3/tT3stz/24ctqg/9vnH+3Vv7uZmVsuKHcGMf21dutVnP53yDTvVduR30O+hacxhlK5v+ZdGUZjWuL8r8hUdcZtCvT4FisRcX5KxfGpqbysxxwwAEH0UGr35nQDG7+H3Gz+qBn4TommP87ymfxiun+Z/H8P1RVRlo0/29M1A0Fq5a2tJSdm77YtkXKFuev7JmcHjufP5+fGdg/2Nt/aH/vwMG2TLi4i4/qHrsngcv/bpmu/fhLtI+pXP8tvP7PVZWRFuV/U7JPFeuauodiTXL575Bp8O7taL+52Po/3P/3PFtZRvdfi/K/OVHXGbSro8GxAAAAAAAAAAAAAAAAAIDVJGeenpPp8siLFv6GqJ7v/41XlZHl//5X+YfJNb7/1ZWoG2/S7xoaGmgAAAAAAAAAAIAmScnT1zI9r5JddxUd0olkiSfavwEAAP//G6xIAA==") ioctl$sock_netdev_private(0xffffffffffffffff, 0x8922, &(0x7f0000000100)='Br') syz_mount_image$hfsplus(&(0x7f0000000400), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000440)=ANY=[], 0x81, 0x710, &(0x7f00000019c0)="$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") writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='.\x00') 40.737957209s ago: executing program 3 (id=33): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000a00)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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", @ANYRESDEC, @ANYBLOB="b13c376fdd66a7d639c02532bf04ce21f7d86f67914cd24c1a16c85d000e56c7368c5baa847b8d1390c871ca73979c130e2e8dba52cb6e29e7ef9ce8e7f092a32dd4dff5839727b3f591e388d041527960a1e20a1e133b12dfc18f1f732ea8614d5847cd54edc1c0aa5422ef3bb9508fdbebcc135de98954f1d9fbffbb190a49b16c1275d4830b8a85acf0b55c1e19533fb1ae4ca8f80bdefda060e3e6837a10fc794ecf34ec4b7a7c76402285c415d76a33d64d218596c8126c7b35076511e52e235fb9be2d0a381962e129748855c39c84436bd553b25d7f0ae7e35b54eebdb608625a42b589438a35d78997"], 0xff, 0x2cc, &(0x7f0000001500)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x9) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0xa27b734c1a0bc97) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4f1ce5d29c3ee5e5c3676345a41499db7aac63a01010000000000004faa2ae2c08485d90000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100173400ffffff00f7ffffff000000f3e7f20000000200000000000600", "b732673e181c208227fffff2e500000f0000000e000200", [0x40000000006]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) 40.143331498s ago: executing program 3 (id=35): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x60, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r2, {0x2, 0x2}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_META={0x1c, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x1}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x86, 0x1}, {0x5, 0x7}}}, @TCA_EM_META_LVALUE={0x4}]}}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x200450c0}, 0x4880) 39.642622631s ago: executing program 3 (id=36): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) writev(r0, &(0x7f0000000740)=[{&(0x7f0000000380)='h', 0x1}], 0x1) 39.195419882s ago: executing program 32 (id=36): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) writev(r0, &(0x7f0000000740)=[{&(0x7f0000000380)='h', 0x1}], 0x1) 14.28252308s ago: executing program 0 (id=111): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000007540)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x7, 0x4}, {}, {0xc, 0x6}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_ACT={0x4}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}, @TCA_BPF_FD={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44000}, 0x20000000) 10.86519043s ago: executing program 0 (id=121): openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r2, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000000)={0x600, 0x1000000}) 8.96423857s ago: executing program 0 (id=130): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x62}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, 0x0, &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x7e, &(0x7f0000000080)={@random="79ee7c2eea00", @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x48, 0x11, 0x0, @private1, @mcast2, {[], {0x4e1d, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x1, "dc521c259b538a2bf2a113dc2eeec0a072edf20b6d59027f", "d646c098ccc27eb8549d66e700000000000005f9546e551af9e59631718ba089"}}}}}}}, 0x0) 8.666233274s ago: executing program 0 (id=131): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000540)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r1, @ANYBLOB=',dmask=00000000000000000000152,fmask=00000000000000000000006,gid=', @ANYRESHEX=r2, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x81, 0x14f3, &(0x7f0000001580)="$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") r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000040)='./file0/../file0/../file0/../file0/file0\x00') pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', 0x0) 8.125335819s ago: executing program 0 (id=133): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f00000001c0)=[@code={0xa, 0x75, {"f326460f019f00200000420f01c5470f01c248b8f61e0000000000000f23c80f21f835080030000f23f8c462bd9791040000000f07c7442400e3420000c744240264000000c7442406000000000f011c24c421e3d040000f009f082c000066660f388000"}}], 0x75}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.801710924s ago: executing program 2 (id=136): ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000080)=0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="100804002010000024001280110001006272696467655f736c618c65000000000c000580050019"], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0xd, 0x8563, 0x5}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200040d4}, 0x24044040) 7.356229165s ago: executing program 2 (id=137): socket$inet6_sctp(0xa, 0x1, 0x84) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x143082, 0x0) epoll_create1(0x0) landlock_create_ruleset(&(0x7f0000000040)={0x1801a, 0x2, 0x3}, 0x18, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff4000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f00000005c0), 0x0) futex(&(0x7f000000cffc)=0x1, 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000140)=@assoc_value, &(0x7f0000000300)=0x8) syz_usb_connect(0x3, 0x3f, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0xc048aec8, &(0x7f0000000700)={0x6, 0x0, @ioapic={0x4, 0x2, 0x100, 0x1, 0x0, [{0x1, 0x4, 0x5, '\x00', 0x81}, {0x7, 0x45, 0x0, '\x00', 0x7f}, {0x6, 0x5, 0x2, '\x00', 0x1}, {0xc6, 0x4, 0x3, '\x00', 0xf5}, {0x4, 0x0, 0xd, '\x00', 0x7}, {0x3, 0x0, 0x3e, '\x00', 0xa}, {0x81, 0x7, 0x5, '\x00', 0x9}, {0x1, 0xe, 0x6}, {0x6, 0x9, 0xb}, {0x2, 0x9, 0x2, '\x00', 0x5}, {0x4, 0x10, 0xc, '\x00', 0x4}, {0x1, 0x0, 0x0, '\x00', 0x3}, {0x4, 0x0, 0xde, '\x00', 0x80}, {0x2, 0x16, 0x40, '\x00', 0x9}, {0x80, 0x9, 0x6, '\x00', 0x49}, {0x2, 0x5, 0xa, '\x00', 0x4}, {0x60, 0x3, 0x5, '\x00', 0xb}, {0x17, 0x1, 0x9, '\x00', 0xfe}, {0x8c, 0x3, 0x7f}, {0x9, 0x0, 0x3, '\x00', 0x7}, {0x92, 0x4, 0xff, '\x00', 0x2}, {0x9, 0x10, 0x4, '\x00', 0x7}, {0x6, 0x9, 0x1}, {0x40, 0x0, 0x7, '\x00', 0xe}]}}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0], 0x64}}, 0x24000000) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0xfffffffffffffd47, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000006a00010028bd7000fddbdf25000000000000000008000100010000a1072feb7e86342a00"], 0x20}, 0x1, 0x0, 0x0, 0x20008005}, 0x44) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f0000000180)) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in=@multicast2, @in6=@loopback, 0x4000, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0xff, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in6=@mcast1, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 5.662460404s ago: executing program 0 (id=143): ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000080)={0xff, 0x0, 0x2, 0x9e93, 0x17, "9006a2c205000000800000000d080000000056"}) unshare(0x22020400) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) msgrcv(0x0, 0x0, 0x0, 0x1, 0x4800) msgsnd(0x0, &(0x7f0000000500)={0x0, "2e890199bd0471af35c84564832b05682fd8026c4e5e2806887c0cada121a9a03024b474b71636a9ea955622b2bd0d7bb8ab4f8f6daaebbf5b035c543c1fc5b71fdac7757e4fdf3fe19fc3369966dd81db3bfb2731d71f978e200e3a6c4429d7dba51786bf0d8b6f94168ca54891a196c2920eeffae0097ac2e253f0d747dabc2971ae4ef7a9a34941c57788d61e22b4dc2a568a1a4708e587ddb22330ef0ee0fbe157ddd2cd250f9f7e0adc19ad55a14d5f45c532b45cdce13d8483c405f6b42652d195b12d8edbcc428c0f35f72c1662b5f8eebad5ff29c160e2370321c6ba100b7c"}, 0xeb, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x18, 0x1411, 0x1, 0xfffffffc, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) shmctl$SHM_LOCK(0x0, 0xb) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) shmat(0x0, &(0x7f00007d0000/0x2000)=nil, 0x6000) shmctl$SHM_UNLOCK(0x0, 0xc) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000001c0)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000100)=ANY=[@ANYBLOB="b245030000"]) 5.103930581s ago: executing program 33 (id=143): ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000080)={0xff, 0x0, 0x2, 0x9e93, 0x17, "9006a2c205000000800000000d080000000056"}) unshare(0x22020400) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) msgrcv(0x0, 0x0, 0x0, 0x1, 0x4800) msgsnd(0x0, &(0x7f0000000500)={0x0, "2e890199bd0471af35c84564832b05682fd8026c4e5e2806887c0cada121a9a03024b474b71636a9ea955622b2bd0d7bb8ab4f8f6daaebbf5b035c543c1fc5b71fdac7757e4fdf3fe19fc3369966dd81db3bfb2731d71f978e200e3a6c4429d7dba51786bf0d8b6f94168ca54891a196c2920eeffae0097ac2e253f0d747dabc2971ae4ef7a9a34941c57788d61e22b4dc2a568a1a4708e587ddb22330ef0ee0fbe157ddd2cd250f9f7e0adc19ad55a14d5f45c532b45cdce13d8483c405f6b42652d195b12d8edbcc428c0f35f72c1662b5f8eebad5ff29c160e2370321c6ba100b7c"}, 0xeb, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x18, 0x1411, 0x1, 0xfffffffc, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) shmctl$SHM_LOCK(0x0, 0xb) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) shmat(0x0, &(0x7f00007d0000/0x2000)=nil, 0x6000) shmctl$SHM_UNLOCK(0x0, 0xc) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000001c0)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000100)=ANY=[@ANYBLOB="b245030000"]) 5.096191451s ago: executing program 4 (id=147): syz_mount_image$fuse(0x0, &(0x7f00000025c0)='./file0\x00', 0x8, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./bus\x00', 0xc3020, 0x0, 0x1, 0x0, 0x0) r0 = inotify_init1(0x80000) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x3000100) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x4004, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') symlinkat(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 4.532768948s ago: executing program 4 (id=149): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) syz_mount_image$hfsplus(&(0x7f0000000200), &(0x7f00000001c0)='./file1\x00', 0x10, &(0x7f0000000040)=ANY=[], 0x1, 0x6c8, &(0x7f0000000dc0)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) sync() r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x188000, 0x85) lseek(r0, 0x1d, 0x1) getdents64(r0, 0x0, 0x4f) 4.026354621s ago: executing program 2 (id=150): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000011c0)=@newtclass={0x464, 0x28, 0x601, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x438, 0x2, [@TCA_HTB_CTAB={0x404, 0x3, [0x0, 0xff, 0xacd, 0x80, 0xfffffffa, 0x1000, 0x7, 0x2, 0x2, 0x0, 0x31, 0x3, 0x40, 0x0, 0x53c9, 0x800, 0x0, 0x7, 0xf6d6, 0x1, 0x1, 0x2, 0x9, 0x2, 0x63d5, 0x9, 0x8, 0x1655, 0x1db0, 0x4, 0xc055, 0x1, 0xffffffff, 0x7fffffff, 0x2, 0x8001, 0x2b, 0x80000000, 0x0, 0x9abb, 0x0, 0xec15, 0x10, 0x3, 0x3, 0x4, 0x3, 0x40, 0x2, 0x2, 0x2, 0x4, 0x4, 0x10, 0x1, 0x99b, 0x5, 0x20a, 0x20000, 0x3ff, 0x80000001, 0x3, 0x0, 0x2, 0x0, 0x8, 0x272, 0x8, 0x70000000, 0xff, 0x8, 0x0, 0x8, 0x7, 0xaf, 0x1, 0xa085, 0xfffffff4, 0xd0bb, 0x7, 0x7, 0x6, 0x1, 0x0, 0x6, 0xfff000, 0x0, 0x45d26f95, 0x0, 0x7fffffff, 0x3ff, 0x6, 0x5, 0x0, 0x4, 0x5, 0x3, 0x4, 0x0, 0x0, 0xfffff94d, 0x8, 0x4, 0x4, 0xffffffaa, 0xd, 0xb, 0xff, 0xfffffffc, 0xfff, 0x5, 0x3, 0x4, 0xe246, 0x1, 0x5, 0x9, 0x4, 0x5, 0x5, 0x6, 0xa, 0x7, 0xe255, 0x6, 0x8, 0x800, 0x9, 0xffffffff, 0xfffffffe, 0x5, 0x699, 0x1, 0x4, 0x5, 0x42b9, 0x6, 0xf, 0x3, 0x200, 0x4, 0x8, 0x0, 0xffff, 0x10000, 0x10, 0xcca, 0x800, 0x8, 0xff, 0x8000, 0x8, 0x5, 0x80, 0xb03, 0xb, 0x78a, 0x48, 0x5, 0x1, 0xfff, 0xffffca00, 0xd, 0x8, 0xfff, 0x80, 0xd08, 0x6, 0x53f, 0xfffffffc, 0x44d, 0x1, 0x23d, 0x5, 0x400, 0x1, 0x2, 0x9, 0x0, 0x7, 0x3, 0xb4, 0x6b, 0xd, 0x2, 0x0, 0x9598, 0xd0000000, 0x3, 0x400, 0x10001, 0x7, 0x7, 0x0, 0x7, 0x7ff, 0x7, 0x7f, 0x5, 0xfffffff8, 0x8, 0x4, 0x6, 0x1, 0x8, 0x80000001, 0x6, 0xfffffffb, 0x1, 0x2, 0xfffffffe, 0x2, 0x3ff, 0x9, 0x3, 0x7fffffff, 0x3, 0x3, 0x0, 0x7, 0x5, 0x7bea, 0x7fffffff, 0xa, 0xff, 0x2, 0x6, 0x7ad, 0x6, 0xff, 0x75, 0x7ff, 0x2, 0x5, 0x3, 0x4, 0x6, 0x3, 0x5, 0x9, 0xff, 0x10, 0x0, 0x3, 0x400, 0x7fff, 0xb, 0x8, 0x3, 0x8, 0x1, 0x8001, 0x2a, 0x3, 0x1, 0x7]}, @TCA_HTB_PARMS={0x30, 0x1, {{0x9, 0x1, 0x6, 