last executing test programs: 4m40.129251345s ago: executing program 0 (id=991): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(0x0, r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) 4m38.814754909s ago: executing program 0 (id=996): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f00000003c0)=ANY=[@ANYBLOB="6b6565705f6c6173745f646f74732c756d61736b3d30303030303030303030303030303030303030303030352c757466382c6572726f72733d636f6e74696e75652c696f636861727365743d6d616363656e746575726f2c646973636172642c6572726f72733d72656d6f756e742d726f2c6572726f72733d72656d6f756e742d726f2c6572726f72733d636f6e74696e75652c6572726f72733d636f6e74696e75652c00e1ee3e46128f3731e7aa706359338a91706d6543fd9e8fc3"], 0x1, 0x151a, &(0x7f0000002280)="$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") mkdir(&(0x7f0000000a00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x94) r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000040)={0x7, 0xffffffff, 0x6, {0x7fffffff, 0x28c}, 0x4, 0x1ff}) rename(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 4m37.850496446s ago: executing program 0 (id=1003): r0 = memfd_create(&(0x7f0000000300)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xae\xd1md\xc8\x85\x00\x00\xfb\xff\x00\x18\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;2\xb5\xe1jS\xeb\xbf%||\xa0\x8e\x01\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x15, 0x10, 0x2}, 0x50) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1000000, 0x3, 0xfffffffd}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r2, 0x5608, 0x1) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="01000000080000000400000008"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0xfffffc01, 0x0, r3}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0xf, 0xf, &(0x7f0000000200)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='syzkaller\x00', 0x2}, 0x94) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x5a) ioctl$BLKCLOSEZONE(r4, 0x40101287, &(0x7f0000001f00)={0x200, 0x3}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000001880)={'wg1\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000001ec0)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001e80)={&(0x7f00000018c0)={0x584, 0x0, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@WGDEVICE_A_PEERS={0x464, 0x8, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xdaef}]}, {0x58, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x6, @remote, 0x1}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}, {0x14, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4cc}]}, {0xa4, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "e5c82a845fd2af303f8d2673ebfba16010433b224d7174b7452af89ea6ee4b57"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x2, @mcast1, 0x7}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x2, @dev={0xfe, 0x80, '\x00', 0x28}, 0x5}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1ff}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}, {0x1c, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}]}, {0x58, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xb}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "5437a141c1ac3b5e44c67c4dcf1c45d899f2e9d719251e15a63945f484e1109c"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x5, @remote, 0xff}}]}, {0x1a8, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfff9}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b9847b937fc3ad9e98c25768540e4f2965888e584cc892866b7d74f5117dac7e"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0xf4, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x15}}, {0x5, 0x3, 0x1}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1f}}, {0x5, 0x3, 0x1}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x7, @private1, 0x1000}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}]}, {0xd4, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0xd0, 0x9, 0x0, 0x1, [{0x4}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}]}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "f0103e71ce689f315cdd24a169d154335251c1b95a3535d6780a74bfaff689a9"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r5}, @WGDEVICE_A_PEERS={0xd4, 0x8, 0x0, 0x1, [{0x4}, {0xa0, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b7e0dc34dbff1aa9415e7d4adc4a8a9c0479e255fd25db6fcda56d090a12e943"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "31198b96e11396ea538c809b842fc17392f1b0fd659d586f80ba4a0d7f9fcd9f"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @broadcast}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @private=0xa010102}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @rand_addr=0x64010102}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}]}, {0x2c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x8, @private0, 0x6}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x18}]}]}]}, 0x584}, 0x1, 0x0, 0x0, 0x20000040}, 0x40001) r6 = accept4(r4, 0x0, 0x0, 0x0) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000001f40)=0x4) write(r6, &(0x7f0000000040)="cb", 0xfffffdef) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0xfe98, &(0x7f0000000000)={&(0x7f0000000680)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_FLOW_MAX_RATE={0xfffffffffffffd87, 0x7, 0x3}]}}]}, 0x48}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000340)={'bond0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000005e000100"/20, @ANYRES32=r11, @ANYRES16], 0x1c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x4, 0x15, 0x2, 0x3, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, 0x1, 0x710, 0x7eb, 0x2}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r6, &(0x7f0000001800)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000017c0)={&(0x7f00000003c0)={0x13d8, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x10e0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_MASK={0xd6, 0x5, "661998a4326c6cd5b3a1c5a6a5a5b2391532b4a8b6d25344e39cee43513012af6121af43e43f2122bd461decdad9bea695e693928ae7262dbc20289935e61ea9bd333c7d61d924d217406d2af8375aa4c9f5d5629203f50b1af221fbeed19d389ff323154d4ef2c329699c9fe94696f632a965b618e65338bd1d34cbf2a079dcc31524c6420d91b80d840d4dd03d0d8c34e90c638c041613089add7a647f5382847a285895a39395ffdbd25a5a84059dae9228ab4f7929d139d4a87a9c31a4ed479b911708a58a77d864df9b082be549df93"}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x284, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xac, 0x3, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '*-{Q-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-['}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xebf6}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffd}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ',[#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '*#&\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0x1d4, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffe}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, ':]\xa9.+)\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10001}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0xa8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x83, 0x2, '[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xae\xd1md\xc8\x85\x00\x00\xfb\xff\x00\x18\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;2\xb5\xe1jS\xeb\xbf%||\xa0\x8e\x01\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xbe8d321}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '[e[&{\'\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '(\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '&-\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xa8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '$#!\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x83, 0x2, '[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xae\xd1md\xc8\x85\x00\x00\xfb\xff\x00\x18\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;2\xb5\xe1jS\xeb\xbf%||\xa0\x8e\x01\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}]}]}]}]}, 0x13d8}, 0x1, 0x0, 0x0, 0x800}, 0xc005) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x25a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xc5, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x1, 0x2, 0x7, {0x9, 0x21, 0x7, 0x1e, 0x1, {0x22, 0x26e}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xff, 0x0, 0x25}}}}}]}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 4m34.318865917s ago: executing program 0 (id=1014): bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) r0 = socket(0x10, 0x3, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x480, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x101002) ioctl$DRM_IOCTL_MODE_GETFB(r2, 0xc01c64ad, &(0x7f00000001c0)) (async) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000300)={0xe9, r2, 0x3d, {0x3c, 0x1}, 0x8}, 0x1) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x6, 0x0, 0x80000000, 0xfffffffd}, 0x10) write(r0, &(0x7f0000000080)="240000001e005f0214ffffffffe9fff8076000001d000000000004aa0000000072000000", 0x24) (async) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @private, @empty}, &(0x7f0000000380)=0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="1a4b6a2ef1541ca07de69058e0c986e2e9980af120c216a061db82bf9ba6f7c58adba4492e7e4b0c9b6527378b082bc113696a8ac6de9e2bdb1ea2b8e5240ebe2be77c446a44716a6cd461ac3c16da0007d9eac8a0b3a5c454b65cde33f392ff31c1a990fa76bd6fa43449e1129cf999a7832dd0213389739735c3eadd50e36784b3aae872622cdcd7aea0de193d7380cbb5109c1ba3cce7c42716f30b35a71585bf7d9e790c7278796960b0a0208f370b9706ef188b61a5f7685a51b97da602f014ec47a45351e1f28b7d6e6130b73bef", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095", @ANYRES8=r0], 0x0, 0x0, 0xffffffe6, 0x0, 0x0, 0x2c, '\x00', r3}, 0x94) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x16) (async) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup/syz1\x00', 0x1ff) (async) pipe2$watch_queue(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000680)='cq_reschedule\x00', r5, 0x0, 0x4}, 0x18) (async) r6 = socket$qrtr(0x2a, 0x2, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r7, 0x3ba0, &(0x7f0000000000)={0x48, 0x2, r8, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) ioctl$IOMMU_IOAS_IOVA_RANGES(r7, 0x3b84, &(0x7f0000000100)={0x20, r8, 0x0, 0x0, 0x0}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) r9 = syz_open_dev$dri(&(0x7f0000000440), 0x80000001, 0x208040) (async) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000000400)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r9, 0xc010640b, &(0x7f0000000480)={r10}) (async) connect$qrtr(r6, &(0x7f0000000000)={0x2a, 0x0, 0x2}, 0xc) bind$qrtr(r6, &(0x7f00000000c0)={0x2a, 0x1}, 0xc) (async) r11 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r11, 0x0, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x5e04, 0x0, 0x90, [0x0, 0x0, 0x200000000140], 0x2, 0x0, &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x108) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) 4m33.966231635s ago: executing program 0 (id=1016): statx(0xffffffffffffffff, 0x0, 0x7100, 0x7ff, 0x0) (fail_nth: 1) 4m33.422867963s ago: executing program 0 (id=1019): pwritev(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000340)="527302587e0a4e47ad", 0x9}], 0x1, 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000400)={0x3}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$sock_netdev_private(r0, 0x80085502, 0x0) syz_emit_ethernet(0x100, &(0x7f00000007c0)={@empty, @local, @val={@void}, {@mpls_uc={0x8847, {[], @ipv6=@tcp={0x0, 0x6, "5c030a", 0xc6, 0x6, 0xff, @loopback, @remote, {[], {{0x4e22, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4, 0x0, 0x0, 0xd}, {"da3aee2497e6406fee7c233d4a38714a4f24a37c2841a3f1da4d75d0000f5b8fe1cc3ff05dd52067e6945933e249dbde857545f96ff472265d65db5b7330f76b079c70988bad368dbbe29b918946d64173315605dfdcba187d2c59d3512c6d7d363d91b31fd5224cb7d69803277bad8ec5908dc988a0b63ce534971c61e549dbba9b645f5eeaaca27acc175734309de181ad1c6716c2b536c78af43bbfe3e202a191cb7d386a8e480ee883bbcf017dadcfc9"}}}}}}}}, 0x0) r1 = add_key$user(&(0x7f0000000380), &(0x7f0000000540)={'syz', 0x0}, &(0x7f00000008c0)="76349c26e37995486b4f4c285cc2cac12714cb63c249729f5285cc4f511330c6ee17eae8ad049e17645c3b668cabc1af03affce6c6b498bedbafaf102c03fe7cd4d1d94ee0a596f56f2c2869ebc01a995c5fd9bd4fc9e064b144c799a0c977891ec872e37637f0ae0a595444adcce05386f1b84f327608a0960a87ece2dd15db50eb7ad2c16d4847e86aedc4d85da6a801fdd27e03004b6403dd394850a43e3a38ead92876212388cd0ea47db171257291916924839a7712179414608f168ac9e41e57512961386852f67326fa775f6507000000000000e87a725fc43129f7e70e9db0c0b3645388f1ac18e27655cbf2bce48786ab29", 0xf6, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000340), 0x584, 0xfffffffffffffffd) r3 = syz_open_dev$video4linux(&(0x7f00000004c0), 0x8000000000000001, 0x400) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000500)='/proc/asound/card1/oss_mixer\x00', 0x109041, 0x0) fcntl$dupfd(r3, 0x0, r4) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r2, r2}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={'sha1-generic\x00'}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000180)='./file0\x00', 0x1000802, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x4, 0x24e, &(0x7f0000000a00)="$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") sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1, 0x922, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "5c91440132bb112240fcbcc3fa9d0431575f8614d3538ce09c50eecd6ac579e8e83b944b666113f3afed71231e6653a13532f17b33515bdd7e1be14f53b9fc9b"}}, 0x80}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 4m13.193911582s ago: executing program 32 (id=1019): pwritev(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000340)="527302587e0a4e47ad", 0x9}], 0x1, 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000400)={0x3}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$sock_netdev_private(r0, 0x80085502, 0x0) syz_emit_ethernet(0x100, &(0x7f00000007c0)={@empty, @local, @val={@void}, {@mpls_uc={0x8847, {[], @ipv6=@tcp={0x0, 0x6, "5c030a", 0xc6, 0x6, 0xff, @loopback, @remote, {[], {{0x4e22, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4, 0x0, 0x0, 0xd}, {"da3aee2497e6406fee7c233d4a38714a4f24a37c2841a3f1da4d75d0000f5b8fe1cc3ff05dd52067e6945933e249dbde857545f96ff472265d65db5b7330f76b079c70988bad368dbbe29b918946d64173315605dfdcba187d2c59d3512c6d7d363d91b31fd5224cb7d69803277bad8ec5908dc988a0b63ce534971c61e549dbba9b645f5eeaaca27acc175734309de181ad1c6716c2b536c78af43bbfe3e202a191cb7d386a8e480ee883bbcf017dadcfc9"}}}}}}}}, 0x0) r1 = add_key$user(&(0x7f0000000380), &(0x7f0000000540)={'syz', 0x0}, &(0x7f00000008c0)="76349c26e37995486b4f4c285cc2cac12714cb63c249729f5285cc4f511330c6ee17eae8ad049e17645c3b668cabc1af03affce6c6b498bedbafaf102c03fe7cd4d1d94ee0a596f56f2c2869ebc01a995c5fd9bd4fc9e064b144c799a0c977891ec872e37637f0ae0a595444adcce05386f1b84f327608a0960a87ece2dd15db50eb7ad2c16d4847e86aedc4d85da6a801fdd27e03004b6403dd394850a43e3a38ead92876212388cd0ea47db171257291916924839a7712179414608f168ac9e41e57512961386852f67326fa775f6507000000000000e87a725fc43129f7e70e9db0c0b3645388f1ac18e27655cbf2bce48786ab29", 0xf6, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000340), 0x584, 0xfffffffffffffffd) r3 = syz_open_dev$video4linux(&(0x7f00000004c0), 0x8000000000000001, 0x400) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000500)='/proc/asound/card1/oss_mixer\x00', 0x109041, 0x0) fcntl$dupfd(r3, 0x0, r4) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r2, r2}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={'sha1-generic\x00'}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000180)='./file0\x00', 0x1000802, &(0x7f00000001c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c6e6f6e756d7461696c003130dbbb3121258e322c262b537f5d0000006e695f7804590000000000003d312c696f63686172538c6c90392bc69373686f72746e616d65653ff959f53d6d697865642c636f6465706167653d3821332c696f6368617273650000000031323831e54f1bb0a3d72c007e3db5a829498e2a721ae5804ff8ccb41eff157cfdfcef90a6010100003ceeeac934b3165b4a0ea182cdd0666ab32f2d041a99ac9fc865ba946f1bb7759d02742dfcc68937ff86d7a54d6de8823119c767d45d6047209f4436383ee21373a9c3f450cb6d7c37b59a34407d4a0e6a382108ddd52580281f1d8ad71c4ceafb49960f1429b090d1429f519f9c2b0cb88ffa6fc04fa61c275bf560b9eeeb2d0c8b3ddeb56783f9908c21cf9b2ba0b76b9b60c991bb17c7d0accad1cdaf3259b7dc405d72e2bc3abe0cf37bda3dbfc05e2e55f8aa272b5ea736019c3c0a9b34115a445e0c5da1bd7352ec9529f5caa71f1ae71b36b500c79fffb487ed081232b5d93d3162c7f71f4d5756c9e5442fa3692127266a0c15dac9171edda86b148d17a48d4d90470e79620eeab5acf6f78f807298315e2b80fe1874098d75ab47837a96699e2a7db456f2a4368bece813135ed970951c7471ac16703820a799421cb24f32a5f49ab45bec637c38bcbdae4da3a05f96b2162c47d0b1277e1b1bcc981cce8f6f7f3dd8d06352eb387997b498a732d8442115755ff14d508891abd401b3cafcba75a6901fbe08002674d8663b8c40e9cf13fa4c4a092cb8004a1d2a6fe18cd5d702493d52a7110b17e64b9fa22fb3ace98b9ca35cb98c65f0902dd430373f6ae43c4a60c423b6f65b5ecc2093698072abc857ab2d36a261a7fc5776d39c3d5d5fad291c88ff9726d5ee32c6bcac1799ade9459eb39b56d985d29b988c72c9ad7e82b589f454a58d7cd5ace9436cf69acc217737c863d8938cc95767a0c9b14cb79f5b45ea2408d1da65a2ed8cf55a"], 0x4, 0x24e, &(0x7f0000000a00)="$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") sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1, 0x922, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "5c91440132bb112240fcbcc3fa9d0431575f8614d3538ce09c50eecd6ac579e8e83b944b666113f3afed71231e6653a13532f17b33515bdd7e1be14f53b9fc9b"}}, 0x80}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 2m34.905118304s ago: executing program 4 (id=1259): syz_open_dev$vcsa(0x0, 0x1, 0x20000) syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000b5b30a40450c8f6055b501020301090212"], 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000140)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x1400, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) 2m29.972651716s ago: executing program 4 (id=1266): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, 0x0, 0x1, 0x70bd28, 0x25dfdbfb}, 0x14}}, 0x20040180) 2m29.004042881s ago: executing program 4 (id=1267): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0xd8000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000800)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 2m26.899810965s ago: executing program 4 (id=1270): ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8948, &(0x7f0000000080)={'dummy0\x00', 0x6}) 2m26.06323074s ago: executing program 4 (id=1271): socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0xfffffdfb) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000040)={0x5, 0xf7af, 0x8000, 0x8, 0x0, "4cb8b210acdc716f64cf76062d59a56f2584c4"}) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sync() sync() sync() getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0x81, 0x43) unshare(0x22020600) open$dir(0x0, 0x2e2701, 0x0) open(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) 2m24.39754185s ago: executing program 4 (id=1274): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) syz_open_dev$cec(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r4, 0x2000) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x601) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000040)={0x53, 0xffffffffffffffff, 0x6, 0xf7, @buffer={0x0, 0xa9, &(0x7f00000001c0)=""/169}, &(0x7f0000000300)="b945c52f244e", 0x0, 0x101, 0x10016, 0x3, 0x0}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r7, 0x2000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r7, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) mkdirat(r7, 0x0, 0x85) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0xfffffffd, 0x0}, 0x6400c810) 2m6.884438628s ago: executing program 33 (id=1274): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) syz_open_dev$cec(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r4, 0x2000) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x601) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000040)={0x53, 0xffffffffffffffff, 0x6, 0xf7, @buffer={0x0, 0xa9, &(0x7f00000001c0)=""/169}, &(0x7f0000000300)="b945c52f244e", 0x0, 0x101, 0x10016, 0x3, 0x0}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r7, 0x2000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r7, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) mkdirat(r7, 0x0, 0x85) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0xfffffffd, 0x0}, 0x6400c810) 56.7848209s ago: executing program 3 (id=1429): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) keyctl$link(0x8, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x3000c12, &(0x7f00000003c0)={[{@dmode={'dmode', 0x3d, 0xae}}, {@utf8}, {@overriderock}, {@check_relaxed}, {}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}, {@cruft}, {@nocompress}, {@dmode}, {}, {@overriderock}, {@mode={'mode', 0x3d, 0x1000}}, {}, {@unhide}, {@map_off}]}, 0x1, 0xa2f, &(0x7f00000018c0)="$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") mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) mount$overlay(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f0000000800), 0x4000000, &(0x7f0000000b00)={[{@verity_require}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_off}, {@redirect_dir_follow}, {@metacopy_off}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}, {@default_permissions}, {@uuid_off}], [{@subj_type={'subj_type', 0x3d, '@'}}]}) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000740)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@auto_da_alloc}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mknodat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 43.187471248s ago: executing program 3 (id=1439): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0xb, "9e3ce079"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r1, 0x40184810, 0x0) 39.938881848s ago: executing program 3 (id=1448): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000000a0601020000000000000000020000000900020073797a310000000005000100070000002c0007800c00018008000140ffffffff0500070006000000060004404e2100000c00028008000140"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 38.911091561s ago: executing program 3 (id=1450): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x128, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flower={{0xb}, {0xf8, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x30, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x49}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x6}]}]}, @TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x5}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x98, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x2c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x86}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x2c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x19d}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x9}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x5, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x2c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x11a8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x81}]}]}, @TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}, @TCA_FLOWER_KEY_TCP_FLAGS={0x0, 0x47, 0x3}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}]}}]}, 0x128}, 0x1, 0x0, 0x0, 0x80}, 0x800) 36.693463292s ago: executing program 3 (id=1456): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, 0x0, 0x0) 36.205193373s ago: executing program 3 (id=1460): r0 = socket$inet6(0x10, 0x3, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) dup(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0xffffffff}, 0x50) sendto$inet6(r0, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00'}, 0x10) 19.425560585s ago: executing program 34 (id=1460): r0 = socket$inet6(0x10, 0x3, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) dup(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0xffffffff}, 0x50) sendto$inet6(r0, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00'}, 0x10) 17.289963339s ago: executing program 2 (id=1491): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="9000000010000305000000000000000000cf0000", @ANYBLOB="000000000000000030001280080001006772650024000280060002000600000008000700e000000208000200", @ANYRES32, @ANYBLOB="060011004e2100003800128008000100736974002c0002800800140006000000050009002900000006000e0009000000050009"], 0x90}}, 0x0) 16.588489779s ago: executing program 2 (id=1494): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x44084) 16.086268551s ago: executing program 2 (id=1495): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000c50000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='netlink_extack\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'geneve0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newqdisc={0x2d, 0x24, 0x3fe3aa0262d8c58b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0x39596cc5be47277d}}}}]}, 0x40}}, 0x0) 15.113674979s ago: executing program 2 (id=1497): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x1) ioctl$TIOCSETD(r1, 0x5412, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0xdb) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000340)) 14.388223182s ago: executing program 2 (id=1498): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000"], 0xb4}}, 0x200000d4) 13.455465098s ago: executing program 2 (id=1501): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = syz_io_uring_setup(0x497, 0x0, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r5, 0x0, 0x0, 0x0, 0x60, 0x1, {0x1}}) io_uring_enter(r6, 0x3517, 0x173d, 0x42, 0x0, 0x0) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="05000000000000000000220000000a0001007770616e310000001b605ab3df87942a5811f711753d9841487cde86d42b292e1b104a164561f453"], 0x20}}, 0x2000c094) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), r1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@remote, 0xfffffffc, 0x0, 0x2, 0x3, 0xe2c3}, 0x20) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, 0x0, 0x0) 11.112261333s ago: executing program 1 (id=1505): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0) syz_mount_image$btrfs(&(0x7f0000000080), &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000001c0), 0x1, 0x50ed, &(0x7f0000005180)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$rds(0x15, 0x5, 0x0) r4 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r5 = fanotify_init(0xf00, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r4) sendmsg$NL80211_CMD_GET_REG(r4, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000004}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)={0x50, r6, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_REG_RULES={0x34, 0x22, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x0, 0x5, 0x3}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xfffffffe}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1ff}, @NL80211_ATTR_FREQ_RANGE_END={0xfffffffffffffd71, 0x3, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x0, 0x3, 0xfffffffc}]}]}]}, 0x50}}, 0x80) fanotify_mark(r5, 0x105, 0x40009975, r4, 0x0) truncate(&(0x7f00000000c0)='./file0/file0\x00', 0x3db1) 6.674762586s ago: executing program 1 (id=1509): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000"], 0xb4}}, 0x200000d4) 6.173170462s ago: executing program 5 (id=1510): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0xe8}}, 0x0) 5.717184757s ago: executing program 1 (id=1511): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x128, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flower={{0xb}, {0xf8, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x30, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x49}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x6}]}]}, @TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x5}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x98, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x2c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x86}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x2c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x19d}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x9}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x5, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x2c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x11a8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x81}]}]}, @TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}, @TCA_FLOWER_KEY_TCP_FLAGS={0x0, 0x47, 0x3}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}]}}]}, 0x128}, 0x1, 0x0, 0x0, 0x80}, 0x800) 5.432099783s ago: executing program 5 (id=1512): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="9000000010000305000000000000000000cf0000", @ANYBLOB="000000000000000030001280080001006772650024000280060002000600000008000700e000000208000200", @ANYRES32, @ANYBLOB="060011004e2100003800128008000100736974002c0002800800140006000000050009002900000006000e0009000000050009"], 0x90}}, 0x0) 4.683389662s ago: executing program 1 (id=1513): io_setup(0x8001, 0xfffffffffffffffc) 4.452332739s ago: executing program 5 (id=1514): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 4.158776484s ago: executing program 1 (id=1515): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x1) ioctl$TIOCSETD(r1, 0x5412, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0xdb) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000340)) 3.803102516s ago: executing program 5 (id=1516): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback=0x19}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f0000000180)='fsi_master_gpio_cmd_rel_addr\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50) rt_sigaction(0x40, 0x0, 0x0, 0x8, &(0x7f0000001540)) syz_open_dev$tty20(0xc, 0x4, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x40000000015, 0x805, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r5, &(0x7f00000000c0)=@unlock_all, 0xb) syz_emit_vhci(&(0x7f0000001080)=ANY=[@ANYBLOB="04040a00e0ffffff0f77042482"], 0xd) syz_emit_vhci(&(0x7f00000007c0)=ANY=[@ANYBLOB="040e06006220"], 0x9) 2.001462156s ago: executing program 1 (id=1517): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cf8bed20d90f25001f29000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000700)=ANY=[@ANYBLOB="20ab01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000140)={0x0, 0x1, 0x4, &(0x7f0000000040)={0x19, "78b3060abe61f6304382447c087935e141a6349f941d4dc197ce00"}}) 1.382940567s ago: executing program 5 (id=1518): socket(0x28, 0x5, 0x0) socket(0x10, 0x802, 0x0) socket$key(0xf, 0x3, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) epoll_create(0x101) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x200) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000040)={0x2, 0x0, 0x1, 0x0, 0x0, [{{r2}, 0x1}]}) ioctl$KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000040)) 0s ago: executing program 5 (id=1519): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000003}) kernel console output (not intermixed with test programs): 8002][ T9466] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 596.508111][ T9466] RSP: 002b:00007f1efa90e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 596.508230][ T9466] RAX: ffffffffffffffda RBX: 00007f1ef9db5fa0 RCX: 00007f1ef9b8e929 [ 596.508324][ T9466] RDX: 0000000000000040 RSI: 8001000000000000 RDI: 0000000000000003 [ 596.508406][ T9466] RBP: 00007f1efa90e090 R08: 00000000000002a0 R09: 0000000000000000 [ 596.508484][ T9466] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 596.508570][ T9466] R13: 0000000000000000 R14: 00007f1ef9db5fa0 R15: 00007fffa534dcf8 [ 596.508682][ T9466] [ 596.812423][ T9456] loop4: detected capacity change from 0 to 4096 [ 597.228084][ T9452] XFS (loop1): Ending clean mount [ 597.435211][ T9452] XFS (loop1): Metadata CRC error detected at xfs_inobt_read_verify+0xaf/0x2d0, xfs_finobt block 0x20 [ 597.447441][ T9452] XFS (loop1): Unmount and run xfs_repair [ 597.453408][ T9452] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 597.461147][ T9452] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 597.470334][ T9452] 00000010: 00 00 00 00 00 00 00 20 00 00 00 01 00 00 00 40 ....... .......@ [ 597.479715][ T9452] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a ...B..N....xv... [ 597.488962][ T9452] 00000030: 00 00 00 00 8a d2 18 46 00 00 16 80 00 00 40 37 .......F......@7 [ 597.498277][ T9452] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 597.508821][ T9452] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 09 00 00 ................ [ 597.518104][ T9452] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 597.529713][ T9452] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 597.539016][ T9452] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x33d/0x5f0" at daddr 0x20 len 8 error 74 [ 597.682389][ T9475] SET target dimension over the limit! [ 597.884519][ T5795] XFS (loop1): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 597.915918][ T5795] XFS (loop1): Uncorrected metadata errors detected; please run xfs_repair. [ 604.437656][ T9487] FAULT_INJECTION: forcing a failure. [ 604.437656][ T9487] name failslab, interval 1, probability 0, space 0, times 0 [ 604.450915][ T9487] CPU: 1 UID: 0 PID: 9487 Comm: syz.2.1048 Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(undef) [ 604.451091][ T9487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 604.451172][ T9487] Call Trace: [ 604.451219][ T9487] [ 604.451268][ T9487] __dump_stack+0x26/0x30 [ 604.451440][ T9487] dump_stack_lvl+0x1df/0x270 [ 604.451612][ T9487] dump_stack+0x1e/0x25 [ 604.451763][ T9487] should_fail_ex+0x7dc/0x8a0 [ 604.451949][ T9487] should_failslab+0x15b/0x200 [ 604.452148][ T9487] __kmalloc_noprof+0x182/0x1310 [ 604.452292][ T9487] ? tomoyo_realpath_from_path+0xeb/0x9f0 [ 604.452480][ T9487] ? tomoyo_path_number_perm+0xf1/0x7d0 [ 604.452623][ T9487] ? filter_irq_stacks+0x49/0x190 [ 604.452755][ T9487] ? kmsan_get_metadata+0xfb/0x160 [ 604.452950][ T9487] tomoyo_realpath_from_path+0xeb/0x9f0 [ 604.453127][ T9487] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 604.453366][ T9487] ? __srcu_read_lock+0x5e/0xd0 [ 604.453547][ T9487] tomoyo_path_number_perm+0x1d0/0x7d0 [ 604.453707][ T9487] ? stack_depot_save_flags+0x35/0x7b0 [ 604.453897][ T9487] ? kmsan_get_metadata+0xfb/0x160 [ 604.454084][ T9487] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 604.454345][ T9487] tomoyo_file_ioctl+0x3d/0x50 [ 604.454560][ T9487] security_file_ioctl+0x141/0x590 [ 604.454805][ T9487] __se_sys_ioctl+0xbb/0x400 [ 604.455004][ T9487] __x64_sys_ioctl+0x97/0xe0 [ 604.455189][ T9487] x64_sys_call+0x1ebe/0x3db0 [ 604.455396][ T9487] do_syscall_64+0xd9/0x210 [ 604.455552][ T9487] ? irqentry_exit+0x16/0x60 [ 604.455687][ T9487] ? clear_bhb_loop+0x40/0x90 [ 604.455856][ T9487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.456020][ T9487] RIP: 0033:0x7f1ef9b8e929 [ 604.456146][ T9487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 604.456278][ T9487] RSP: 002b:00007f1ef79f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 604.456444][ T9487] RAX: ffffffffffffffda RBX: 00007f1ef9db6080 RCX: 00007f1ef9b8e929 [ 604.456565][ T9487] RDX: 0000200000001900 RSI: 000000000000541c RDI: 0000000000000004 [ 604.456656][ T9487] RBP: 00007f1ef79f6090 R08: 0000000000000000 R09: 0000000000000000 [ 604.456741][ T9487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 604.456853][ T9487] R13: 0000000000000001 R14: 00007f1ef9db6080 R15: 00007fffa534dcf8 [ 604.456983][ T9487] [ 604.697553][ T9487] ERROR: Out of memory at tomoyo_realpath_from_path. [ 605.093010][ T5800] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 605.111601][ T5800] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 605.152619][ T5800] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 605.175456][ T5800] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 605.200709][ T5800] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 605.724790][ T5876] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 605.983542][ T5876] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 605.994100][ T5876] usb 3-1: config 0 has no interfaces? [ 606.046687][ T5876] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 606.056283][ T5876] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.065736][ T5876] usb 3-1: Product: syz [ 606.070179][ T5876] usb 3-1: Manufacturer: syz [ 606.076148][ T5876] usb 3-1: SerialNumber: syz [ 606.126713][ T5876] usb 3-1: config 0 descriptor?? [ 606.294902][ T9489] chnl_net:caif_netlink_parms(): no params data found [ 606.661341][ T24] usb 3-1: USB disconnect, device number 29 [ 607.298497][ T5800] Bluetooth: hci5: command tx timeout [ 607.397492][ T9489] bridge0: port 1(bridge_slave_0) entered blocking state [ 607.405381][ T9489] bridge0: port 1(bridge_slave_0) entered disabled state [ 607.413206][ T9489] bridge_slave_0: entered allmulticast mode [ 607.423129][ T9489] bridge_slave_0: entered promiscuous mode [ 607.493086][ T9489] bridge0: port 2(bridge_slave_1) entered blocking state [ 607.500915][ T9489] bridge0: port 2(bridge_slave_1) entered disabled state [ 607.508841][ T9489] bridge_slave_1: entered allmulticast mode [ 607.518597][ T9489] bridge_slave_1: entered promiscuous mode [ 607.689654][ T9489] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 607.743028][ T9489] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 607.906172][ T9489] team0: Port device team_slave_0 added [ 607.940451][ T9489] team0: Port device team_slave_1 added [ 608.205933][ T9489] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 608.213171][ T9489] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 608.239876][ T9489] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 608.339006][ T9489] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 608.346441][ T9489] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 608.374558][ T9489] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 608.442590][ T9513] loop2: detected capacity change from 0 to 64 [ 608.597384][ T30] audit: type=1800 audit(1750985894.911:326): pid=9513 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1057" name="file2" dev="loop2" ino=6 res=0 errno=0 [ 609.016919][ T9489] hsr_slave_0: entered promiscuous mode [ 609.027432][ T9489] hsr_slave_1: entered promiscuous mode [ 609.036413][ T9489] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 609.044640][ T9489] Cannot create hsr debugfs directory [ 609.209141][ T9525] loop1: detected capacity change from 0 to 64 [ 609.455417][ T5800] Bluetooth: hci5: command tx timeout [ 609.474999][ T5876] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 609.617070][ T9531] loop3: detected capacity change from 0 to 2048 [ 609.764576][ T5876] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 609.776365][ T5876] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 609.785966][ T5876] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 609.914805][ T9531] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 609.958282][ T5876] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 609.967824][ T5876] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.976370][ T5876] usb 3-1: Product: syz [ 609.980781][ T5876] usb 3-1: Manufacturer: syz [ 609.985776][ T5876] usb 3-1: SerialNumber: syz [ 610.054310][ T5876] cdc_ncm 3-1:1.0: skipping garbage [ 610.059954][ T5876] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 610.067893][ T5876] cdc_ncm 3-1:1.0: bind() failure [ 610.141569][ T9538] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 610.190720][ T9529] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 610.450511][ T9489] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 610.519827][ T9489] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 610.588446][ T9541] FAULT_INJECTION: forcing a failure. [ 610.588446][ T9541] name failslab, interval 1, probability 0, space 0, times 0 [ 610.603113][ T9541] CPU: 0 UID: 0 PID: 9541 Comm: syz.2.1060 Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(undef) [ 610.603262][ T9541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 610.603336][ T9541] Call Trace: [ 610.603381][ T9541] [ 610.603423][ T9541] __dump_stack+0x26/0x30 [ 610.603591][ T9541] dump_stack_lvl+0x1df/0x270 [ 610.603770][ T9541] dump_stack+0x1e/0x25 [ 610.603915][ T9541] should_fail_ex+0x7dc/0x8a0 [ 610.604097][ T9541] should_failslab+0x15b/0x200 [ 610.604320][ T9541] __kmalloc_noprof+0x182/0x1310 [ 610.604466][ T9541] ? tomoyo_encode+0x626/0xa10 [ 610.604660][ T9541] ? kmsan_get_metadata+0xfb/0x160 [ 610.604874][ T9541] ? kmsan_get_metadata+0xfb/0x160 [ 610.605099][ T9541] tomoyo_encode+0x626/0xa10 [ 610.605312][ T9541] tomoyo_realpath_from_path+0x92e/0x9f0 [ 610.605515][ T9541] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 610.605764][ T9541] tomoyo_path_number_perm+0x1d0/0x7d0 [ 610.605924][ T9541] ? stack_depot_save_flags+0x35/0x7b0 [ 610.606157][ T9541] ? kmsan_get_metadata+0xfb/0x160 [ 610.606362][ T9541] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 610.606600][ T9541] tomoyo_file_ioctl+0x3d/0x50 [ 610.606777][ T9541] security_file_ioctl+0x141/0x590 [ 610.606989][ T9541] __se_sys_ioctl+0xbb/0x400 [ 610.607162][ T9541] __x64_sys_ioctl+0x97/0xe0 [ 610.607344][ T9541] x64_sys_call+0x1ebe/0x3db0 [ 610.607509][ T9541] do_syscall_64+0xd9/0x210 [ 610.607637][ T9541] ? irqentry_exit+0x16/0x60 [ 610.607745][ T9541] ? clear_bhb_loop+0x40/0x90 [ 610.607878][ T9541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.608020][ T9541] RIP: 0033:0x7f1ef9b8e929 [ 610.608115][ T9541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 610.608231][ T9541] RSP: 002b:00007f1ef79f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 610.608352][ T9541] RAX: ffffffffffffffda RBX: 00007f1ef9db6080 RCX: 00007f1ef9b8e929 [ 610.608445][ T9541] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 610.608522][ T9541] RBP: 00007f1ef79f6090 R08: 0000000000000000 R09: 0000000000000000 [ 610.608604][ T9541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 610.608679][ T9541] R13: 0000000000000000 R14: 00007f1ef9db6080 R15: 00007fffa534dcf8 [ 610.608795][ T9541] [ 610.685225][ T42] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 610.696335][ T9541] ERROR: Out of memory at tomoyo_realpath_from_path. [ 610.702626][ T9489] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 611.034710][ T9489] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 611.046095][ T42] usb 4-1: Using ep0 maxpacket: 32 [ 611.054596][ T42] usb 4-1: too many configurations: 209, using maximum allowed: 8 [ 611.074444][ T42] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 611.082506][ T42] usb 4-1: can't read configurations, error -61 [ 611.312070][ T42] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 611.352764][ T5876] usb 3-1: USB disconnect, device number 30 [ 611.515308][ T42] usb 4-1: Using ep0 maxpacket: 32 [ 611.527342][ T42] usb 4-1: too many configurations: 209, using maximum allowed: 8 [ 611.544554][ T5800] Bluetooth: hci5: command tx timeout [ 611.565623][ T42] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 611.574039][ T42] usb 4-1: can't read configurations, error -61 [ 611.600914][ T42] usb usb4-port1: attempt power cycle [ 612.004694][ T42] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 612.068966][ T42] usb 4-1: Using ep0 maxpacket: 32 [ 612.100658][ T9549] loop4: detected capacity change from 0 to 8 [ 612.112164][ T42] usb 4-1: too many configurations: 209, using maximum allowed: 8 [ 612.177292][ T42] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 612.186349][ T42] usb 4-1: can't read configurations, error -61 [ 612.234791][ T9489] 8021q: adding VLAN 0 to HW filter on device bond0 [ 612.374610][ T42] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 612.446987][ T9489] 8021q: adding VLAN 0 to HW filter on device team0 [ 612.534288][ T4110] bridge0: port 1(bridge_slave_0) entered blocking state [ 612.542055][ T4110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 612.768468][ T42] usb 4-1: device descriptor read/8, error -71 [ 612.787255][ T4110] bridge0: port 2(bridge_slave_1) entered blocking state [ 612.795032][ T4110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 612.929877][ T42] usb usb4-port1: unable to enumerate USB device [ 613.009034][ T5810] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 613.605545][ T5800] Bluetooth: hci5: command tx timeout [ 613.726534][ T9558] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1066'. [ 613.952543][ T9561] overlayfs: failed to resolve './file2/file0': -2 [ 614.264508][ T5849] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 614.337079][ T9568] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1068'. [ 614.446303][ T9559] loop3: detected capacity change from 0 to 4096 [ 614.494386][ T5849] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 614.505084][ T5849] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.574125][ T9559] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 614.597292][ T5849] usb 5-1: config 0 descriptor?? [ 615.544846][ T9489] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 615.700620][ T5849] usb 5-1: Cannot set autoneg [ 615.706433][ T5849] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -61 [ 616.363297][ T9586] IPv6: sit1: Disabled Multicast RS [ 616.590838][ T9589] FAULT_INJECTION: forcing a failure. [ 616.590838][ T9589] name failslab, interval 1, probability 0, space 0, times 0 [ 616.604288][ T9589] CPU: 0 UID: 0 PID: 9589 Comm: syz.1.1073 Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(undef) [ 616.604457][ T9589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 616.604553][ T9589] Call Trace: [ 616.604611][ T9589] [ 616.604669][ T9589] __dump_stack+0x26/0x30 [ 616.604857][ T9589] dump_stack_lvl+0x1df/0x270 [ 616.605050][ T9589] dump_stack+0x1e/0x25 [ 616.605221][ T9589] should_fail_ex+0x7dc/0x8a0 [ 616.605436][ T9589] should_failslab+0x15b/0x200 [ 616.605679][ T9589] kmem_cache_alloc_noprof+0xf0/0xec0 [ 616.605852][ T9589] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 616.606072][ T9589] ? mm_alloc+0x59/0x1a0 [ 616.606224][ T9589] ? kmsan_get_metadata+0xfb/0x160 [ 616.606437][ T9589] mm_alloc+0x59/0x1a0 [ 616.606599][ T9589] alloc_bprm+0x721/0xc50 [ 616.606810][ T9589] do_execveat_common+0x28b/0xdf0 [ 616.607005][ T9589] ? getname_flags+0x5f4/0xac0 [ 616.607169][ T9589] __x64_sys_execveat+0x144/0x1e0 [ 616.607374][ T9589] x64_sys_call+0x3a3f/0x3db0 [ 616.607551][ T9589] do_syscall_64+0xd9/0x210 [ 616.607684][ T9589] ? irqentry_exit+0x16/0x60 [ 616.607797][ T9589] ? clear_bhb_loop+0x40/0x90 [ 616.607937][ T9589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.608097][ T9589] RIP: 0033:0x7fc5b3b8e929 [ 616.608206][ T9589] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 616.608328][ T9589] RSP: 002b:00007fc5b19f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 616.608458][ T9589] RAX: ffffffffffffffda RBX: 00007fc5b3db5fa0 RCX: 00007fc5b3b8e929 [ 616.608562][ T9589] RDX: 0000000000000000 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 616.608656][ T9589] RBP: 00007fc5b19f6090 R08: 0000000000000000 R09: 0000000000000000 [ 616.608742][ T9589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 616.608845][ T9589] R13: 0000000000000000 R14: 00007fc5b3db5fa0 R15: 00007ffc96e03348 [ 616.608979][ T9589] [ 617.437014][ T11] usb 5-1: USB disconnect, device number 39 [ 618.254217][ T9607] loop1: detected capacity change from 0 to 512 [ 618.280508][ T9607] EXT4-fs: Ignoring removed mblk_io_submit option [ 618.419154][ T9607] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 618.473009][ T9607] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.1078: attempt to clear invalid blocks 2 len 1 [ 618.568208][ T9607] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 618.584186][ T9607] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.1078: invalid indirect mapped block 1819239214 (level 0) [ 618.619139][ T9607] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.1078: invalid indirect mapped block 1819239214 (level 1) [ 618.662055][ T9607] EXT4-fs (loop1): 1 truncate cleaned up [ 618.672032][ T9607] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 618.811315][ T9489] veth0_vlan: entered promiscuous mode [ 618.956190][ T9489] veth1_vlan: entered promiscuous mode [ 619.186016][ T9591] loop2: detected capacity change from 0 to 512 [ 619.190281][ T9591] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 619.222810][ T9591] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ee018, mo2=0002] [ 619.223425][ T9591] System zones: 1-12 [ 619.225770][ T9591] EXT4-fs (loop2): 1 truncate cleaned up [ 619.228110][ T9591] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 619.341267][ T9489] veth0_macvtap: entered promiscuous mode [ 619.382193][ T9489] veth1_macvtap: entered promiscuous mode [ 619.483521][ T9489] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 619.548474][ T9614] loop4: detected capacity change from 0 to 1764 [ 619.569210][ T9489] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 619.672026][ T9489] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.681222][ T9489] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.690417][ T9489] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.699527][ T9489] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.159668][ T5795] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 620.698764][ T5801] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 621.514857][ T5849] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 621.617578][ T9636] FAULT_INJECTION: forcing a failure. [ 621.617578][ T9636] name failslab, interval 1, probability 0, space 0, times 0 [ 621.630981][ T9636] CPU: 1 UID: 0 PID: 9636 Comm: syz.4.1086 Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(undef) [ 621.631143][ T9636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 621.631230][ T9636] Call Trace: [ 621.631285][ T9636] [ 621.631340][ T9636] __dump_stack+0x26/0x30 [ 621.631521][ T9636] dump_stack_lvl+0x1df/0x270 [ 621.631707][ T9636] dump_stack+0x1e/0x25 [ 621.631873][ T9636] should_fail_ex+0x7dc/0x8a0 [ 621.632064][ T9636] should_failslab+0x15b/0x200 [ 621.632289][ T9636] __kmalloc_noprof+0x182/0x1310 [ 621.632427][ T9636] ? tomoyo_encode+0x626/0xa10 [ 621.632608][ T9636] ? prepend_path+0xff2/0x10c0 [ 621.632757][ T9636] ? kmsan_get_metadata+0xfb/0x160 [ 621.632964][ T9636] ? kmsan_get_metadata+0xfb/0x160 [ 621.633174][ T9636] tomoyo_encode+0x626/0xa10 [ 621.633407][ T9636] tomoyo_realpath_from_path+0x92e/0x9f0 [ 621.633642][ T9636] tomoyo_path_number_perm+0x1d0/0x7d0 [ 621.633814][ T9636] ? stack_depot_save_flags+0x35/0x7b0 [ 621.634035][ T9636] ? kmsan_get_metadata+0xfb/0x160 [ 621.634240][ T9636] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 