0x7, 0x74, 0x2028}, {0x7, 0x0, 0x1, 0x7fff, 0x0, 0x2}, 0x7, 0x3, 0x1c, 0x1ed, 0xf5}}]}}]}, 0x464}}, 0x0) 3.677183628s ago: executing program 4 (id=151): mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000600)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdir(&(0x7f0000000700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1ff) mkdir(&(0x7f0000000800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/f\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/f/dwFrameInterval\x00', 0x1, 0x0) write(r0, &(0x7f0000000a00)="19", 0x1) syz_emit_ethernet(0x76, &(0x7f0000005d00)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd63269fe000403a01fc010000000000000000000000000000fe8000000000000000000000000000aa03019078020000006339afb8f6480001200100000000000000000000000000020001000000000000000000000000000111000400fc68050032000400ff000500"], 0x0) 3.253371687s ago: executing program 4 (id=152): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0xfffffffffffffdf5, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x2596, &(0x7f0000005100)=ANY=[], 0x0) 2.868733546s ago: executing program 1 (id=153): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a3000000000280000000200000000000000000000000500000108000b40000000000900010073797a300000000014"], 0x9c}}, 0x0) 2.780436579s ago: executing program 1 (id=154): openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_PANTHOR_GROUP_GET_STATE(0xffffffffffffffff, 0xc010644a, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0xd, @loopback, 0xc}], 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) close(0x3) 2.262267984s ago: executing program 1 (id=155): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000200)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.idle_time\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x2800) read$char_usb(r0, &(0x7f0000000280)=""/55, 0x37) 2.13035816s ago: executing program 1 (id=156): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') write$apparmor_current(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="6368616e67656861742030783b050000000000000038d5e307ea5d0a955e5a303030303030303030305e2f06e90a660972fa3e6b803c2e6d51993c1b9277025d85984e7d02204d7677a03b073a6d9bd55acdc5541d1a2286fdaa477842563be16ef5b71a82499dc257bcf2b61a2bb4707c7fd03f7b9191714d5c227b89e02a44da69243933"], 0x1d) preadv(r0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000002c0)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[], 0x6a) 1.174402935s ago: executing program 1 (id=157): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) close(0xffffffffffffffff) symlinkat(&(0x7f0000000440)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)='dummy_udc.0\n', 0xc) 1.102439368s ago: executing program 4 (id=158): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x800) r1 = syz_io_uring_setup(0xf0d, &(0x7f0000000400)={0x0, 0x595d, 0x80, 0x0, 0x1000052}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x3208}}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) read$FUSE(r5, &(0x7f0000004500)={0x2020}, 0xfffffe0c) 1.095073939s ago: executing program 2 (id=159): r0 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') openat(r0, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000800)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x0, 0x0) read(r1, &(0x7f0000000c00)=""/4096, 0x1000) 735.121536ms ago: executing program 2 (id=160): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x2bb}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 628.81068ms ago: executing program 1 (id=161): r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x8000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x1) mlock(&(0x7f0000341000/0x4000)=nil, 0x4000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) 538.157864ms ago: executing program 4 (id=162): r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000040)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000880)=@NCI_OP_NFCEE_DISCOVER_NTF={0x2, 0x1, 0x3, 0x0, 0x5, {0x1, 0x9, "189bcc"}}, 0x8) write$nci(r0, &(0x7f0000000300)=@NCI_OP_RF_DISCOVER_MAP_RSP={0x1, 0x0, 0x2, 0x0, 0x1}, 0x4) write$nci(r0, &(0x7f0000000300)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x2}, 0x5) 0s ago: executing program 2 (id=163): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4002, &(0x7f0000000000)={[{@test_dummy_encryption_v1}, {@nombcache}]}, 0x1, 0xbe7, &(0x7f0000000fc0)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0xbe, 0x0, &(0x7f00000007c0)) chdir(&(0x7f0000000040)='./bus\x00') syz_mount_image$vfat(&(0x7f0000006600), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804051, 0x0, 0x1, 0x0, &(0x7f0000000cc0)) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x41e90000) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.51' (ED25519) to the list of known hosts. [ 78.548665][ T5765] cgroup: Unknown subsys name 'net' [ 78.687839][ T5765] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 80.406421][ T5765] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 82.890677][ T5779] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.899849][ T5783] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.920419][ T5783] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.939736][ T5783] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.948426][ T5783] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.956586][ T5783] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 82.964347][ T5783] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 82.984070][ T5784] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.999520][ T5784] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.012064][ T5783] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.019931][ T5783] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 83.029266][ T5783] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.037463][ T5783] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.046088][ T5783] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.055607][ T5783] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.063010][ T5784] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.071659][ T5784] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.079596][ T5783] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.084422][ T5784] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.095321][ T5784] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.103222][ T5784] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 83.110652][ T5784] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.119766][ T5784] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 83.127160][ T5784] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.571003][ T5786] chnl_net:caif_netlink_parms(): no params data found [ 83.605893][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 83.789040][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 83.806840][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.814803][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.822494][ T5786] bridge_slave_0: entered allmulticast mode [ 83.829962][ T5786] bridge_slave_0: entered promiscuous mode [ 83.844174][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.851408][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.858589][ T5786] bridge_slave_1: entered allmulticast mode [ 83.865897][ T5786] bridge_slave_1: entered promiscuous mode [ 83.905622][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.912982][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.920302][ T5777] bridge_slave_0: entered allmulticast mode [ 83.928095][ T5777] bridge_slave_0: entered promiscuous mode [ 83.935498][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 83.981675][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.988832][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.996697][ T5777] bridge_slave_1: entered allmulticast mode [ 84.004119][ T5777] bridge_slave_1: entered promiscuous mode [ 84.089889][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.101982][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.136532][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.148761][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.176266][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.183676][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.191072][ T5781] bridge_slave_0: entered allmulticast mode [ 84.198148][ T5781] bridge_slave_0: entered promiscuous mode [ 84.206981][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.214193][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.221735][ T5781] bridge_slave_1: entered allmulticast mode [ 84.228984][ T5781] bridge_slave_1: entered promiscuous mode [ 84.288445][ T5786] team0: Port device team_slave_0 added [ 84.332823][ T5777] team0: Port device team_slave_0 added [ 84.339084][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.346372][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.354253][ T5785] bridge_slave_0: entered allmulticast mode [ 84.361784][ T5785] bridge_slave_0: entered promiscuous mode [ 84.371331][ T5786] team0: Port device team_slave_1 added [ 84.378183][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.385941][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.393364][ T5785] bridge_slave_1: entered allmulticast mode [ 84.400865][ T5785] bridge_slave_1: entered promiscuous mode [ 84.410291][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.421284][ T5777] team0: Port device team_slave_1 added [ 84.429727][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.496607][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.503843][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.530123][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.544292][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.551535][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.577838][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.615918][ T5781] team0: Port device team_slave_0 added [ 84.665655][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.681831][ T5781] team0: Port device team_slave_1 added [ 84.688388][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.696423][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.723042][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.746940][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.782082][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.789105][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.818485][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.835618][ T5786] hsr_slave_0: entered promiscuous mode [ 84.842516][ T5786] hsr_slave_1: entered promiscuous mode [ 84.886831][ T5785] team0: Port device team_slave_0 added [ 84.894368][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.901710][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.927726][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.941193][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.948188][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.974504][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.999310][ T5785] team0: Port device team_slave_1 added [ 85.065729][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.073034][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.099505][ T5784] Bluetooth: hci1: command tx timeout [ 85.107871][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.125990][ T5777] hsr_slave_0: entered promiscuous mode [ 85.132542][ T5777] hsr_slave_1: entered promiscuous mode [ 85.138754][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.146740][ T5777] Cannot create hsr debugfs directory [ 85.152700][ T5779] Bluetooth: hci0: command tx timeout [ 85.158525][ T5784] Bluetooth: hci2: command tx timeout [ 85.175378][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.182703][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.208903][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.229927][ T5784] Bluetooth: hci3: command tx timeout [ 85.290106][ T5781] hsr_slave_0: entered promiscuous mode [ 85.300077][ T5781] hsr_slave_1: entered promiscuous mode [ 85.306306][ T5781] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.314216][ T5781] Cannot create hsr debugfs directory [ 85.418550][ T5785] hsr_slave_0: entered promiscuous mode [ 85.425129][ T5785] hsr_slave_1: entered promiscuous mode [ 85.432441][ T5785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.440516][ T5785] Cannot create hsr debugfs directory [ 85.803754][ T5786] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.816594][ T5786] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.828470][ T5786] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.842464][ T5786] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.938148][ T5777] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 85.958040][ T5777] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 85.980065][ T5777] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 85.991540][ T5777] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.054832][ T5781] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 86.083679][ T5781] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 86.103439][ T5781] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 86.156415][ T5781] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 86.207143][ T5785] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.231288][ T5785] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.252476][ T5785] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.265534][ T5785] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.295260][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.380926][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.404003][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.437995][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.445565][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.464006][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.500171][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.507349][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.517435][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.524645][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.549950][ T1078] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.557364][ T1078] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.598490][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.688976][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.720638][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.753497][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.760682][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.786608][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.793850][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.881653][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.912709][ T1314] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.920134][ T1314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.979214][ T2984] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.986506][ T2984] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.154417][ T5784] Bluetooth: hci1: command tx timeout [ 87.229831][ T5784] Bluetooth: hci2: command tx timeout [ 87.235316][ T5784] Bluetooth: hci0: command tx timeout [ 87.305356][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.319713][ T5784] Bluetooth: hci3: command tx timeout [ 87.447565][ T5777] veth0_vlan: entered promiscuous mode [ 87.492411][ T5777] veth1_vlan: entered promiscuous mode [ 87.563829][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.636957][ T5777] veth0_macvtap: entered promiscuous mode [ 87.674384][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.722625][ T5777] veth1_macvtap: entered promiscuous mode [ 87.826382][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.842395][ T5786] veth0_vlan: entered promiscuous mode [ 87.859582][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.877250][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.931949][ T5786] veth1_vlan: entered promiscuous mode [ 87.954285][ T5777] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.966211][ T5777] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.975568][ T5777] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.986652][ T5777] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.027013][ T5781] veth0_vlan: entered promiscuous mode [ 88.147046][ T5781] veth1_vlan: entered promiscuous mode [ 88.157127][ T5785] veth0_vlan: entered promiscuous mode [ 88.173623][ T5786] veth0_macvtap: entered promiscuous mode [ 88.209287][ T5786] veth1_macvtap: entered promiscuous mode [ 88.233395][ T5785] veth1_vlan: entered promiscuous mode [ 88.298284][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.312051][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.324965][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.376054][ T1314] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.387159][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.397822][ T1314] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.415214][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.427630][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.491758][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.502305][ T5781] veth0_macvtap: entered promiscuous mode [ 88.516266][ T5786] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.525218][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.535309][ T5786] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.544446][ T5786] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.553480][ T5786] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.574950][ T5781] veth1_macvtap: entered promiscuous mode [ 88.586163][ T5785] veth0_macvtap: entered promiscuous mode [ 88.611600][ T5785] veth1_macvtap: entered promiscuous mode [ 88.674014][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.692230][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.702633][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.718499][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.731075][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.744555][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.759279][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.773014][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.784031][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.794960][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.805914][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.818698][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.843960][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.855193][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.865416][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.880075][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.892683][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.922886][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.934595][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.945497][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.958039][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.968251][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.980246][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.992925][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.017597][ T5785] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.028510][ T5785] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.037921][ T5785] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.047618][ T5785] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.080441][ T2984] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.088343][ T2984] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.154033][ T5781] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.193090][ T5781] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.203586][ T5781] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.213605][ T5781] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.232025][ T5784] Bluetooth: hci1: command tx timeout [ 89.238003][ T5842] syz.1.2[5842]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 89.308044][ T2984] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.320232][ T5784] Bluetooth: hci0: command tx timeout [ 89.326215][ T5779] Bluetooth: hci2: command tx timeout [ 89.349932][ T2984] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.386588][ T1078] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.399493][ T5784] Bluetooth: hci3: command tx timeout [ 89.446760][ T1078] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.557620][ T1078] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.588054][ T1078] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.628820][ T1078] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.666263][ T1078] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.788020][ T1078] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.827151][ T1078] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.006125][ T5853] bridge0: port 3(vlan2) entered blocking state [ 90.031227][ T5853] bridge0: port 3(vlan2) entered disabled state [ 90.050250][ T5853] vlan2: entered allmulticast mode [ 90.060550][ T5853] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 90.078485][ T5853] vlan2: entered promiscuous mode [ 90.084112][ T5853] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 90.233828][ T5857] loop1: detected capacity change from 0 to 2048 [ 90.266957][ T5857] ======================================================= [ 90.266957][ T5857] WARNING: The mand mount option has been deprecated and [ 90.266957][ T5857] and is ignored by this kernel. Remove the mand [ 90.266957][ T5857] option from the mount to silence this warning. [ 90.266957][ T5857] ======================================================= [ 90.406023][ T5857] EXT4-fs: Ignoring removed nomblk_io_submit option [ 90.420520][ T5857] EXT4-fs: inline encryption not supported [ 90.486141][ T5857] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.745529][ T5872] loop2: detected capacity change from 0 to 128 [ 90.782155][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.847947][ T5875] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 90.866734][ T5872] FAT-fs (loop2): bogus number of reserved sectors [ 90.879009][ T5872] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 90.908299][ T5872] FAT-fs (loop2): Can't find a valid FAT filesystem [ 91.190126][ T5885] loop2: detected capacity change from 0 to 512 [ 91.252836][ T5885] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.310281][ T5784] Bluetooth: hci1: command tx timeout [ 91.390364][ T5784] Bluetooth: hci0: command tx timeout [ 91.392676][ T5779] Bluetooth: hci2: command tx timeout [ 91.396440][ T5885] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 91.465115][ T5893] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2914234730 (93255511360 ns) > initial count (12345443520 ns). Using initial count to start timer. [ 91.489098][ T5779] Bluetooth: hci3: command tx timeout [ 91.608231][ T28] audit: type=1800 audit(1790185767.032:2): pid=5885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.16" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 91.699849][ T5837] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 91.808672][ T5902] loop3: detected capacity change from 0 to 512 [ 91.849234][ T5902] EXT4-fs: Ignoring removed oldalloc option [ 91.890014][ T5837] usb 1-1: Using ep0 maxpacket: 8 [ 91.915112][ T5902] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.918148][ T5837] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 91.952962][ T5902] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.977108][ T5837] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 92.008667][ T5837] usb 1-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 1.00 [ 92.014939][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.074210][ T5837] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.152400][ T5902] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.21: corrupted xattr block 32: invalid ea_ino [ 92.192178][ T5837] kobil_sct 1-1:1.0: KOBIL USB smart card terminal converter detected [ 92.214682][ T789] cfg80211: failed to load regulatory.db [ 92.238293][ T5906] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.21: corrupted xattr block 32: invalid ea_ino [ 92.274113][ T5837] usb 1-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 92.529027][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.239569][ T5837] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 93.323148][ T5914] loop0: detected capacity change from 0 to 32768 [ 93.346757][ T5914] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.18 (5914) [ 93.412480][ T5914] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 93.456913][ T5933] loop3: detected capacity change from 0 to 128 [ 93.476432][ T5837] usb 3-1: unable to get BOS descriptor or descriptor too short [ 93.489690][ T5914] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 93.503445][ T5837] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 93.520405][ T5914] BTRFS info (device loop0): setting