621.634414][ T9637] FAULT_INJECTION: forcing a failure. [ 621.634414][ T9637] name failslab, interval 1, probability 0, space 0, times 0 [ 621.634491][ T9636] tomoyo_file_ioctl+0x3d/0x50 [ 621.634701][ T9636] security_file_ioctl+0x141/0x590 [ 621.634972][ T9636] __se_sys_ioctl+0xbb/0x400 [ 621.635199][ T9636] __x64_sys_ioctl+0x97/0xe0 [ 621.635411][ T9636] x64_sys_call+0x1ebe/0x3db0 [ 621.635642][ T9636] do_syscall_64+0xd9/0x210 [ 621.635824][ T9636] ? irqentry_exit+0x16/0x60 [ 621.635964][ T9636] ? clear_bhb_loop+0x40/0x90 [ 621.636132][ T9636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.636302][ T9636] RIP: 0033:0x7f4c5fb8e929 [ 621.636416][ T9636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 621.636553][ T9636] RSP: 002b:00007f4c60a5b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 621.636699][ T9636] RAX: ffffffffffffffda RBX: 00007f4c5fdb5fa0 RCX: 00007f4c5fb8e929 [ 621.636813][ T9636] RDX: 0000000000000000 RSI: 00000000c0045516 RDI: 0000000000000003 [ 621.636912][ T9636] RBP: 00007f4c60a5b090 R08: 0000000000000000 R09: 0000000000000000 [ 621.637009][ T9636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 621.637103][ T9636] R13: 0000000000000000 R14: 00007f4c5fdb5fa0 R15: 00007fff4b6e1768 [ 621.637244][ T9636] [ 621.637788][ T9636] ERROR: Out of memory at tomoyo_realpath_from_path. [ 621.646889][ T9637] CPU: 0 UID: 0 PID: 9637 Comm: syz.1.1085 Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(undef) [ 621.647029][ T9637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 621.647131][ T9637] Call Trace: [ 621.647189][ T9637] [ 621.647239][ T9637] __dump_stack+0x26/0x30 [ 621.647413][ T9637] dump_stack_lvl+0x1df/0x270 [ 621.647595][ T9637] dump_stack+0x1e/0x25 [ 621.647756][ T9637] should_fail_ex+0x7dc/0x8a0 [ 621.647947][ T9637] should_failslab+0x15b/0x200 [ 621.648157][ T9637] kmem_cache_alloc_noprof+0xf0/0xec0 [ 621.648308][ T9637] ? alloc_vfsmnt+0x59/0xbb0 [ 621.648473][ T9637] ? xas_find_marked+0x1187/0x13e0 [ 621.648628][ T9637] ? kmsan_get_metadata+0xfb/0x160 [ 621.648845][ T9637] ? kmsan_get_metadata+0xfb/0x160 [ 621.649067][ T9637] alloc_vfsmnt+0x59/0xbb0 [ 621.649254][ T9637] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 621.649498][ T9637] clone_mnt+0x7f/0x1ba0 [ 621.649693][ T9637] ? kmsan_get_metadata+0xfb/0x160 [ 621.649935][ T9637] copy_tree+0x23b/0x1540 [ 621.650154][ T9637] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 621.650387][ T9637] ? kmsan_get_metadata+0xfb/0x160 [ 621.650600][ T9637] ? kmsan_get_metadata+0xfb/0x160 [ 621.650816][ T9637] ? kmsan_get_metadata+0xfb/0x160 [ 621.651037][ T9637] copy_mnt_ns+0x2b2/0x1490 [ 621.651256][ T9637] ? kmem_cache_alloc_noprof+0xa49/0xec0 [ 621.651454][ T9637] ? kmsan_get_metadata+0xfb/0x160 [ 621.651659][ T9637] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 621.651883][ T9637] create_new_namespaces+0x129/0xce0 [ 621.652077][ T9637] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 621.652306][ T9637] ? ns_capable+0x129/0x1c0 [ 621.652462][ T9637] unshare_nsproxy_namespaces+0x179/0x2e0 [ 621.652685][ T9637] ksys_unshare+0x8fd/0x12b0 [ 621.652871][ T9637] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 621.653125][ T9637] __x64_sys_unshare+0x47/0x70 [ 621.653316][ T9637] x64_sys_call+0x398b/0x3db0 [ 621.653511][ T9637] do_syscall_64+0xd9/0x210 [ 621.653691][ T9637] ? irqentry_exit+0x16/0x60 [ 621.653828][ T9637] ? clear_bhb_loop+0x40/0x90 [ 621.653993][ T9637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.654167][ T9637] RIP: 0033:0x7fc5b3b8e929 [ 621.654278][ T9637] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 621.654413][ T9637] RSP: 002b:00007fc5b19f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 621.654560][ T9637] RAX: ffffffffffffffda RBX: 00007fc5b3db5fa0 RCX: 00007fc5b3b8e929 [ 621.654698][ T9637] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002c020400 [ 621.654809][ T9637] RBP: 00007fc5b19f6090 R08: 0000000000000000 R09: 0000000000000000 [ 621.654916][ T9637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 621.655020][ T9637] R13: 0000000000000000 R14: 00007fc5b3db5fa0 R15: 00007ffc96e03348 [ 621.655180][ T9637] [ 622.304592][ T5849] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 622.315285][ T5849] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 622.398116][ T5849] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 622.407955][ T5849] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.416410][ T5849] usb 3-1: Product: syz [ 622.420806][ T5849] usb 3-1: Manufacturer: syz [ 622.425840][ T5849] usb 3-1: SerialNumber: syz [ 622.507466][ T5849] usb 3-1: selecting invalid altsetting 1 [ 623.438387][ T9640] loop3: detected capacity change from 0 to 32768 [ 623.447580][ T9640] XFS: noikeep mount option is deprecated. [ 623.580567][ T9640] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 624.077492][ T9640] XFS (loop3): Ending clean mount [ 624.110687][ T9640] XFS (loop3): Quotacheck needed: Please wait. [ 624.186678][ T9640] XFS (loop3): Quotacheck: Done. [ 624.208632][ T5849] cdc_ncm 3-1:1.0: bind() failure [ 624.286885][ T9640] FAULT_INJECTION: forcing a failure. [ 624.286885][ T9640] name failslab, interval 1, probability 0, space 0, times 0 [ 624.300609][ T9640] CPU: 0 UID: 0 PID: 9640 Comm: syz.3.1087 Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(undef) [ 624.300774][ T9640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 624.300866][ T9640] Call Trace: [ 624.300920][ T9640] [ 624.300982][ T9640] __dump_stack+0x26/0x30 [ 624.301167][ T9640] dump_stack_lvl+0x1df/0x270 [ 624.301359][ T9640] dump_stack+0x1e/0x25 [ 624.301530][ T9640] should_fail_ex+0x7dc/0x8a0 [ 624.301734][ T9640] should_failslab+0x15b/0x200 [ 624.301950][ T9640] __kmalloc_cache_noprof+0xcb/0xed0 [ 624.302121][ T9640] ? xfs_filestream_select_ag+0x208a/0x29e0 [ 624.302326][ T9640] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 624.302500][ T9640] ? kmsan_get_metadata+0xfb/0x160 [ 624.302700][ T9640] xfs_filestream_select_ag+0x208a/0x29e0 [ 624.303013][ T9640] xfs_bmapi_allocate+0x30e6/0x4f50 [ 624.303284][ T9640] xfs_bmapi_convert_delalloc+0xd3e/0x21e0 [ 624.303558][ T9640] xfs_map_blocks+0xbee/0x1390 [ 624.303816][ T9640] ? __pfx_xfs_map_blocks+0x10/0x10 [ 624.303992][ T9640] iomap_writepages+0x24fd/0x5400 [ 624.304233][ T9640] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 624.304545][ T9640] xfs_vm_writepages+0x3a4/0x420 [ 624.304752][ T9640] ? __pfx_xfs_vm_writepages+0x10/0x10 [ 624.304922][ T9640] do_writepages+0x3ef/0x860 [ 624.305024][ T30] audit: type=1804 audit(1750985910.621:327): pid=9640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1087" name="/newroot/227/file0/bus" dev="loop3" ino=9290 res=1 errno=0 [ 624.305120][ T9640] ? _raw_spin_unlock+0x30/0x50 [ 624.305311][ T9640] ? wbc_attach_and_unlock_inode+0x131/0x680 [ 624.305531][ T9640] filemap_write_and_wait_range+0x5bb/0x840 [ 624.305881][ T9640] ? kmsan_get_metadata+0xfb/0x160 [ 624.306083][ T9640] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 624.306292][ T9640] __generic_remap_file_range_prep+0x146a/0x1aa0 [ 624.306538][ T9640] generic_remap_file_range_prep+0x5c/0x70 [ 624.306720][ T9640] xfs_reflink_remap_prep+0x46e/0xea0 [ 624.306944][ T9640] xfs_file_remap_range+0x296/0x10e0 [ 624.307134][ T9640] ? kmsan_get_metadata+0xfb/0x160 [ 624.307355][ T9640] ? __pfx_xfs_file_remap_range+0x10/0x10 [ 624.307543][ T9640] vfs_copy_file_range+0x1668/0x24e0 [ 624.307785][ T9640] __se_sys_copy_file_range+0x530/0xa50 [ 624.308049][ T9640] __x64_sys_copy_file_range+0x114/0x1a0 [ 624.308280][ T9640] x64_sys_call+0xa70/0x3db0 [ 624.308500][ T9640] do_syscall_64+0xd9/0x210 [ 624.308670][ T9640] ? irqentry_exit+0x16/0x60 [ 624.308817][ T9640] ? clear_bhb_loop+0x40/0x90 [ 624.309014][ T9640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.309193][ T9640] RIP: 0033:0x7f9a68f8e929 [ 624.309332][ T9640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 624.309475][ T9640] RSP: 002b:00007f9a69e03038 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 624.309638][ T9640] RAX: ffffffffffffffda RBX: 00007f9a691b5fa0 RCX: 00007f9a68f8e929 [ 624.309748][ T9640] RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000008 [ 624.309841][ T9640] RBP: 00007f9a69e03090 R08: 0000000000400000 R09: 0000000000000000 [ 624.309938][ T9640] R10: 0000200000000540 R11: 0000000000000246 R12: 0000000000000001 [ 624.310044][ T9640] R13: 0000000000000000 R14: 00007f9a691b5fa0 R15: 00007ffdae65a3d8 [ 624.310184][ T9640] [ 624.765357][ T5849] usb 3-1: USB disconnect, device number 31 [ 624.858037][ T5810] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 624.907875][ T5876] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 625.166905][ T5876] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 625.177494][ T5876] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 625.186805][ T5876] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 625.246017][ T24] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 625.319810][ T5876] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 625.329289][ T5876] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.337841][ T5876] usb 5-1: Product: syz [ 625.342243][ T5876] usb 5-1: Manufacturer: syz [ 625.347260][ T5876] usb 5-1: SerialNumber: syz [ 625.456323][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 625.467888][ T5876] cdc_ncm 5-1:1.0: skipping garbage [ 625.473462][ T5876] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 625.482244][ T5876] cdc_ncm 5-1:1.0: bind() failure [ 625.524809][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 625.596172][ T24] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 625.606724][ T24] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 625.715622][ T24] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 625.726149][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.734619][ T24] usb 2-1: Product: 齛뮼亅貝棠뎸୵움ꖡ᎜䔈晥ᝒ਑숞硻랺撔紹籷ꦄ鰗㔅㺏ᾗ䬨剛韽∩㇝刚쾯栥鰣좿᭿橫븝㮒厴鸗䇗}뎗얶룞휜褘惦摱ꋫ㱱ທ⎏옆遻狅祘ꌧꈵចỘ줴箈䎶멯⼻똿줴䄃餔ᗍ㒐䕱巎딍ᯔ壓雾痞䑠Ⴒ냩轶촴复෌빱跗ᡶ혟卫铩为ᆘ⼂䑑忥ጄ [ 625.768796][ T24] usb 2-1: Manufacturer: 歚㍌ꢫ낑靁ꃷᦽ塶䑞됝Ⳉ꫄괮⠇峁度咟ⲩﵜ쯇੔⊻᧺峥ツꎛผ潫즘ƙ丽닱㪁폵信쮵 [ 625.785096][ T24] usb 2-1: SerialNumber: syz [ 626.054369][ T5849] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 626.196159][ T24] cdc_ncm 2-1:1.0: bind() failure [ 626.215113][ T24] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 626.222264][ T24] cdc_ncm 2-1:1.1: bind() failure [ 626.335068][ T5849] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 626.345803][ T5849] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 626.355168][ T5849] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 626.399221][ T42] usb 5-1: USB disconnect, device number 40 [ 626.420855][ T24] usb 2-1: USB disconnect, device number 37 [ 626.475289][ T5849] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 626.485949][ T5849] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.494869][ T5849] usb 3-1: Product: syz [ 626.499307][ T5849] usb 3-1: Manufacturer: syz [ 626.504515][ T5849] usb 3-1: SerialNumber: syz [ 626.574805][ T5849] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 626.583332][ T5849] cdc_ncm 3-1:1.0: bind() failure [ 627.575390][ T9685] futex_wake_op: syz.3.1096 tries to shift op by 144; fix this program [ 627.594914][ T5876] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 627.699568][ T5849] usb 3-1: USB disconnect, device number 32 [ 627.827785][ T5876] usb 2-1: Using ep0 maxpacket: 16 [ 627.906686][ T5876] usb 2-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 627.923419][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.934273][ T5876] usb 2-1: Product: syz [ 627.938700][ T5876] usb 2-1: Manufacturer: syz [ 627.943639][ T5876] usb 2-1: SerialNumber: syz [ 628.010777][ T5876] usb 2-1: config 0 descriptor?? [ 628.085687][ T11] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 628.349772][ T11] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 628.360392][ T11] usb 5-1: config 0 has no interfaces? [ 628.499769][ T5876] speedtch 2-1:0.0: speedtch_bind: data interface not found! [ 628.507527][ T5876] speedtch 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 628.540580][ T11] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 628.550062][ T11] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.559108][ T11] usb 5-1: Product: syz [ 628.563511][ T11] usb 5-1: Manufacturer: syz [ 628.569023][ T11] usb 5-1: SerialNumber: syz [ 628.606789][ T11] usb 5-1: config 0 descriptor?? [ 628.679981][ T4503] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 628.688448][ T4503] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 628.784672][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 628.792923][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 629.094432][ T5876] usb 2-1: USB disconnect, device number 38 [ 629.186902][ T11] usb 5-1: USB disconnect, device number 41 [ 629.446394][ T9701] loop5: detected capacity change from 0 to 64 [ 629.624178][ T5876] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 629.818174][ T9703] 9pnet_fd: Insufficient options for proto=fd [ 629.850023][ T5876] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 629.868795][ T5876] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 629.880903][ T5876] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 630.095577][ T5876] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 630.105614][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.114182][ T5876] usb 2-1: Product: syz [ 630.118609][ T5876] usb 2-1: Manufacturer: syz [ 630.121032][ T9703] loop2: detected capacity change from 0 to 512 [ 630.123351][ T5876] usb 2-1: SerialNumber: syz [ 630.261723][ T5876] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 630.280747][ T5876] cdc_ncm 2-1:1.0: bind() failure [ 630.305482][ T9703] EXT4-fs (loop2): required journal recovery suppressed and not mounted read-only [ 631.175259][ T9724] loop3: detected capacity change from 0 to 128 [ 631.186546][ T9703] loop2: detected capacity change from 0 to 4096 [ 631.257504][ T9703] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 631.265752][ T9724] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 631.309885][ T5876] usb 2-1: USB disconnect, device number 39 [ 631.380853][ T9724] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 631.581025][ T9725] netlink: 'syz.3.1107': attribute type 4 has an invalid length. [ 638.573186][ T9743] sd 0:0:1:0: device reset [ 639.571792][ T9749] 9pnet_fd: Insufficient options for proto=fd [ 641.959116][ T9756] loop3: detected capacity change from 0 to 256 [ 643.050605][ T9764] loop2: detected capacity change from 0 to 128 [ 644.866069][ T9764] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 647.364834][ T9773] loop4: detected capacity change from 0 to 2048 [ 649.755837][ T9773] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 649.756166][ T9773] EXT4-fs: failed to create workqueue [ 649.771929][ T9773] EXT4-fs (loop4): mount failed [ 652.853581][ T9783] loop3: detected capacity change from 0 to 512 [ 652.977449][ T9783] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 653.985872][ T5849] IPVS: starting estimator thread 0... [ 654.959429][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 654.966510][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 655.335249][ T9793] IPVS: using max 192 ests per chain, 9600 per kthread [ 655.702170][ T9783] EXT4-fs (loop3): failed to open journal device unknown-block(11,127) -6 [ 658.443422][ T9801] loop2: detected capacity change from 0 to 1024 [ 658.497319][ T9801] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 658.508767][ T9801] UDF-fs: error (device loop2): udf_read_inode: (ino 832) failed !bh [ 658.517376][ T9801] UDF-fs: error (device loop2): udf_fill_super: Error in udf_iget, block=48, partition=0 [ 663.744635][ T5876] usb 4-1: new low-speed USB device number 48 using dummy_hcd [ 664.588116][ T5876] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 664.597802][ T5876] usb 4-1: config 0 has an invalid interface number: 21 but max is 0 [ 664.606310][ T5876] usb 4-1: config 0 has no interface number 0 [ 664.612659][ T5876] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 664.622923][ T5876] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 664.632387][ T5876] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.136302][ T5876] usb 4-1: config 0 descriptor?? [ 665.372763][ T5849] usb 4-1: USB disconnect, device number 48 [ 669.932063][ T9865] syz.3.1144 (9865): drop_caches: 2 [ 671.604801][ T9867] netlink: 'syz.4.1150': attribute type 5 has an invalid length. [ 671.612818][ T9867] netlink: 'syz.4.1150': attribute type 9 has an invalid length. [ 672.834620][ T5849] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 673.064458][ T5849] usb 6-1: Using ep0 maxpacket: 32 [ 673.102039][ T5849] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 673.110722][ T5849] usb 6-1: config 0 has no interface number 0 [ 673.162940][ T5849] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 673.174553][ T5849] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.182844][ T5849] usb 6-1: Product: syz [ 673.187933][ T5849] usb 6-1: Manufacturer: syz [ 673.192779][ T5849] usb 6-1: SerialNumber: syz [ 673.336718][ T5849] usb 6-1: config 0 descriptor?? [ 673.367172][ T5849] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 673.604064][ T5849] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 673.645784][ T5849] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 674.090174][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 674.178094][ T5876] usb 6-1: USB disconnect, device number 2 [ 674.311145][ T5876] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 674.354934][ T5876] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 674.356822][ T5876] quatech2 6-1:0.51: device disconnected [ 676.546108][ T5800] Bluetooth: hci2: unexpected Set CIG Parameters response data [ 676.567729][ T5800] Bluetooth: hci2: unexpected event for opcode 0x2062 [ 677.234301][ T5876] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 677.405631][ T5876] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 677.417123][ T5876] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 677.427384][ T5876] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 677.437191][ T5876] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.569668][ T5876] usb 6-1: config 0 descriptor?? [ 678.015901][ T5876] kone 0003:1E7D:2CED.0002: unknown main item tag 0x6 [ 678.065137][ T5876] kone 0003:1E7D:2CED.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.5-1/input0 [ 678.236251][ T5876] usb 6-1: USB disconnect, device number 3 [ 679.171243][ T5876] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 679.566857][ T5876] usb 2-1: Using ep0 maxpacket: 16 [ 679.656103][ T5876] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 679.667649][ T5876] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 679.678101][ T5876] usb 2-1: config 0 interface 0 has no altsetting 0 [ 679.685234][ T5876] usb 2-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 679.694740][ T5876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.169541][ T5876] usb 2-1: config 0 descriptor?? [ 680.644618][ T5800] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 680.660951][ T5800] Bluetooth: hci2: Injecting HCI hardware error event [ 680.682236][ T5800] Bluetooth: hci2: hardware error 0x00 [ 682.074319][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 682.095165][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 682.102477][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 682.113057][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 682.120601][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 682.128058][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 682.135439][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 682.142750][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 682.150175][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 682.157600][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 682.165069][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 682.172350][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 682.179769][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 682.200230][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 682.210946][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 682.218519][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 682.225952][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 682.233235][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 682.240606][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 682.247994][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 682.255429][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 682.262747][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 682.270157][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 682.277516][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 682.284963][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 682.307525][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 682.318536][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 682.326129][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 682.333384][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 682.340847][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 682.348217][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 682.355720][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 682.363062][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 682.370498][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 682.377947][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 682.385392][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 682.406203][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 682.413493][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 682.424360][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 682.431661][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 682.439171][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 682.446566][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 682.453961][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 682.461229][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 682.468665][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 682.476052][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 682.483349][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 682.504135][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 682.511433][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 682.522053][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 682.529770][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 682.537154][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 682.544522][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 682.551804][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 682.559379][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 682.566785][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 682.574210][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 682.581486][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 682.588888][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 682.609173][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 682.620479][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 682.627959][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 682.635393][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 682.642686][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 682.650530][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 682.657975][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 682.665395][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 682.672680][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 682.680306][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 682.687718][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 682.695120][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 682.715506][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 682.722811][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 682.734477][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 682.741798][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 682.749681][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 682.757062][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 682.764561][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 682.771855][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 682.779242][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 682.788957][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 682.796360][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 682.816892][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 682.828002][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 682.835472][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 682.842766][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 682.850124][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 682.857689][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 682.865139][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 682.872453][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 682.879862][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 682.887234][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 682.894621][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 682.914772][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 682.922072][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 682.932591][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 682.940073][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 682.947447][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 682.954894][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 682.962264][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 682.969829][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 682.977305][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 682.984800][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 682.992152][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 682.999653][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 683.020352][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 683.030996][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 683.038465][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 683.045927][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 683.053378][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 683.061007][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 683.068459][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 683.075856][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 683.083144][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 683.090571][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 683.097954][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 683.118369][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 683.129207][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 683.136772][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 683.144210][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 683.151498][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 683.158887][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 683.166259][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 683.173531][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 683.180908][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 683.188310][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 683.195757][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 683.203072][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 683.223689][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 683.234785][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 683.242072][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 683.249568][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 683.256905][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 683.264298][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 683.271553][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 683.278971][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 683.288105][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 683.296204][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 683.303529][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 683.324866][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 683.332170][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 683.342919][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 683.350304][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 683.357707][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 683.365113][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 683.372516][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 683.380027][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 683.387445][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 683.394949][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 683.402262][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 683.409747][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 683.431679][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 683.442776][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 683.450260][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 683.457787][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 683.465246][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 683.472574][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 683.480081][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 683.487555][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 683.495045][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 683.502398][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 683.509867][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 683.531294][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 683.542103][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 683.549536][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 683.556902][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 683.564287][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 683.571587][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 683.579100][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 683.586507][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 683.593910][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 683.601194][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 683.608611][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 683.616061][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 683.636830][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 683.647653][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 683.655141][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 683.662352][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 683.669654][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 683.676961][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 683.684312][ T9955] Bluetooth: hci5: command tx timeout [ 683.684383][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 683.697211][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 683.704597][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 683.711918][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 683.719783][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 683.740879][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 683.752015][ T5800] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 683.758854][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 683.767214][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 683.774961][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 683.784994][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 683.792402][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 683.799892][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 683.807530][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 683.815000][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 683.836487][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 683.848304][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 683.856356][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 683.863902][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 683.871229][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 683.879140][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 683.886532][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 683.893960][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 683.901246][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 683.908748][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 683.916178][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 683.923465][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 683.944279][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 683.951596][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 683.962570][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 683.970112][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 683.977512][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 683.984957][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 683.992248][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 683.999689][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 684.007092][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 684.014596][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 