nodatasum [ 93.545406][ T5837] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 93.559943][ T5933] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 93.573422][ T5914] BTRFS info (device loop0): using free space tree [ 93.593444][ T5837] usb 3-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 93.652186][ T5837] usb 3-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 93.689600][ T5837] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 93.721944][ T5837] usb 3-1: config 1 interface 1 has no altsetting 0 [ 93.739092][ T5837] usb 3-1: string descriptor 0 read error: -22 [ 93.747133][ T5837] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 93.757117][ T5837] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.849511][ T5767] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 93.861747][ T5914] BTRFS info (device loop0): enabling ssd optimizations [ 93.894632][ T5914] BTRFS info (device loop0): auto enabling async discard [ 94.043622][ T5767] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 94.058697][ T5767] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.137286][ T5767] usb 2-1: config 0 descriptor?? [ 94.170663][ T5767] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 94.237583][ T789] usb 1-1: USB disconnect, device number 2 [ 94.244235][ T5952] loop3: detected capacity change from 0 to 256 [ 94.282179][ T789] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 94.294321][ T789] kobil_sct 1-1:1.0: device disconnected [ 94.440037][ T5952] loop3: detected capacity change from 256 to 0 [ 94.457183][ C0] I/O error, dev loop3, sector 12 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 94.466845][ T5953] FAT-fs (loop3): Directory bread(block 3) failed [ 94.481333][ T5953] syz.3.33: attempt to access beyond end of device [ 94.481333][ T5953] loop3: rw=0, sector=4, nr_sectors = 4 limit=0 [ 94.498124][ T5953] FAT-fs (loop3): FAT read failed (blocknr 1) [ 94.585442][ T5767] cpia1 2-1:0.0: unexpected state after lo power cmd: 00 [ 94.657819][ T5786] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 94.680499][ T5785] syz-executor: attempt to access beyond end of device [ 94.680499][ T5785] loop3: rw=0, sector=12, nr_sectors = 4 limit=0 [ 94.694644][ T5785] FAT-fs (loop3): Directory bread(block 3) failed [ 94.737751][ T5785] syz-executor: attempt to access beyond end of device [ 94.737751][ T5785] loop3: rw=0, sector=0, nr_sectors = 4 limit=0 [ 94.759154][ T5785] FAT-fs (loop3): unable to read boot sector to mark fs as dirty [ 94.871158][ T5837] usb 3-1: 2:0: failed to get current value for ch 1 (-71) [ 94.998389][ T5837] usb 3-1: USB disconnect, device number 2 [ 95.202485][ T5767] gspca_cpia1: usb_control_msg 05, error -71 [ 95.208676][ T5767] cpia1 2-1:0.0: unexpected systemstate: 00 [ 95.249709][ T5767] usb 2-1: USB disconnect, device number 2 [ 95.294101][ T1322] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.464054][ T1322] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.592339][ T1322] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.718458][ T1322] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.050276][ T5959] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 96.175252][ T5955] loop0: detected capacity change from 0 to 32768 [ 96.234672][ T5962] loop1: detected capacity change from 0 to 8192 [ 96.286996][ T5962] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 96.348187][ T5955] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 96.374330][ T5962] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 96.419227][ T5962] REISERFS (device loop1): using ordered data mode [ 96.462180][ T5962] reiserfs: using flush barriers [ 96.502347][ T5962] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 96.584048][ T5962] REISERFS (device loop1): checking transaction log (loop1) [ 96.649612][ T5955] XFS (loop0): Ending clean mount [ 96.750160][ T5784] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 96.765826][ T5784] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 96.776296][ T5784] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 96.788474][ T5784] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 96.797531][ T5784] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 96.807084][ T5784] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 96.978362][ T5962] REISERFS (device loop1): Using tea hash to sort names [ 97.008366][ T5962] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 97.034812][ T5962] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 97.208987][ T5786] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 97.219448][ T23] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 97.267319][ T5962] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 5) not found (pos 2) [ 97.325860][ T5962] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 5) not found (pos 2) [ 97.385397][ T5962] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 5) not found (pos 2) [ 97.419496][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 97.430589][ T5962] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 5) not found (pos 2) [ 97.454287][ T23] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 97.482949][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.509674][ T23] usb 3-1: Product: syz [ 97.521446][ T23] usb 3-1: Manufacturer: syz [ 97.539418][ T23] usb 3-1: SerialNumber: syz [ 97.576922][ T23] usb 3-1: config 0 descriptor?? [ 97.608620][ T23] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 98.283711][ T5977] chnl_net:caif_netlink_parms(): no params data found [ 98.399975][ T1322] hsr_slave_0: left promiscuous mode [ 98.420519][ T1322] hsr_slave_1: left promiscuous mode [ 98.427644][ T23] gspca_ov534_9: reg_w failed -71 [ 98.439729][ T1322] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.447274][ T1322] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.471208][ T1322] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.479313][ T1322] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.491170][ T1322] bridge_slave_1: left allmulticast mode [ 98.496893][ T1322] bridge_slave_1: left promiscuous mode [ 98.521630][ T1322] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.553767][ T1322] bridge_slave_0: left allmulticast mode [ 98.569526][ T1322] bridge_slave_0: left promiscuous mode [ 98.582309][ T1322] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.646261][ T1322] veth1_macvtap: left promiscuous mode [ 98.653884][ T1322] veth0_macvtap: left promiscuous mode [ 98.660265][ T1322] veth1_vlan: left promiscuous mode [ 98.666016][ T1322] veth0_vlan: left promiscuous mode [ 98.849878][ T23] gspca_ov534_9: Unknown sensor 0000 [ 98.850000][ T23] ov534_9: probe of 3-1:0.0 failed with error -22 [ 98.887989][ T23] usb 3-1: USB disconnect, device number 3 [ 98.909856][ T5784] Bluetooth: hci3: command tx timeout [ 100.238708][ T6026] loop2: detected capacity change from 0 to 32768 [ 100.261417][ T6026] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.48 (6026) [ 100.342932][ T6026] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 100.374392][ T6026] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 100.408487][ T6026] BTRFS info (device loop2): setting nodatasum [ 100.425241][ T6026] BTRFS info (device loop2): force zlib compression, level 3 [ 100.446867][ T6026] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 100.476914][ T6026] BTRFS info (device loop2): use lzo compression, level 0 [ 100.491301][ T6026] BTRFS info (device loop2): turning on flush-on-commit [ 100.516354][ T6026] BTRFS info (device loop2): enabling auto defrag [ 100.529174][ T6026] BTRFS info (device loop2): max_inline at 4096 [ 100.535949][ T6026] BTRFS info (device loop2): using free space tree [ 100.730009][ T6026] BTRFS info (device loop2): enabling ssd optimizations [ 100.911509][ T1322] team0 (unregistering): Port device team_slave_1 removed [ 100.986372][ T1322] team0 (unregistering): Port device team_slave_0 removed [ 100.994136][ T5784] Bluetooth: hci3: command tx timeout [ 101.070595][ T1322] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.162750][ T5781] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 101.226447][ T1322] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 101.823261][ T6078] loop2: detected capacity change from 0 to 8192 [ 101.857546][ T6078] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 101.911624][ T6078] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 101.925488][ T1322] bond0 (unregistering): Released all slaves [ 101.940548][ T6078] REISERFS (device loop2): using ordered data mode [ 101.947147][ T6078] reiserfs: using flush barriers [ 101.980869][ T6078] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 102.007489][ T6078] REISERFS (device loop2): checking transaction log (loop2) [ 102.021333][ T6078] REISERFS (device loop2): Using rupasov hash to sort names [ 102.035846][ T6078] REISERFS (device loop2): using 3.5.x disk format [ 102.043692][ T6078] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 102.060605][ T6078] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 102.081205][ T6078] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 102.095017][ T6078] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 102.114910][ T6078] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 102.159503][ T6078] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 102.176469][ T6078] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 102.188005][ T6078] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 102.235075][ T6078] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 102.273361][ T6078] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 102.305872][ T6078] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 102.389813][ T6083] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 102.449515][ T6083] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 102.461824][ T6083] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 102.473113][ T6083] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 102.490454][ T6078] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 102.543891][ T5977] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.551279][ T6078] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 102.564300][ T5977] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.575232][ T5977] bridge_slave_0: entered allmulticast mode [ 102.588743][ T5977] bridge_slave_0: entered promiscuous mode [ 102.608917][ T5977] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.625164][ T5977] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.645702][ T5977] bridge_slave_1: entered allmulticast mode [ 102.680330][ T6086] loop0: detected capacity change from 0 to 1024 [ 102.698016][ T5977] bridge_slave_1: entered promiscuous mode [ 102.698026][ T6086] EXT4-fs: Ignoring removed nomblk_io_submit option [ 102.725413][ T6086] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 102.780927][ T5977] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.796585][ T5977] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.891494][ T6086] EXT4-fs (loop0): mounted filesystem 00000000-0100-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 102.908195][ T5977] team0: Port device team_slave_0 added [ 102.914468][ T6086] ext4 filesystem being mounted at /13/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 102.963926][ T5977] team0: Port device team_slave_1 added [ 103.051137][ T6086] EXT4-fs error (device loop0): ext4_map_blocks:720: inode #15: comm syz.0.58: lblock 0 mapped to illegal pblock 0 (length 5) [ 103.074419][ T5784] Bluetooth: hci3: command tx timeout [ 103.139845][ T6086] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 5 with error 117 [ 103.156182][ T6086] EXT4-fs (loop0): This should not happen!! Data will be lost [ 103.156182][ T6086] [ 103.161318][ T5977] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.188934][ T6101] EXT4-fs error (device loop0): ext4_map_blocks:720: inode #15: block 3: comm syz.0.58: lblock 3 mapped to illegal pblock 3 (length 2) [ 103.220999][ T6101] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 2 with error 117 [ 103.233514][ T5977] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.233547][ T5977] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.259908][ T5977] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.259928][ T5977] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.259958][ T5977] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.349586][ T6101] EXT4-fs (loop0): This should not happen!! Data will be lost [ 103.349586][ T6101] [ 103.515945][ T5977] hsr_slave_0: entered promiscuous mode [ 103.533215][ T5977] hsr_slave_1: entered promiscuous mode [ 103.549007][ T5977] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 103.575923][ T5977] Cannot create hsr debugfs directory [ 103.702832][ T1322] EXT4-fs error (device loop0): ext4_map_blocks:720: inode #15: block 8: comm kworker/u4:8: lblock 8 mapped to illegal pblock 8 (length 8) [ 103.763036][ T1322] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 103.802613][ T1322] EXT4-fs (loop0): This should not happen!! Data will be lost [ 103.802613][ T1322] [ 103.905968][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0100-0006-0000-000000000000. [ 104.124749][ T6118] loop2: detected capacity change from 0 to 4096 [ 104.143716][ T6118] ntfs3: Unknown parameter './proc_mnt' [ 104.241810][ T5793] I/O error, dev loop2, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 104.359310][ T5977] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 104.476694][ T5977] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 104.528585][ T5977] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 104.545955][ T5977] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 104.593319][ T6129] netlink: 4 bytes leftover after parsing attributes in process `syz.1.66'. [ 104.699497][ T5767] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 104.742369][ T5977] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.823976][ T5977] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.857377][ T1322] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.864856][ T1322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.899421][ T5767] usb 1-1: Using ep0 maxpacket: 8 [ 104.912464][ T5767] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 104.923542][ T5767] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 104.949055][ T1322] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.956316][ T1322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.960765][ T5767] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 105.009695][ T5767] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 105.057331][ T5767] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 105.106777][ T5767] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 105.136732][ T5767] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.149675][ T5784] Bluetooth: hci3: command tx timeout [ 105.407807][ T5767] usb 1-1: usb_control_msg returned -32 [ 105.427028][ T5767] usbtmc 1-1:16.0: can't read capabilities [ 105.560260][ T6118] loop2: detected capacity change from 0 to 32768 [ 105.630600][ T6118] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.63 (6118) [ 105.701633][ T5767] usb 1-1: USB disconnect, device number 3 [ 105.734396][ T6118] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 105.776907][ T6118] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 105.830136][ T6118] BTRFS info (device loop2): setting nodatasum [ 105.836422][ T6118] BTRFS info (device loop2): force zlib compression, level 3 [ 105.849308][ T5977] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.871676][ T6118] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 105.909828][ T6118] BTRFS info (device loop2): use lzo compression, level 0 [ 105.938802][ T6118] BTRFS info (device loop2): turning on flush-on-commit [ 105.965291][ T6118] BTRFS info (device loop2): enabling auto defrag [ 105.984725][ T6118] BTRFS info (device loop2): max_inline at 4096 [ 106.002728][ T6118] BTRFS info (device loop2): using free space tree [ 106.070072][ T23] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 106.109946][ T6118] BTRFS info (device loop2): enabling ssd optimizations [ 106.262461][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.302730][ T23] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 106.331332][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.388335][ T23] usb 2-1: config 0 descriptor?? [ 106.518114][ T5781] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 106.867625][ T23] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 106.908125][ T5977] veth0_vlan: entered promiscuous mode [ 106.951260][ T23] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0001/input/input5 [ 106.953404][ T6183] FAULT_INJECTION: forcing a failure. [ 106.953404][ T6183] name failslab, interval 1, probability 0, space 0, times 1 [ 107.036854][ T6183] CPU: 0 PID: 6183 Comm: syz.0.72 Not tainted syzkaller #0 [ 107.044163][ T6183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 107.054300][ T6183] Call Trace: [ 107.057635][ T6183] [ 107.060610][ T6183] dump_stack_lvl+0x18c/0x250 [ 107.065385][ T6183] ? show_regs_print_info+0x20/0x20 [ 107.070660][ T6183] ? load_image+0x420/0x420 [ 107.075231][ T6183] ? __might_sleep+0xe0/0xe0 [ 107.079921][ T6183] ? __lock_acquire+0x7d80/0x7d80 [ 107.085009][ T6183] should_fail_ex+0x394/0x4c0 [ 107.089779][ T6183] should_failslab+0x9/0x20 [ 107.094356][ T6183] slab_pre_alloc_hook+0x59/0x300 [ 107.099462][ T6183] ? __kernfs_new_node+0xaa/0x7f0 [ 107.104562][ T6183] ? rcu_is_watching+0x15/0xb0 [ 107.106732][ T5977] veth1_vlan: entered promiscuous mode [ 107.109370][ T6183] kmem_cache_alloc+0x5a/0x2c0 [ 107.109407][ T6183] ? __kernfs_new_node+0xe5/0x7f0 [ 107.124768][ T6183] __kernfs_new_node+0xe5/0x7f0 [ 107.129698][ T6183] ? kernfs_new_node+0x260/0x260 [ 107.132125][ T6153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.134707][ T6183] kernfs_new_node+0x14c/0x260 [ 107.134752][ T6183] kernfs_create_dir_ns+0x44/0x120 [ 107.153319][ T6183] sysfs_create_dir_ns+0x130/0x2a0 [ 107.158497][ T6183] ? __lock_acquire+0x7d80/0x7d80 [ 107.163584][ T6183] ? sysfs_warn_dup+0xa0/0xa0 [ 107.168321][ T6183] ? do_raw_spin_unlock+0x121/0x230 [ 107.173597][ T6183] kobject_add_internal+0x617/0xc90 [ 107.178862][ T6183] kobject_add+0x164/0x240 [ 107.183348][ T6183] ? kobject_init+0x1d0/0x1d0 [ 107.188099][ T6183] ? _raw_spin_unlock+0x28/0x40 [ 107.193014][ T6183] ? get_device_parent+0x366/0x390 [ 107.198207][ T6183] device_add+0x3fa/0xc40 [ 107.202610][ T6183] cdev_device_add+0x1c6/0x380 [ 107.207448][ T6183] nvme_init_ctrl+0xa6f/0xd30 [ 107.212198][ T6183] nvme_loop_create_ctrl+0x1cc/0xb40 [ 107.217558][ T6183] nvmf_dev_write+0x2383/0x2b50 [ 107.222509][ T6183] ? nvmf_host_put+0x190/0x190 [ 107.227369][ T6183] ? aa_file_perm+0x11b/0xee0 [ 107.232123][ T6183] ? futex_wait_queue+0x138/0x1b0 [ 107.237236][ T6183] ? common_file_perm+0x198/0x1f0 [ 107.238931][ T6153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.242306][ T6183] ? fsnotify_perm+0x5d/0x5e0 [ 107.242339][ T6183] ? security_file_permission+0x79/0xa0 [ 107.260599][ T6183] ? nvmf_host_put+0x190/0x190 [ 107.265431][ T6183] vfs_write+0x299/0x9a0 [ 107.269775][ T6183] ? file_end_write+0x250/0x250 [ 107.274689][ T6183] ? __fget_files+0x28/0x460 [ 107.279341][ T6183] ? __fget_files+0x3fc/0x460 [ 107.284101][ T6183] ? __fdget_pos+0x1d8/0x330 [ 107.288747][ T6183] ? ksys_write+0x74/0x260 [ 107.293232][ T6183] ksys_write+0x151/0x260 [ 107.297629][ T6183] ? __ia32_sys_read+0x90/0x90 [ 107.302461][ T6183] ? lockdep_hardirqs_on+0x98/0x150 [ 107.307719][ T6183] do_syscall_64+0x55/0xb0 [ 107.312194][ T6183] ? clear_bhb_loop+0x40/0x90 [ 107.316937][ T6183] ? clear_bhb_loop+0x40/0x90 [ 107.321678][ T6183] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 107.327652][ T6183] RIP: 0033:0x7f4ba459e159 [ 107.332131][ T6183] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.351800][ T6183] RSP: 002b:00007f4ba54fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 107.360279][ T6183] RAX: ffffffffffffffda RBX: 00007f4ba4825fa0 RCX: 00007f4ba459e159 [ 107.368313][ T6183] RDX: 0000000000000014 RSI: 0000200000000800 RDI: 0000000000000004 [ 107.376346][ T6183] RBP: 00007f4ba463506b R08: 0000000000000000 R09: 0000000000000000 [ 107.384468][ T6183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 107.392494][ T6183] R13: 00007f4ba4826038 R14: 00007f4ba4825fa0 R15: 00007ffd56df4f18 [ 107.400540][ T6183] [ 107.475583][ T6183] kobject: kobject_add_internal failed for nvme0 (error: -12 parent: ctl) [ 107.501292][ T5977] veth0_macvtap: entered promiscuous mode [ 107.527837][ T23] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 107.538620][ T5977] veth1_macvtap: entered promiscuous mode [ 107.599147][ T23] usb 2-1: USB disconnect, device number 3 [ 107.690774][ T5977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.739418][ T5977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.771058][ T5977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.809409][ T5977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.819317][ T5977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.859512][ T5977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.881739][ T5977] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.915171][ T5977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.943520][ T6194] fido_id[6194]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 107.958386][ T5977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.003992][ T5977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.045938][ T5977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.078284][ T5977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.107699][ T5977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.137285][ T5977] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.174203][ T5977] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.194206][ T5977] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.215760][ T5977] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.234813][ T5977] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.550516][ T2984] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.579002][ T2984] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.629672][ T6209] FAULT_INJECTION: forcing a failure. [ 108.629672][ T6209] name failslab, interval 1, probability 0, space 0, times 0 [ 108.654801][ T6209] CPU: 1 PID: 6209 Comm: syz.1.75 Not tainted syzkaller #0 [ 108.662112][ T6209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 108.672226][ T6209] Call Trace: [ 108.675557][ T6209] [ 108.678532][ T6209] dump_stack_lvl+0x18c/0x250 [ 108.683288][ T6209] ? show_regs_print_info+0x20/0x20 [ 108.688557][ T6209] ? load_image+0x420/0x420 [ 108.693138][ T6209] ? __might_sleep+0xe0/0xe0 [ 108.697784][ T6209] ? __lock_acquire+0x7d80/0x7d80 [ 108.702870][ T6209] should_fail_ex+0x394/0x4c0 [ 108.707618][ T6209] should_failslab+0x9/0x20 [ 108.712200][ T6209] slab_pre_alloc_hook+0x59/0x300 [ 108.717302][ T6209] kmem_cache_alloc+0x5a/0x2c0 [ 108.722134][ T6209] ? skb_clone+0x1eb/0x370 [ 108.726633][ T6209] skb_clone+0x1eb/0x370 [ 108.730942][ T6209] ? pfkey_promisc+0x277/0x380 [ 108.735778][ T6209] pfkey_promisc+0x9b/0x380 [ 108.740353][ T6209] pfkey_sendmsg+0xcdc/0x11a0 [ 108.745116][ T6209] ? pfkey_release+0x340/0x340 [ 108.749951][ T6209] ? aa_sk_perm+0x83c/0x970 [ 108.754555][ T6209] ? aa_sock_msg_perm+0x94/0x150 [ 108.759553][ T6209] ? apparmor_socket_sendmsg+0x8e/0x330 [ 108.765253][ T6209] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 108.770605][ T6209] ? security_socket_sendmsg+0x80/0xa0 [ 108.776122][ T6209] ? pfkey_release+0x340/0x340 [ 108.780970][ T6209] ____sys_sendmsg+0x61b/0x980 [ 108.785809][ T6209] ? __asan_memset+0x22/0x40 [ 108.790470][ T6209] ? __sys_sendmsg_sock+0x30/0x30 [ 108.795554][ T6209] ? __import_iovec+0x5f2/0x850 [ 108.800489][ T6209] ? import_iovec+0x73/0xa0 [ 108.805069][ T6209] ___sys_sendmsg+0x2a6/0x360 [ 108.809810][ T6209] ? __sys_sendmsg+0x2b0/0x2b0 [ 108.814701][ T6209] ? __lock_acquire+0x7d80/0x7d80 [ 108.819867][ T6209] __se_sys_sendmsg+0x1d0/0x2c0 [ 108.824792][ T6209] ? __x64_sys_sendmsg+0x80/0x80 [ 108.829838][ T6209] ? lockdep_hardirqs_on+0x98/0x150 [ 108.835114][ T6209] do_syscall_64+0x55/0xb0 [ 108.839598][ T6209] ? clear_bhb_loop+0x40/0x90 [ 108.844341][ T6209] ? clear_bhb_loop+0x40/0x90 [ 108.849092][ T6209] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 108.855064][ T6209] RIP: 0033:0x7faa88b9e159 [ 108.859577][ T6209] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.879852][ T6209] RSP: 002b:00007faa89a02028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 108.888333][ T6209] RAX: ffffffffffffffda RBX: 00007faa88e25fa0 RCX: 00007faa88b9e159 [ 108.896378][ T6209] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 108.904439][ T6209] RBP: 00007faa88c3506b R08: 0000000000000000 R09: 0000000000000000 [ 108.912517][ T6209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 108.915842][ T1314] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.920522][ T6209] R13: 00007faa88e26038 R14: 00007faa88e25fa0 R15: 00007fff439817b8 [ 108.920583][ T6209] [ 108.928629][ T1314] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.394718][ T6224] dccp_invalid_packet: P.Data Offset(80) too large [ 109.798452][ T6210] loop2: detected capacity change from 0 to 32768 [ 109.887153][ T6210] JBD2: Ignoring recovery information on journal [ 109.967925][ T6236] tipc: Started in network mode [ 109.973514][ T6236] tipc: Node identity ae0fb34d1756, cluster identity 4711 [ 109.983651][ T6236] tipc: Enabled bearer , priority 1 [ 109.998177][ T6210] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 110.062669][ T1314] (kworker/u4:7,1314,0):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 110.084341][ T6235] tipc: Resetting bearer [ 110.093089][ T1314] (kworker/u4:7,1314,1):ocfs2_read_locked_inode:554 ERROR: status = -12 [ 110.111088][ T1314] (kworker/u4:7,1314,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len is smaller than minimal - offset=256, inode=0, rec_len=0, name_len=0 [ 110.141712][ T5789] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 110.262335][ T6235] tipc: Disabling bearer [ 110.901067][ T5781] ocfs2: Unmounting device (7,2) on (node local) [ 111.309346][ C0] sched: RT throttling activated [ 111.534011][ T6249] loop1: detected capacity change from 0 to 131072 [ 111.541796][ T6249] XFS: ikeep mount option is deprecated. [ 111.562899][ T5789] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 111.572103][ T5789] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.580350][ T5789] usb 5-1: Product: syz [ 111.584595][ T5789] usb 5-1: Manufacturer: syz [ 111.589236][ T5789] usb 5-1: SerialNumber: syz [ 111.621930][ T6249] XFS (loop1): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 111.931356][ T6249] XFS (loop1): Starting recovery (logdev: internal) [ 111.971370][ T5789] rtl8150 5-1:1.0: couldn't reset the device [ 111.989771][ T5789] rtl8150: probe of 5-1:1.0 failed with error -5 [ 112.017218][ T6249] XFS (loop1): Ending recovery (logdev: internal) [ 112.037550][ T5789] usb 5-1: USB disconnect, device number 2 [ 112.426488][ T5777] XFS (loop1): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 113.406063][ T6254] loop0: detected capacity change from 0 to 32768 [ 113.668686][ T6254] XFS (loop0): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 113.694489][ T6286] loop4: detected capacity change from 0 to 40427 [ 113.764863][ T6286] F2FS-fs (loop4): Invalid log blocks per segment (1) [ 113.838510][ T6286] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 113.906477][ T6286] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x35f7 [ 113.984781][ T6286] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x7ffff [ 114.007828][ T6286] F2FS-fs (loop4): Image doesn't support compression [ 114.054397][ T6286] F2FS-fs (loop4): invalid crc value [ 114.119817][ T6254] XFS (loop0): Ending clean mount [ 114.138334][ T6286] F2FS-fs (loop4): Found nat_bits in checkpoint [ 114.324686][ T5786] XFS (loop0): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 114.336943][ T6286] F2FS-fs (loop4): Start checkpoint disabled! [ 114.428054][ T6286] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 114.470241][ T6286] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 114.780159][ T28] audit: type=1800 audit(1790185790.202:3): pid=6314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.92" name="no_out_endpoint" dev="configfs" ino=9012 res=0 errno=0 [ 115.132660][ T2984] F2FS-fs (loop4): inject checkpoint error in f2fs_balance_fs of __write_node_page+0xc6b/0x1a70 [ 115.169649][ T2984] kworker/u4:10: attempt to access beyond end of device [ 115.169649][ T2984] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 115.232598][ T2984] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 115.250889][ T2984] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 115.281083][ T2984] F2FS-fs (loop4): Stopped filesystem due to reason: 1 [ 115.939912][ T8] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 116.188566][ T8] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 116.253723][ T8] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.309793][ T8] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 116.337218][ T8] usb 1-1: config 0 interface 0 has no altsetting 0 [ 116.381643][ T8] usb 1-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00 [ 116.415879][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.451683][ T8] usb 1-1: config 0 descriptor?? [ 116.570145][ T789] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 116.795100][ T789] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 116.837431][ T789] usb 5-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 116.857326][ T789] usb 5-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 116.881181][ T789] usb 5-1: Product: syz [ 116.885594][ T789] usb 5-1: Manufacturer: syz [ 116.900707][ T789] usb 5-1: SerialNumber: syz [ 116.909663][ T23] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 116.932050][ T789] usb 5-1: config 0 descriptor?? [ 116.953391][ T8] wacom 0003:056A:0000.0002: Unknown device_type for 'HID 056a:0000'. Assuming pen. [ 116.969963][ T789] keyspan 5-1:0.0: Keyspan 4 port adapter converter detected [ 116.979171][ T789] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 81 [ 117.006037][ T8] wacom 0003:056A:0000.0002: hidraw0: USB HID v0.00 Joystick [HID 056a:0000] on usb-dummy_hcd.0-1/input0 [ 117.023359][ T789] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 88 [ 117.051527][ T789] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 1 [ 117.072115][ T8] input: Wacom Penpartner Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:0000.0002/input/input6 [ 117.122314][ T789] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 117.142098][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.171163][ T789] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 2 [ 117.180496][ T8] usb 1-1: USB disconnect, device number 4 [ 117.199500][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.260153][ T23] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 117.269278][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.282441][ T789] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 117.321412][ T789] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 4 [ 117.352853][ T6359] fido_id[6359]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 117.380413][ T23] usb 3-1: config 0 descriptor?? [ 117.390964][ T789] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 117.415566][ T789] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 6 [ 117.488563][ T789] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 117.546307][ T6350] loop1: detected capacity change from 0 to 32768 [ 117.590882][ T6350] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 scanned by syz.1.97 (6350) [ 117.706309][ T6350] BTRFS info (device loop1): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 117.778323][ T6350] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 117.824744][ T6350] BTRFS info (device loop1): using free space tree [ 117.864917][ T5789] usb 5-1: USB disconnect, device number 3 [ 117.886340][ T5789] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 117.913750][ T5789] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 117.934783][ T5789] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 117.964759][ T23] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 117.974778][ T5789] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 117.984368][ T23] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 117.984434][ T23] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 117.984462][ T23] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 117.984490][ T23] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 118.036603][ T23] playstation 0003:054C:0DF2.0003: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 118.129792][ T6350] BTRFS info (device loop1): enabling ssd optimizations [ 118.140455][ T5789] keyspan 5-1:0.0: device disconnected [ 118.143255][ T23] playstation 0003:054C:0DF2.0003: Invalid byte count transferred, expected 20 got 0 [ 118.165833][ T6350] BTRFS info (device loop1): auto enabling async discard [ 118.189814][ T23] playstation 0003:054C:0DF2.0003: Failed to retrieve DualSense pairing info: -22 [ 118.236217][ T23] playstation 0003:054C:0DF2.0003: Failed to get MAC address from DualSense [ 118.254369][ T23] playstation 0003:054C:0DF2.0003: Failed to create dualsense. [ 118.266602][ T23] playstation: probe of 0003:054C:0DF2.0003 failed with error -22 [ 118.461574][ T5789] usb 3-1: USB disconnect, device number 4 [ 118.506292][ T6386] syz.0.101 uses obsolete (PF_INET,SOCK_PACKET) [ 118.618663][ T5777] BTRFS info (device loop1): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 118.932749][ T6394] tipc: Started in network mode [ 118.937715][ T6394] tipc: Node identity ea844c1647f4, cluster identity 4711 [ 118.979781][ T6394] tipc: Enabled bearer , priority 1 [ 119.049653][ T6390] tipc: Resetting bearer [ 119.188777][ T6390] tipc: Disabling bearer [ 119.236157][ T6401] loop0: detected capacity change from 0 to 4096 [ 119.274317][ T6401] EXT4-fs (loop0): Test dummy encryption mode enabled [ 119.318127][ T6401] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.164289][ T6401] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 120.513301][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.071596][ T6422] loop4: detected capacity change from 0 to 131072 [ 121.079408][ T6422] XFS: ikeep mount option is deprecated. [ 121.134685][ T6422] XFS (loop4): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 121.258267][ T6422] XFS (loop4): Starting recovery (logdev: internal) [ 121.367665][ T6422] XFS (loop4): Ending recovery (logdev: internal) [ 121.689801][ T5977] XFS (loop4): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 124.133484][ T6492] loop4: detected capacity change from 0 to 2048 [ 124.211541][ T5793] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 124.493242][ T6500] UDC core: g1: couldn't find an available UDC or it's busy [ 124.509843][ T5838] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 124.619465][ T8] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 124.707600][ T5838] usb 5-1: config index 0 descriptor too short (expected 17742, got 18) [ 124.732703][ T5838] usb 5-1: config 231 has too many interfaces: 138, using maximum allowed: 32 [ 124.765823][ T5838] usb 5-1: config 231 has an invalid descriptor of length 212, skipping remainder of the config [ 124.784217][ T5838] usb 5-1: config 231 has 0 interfaces, different from the descriptor's value: 138 [ 124.799572][ T5838] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 124.808717][ T5838] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.843351][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.879410][ T8] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 124.897663][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.923067][ T8] usb 3-1: config 0 descriptor?? [ 125.265440][ T5838] usb 5-1: string descriptor 0 read error: -22 [ 125.370245][ T8] keytouch 0003:0926:3333.0004: fixing up Keytouch IEC report descriptor [ 125.396745][ T8] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0004/input/input9 [ 125.465222][ T5838] usb 5-1: USB disconnect, device number 4 [ 125.583875][ T8] keytouch 0003:0926:3333.0004: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 125.610111][ T6498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.619032][ T6498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.836816][ C0] keytouch 0003:0926:3333.0004: Event data for report 0 was too short (8 vs 1) [ 126.035363][ T5837] usb 3-1: USB disconnect, device number 5 [ 126.252321][ T6522] loop0: detected capacity change from 0 to 256 [ 126.337177][ T6522] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 127.132949][ T6533] loop1: detected capacity change from 0 to 1024 [ 127.243864][ T1314] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.470536][ T6523] loop4: detected capacity change from 0 to 32768 [ 127.524537][ T1314] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.537154][ T6523] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop4 scanned by syz.4.132 (6523) [ 127.612665][ T6523] BTRFS info (device loop4): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 127.643794][ T6523] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 127.655074][ T6523] BTRFS info (device loop4): using free space tree [ 127.720093][ T1314] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.923564][ T6523] BTRFS info (device loop4): enabling ssd optimizations [ 127.968858][ T6523] BTRFS info (device loop4): auto enabling async discard [ 128.046654][ T1314] vlan2 (unregistering): left allmulticast mode [ 128.089408][ T1314] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode [ 128.098094][ T1314] vlan2 (unregistering): left promiscuous mode [ 128.126580][ T1314] netdevsim netdevsim0 netdevsim0 (unregistering): left promiscuous mode [ 128.166828][ T1314] bridge0: port 3(vlan2) entered disabled state [ 128.245421][ T1314] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.429059][ T5977] BTRFS info (device loop4): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 128.812108][ T1314] tipc: Left network mode [ 129.852565][ T6596] FAULT_INJECTION: forcing a failure. [ 129.852565][ T6596] name failslab, interval 1, probability 0, space 0, times 0 [ 129.910637][ T6596] CPU: 0 PID: 6596 Comm: syz.1.146 Not tainted syzkaller #0 [ 129.918117][ T6596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 129.928225][ T6596] Call Trace: [ 129.931546][ T6596] [ 129.934503][ T6596] dump_stack_lvl+0x18c/0x250 [ 129.939251][ T6596] ? show_regs_print_info+0x20/0x20 [ 129.944496][ T6596] ? load_image+0x420/0x420 [ 129.949036][ T6596] ? __might_sleep+0xe0/0xe0 [ 129.953666][ T6596] ? __lock_acquire+0x7d80/0x7d80 [ 129.958732][ T6596] should_fail_ex+0x394/0x4c0 [ 129.963449][ T6596] should_failslab+0x9/0x20 [ 129.967999][ T6596] slab_pre_alloc_hook+0x59/0x300 [ 129.973070][ T6596] ? io_rsrc_data_alloc+0x5f/0x280 [ 129.978247][ T6596] __kmem_cache_alloc_node+0x53/0x250 [ 129.983665][ T6596] ? io_rsrc_data_alloc+0x5f/0x280 [ 129.988809][ T6596] kmalloc_trace+0x2a/0xe0 [ 129.993267][ T6596] io_rsrc_data_alloc+0x5f/0x280 [ 129.998248][ T6596] io_sqe_files_register+0x1c7/0x5e0 [ 130.003617][ T6596] ? __se_sys_io_uring_register+0x16f/0xc40 [ 130.009570][ T6596] ? io_register_rsrc_update+0x1c0/0x1c0 [ 130.015252][ T6596] ? __fget_files+0x3fc/0x460 [ 130.019983][ T6596] __se_sys_io_uring_register+0x7ee/0xc40 [ 130.025741][ T6596] do_syscall_64+0x55/0xb0 [ 130.030194][ T6596] ? clear_bhb_loop+0x40/0x90 [ 130.034914][ T6596] ? clear_bhb_loop+0x40/0x90 [ 130.039638][ T6596] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 130.045564][ T6596] RIP: 0033:0x7faa88b9e159 [ 130.050031][ T6596] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.069683][ T6596] RSP: 002b:00007faa89a02028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 130.078144][ T6596] RAX: ffffffffffffffda RBX: 00007faa88e25fa0 RCX: 00007faa88b9e159 [ 130.086174][ T6596] RDX: 0000200000002d40 RSI: 0000000000000002 RDI: 0000000000000003 [ 130.094186][ T6596] RBP: 00007faa88c3506b R08: 0000000000000000 R09: 0000000000000000 [ 130.102190][ T6596] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000000 [ 130.110192][ T6596] R13: 00007faa88e26038 R14: 00007faa88e25fa0 R15: 00007fff439817b8 [ 130.118206][ T6596] [ 130.121387][ C0] vkms_vblank_simulate: vblank timer overrun [ 130.428242][ T6606] loop4: detected capacity change from 0 to 1024 [ 130.499636][ T49] hfsplus: b-tree write err: -5, ino 25 [ 130.525725][ T49] hfsplus: b-tree write err: -5, ino 4 [ 130.544364][ T49] hfsplus: b-tree write err: -5, ino 2 [ 130.572695][ T6608] hfsplus: request for non-existent node 33423360 in B*Tree [ 130.598609][ T6608] hfsplus: request for non-existent node 33423360 in B*Tree [ 130.620933][ T5767] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 130.746677][ T5779] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 130.761543][ T5779] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 130.772745][ T5779] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 130.799429][ T5779] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 130.807382][ T5779] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 130.819455][ T5779] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 130.845377][ T5767] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 130.862754][ T5767] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 130.893734][ T5767] usb 2-1: New USB device found, idVendor=0bda, idProduct=8156, bcdDevice=30.00 [ 130.953646][ T5767] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.987612][ T5767] usb 2-1: Product: syz [ 130.997967][ T5767] usb 2-1: Manufacturer: syz [ 131.028367][ T5767] usb 2-1: SerialNumber: syz [ 131.170682][ T1314] hsr_slave_0: left promiscuous mode [ 131.180807][ T1314] hsr_slave_1: left promiscuous mode [ 131.213207][ T1314] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.245362][ T1314] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.283919][ T1314] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.305384][ T5767] r8152 2-1:1.0: Expected endpoints are not found [ 131.322513][ T1314] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.350578][ T5767] r8152-cfgselector 2-1: Unknown version 0x0000 [ 131.359787][ T1314] bridge_slave_1: left allmulticast mode [ 131.370280][ T1314] bridge_slave_1: left promiscuous mode [ 131.371602][ T5767] r8152-cfgselector 2-1: USB disconnect, device number 4 [ 131.390236][ T1314] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.438432][ T1314] bridge_slave_0: left allmulticast mode [ 131.459436][ T1314] bridge_slave_0: left promiscuous mode [ 131.477263][ T1314] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.528941][ T1314] veth1_macvtap: left promiscuous mode [ 131.542644][ T1314] veth0_macvtap: left promiscuous mode [ 131.548635][ T1314] veth1_vlan: left promiscuous mode [ 131.557107][ T1314] veth0_vlan: left promiscuous mode [ 132.157405][ T6637] FAULT_INJECTION: forcing a failure. [ 132.157405][ T6637] name failslab, interval 1, probability 0, space 0, times 0 [ 132.170741][ T6637] CPU: 0 PID: 6637 Comm: syz.1.154 Not tainted syzkaller #0 [ 132.178109][ T6637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 132.188229][ T6637] Call Trace: [ 132.191564][ T6637] [ 132.194548][ T6637] dump_stack_lvl+0x18c/0x250 [ 132.199306][ T6637] ? show_regs_print_info+0x20/0x20 [ 132.204571][ T6637] ? load_image+0x420/0x420 [ 132.209133][ T6637] ? __might_sleep+0xe0/0xe0 [ 132.213780][ T6637] ? __lock_acquire+0x7d80/0x7d80 [ 132.218881][ T6637] should_fail_ex+0x394/0x4c0 [ 132.223627][ T6637] should_failslab+0x9/0x20 [ 132.228184][ T6637] slab_pre_alloc_hook+0x59/0x300 [ 132.233260][ T6637] kmem_cache_alloc_node+0x5e/0x310 [ 132.238526][ T6637] ? __alloc_skb+0x103/0x2c0 [ 132.243181][ T6637] __alloc_skb+0x103/0x2c0 [ 132.247644][ T6637] nfc_genl_device_removed+0x85/0x340 [ 132.253044][ T6637] ? ima_get_current_hash_algo+0x10/0x10 [ 132.258697][ T6637] ? __asan_memset+0x22/0x40 [ 132.263331][ T6637] ? nfc_genl_setup_device_added+0x350/0x350 [ 132.269381][ T6637] ? __fsnotify_parent+0x6d8/0x7c0 [ 132.274560][ T6637] nfc_unregister_rfkill+0x32/0x220 [ 132.279836][ T6637] nci_unregister_device+0x46/0x250 [ 132.285122][ T6637] virtual_ncidev_close+0x59/0x90 [ 132.290203][ T6637] ? virtual_ncidev_open+0x1a0/0x1a0 [ 132.295548][ T6637] __fput+0x221/0x940 [ 132.299592][ T6637] __se_sys_close+0x15c/0x1e0 [ 132.304332][ T6637] do_syscall_64+0x55/0xb0 [ 132.308813][ T6637] ? clear_bhb_loop+0x40/0x90 [ 132.313547][ T6637] ? clear_bhb_loop+0x40/0x90 [ 132.318297][ T6637] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 132.324318][ T6637] RIP: 0033:0x7faa88b9e159 [ 132.328793][ T6637] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.348459][ T6637] RSP: 002b:00007faa89a02028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 132.356930][ T6637] RAX: ffffffffffffffda RBX: 00007faa88e25fa0 RCX: 00007faa88b9e159 [ 132.364954][ T6637] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 132.372979][ T6637] RBP: 00007faa88c3506b R08: 0000000000000000 R09: 0000000000000000 [ 132.381012][ T6637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 132.389029][ T6637] R13: 00007faa88e26038 R14: 00007faa88e25fa0 R15: 00007fff439817b8 [ 132.397088][ T6637] [ 132.400150][ C0] vkms_vblank_simulate: vblank timer overrun [ 132.841033][ T1314] team0 (unregistering): Port device team_slave_1 removed [ 132.894453][ T1314] team0 (unregistering): Port device team_slave_0 removed [ 132.920800][ T5779] Bluetooth: hci2: command tx timeout [ 132.947136][ T1314] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 133.012441][ T1314] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 133.169968][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.185526][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.426394][ T1314] bond0 (unregistering): Released all slaves [ 133.885185][ T28] audit: type=1800 audit(1790185809.312:4): pid=6652 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.157" name="UDC" dev="configfs" ino=10554 res=0 errno=0 [ 134.046656][ T6611] chnl_net:caif_netlink_parms(): no params data found [ 134.213769][ T5767] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 134.338369][ T6671] FAULT_INJECTION: forcing a failure. [ 134.338369][ T6671] name failslab, interval 1, probability 0, space 0, times 0 [ 134.373356][ T6611] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.399445][ T6671] CPU: 0 PID: 6671 Comm: syz.1.161 Not tainted syzkaller #0 [ 134.406806][ T6671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 134.416894][ T6671] Call Trace: [ 134.420209][ T6671] [ 134.423171][ T6671] dump_stack_lvl+0x18c/0x250 [ 134.427896][ T6671] ? show_regs_print_info+0x20/0x20 [ 134.433143][ T6671] ? load_image+0x420/0x420 [ 134.437694][ T6671] ? __might_sleep+0xe0/0xe0 [ 134.442322][ T6671] ? __lock_acquire+0x7d80/0x7d80 [ 134.447386][ T6671] should_fail_ex+0x394/0x4c0 [ 134.452111][ T6671] should_failslab+0x9/0x20 [ 134.456650][ T6671] slab_pre_alloc_hook+0x59/0x300 [ 134.461727][ T6671] kmem_cache_alloc+0x5a/0x2c0 [ 134.466530][ T6671] ? vm_area_dup+0x27/0x270 [ 134.471065][ T6671] vm_area_dup+0x27/0x270 [ 134.475434][ T6671] __split_vma+0x1a8/0xc20 [ 134.479892][ T6671] ? init_vma_prep+0x160/0x160 [ 134.484707][ T6671] ? mmap_write_unlock+0x160/0x160 [ 134.489884][ T6671] ? split_vma+0x8f/0x110 [ 134.494308][ T6671] mlock_fixup+0x3ac/0x550 [ 134.498783][ T6671] apply_vma_lock_flags+0x2a7/0x3c0 [ 134.504025][ T6671] ? do_mlock+0x740/0x740 [ 134.508391][ T6671] ? down_write_killable+0x181/0x230 [ 134.513767][ T6671] do_mlock+0x4be/0x740 [ 134.517983][ T6671] ? lru_gen_add_folio+0xe00/0xe00 [ 134.523142][ T6671] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 134.529162][ T6671] ? lock_chain_count+0x20/0x20 [ 134.534060][ T6671] ? syscall_enter_from_user_mode+0x25/0x80 [ 134.540001][ T6671] __x64_sys_mlock+0x60/0x70 [ 134.544627][ T6671] do_syscall_64+0x55/0xb0 [ 134.549078][ T6671] ? clear_bhb_loop+0x40/0x90 [ 134.553794][ T6671] ? clear_bhb_loop+0x40/0x90 [ 134.558508][ T6671] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 134.564434][ T6671] RIP: 0033:0x7faa88b9e159 [ 134.568883][ T6671] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.588528][ T6671] RSP: 002b:00007faa89a02028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 134.597019][ T6671] RAX: ffffffffffffffda RBX: 00007faa88e25fa0 RCX: 00007faa88b9e159 [ 134.605073][ T6671] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000200000341000 [ 134.613125][ T6671] RBP: 00007faa88c3506b R08: 0000000000000000 R09: 0000000000000000 [ 134.621133][ T6671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 134.629136][ T6671] R13: 00007faa88e26038 R14: 00007faa88e25fa0 R15: 00007fff439817b8 [ 134.637152][ T6671] [ 134.640218][ C0] vkms_vblank_simulate: vblank timer overrun [ 134.652830][ T6611] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.660139][ T5767] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.660170][ T5767] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 134.681400][ T5767] usb 1-1: Dual-Role OTG device on HNP port [ 134.689786][ T6611] bridge_slave_0: entered allmulticast mode [ 134.709120][ T6611] bridge_slave_0: entered promiscuous mode [ 134.709811][ T5767] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.06 [ 134.742438][ T6611] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.765010][ T5767] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.789889][ T6611] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.801441][ T6611] bridge_slave_1: entered allmulticast mode [ 134.808988][ T6611] bridge_slave_1: entered promiscuous mode [ 134.821753][ C1] ------------[ cut here ]------------ [ 134.828289][ C1] usb_ep_enable: ep129 (ep1in-bulk) has maxpacket 0 [ 134.835625][ C1] WARNING: CPU: 1 PID: 6674 at drivers/usb/gadget/udc/core.c:125 usb_ep_enable+0x263/0x440 [ 134.845712][ C1] Modules linked