684.021925][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 684.042467][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 684.056722][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 684.067847][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 684.075295][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 684.082592][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 684.090040][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 684.097424][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 684.104852][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 684.112280][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 684.119846][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 684.127275][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 684.148253][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 684.159137][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 684.166637][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 684.174035][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 684.181303][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 684.188648][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 684.196079][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 684.203350][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 684.210767][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 684.218275][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 684.225701][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 684.246182][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 684.253455][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 684.267577][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 684.278598][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 684.288414][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 684.295841][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 684.303145][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 684.310581][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 684.317977][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 684.325491][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 684.332926][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 684.353032][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 684.363670][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 684.371103][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 684.378565][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 684.386012][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 684.393297][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 684.400752][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 684.408127][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 684.415536][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 684.422815][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 684.430191][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 684.450347][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 684.461182][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 684.468590][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 684.475985][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 684.483284][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 684.490772][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 684.498255][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 684.505707][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 684.513040][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 684.520543][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 684.527979][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 684.535400][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 684.556862][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 684.568983][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 684.577024][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 684.584500][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 684.591799][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 684.599232][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 684.606628][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 684.621135][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 684.628559][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 684.636042][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 684.656660][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 684.667407][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 684.674840][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 684.682158][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 684.689611][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 684.697073][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 684.704517][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 684.711855][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 684.719384][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 684.726769][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 684.734171][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 684.741448][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 684.761631][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 684.772263][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 684.779688][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 684.787083][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 684.796985][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 684.805407][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 684.812755][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 684.820252][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 684.827917][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 684.835346][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 684.842631][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 684.863333][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 684.873991][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 684.881285][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 684.888757][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 684.896294][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 684.903608][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 684.911053][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 684.918523][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 684.926022][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 684.933310][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 684.940737][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 684.948207][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 684.972739][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 684.980217][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 684.987654][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 684.995082][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 685.002398][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 685.009856][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 685.017205][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 685.024700][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 685.031997][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 685.039442][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 685.046817][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 685.069019][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 685.080216][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 685.087715][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 685.095208][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 685.102532][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 685.110000][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 685.117497][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 685.124963][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 685.132295][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 685.139827][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 685.147222][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 685.167988][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 685.178706][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 685.187704][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 685.195243][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 685.202546][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 685.212195][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 685.215265][ T9969] netlink: 'syz.5.1186': attribute type 1 has an invalid length. [ 685.220320][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 685.227362][ T9969] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1186'. [ 685.234402][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 685.243308][ T9969] nbd: illegal input index 393224 [ 685.250478][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 685.283276][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 685.290778][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 685.300826][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 685.308246][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 685.315723][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 685.323123][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 685.330491][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 685.337886][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 685.345324][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 685.352585][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 685.372685][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 685.383548][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 685.391011][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 685.398400][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 685.405812][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 685.413113][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 685.420501][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 685.427993][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 685.435547][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 685.442847][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 685.450268][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 685.457645][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 685.478148][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 685.488857][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 685.496428][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 685.504022][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 685.511293][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 685.520012][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 685.527376][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 685.534840][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 685.542144][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 685.549532][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 685.556892][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 685.577263][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 685.588105][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 685.595556][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 685.602841][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 685.610280][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 685.617752][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 685.625239][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 685.632547][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 685.639983][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 685.647319][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 685.654739][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 685.662037][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 685.682682][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 685.693329][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 685.700692][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 685.708051][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 685.715519][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 685.722861][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 685.730320][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 685.737695][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 685.745172][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 685.752454][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 685.759884][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 685.767254][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 685.787681][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 685.800650][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 685.808419][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 685.815923][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 685.823198][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 685.830623][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 685.838064][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 685.846428][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 685.853684][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 685.861141][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 685.868597][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 685.889334][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 685.900328][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 685.907754][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 685.915186][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 685.922492][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 685.929988][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 685.937481][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 685.945022][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 685.952306][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 685.959767][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 685.967194][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 685.988404][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 685.999217][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 686.006652][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 686.014024][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 686.021285][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 686.028745][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 686.036135][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 686.043432][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 686.050884][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 686.058450][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 686.065917][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 686.073204][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 686.094081][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 686.101371][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 686.112498][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x1 [ 686.120055][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 686.127458][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 686.134899][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 686.142193][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 686.149646][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x1 [ 686.157048][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 686.164561][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 686.171863][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 686.192991][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 686.203537][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 686.210930][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 686.218334][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 686.225750][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 686.233082][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x5 [ 686.240612][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 686.248043][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 686.255434][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 686.262730][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 686.270185][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 686.277583][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 686.299264][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 686.312534][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 686.320237][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 686.327734][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0 [ 686.335163][ T5876] cougar 0003:060B:500A.0003: unexpected long global item [ 686.413434][ T5876] cougar 0003:060B:500A.0003: parse failed [ 686.420083][ T5876] cougar 0003:060B:500A.0003: probe with driver cougar failed with error -22 [ 686.436599][ T5876] usb 2-1: USB disconnect, device number 40 [ 687.427579][ T5876] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 687.707960][ T5876] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 687.727366][ T5876] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 687.740507][ T5876] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 687.749990][ T5876] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.109115][ T5876] usb 3-1: config 0 descriptor?? [ 688.601989][ T5876] hid-thrustmaster 0003:044F:B65D.0004: unknown main item tag 0x0 [ 689.118160][ T5876] hid-thrustmaster 0003:044F:B65D.0004: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.2-1/input0 [ 689.131432][ T5876] hid-thrustmaster 0003:044F:B65D.0004: Wrong number of endpoints? [ 689.330411][ C0] hid-thrustmaster 0003:044F:B65D.0004: URB to get model id failed with error -71 [ 689.354673][ T5849] usb 3-1: USB disconnect, device number 33 [ 690.993247][T10006] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1200'. [ 691.055336][T10002] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1200'. [ 691.070364][T10005] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1200'. [ 691.737029][T10017] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1206'. [ 691.952279][T10018] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 692.820905][T10025] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 692.904657][ T5876] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 693.005789][T10025] tipc: Started in network mode [ 693.011148][T10025] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 693.021011][T10025] tipc: Enabling of bearer rejected, failed to enable media [ 693.118097][ T5876] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 693.128993][ T5876] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.216385][ T5876] usb 6-1: config 0 descriptor?? [ 694.942622][ T5849] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 695.020874][T10059] ceph: No mds server is up or the cluster is laggy [ 695.040163][ T11] libceph: connect (1)[c::]:6789 error -101 [ 695.047390][ T11] libceph: mon0 (1)[c::]:6789 connect error [ 695.191951][ T5849] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 695.202772][ T5849] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 695.216501][ T5849] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 695.226059][ T5849] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.322766][ T5876] usb 6-1: Cannot set autoneg [ 695.328841][ T5876] MOSCHIP usb-ethernet driver 6-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 695.429226][ T5876] usb 6-1: USB disconnect, device number 4 [ 695.659624][ T5849] usb 3-1: usb_control_msg returned -32 [ 695.666125][ T5849] usbtmc 3-1:16.0: can't read capabilities [ 697.998584][ T5876] usb 3-1: USB disconnect, device number 34 [ 698.154198][ T11] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 698.429232][ T11] usb 2-1: Using ep0 maxpacket: 16 [ 698.555348][ T11] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 698.564084][ T11] usb 2-1: config 0 has no interface number 0 [ 698.578921][ T11] usb 2-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 698.593170][ T11] usb 2-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 698.607335][ T11] usb 2-1: config 0 interface 255 has no altsetting 0 [ 698.911615][ T30] audit: type=1326 audit(1750985985.231:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10086 comm="syz.3.1233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a68f8e929 code=0x7ffc0000 [ 698.935366][ T30] audit: type=1326 audit(1750985985.231:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10086 comm="syz.3.1233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a68f8e929 code=0x7ffc0000 [ 698.958410][ T30] audit: type=1326 audit(1750985985.231:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10086 comm="syz.3.1233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9a68f8e929 code=0x7ffc0000 [ 698.982959][ T30] audit: type=1326 audit(1750985985.231:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10086 comm="syz.3.1233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a68f8e929 code=0x7ffc0000 [ 699.006639][ T30] audit: type=1326 audit(1750985985.231:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10086 comm="syz.3.1233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a68f8e929 code=0x7ffc0000 [ 699.029542][ T30] audit: type=1326 audit(1750985985.241:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10086 comm="syz.3.1233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f9a68f8e929 code=0x7ffc0000 [ 699.052686][ T30] audit: type=1326 audit(1750985985.241:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10086 comm="syz.3.1233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a68f8e929 code=0x7ffc0000 [ 699.075686][ T30] audit: type=1326 audit(1750985985.241:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10086 comm="syz.3.1233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a68f8e929 code=0x7ffc0000 [ 699.100208][ T30] audit: type=1326 audit(1750985985.241:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10086 comm="syz.3.1233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9a68f8e929 code=0x7ffc0000 [ 699.123844][ T30] audit: type=1326 audit(1750985985.241:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10086 comm="syz.3.1233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a68f8e929 code=0x7ffc0000 [ 699.761305][ T11] usb 2-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=38.b7 [ 699.771006][ T11] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.779438][ T11] usb 2-1: Product: syz [ 699.783876][ T11] usb 2-1: Manufacturer: syz [ 699.788685][ T11] usb 2-1: SerialNumber: syz [ 699.809572][ T11] usb 2-1: config 0 descriptor?? [ 700.756783][ T11] hub 2-1:0.255: bad descriptor, ignoring hub [ 700.763167][ T11] hub 2-1:0.255: probe with driver hub failed with error -5 [ 701.361460][ T11] usb 2-1: USB disconnect, device number 41 [ 703.125724][ T5800] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 704.707406][T10139] binder: 10136:10139 ioctl c0306201 200000000240 returned -11 [ 704.962012][T10144] loop1: detected capacity change from 0 to 64 [ 705.506238][T10137] loop2: detected capacity change from 0 to 4096 [ 707.507306][T10137] ntfs3(loop2): Failed to read $UpCase (-4). [ 707.977280][ T11] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 708.191522][ T11] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 708.210001][ T11] usb 5-1: config 0 has no interfaces? [ 709.295627][T10166] loop5: detected capacity change from 0 to 40427 [ 709.333087][T10164] loop1: detected capacity change from 0 to 40427 [ 709.371463][T10164] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 709.380014][T10164] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 709.397331][T10164] F2FS-fs (loop1): invalid crc value [ 709.403212][T10166] F2FS-fs (loop5): invalid crc value [ 709.404215][ T11] usb 5-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 709.418708][ T11] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.435151][ T11] usb 5-1: Product: syz [ 709.442184][ T11] usb 5-1: Manufacturer: syz [ 709.447604][ T11] usb 5-1: SerialNumber: syz [ 709.754934][T10166] F2FS-fs (loop5): Start checkpoint disabled! [ 709.856401][T10166] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 709.961875][ T11] usb 5-1: config 0 descriptor?? [ 710.473028][T10164] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 710.486322][T10164] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 710.539954][ T1150] kworker/u8:8: attempt to access beyond end of device [ 710.539954][ T1150] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 710.556799][ T1150] CPU: 1 UID: 0 PID: 1150 Comm: kworker/u8:8 Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(undef) [ 710.556974][ T1150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 710.557106][ T1150] Workqueue: writeback wb_workfn (flush-7:5) [ 710.557303][ T1150] Call Trace: [ 710.557355][ T1150] [ 710.557407][ T1150] __dump_stack+0x26/0x30 [ 710.557583][ T1150] dump_stack_lvl+0x1df/0x270 [ 710.557770][ T1150] dump_stack+0x1e/0x25 [ 710.557948][ T1150] f2fs_handle_critical_error+0xa6f/0xc20 [ 710.558185][ T1150] f2fs_stop_checkpoint+0x65/0x80 [ 710.558379][ T1150] f2fs_write_end_io+0xb4b/0x1920 [ 710.558529][ T1150] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 710.558742][ T1150] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 710.558884][ T1150] bio_endio+0xe27/0xf80 [ 710.559063][ T1150] submit_bio_noacct+0x214/0x2710 [ 710.559288][ T1150] submit_bio+0x5a9/0x5d0 [ 710.559467][ T1150] f2fs_submit_write_bio+0x92/0x250 [ 710.559653][ T1150] __submit_merged_bio+0x16f/0x6a0 [ 710.559832][ T1150] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 710.560079][ T1150] __submit_merged_write_cond+0x458/0x9a0 [ 710.560272][ T1150] f2fs_write_data_pages+0x4bb2/0x5480 [ 710.560577][ T1150] ? blk_trace_startstop+0x780/0xab0 [ 710.560722][ T1150] ? irqentry_enter+0x2e/0x50 [ 710.560839][ T1150] ? sysvec_apic_timer_interrupt+0x52/0x90 [ 710.561037][ T1150] ? cfg80211_wiphy_work+0x354/0x820 [ 710.561210][ T1150] ? process_scheduled_works+0xb91/0x1d80 [ 710.561391][ T1150] ? kmsan_get_metadata+0xfb/0x160 [ 710.561562][ T1150] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 710.561766][ T1150] ? kmsan_get_metadata+0xfb/0x160 [ 710.561955][ T1150] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 710.562143][ T1150] ? kmsan_get_metadata+0xfb/0x160 [ 710.562329][ T1150] ? kmsan_get_metadata+0xfb/0x160 [ 710.562512][ T1150] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 710.562696][ T1150] ? kmsan_get_metadata+0xfb/0x160 [ 710.562884][ T1150] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 710.563073][ T1150] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 710.563271][ T1150] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 710.563469][ T1150] do_writepages+0x3ef/0x860 [ 710.563633][ T1150] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 710.563831][ T1150] ? writeback_sb_inodes+0x21/0x1c90 [ 710.563996][ T1150] ? kmsan_get_metadata+0xfb/0x160 [ 710.564193][ T1150] __writeback_single_inode+0x101/0x1190 [ 710.564370][ T1150] ? kmsan_get_metadata+0xfb/0x160 [ 710.564568][ T1150] writeback_sb_inodes+0xaa9/0x1c90 [ 710.564856][ T1150] ? kmsan_get_metadata+0xfb/0x160 [ 710.565119][ T1150] wb_writeback+0x4ce/0xc00 [ 710.565315][ T1150] ? queue_io+0x4c1/0x790 [ 710.565497][ T1150] wb_workfn+0x397/0x1910 [ 710.565654][ T1150] ? kmsan_get_metadata+0xfb/0x160 [ 710.565905][ T1150] ? __pfx_wb_workfn+0x10/0x10 [ 710.566053][ T1150] process_scheduled_works+0xb91/0x1d80 [ 710.566302][ T1150] worker_thread+0xedf/0x1590 [ 710.566529][ T1150] kthread+0xd5c/0xf00 [ 710.566665][ T1150] ? __pfx_worker_thread+0x10/0x10 [ 710.566861][ T1150] ? __pfx_kthread+0x10/0x10 [ 710.566999][ T1150] ret_from_fork+0x1e3/0x310 [ 710.567131][ T1150] ? __pfx_kthread+0x10/0x10 [ 710.567261][ T1150] ret_from_fork_asm+0x1a/0x30 [ 710.567473][ T1150] [ 710.888409][ T1150] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 711.300709][ T11] usb 5-1: can't set config #0, error -71 [ 711.326574][ T11] usb 5-1: USB disconnect, device number 42 [ 713.194455][T10184] binder: BINDER_SET_CONTEXT_MGR already set [ 713.201003][T10184] binder: 10183:10184 ioctl 4018620d 200000000040 returned -16 [ 713.582614][T10184] binder: 10183:10184 ioctl c0306201 200000000240 returned -11 [ 715.957822][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 715.964843][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 716.938716][T10197] loop3: detected capacity change from 0 to 4096 [ 717.131045][T10203] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 719.447337][T10214] tipc: Started in network mode [ 719.452548][T10214] tipc: Node identity ac14140f, cluster identity 4711 [ 719.472786][T10214] tipc: New replicast peer: 255.255.255.255 [ 719.480827][T10214] tipc: Enabled bearer , priority 10 [ 720.604876][ T1949] tipc: Node number set to 2886997007 [ 721.328571][T10232] binder: 10230:10232 ioctl c0306201 200000000240 returned -11 [ 721.740847][T10236] loop1: detected capacity change from 0 to 512 [ 721.928383][T10236] EXT4-fs error (device loop1): ext4_iget_extra_inode:5035: inode #15: comm syz.1.1282: corrupted in-inode xattr: invalid ea_ino [ 722.007039][T10236] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.1282: couldn't read orphan inode 15 (err -117) [ 722.096776][T10236] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 722.706539][ T5795] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 728.864398][ T5089] Bluetooth: hci5: command 0x0406 tx timeout [ 730.344899][T10272] binder_alloc: 10271: binder_alloc_buf, no vma [ 736.474453][ T5089] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 736.513579][ T5089] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 736.546476][ T5089] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 736.602631][ T5089] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 736.638620][ T5089] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 737.241734][T10308] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1307'. [ 737.345770][T10309] binder_alloc: 10305: binder_alloc_buf, no vma [ 738.840516][ T5089] Bluetooth: hci6: command tx timeout [ 740.206190][T10316] loop2: detected capacity change from 0 to 4096 [ 740.633044][T10327] loop1: detected capacity change from 0 to 512 [ 740.645297][T10301] chnl_net:caif_netlink_parms(): no params data found [ 740.855502][T10327] EXT4-fs error (device loop1): ext4_orphan_get:1419: comm syz.1.1316: bad orphan inode 17 [ 740.894441][ T5089] Bluetooth: hci6: command tx timeout [ 741.006451][T10327] ext4_test_bit(bit=16, block=4) = 1 [ 741.012019][T10327] is_bad_inode(inode)=0 [ 741.017832][T10327] NEXT_ORPHAN(inode)=0 [ 741.022110][T10327] max_ino=32 [ 741.026727][T10327] i_nlink=1 [ 741.032281][T10327] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 743.328369][ T5089] Bluetooth: hci6: command tx timeout [ 744.261543][T10330] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 7: invalid block bitmap [ 744.324069][T10346] loop2: detected capacity change from 0 to 128 [ 744.355994][ T5795] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 744.438173][T10346] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 744.549438][T10346] ext4 filesystem being mounted at /274/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 744.646313][T10350] binder_alloc: 10349: binder_alloc_buf, no vma [ 745.233277][T10301] bridge0: port 1(bridge_slave_0) entered blocking state [ 745.243043][T10301] bridge0: port 1(bridge_slave_0) entered disabled state [ 745.251106][T10301] bridge_slave_0: entered allmulticast mode [ 745.260929][T10301] bridge_slave_0: entered promiscuous mode [ 745.390465][ T5089] Bluetooth: hci6: command tx timeout [ 745.493506][T10301] bridge0: port 2(bridge_slave_1) entered blocking state [ 745.501398][T10301] bridge0: port 2(bridge_slave_1) entered disabled state [ 745.509468][T10301] bridge_slave_1: entered allmulticast mode [ 745.519109][T10301] bridge_slave_1: entered promiscuous mode [ 746.965211][T10301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 747.958285][T10360] loop5: detected capacity change from 0 to 4096 [ 748.057205][T10301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 748.118324][ T5801] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 748.424416][T10301] team0: Port device team_slave_0 added [ 748.460203][T10301] team0: Port device team_slave_1 added [ 749.403244][T10301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 749.411604][T10301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 749.438736][T10301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 749.899886][T10301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 749.907404][T10301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 749.934203][T10301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 751.640842][T10380] binder: 10379:10380 ioctl c0306201 200000000240 returned -11 [ 752.074599][T10301] hsr_slave_0: entered promiscuous mode [ 752.085542][T10301] hsr_slave_1: entered promiscuous mode [ 752.094799][T10301] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 752.102614][T10301] Cannot create hsr debugfs directory [ 752.867703][T10390] loop1: detected capacity change from 0 to 512 [ 752.877072][T10390] ext4: Unknown parameter 'dont_hash' [ 755.478779][T10301] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 756.280698][T10410] loop2: detected capacity change from 0 to 4096 [ 756.475828][T10301] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 756.514525][T10301] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 