in: [ 134.849665][ C1] CPU: 1 PID: 6674 Comm: sed Not tainted syzkaller #0 [ 134.856493][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 134.866690][ C1] RIP: 0010:usb_ep_enable+0x263/0x440 [ 134.872157][ C1] Code: 49 8b 0e 48 c7 c0 c0 0f 7b 8b 49 c7 c0 e0 0f 7b 8b 4c 0f 44 c0 48 c7 c7 80 0f 7b 8b 48 c7 c6 5c 27 a7 8c 89 ea e8 9d 03 95 fa <0f> 0b e9 e1 fe ff ff e8 91 3f cb fa 49 bc 00 00 00 00 00 fc ff df [ 134.891828][ C1] RSP: 0018:ffffc900001f0790 EFLAGS: 00010046 [ 134.897970][ C1] RAX: 09d3af6cb5e63a00 RBX: ffff8880252200e0 RCX: ffff88802b68bc00 [ 134.905969][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 134.913962][ C1] RBP: 0000000000000081 R08: ffff8880b8f28c53 R09: 1ffff110171e518a [ 134.921958][ C1] R10: dffffc0000000000 R11: ffffed10171e518b R12: dffffc0000000000 [ 134.929956][ C1] R13: ffff88802522010d R14: ffff8880252200e8 R15: ffff888030bce93a [ 134.937951][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 134.946905][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 134.953509][ C1] CR2: 00007fc26df72a10 CR3: 000000007d17f000 CR4: 00000000003506e0 [ 134.961509][ C1] Call Trace: [ 134.964829][ C1] [ 134.967700][ C1] hidg_set_alt+0x12a/0xa10 [ 134.972243][ C1] ? usb_gadget_set_state+0x12c/0x2a0 [ 134.977653][ C1] set_config+0x735/0xff0 [ 134.982051][ C1] composite_setup+0x1df4/0x33a0 [ 134.987022][ C1] configfs_composite_setup+0xc7/0x100 [ 134.992519][ C1] dummy_timer+0x1324/0x34e0 [ 134.997164][ C1] ? mark_lock+0x94/0x320 [ 135.001529][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 135.006586][ C1] ? lock_chain_count+0x20/0x20 [ 135.011477][ C1] ? dummy_free_streams+0x520/0x520 [ 135.016708][ C1] ? dummy_free_streams+0x520/0x520 [ 135.021966][ C1] __hrtimer_run_queues+0x525/0xc10 [ 135.027205][ C1] ? hrtimer_interrupt+0x980/0x980 [ 135.032352][ C1] ? read_tsc+0x9/0x20 [ 135.036463][ C1] hrtimer_run_softirq+0x177/0x290 [ 135.041608][ C1] handle_softirqs+0x27d/0x820 [ 135.046409][ C1] ? read_tsc+0x9/0x20 [ 135.050592][ C1] ? ktime_get+0x24b/0x280 [ 135.055125][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 135.059946][ C1] ? do_softirq+0x1a0/0x1a0 [ 135.064477][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 135.069713][ C1] __irq_exit_rcu+0xd3/0x190 [ 135.074334][ C1] ? irq_exit_rcu+0x20/0x20 [ 135.078878][ C1] irq_exit_rcu+0x9/0x20 [ 135.083151][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 135.088819][ C1] [ 135.091783][ C1] [ 135.094740][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 135.100756][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xc0/0x120 [ 135.107293][ C1] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 3b f7 c1 f6 65 8b 05 ec b4 68 75 85 c0 74 3c 48 c7 04 24 0e 36 [ 135.126923][ C1] RSP: 0018:ffffc900033a70a0 EFLAGS: 00000206 [ 135.133018][ C1] RAX: dffffc0000000004 RBX: 0000000000000246 RCX: 09d3af6cb5e63a00 [ 135.141037][ C1] RDX: dffffc0000000000 RSI: ffffffff8acacce0 RDI: 0000000000000001 [ 135.149045][ C1] RBP: ffffc900033a7130 R08: ffffffff911eb537 R09: 1ffffffff223d6a6 [ 135.157070][ C1] R10: dffffc0000000000 R11: fffffbfff223d6a7 R12: dffffc0000000000 [ 135.165074][ C1] R13: dffffc0000000000 R14: ffffffff8d137340 R15: 1ffff92000674e14 [ 135.173084][ C1] ? _raw_spin_unlock+0x40/0x40 [ 135.177976][ C1] rcu_preempt_deferred_qs_irqrestore+0x83b/0xc30 [ 135.184429][ C1] ? asan.module_dtor+0x20/0x20 [ 135.189325][ C1] ? rcu_read_unlock_special+0x4d0/0x4d0 [ 135.194985][ C1] ? mark_lock+0x94/0x320 [ 135.199375][ C1] ? rcu_is_watching+0x15/0xb0 [ 135.204167][ C1] rcu_read_unlock_special+0x3ca/0x4d0 [ 135.209655][ C1] ? __rcu_read_unlock+0xd0/0xd0 [ 135.214624][ C1] ? mas_next_node+0x37f/0x9b0 [ 135.219423][ C1] __rcu_read_unlock+0x7c/0xd0 [ 135.224217][ C1] mt_validate+0x4389/0x4410 [ 135.228843][ C1] ? mt_validate+0x114/0x4410 [ 135.233555][ C1] ? mt_cache_shrink+0x20/0x20 [ 135.238361][ C1] ? uprobe_mmap+0x185/0x1140 [ 135.243095][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 135.248156][ C1] validate_mm+0xc6/0x450 [ 135.252523][ C1] ? vm_stat_account+0x120/0x120 [ 135.257495][ C1] ? vma_prepare+0x491/0x4c0 [ 135.262118][ C1] ? vma_adjust_trans_huge+0x311/0x3d0 [ 135.267611][ C1] __split_vma+0xa39/0xc20 [ 135.272067][ C1] ? mmap_write_unlock+0x160/0x160 [ 135.277219][ C1] do_vmi_align_munmap+0x310/0x16a0 [ 135.282460][ C1] ? do_vmi_munmap+0x2d0/0x2d0 [ 135.287260][ C1] ? mtree_range_walk+0x68c/0x7b0 [ 135.292325][ C1] ? mas_find_setup+0x47f/0x590 [ 135.297207][ C1] do_vmi_munmap+0x252/0x2d0 [ 135.301833][ C1] mmap_region+0x8d9/0x2090 [ 135.306392][ C1] ? file_mmap_ok+0x170/0x170 [ 135.311110][ C1] ? cap_mmap_addr+0x157/0x2b0 [ 135.315914][ C1] ? file_mmap_ok+0x11c/0x170 [ 135.320634][ C1] do_mmap+0x98f/0x10a0 [ 135.324828][ C1] ? mlock_future_ok+0xf0/0xf0 [ 135.329639][ C1] ? down_write+0x200/0x200 [ 135.334214][ C1] vm_mmap_pgoff+0x1c4/0x3f0 [ 135.338844][ C1] ? account_locked_vm+0x200/0x200 [ 135.344027][ C1] ksys_mmap_pgoff+0x4c9/0x720 [ 135.348822][ C1] ? __x64_sys_mmap+0x7a/0x130 [ 135.353614][ C1] do_syscall_64+0x55/0xb0 [ 135.358072][ C1] ? clear_bhb_loop+0x40/0x90 [ 135.362778][ C1] ? clear_bhb_loop+0x40/0x90 [ 135.367486][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 135.373410][ C1] RIP: 0033:0x7fc26e297242 [ 135.377850][ C1] Code: 08 00 04 00 00 eb e2 90 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 33 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 5e 5b 5d c3 0f 1f 00 c7 05 46 40 01 00 16 00 [ 135.397484][ C1] RSP: 002b:00007ffef07a0658 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 135.405930][ C1] RAX: ffffffffffffffda RBX: 00007fc26df0d000 RCX: 00007fc26e297242 [ 135.413933][ C1] RDX: 0000000000000005 RSI: 0000000000037000 RDI: 00007fc26df0d000 [ 135.421928][ C1] RBP: 0000000000000812 R08: 0000000000000003 R09: 0000000000003000 [ 135.429937][ C1] R10: 0000000000000812 R11: 0000000000000206 R12: 00007ffef07a06a8 [ 135.437973][ C1] R13: 00007fc26df766b0 R14: 00007ffef07a0a90 R15: 00000fffde0f40ce [ 135.446021][ C1] [ 135.449083][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 135.456384][ C1] CPU: 1 PID: 6674 Comm: sed Not tainted syzkaller #0 [ 135.463168][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 135.473266][ C1] Call Trace: [ 135.476567][ C1] [ 135.479432][ C1] dump_stack_lvl+0x18c/0x250 [ 135.484175][ C1] ? show_regs_print_info+0x20/0x20 [ 135.489404][ C1] ? load_image+0x420/0x420 [ 135.493947][ C1] panic+0x2ca/0x720 [ 135.497872][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 135.502413][ C1] __warn+0x2e0/0x470 [ 135.506420][ C1] ? usb_ep_enable+0x263/0x440 [ 135.511219][ C1] ? usb_ep_enable+0x263/0x440 [ 135.516017][ C1] report_bug+0x2be/0x4f0 [ 135.520388][ C1] ? usb_ep_enable+0x263/0x440 [ 135.525184][ C1] ? usb_ep_enable+0x263/0x440 [ 135.529976][ C1] ? usb_ep_enable+0x265/0x440 [ 135.534780][ C1] handle_bug+0xcf/0x120 [ 135.539055][ C1] exc_invalid_op+0x1a/0x50 [ 135.543590][ C1] asm_exc_invalid_op+0x1a/0x20 [ 135.548470][ C1] RIP: 0010:usb_ep_enable+0x263/0x440 [ 135.553880][ C1] Code: 49 8b 0e 48 c7 c0 c0 0f 7b 8b 49 c7 c0 e0 0f 7b 8b 4c 0f 44 c0 48 c7 c7 80 0f 7b 8b 48 c7 c6 5c 27 a7 8c 89 ea e8 9d 03 95 fa <0f> 0b e9 e1 fe ff ff e8 91 3f cb fa 49 bc 00 00 00 00 00 fc ff df [ 135.573509][ C1] RSP: 0018:ffffc900001f0790 EFLAGS: 00010046 [ 135.579599][ C1] RAX: 09d3af6cb5e63a00 RBX: ffff8880252200e0 RCX: ffff88802b68bc00 [ 135.587591][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 135.595607][ C1] RBP: 0000000000000081 R08: ffff8880b8f28c53 R09: 1ffff110171e518a [ 135.603606][ C1] R10: dffffc0000000000 R11: ffffed10171e518b R12: dffffc0000000000 [ 135.611605][ C1] R13: ffff88802522010d R14: ffff8880252200e8 R15: ffff888030bce93a [ 135.619622][ C1] hidg_set_alt+0x12a/0xa10 [ 135.624158][ C1] ? usb_gadget_set_state+0x12c/0x2a0 [ 135.629568][ C1] set_config+0x735/0xff0 [ 135.633940][ C1] composite_setup+0x1df4/0x33a0 [ 135.638913][ C1] configfs_composite_setup+0xc7/0x100 [ 135.644413][ C1] dummy_timer+0x1324/0x34e0 [ 135.649050][ C1] ? mark_lock+0x94/0x320 [ 135.653409][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 135.658460][ C1] ? lock_chain_count+0x20/0x20 [ 135.663356][ C1] ? dummy_free_streams+0x520/0x520 [ 135.668598][ C1] ? dummy_free_streams+0x520/0x520 [ 135.673822][ C1] __hrtimer_run_queues+0x525/0xc10 [ 135.679069][ C1] ? hrtimer_interrupt+0x980/0x980 [ 135.684206][ C1] ? read_tsc+0x9/0x20 [ 135.688312][ C1] hrtimer_run_softirq+0x177/0x290 [ 135.693456][ C1] handle_softirqs+0x27d/0x820 [ 135.698250][ C1] ? read_tsc+0x9/0x20 [ 135.702370][ C1] ? ktime_get+0x24b/0x280 [ 135.706814][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 135.711604][ C1] ? do_softirq+0x1a0/0x1a0 [ 135.716142][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 135.721375][ C1] __irq_exit_rcu+0xd3/0x190 [ 135.726011][ C1] ? irq_exit_rcu+0x20/0x20 [ 135.730553][ C1] irq_exit_rcu+0x9/0x20 [ 135.734833][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 135.740494][ C1] [ 135.743447][ C1] [ 135.746395][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 135.752411][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xc0/0x120 [ 135.758971][ C1] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 3b f7 c1 f6 65 8b 05 ec b4 68 75 85 c0 74 3c 48 c7 04 24 0e 36 [ 135.778600][ C1] RSP: 0018:ffffc900033a70a0 EFLAGS: 00000206 [ 135.784698][ C1] RAX: dffffc0000000004 RBX: 0000000000000246 RCX: 09d3af6cb5e63a00 [ 135.792691][ C1] RDX: dffffc0000000000 RSI: ffffffff8acacce0 RDI: 0000000000000001 [ 135.800696][ C1] RBP: ffffc900033a7130 R08: ffffffff911eb537 R09: 1ffffffff223d6a6 [ 135.808697][ C1] R10: dffffc0000000000 R11: fffffbfff223d6a7 R12: dffffc0000000000 [ 135.816696][ C1] R13: dffffc0000000000 R14: ffffffff8d137340 R15: 1ffff92000674e14 [ 135.824708][ C1] ? _raw_spin_unlock+0x40/0x40 [ 135.829603][ C1] rcu_preempt_deferred_qs_irqrestore+0x83b/0xc30 [ 135.836059][ C1] ? asan.module_dtor+0x20/0x20 [ 135.840962][ C1] ? rcu_read_unlock_special+0x4d0/0x4d0 [ 135.846624][ C1] ? mark_lock+0x94/0x320 [ 135.851000][ C1] ? rcu_is_watching+0x15/0xb0 [ 135.855839][ C1] rcu_read_unlock_special+0x3ca/0x4d0 [ 135.861333][ C1] ? __rcu_read_unlock+0xd0/0xd0 [ 135.866318][ C1] ? mas_next_node+0x37f/0x9b0 [ 135.871119][ C1] __rcu_read_unlock+0x7c/0xd0 [ 135.875917][ C1] mt_validate+0x4389/0x4410 [ 135.880556][ C1] ? mt_validate+0x114/0x4410 [ 135.885286][ C1] ? mt_cache_shrink+0x20/0x20 [ 135.890106][ C1] ? uprobe_mmap+0x185/0x1140 [ 135.894839][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 135.899904][ C1] validate_mm+0xc6/0x450 [ 135.904279][ C1] ? vm_stat_account+0x120/0x120 [ 135.909295][ C1] ? vma_prepare+0x491/0x4c0 [ 135.913917][ C1] ? vma_adjust_trans_huge+0x311/0x3d0 [ 135.919412][ C1] __split_vma+0xa39/0xc20 [ 135.923880][ C1] ? mmap_write_unlock+0x160/0x160 [ 135.929037][ C1] do_vmi_align_munmap+0x310/0x16a0 [ 135.934297][ C1] ? do_vmi_munmap+0x2d0/0x2d0 [ 135.939105][ C1] ? mtree_range_walk+0x68c/0x7b0 [ 135.944172][ C1] ? mas_find_setup+0x47f/0x590 [ 135.949062][ C1] do_vmi_munmap+0x252/0x2d0 [ 135.953687][ C1] mmap_region+0x8d9/0x2090 [ 135.958234][ C1] ? file_mmap_ok+0x170/0x170 [ 135.962973][ C1] ? cap_mmap_addr+0x157/0x2b0 [ 135.967776][ C1] ? file_mmap_ok+0x11c/0x170 [ 135.972488][ C1] do_mmap+0x98f/0x10a0 [ 135.976684][ C1] ? mlock_future_ok+0xf0/0xf0 [ 135.981483][ C1] ? down_write+0x200/0x200 [ 135.986016][ C1] vm_mmap_pgoff+0x1c4/0x3f0 [ 135.990647][ C1] ? account_locked_vm+0x200/0x200 [ 135.995883][ C1] ksys_mmap_pgoff+0x4c9/0x720 [ 136.000675][ C1] ? __x64_sys_mmap+0x7a/0x130 [ 136.005466][ C1] do_syscall_64+0x55/0xb0 [ 136.009913][ C1] ? clear_bhb_loop+0x40/0x90 [ 136.014619][ C1] ? clear_bhb_loop+0x40/0x90 [ 136.019360][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 136.025290][ C1] RIP: 0033:0x7fc26e297242 [ 136.029769][ C1] Code: 08 00 04 00 00 eb e2 90 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 33 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 5e 5b 5d c3 0f 1f 00 c7 05 46 40 01 00 16 00 [ 136.049410][ C1] RSP: 002b:00007ffef07a0658 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 136.057861][ C1] RAX: ffffffffffffffda RBX: 00007fc26df0d000 RCX: 00007fc26e297242 [ 136.065884][ C1] RDX: 0000000000000005 RSI: 0000000000037000 RDI: 00007fc26df0d000 [ 136.073879][ C1] RBP: 0000000000000812 R08: 0000000000000003 R09: 0000000000003000 [ 136.081900][ C1] R10: 0000000000000812 R11: 0000000000000206 R12: 00007ffef07a06a8 [ 136.089895][ C1] R13: 00007fc26df766b0 R14: 00007ffef07a0a90 R15: 00000fffde0f40ce [ 136.097902][ C1] [ 136.101522][ C1] Kernel Offset: disabled [ 136.105935][ C1] Rebooting in 86400 seconds..