756.554424][T10301] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 757.738639][T10410] ntfs3(loop2): ino=24, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" ntfs_rename [ 759.013411][T10301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 759.230784][T10428] loop1: detected capacity change from 0 to 128 [ 759.536999][T10301] 8021q: adding VLAN 0 to HW filter on device team0 [ 759.575507][T10428] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 759.731863][ T3759] bridge0: port 1(bridge_slave_0) entered blocking state [ 759.739447][ T3759] bridge0: port 1(bridge_slave_0) entered forwarding state [ 759.774592][T10428] ext4 filesystem being mounted at /270/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 759.923496][ T3759] bridge0: port 2(bridge_slave_1) entered blocking state [ 759.931312][ T3759] bridge0: port 2(bridge_slave_1) entered forwarding state [ 760.454832][ T5795] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 764.729744][T10301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 770.229683][T10485] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1368'. [ 773.192109][T10301] veth0_vlan: entered promiscuous mode [ 773.214498][ T24] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 773.344709][T10301] veth1_vlan: entered promiscuous mode [ 773.404291][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 773.418661][ T24] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 773.503616][ T24] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 773.513340][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 773.521941][ T24] usb 3-1: Product: syz [ 773.529872][ T24] usb 3-1: Manufacturer: syz [ 773.535959][ T24] usb 3-1: SerialNumber: syz [ 773.558288][ T24] usb 3-1: config 0 descriptor?? [ 773.870465][T10301] veth0_macvtap: entered promiscuous mode [ 773.925468][T10301] veth1_macvtap: entered promiscuous mode [ 774.159382][T10301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 774.237714][T10301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 774.327332][ T9955] Bluetooth: hci3: command 0x1003 tx timeout [ 774.363662][T10301] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.373060][T10301] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.382258][T10301] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.392559][T10301] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.002761][ T5089] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 777.039128][ T11] usb 3-1: USB disconnect, device number 35 [ 778.197329][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 778.204238][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 782.498846][T10558] loop2: detected capacity change from 0 to 65536 [ 782.666526][T10558] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 785.212642][T10558] XFS (loop2): Ending clean mount [ 785.391189][ T5801] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 789.859428][T10611] loop5: detected capacity change from 0 to 32768 [ 789.869928][T10611] XFS: attr2 mount option is deprecated. [ 789.987645][T10611] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 790.316399][T10611] XFS (loop5): Ending clean mount [ 790.348534][T10611] XFS (loop5): Quotacheck needed: Please wait. [ 790.370091][T10611] XFS (loop5): Quotacheck: Done. [ 792.756864][ T24] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 794.145507][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 794.156897][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 794.167234][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 794.180728][ T24] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 794.190288][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 794.201076][ T9489] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 794.616451][ T24] usb 2-1: config 0 descriptor?? [ 795.568727][ T24] usb 2-1: can't set config #0, error -71 [ 795.607816][ T24] usb 2-1: USB disconnect, device number 42 [ 796.376585][ T11] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 796.614780][ T11] usb 2-1: Using ep0 maxpacket: 16 [ 796.679360][ T11] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 796.690910][ T11] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 796.701141][ T11] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 796.838602][ T11] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 796.851669][ T11] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.860294][ T11] usb 2-1: Product: syz [ 796.864854][ T11] usb 2-1: Manufacturer: syz [ 796.869710][ T11] usb 2-1: SerialNumber: syz [ 797.447628][ T9955] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 797.475885][ T9955] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 797.517205][ T9955] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 797.543325][ T9955] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 797.564126][ T9955] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 797.575748][ T11] usb 2-1: 2:1 : format type 0 is detected, processed as PCM [ 798.734272][ T11] usb 2-1: current rate 9338450 is different from the runtime rate 9338507 [ 799.233072][ T9955] Bluetooth: hci5: unexpected Set CIG Parameters response data [ 799.271867][ T9955] Bluetooth: hci5: unexpected event for opcode 0x2062 [ 799.712279][ T9955] Bluetooth: hci3: command tx timeout [ 801.015486][ T11] usb 2-1: USB disconnect, device number 43 [ 801.303274][ T9955] Bluetooth: hci5: command 0x0406 tx timeout [ 801.639161][ T1150] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.766732][ T9955] Bluetooth: hci3: command tx timeout [ 801.776181][T10656] chnl_net:caif_netlink_parms(): no params data found [ 801.885126][ T1150] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.033035][ T1150] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.185745][ T24] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 802.495992][ T1150] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.634885][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 802.646416][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 802.656699][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 802.670163][ T24] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 802.679735][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 803.015112][ T24] usb 6-1: config 0 descriptor?? [ 803.298596][ T9955] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 803.307618][ T9955] Bluetooth: hci5: Injecting HCI hardware error event [ 803.318710][ T9955] Bluetooth: hci5: hardware error 0x00 [ 803.333936][ T1150] bridge_slave_1: left allmulticast mode [ 803.340007][ T1150] bridge_slave_1: left promiscuous mode [ 803.347315][ T1150] bridge0: port 2(bridge_slave_1) entered disabled state [ 803.562125][ T24] usbhid 6-1:0.0: can't add hid device: -71 [ 803.569162][ T24] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 803.632058][ T24] usb 6-1: USB disconnect, device number 5 [ 803.845831][ T5089] Bluetooth: hci3: command tx timeout [ 803.889237][ T1150] bridge_slave_0: left allmulticast mode [ 803.895675][ T1150] bridge_slave_0: left promiscuous mode [ 803.902285][ T1150] bridge0: port 1(bridge_slave_0) entered disabled state [ 806.275788][ T5089] Bluetooth: hci3: command tx timeout [ 806.281881][ T9955] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 806.306334][ T1150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 806.459681][ T1150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 806.509472][T10693] loop3: detected capacity change from 0 to 1764 [ 806.563303][T10693] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 806.655648][T10694] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 806.663847][T10694] overlayfs: failed to resolve './file1': -2 [ 807.562445][ T1150] bond0 (unregistering): Released all slaves [ 807.648032][T10696] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 809.726197][ T1150] hsr_slave_0: left promiscuous mode [ 809.854846][ T1150] hsr_slave_1: left promiscuous mode [ 809.863323][ T1150] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 809.871314][ T1150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 810.140327][ T1150] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 810.148327][ T1150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 810.709465][ T1150] veth1_macvtap: left promiscuous mode [ 810.715825][ T1150] veth0_macvtap: left promiscuous mode [ 810.721839][ T1150] veth1_vlan: left promiscuous mode [ 810.727697][ T1150] veth0_vlan: left promiscuous mode [ 816.419419][ T1150] team0 (unregistering): Port device team_slave_1 removed [ 817.420337][ T1150] team0 (unregistering): Port device team_slave_0 removed [ 818.350283][T10721] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1438'. [ 818.359814][T10721] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1438'. [ 818.369617][T10721] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1438'. [ 818.390072][T10721] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1438'. [ 818.600692][T10656] bridge0: port 1(bridge_slave_0) entered blocking state [ 818.608570][T10656] bridge0: port 1(bridge_slave_0) entered disabled state [ 818.616707][T10656] bridge_slave_0: entered allmulticast mode [ 818.626539][T10656] bridge_slave_0: entered promiscuous mode [ 818.714741][T10656] bridge0: port 2(bridge_slave_1) entered blocking state [ 818.722418][T10656] bridge0: port 2(bridge_slave_1) entered disabled state [ 818.732788][T10656] bridge_slave_1: entered allmulticast mode [ 818.742495][T10656] bridge_slave_1: entered promiscuous mode [ 819.025040][ T42] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 819.139260][T10656] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 819.188191][ T1150] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.264070][ T42] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 819.276133][ T42] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 819.286477][ T42] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 819.301491][ T42] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 819.311478][ T42] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 819.374483][T10656] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 819.468798][ T1150] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.522700][ T42] usb 4-1: config 0 descriptor?? [ 819.716450][ T1150] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.532724][ T42] usbhid 4-1:0.0: can't add hid device: -71 [ 820.539653][ T42] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 820.612794][ T42] usb 4-1: USB disconnect, device number 49 [ 821.030331][T10656] team0: Port device team_slave_0 added [ 821.135346][ T1150] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 821.271414][T10656] team0: Port device team_slave_1 added [ 822.010976][T10656] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 822.018522][T10656] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 822.045254][T10656] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 822.534430][T10747] evm: overlay not supported [ 822.550245][T10656] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 822.557925][T10656] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 822.586845][T10656] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 822.704688][ T1150] bridge_slave_1: left allmulticast mode [ 822.710653][ T1150] bridge_slave_1: left promiscuous mode [ 822.717438][ T1150] bridge0: port 2(bridge_slave_1) entered disabled state [ 822.739107][ T1150] bridge_slave_0: left allmulticast mode [ 822.745624][ T1150] bridge_slave_0: left promiscuous mode [ 822.752185][ T1150] bridge0: port 1(bridge_slave_0) entered disabled state [ 823.716445][ T1150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 823.736329][ T1150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 823.770998][ T1150] bond0 (unregistering): Released all slaves [ 824.051644][ T1150] IPVS: stopping master sync thread 9428 ... [ 824.071629][ T11] usb 1-1: USB disconnect, device number 26 [ 824.702378][T10656] hsr_slave_0: entered promiscuous mode [ 824.712750][T10656] hsr_slave_1: entered promiscuous mode [ 824.721362][T10656] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 824.737116][T10656] Cannot create hsr debugfs directory [ 824.981049][ T1150] hsr_slave_0: left promiscuous mode [ 825.014050][ T1150] hsr_slave_1: left promiscuous mode [ 825.021889][ T1150] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 825.030488][ T1150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 825.107242][ T1150] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 825.115169][ T1150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 825.140421][ T11] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 825.194087][ T1150] veth1_macvtap: left promiscuous mode [ 825.199863][ T1150] veth0_macvtap: left promiscuous mode [ 825.206210][ T1150] veth1_vlan: left promiscuous mode [ 825.211791][ T1150] veth0_vlan: left promiscuous mode [ 825.450248][ T11] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 825.461679][ T11] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 825.471988][ T11] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 825.485323][ T11] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 825.495163][ T11] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 826.223232][ T11] usb 6-1: config 0 descriptor?? [ 826.691356][ T11] usbhid 6-1:0.0: can't add hid device: -71 [ 826.698400][ T11] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 827.158884][ T11] usb 6-1: USB disconnect, device number 6 [ 827.175813][ T1150] team0 (unregistering): Port device team_slave_1 removed [ 827.245314][ T1150] team0 (unregistering): Port device team_slave_0 removed [ 829.282649][ T1150] IPVS: stop unused estimator thread 0... [ 829.598904][ T1150] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 829.899617][ T1150] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 830.107940][ T1150] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 830.329534][ T1150] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 830.694818][ T1150] bridge_slave_1: left allmulticast mode [ 830.700678][ T1150] bridge_slave_1: left promiscuous mode [ 830.708525][ T1150] bridge0: port 2(bridge_slave_1) entered disabled state [ 830.801883][ T1150] bridge_slave_0: left allmulticast mode [ 830.810125][ T1150] bridge_slave_0: left promiscuous mode [ 830.816575][ T1150] bridge0: port 1(bridge_slave_0) entered disabled state [ 831.415474][ T1150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 831.500909][ T1150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 831.545634][ T1150] bond0 (unregistering): Released all slaves [ 832.243439][T10656] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 832.366303][ T1150] hsr_slave_0: left promiscuous mode [ 832.410844][ T1150] hsr_slave_1: left promiscuous mode [ 832.419419][ T1150] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 832.427806][ T1150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 832.469440][ T1150] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 832.477251][ T1150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 832.624601][ T1150] veth1_macvtap: left promiscuous mode [ 832.630448][ T1150] veth0_macvtap: left promiscuous mode [ 832.637428][ T1150] veth1_vlan: left promiscuous mode [ 832.643010][ T1150] veth0_vlan: left promiscuous mode [ 835.362542][ T1150] team0 (unregistering): Port device team_slave_1 removed [ 835.517708][ T1150] team0 (unregistering): Port device team_slave_0 removed [ 835.636255][T10656] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 835.759830][T10656] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 835.935228][T10656] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 836.088242][ T11] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 836.376210][ T11] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 836.387857][ T11] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 836.404623][ T11] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 836.419667][ T11] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 836.429117][ T11] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 836.640475][ T11] usb 3-1: config 0 descriptor?? [ 837.515097][ T11] usbhid 3-1:0.0: can't add hid device: -71 [ 837.521633][ T11] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 837.655547][ T11] usb 3-1: USB disconnect, device number 36 [ 837.798048][T10656] 8021q: adding VLAN 0 to HW filter on device bond0 [ 838.066091][T10656] 8021q: adding VLAN 0 to HW filter on device team0 [ 838.160069][T10279] bridge0: port 1(bridge_slave_0) entered blocking state [ 838.167773][T10279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 838.302261][T10279] bridge0: port 2(bridge_slave_1) entered blocking state [ 838.309877][T10279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 838.376797][T10828] fuseblk: Bad value for 'fd' [ 838.837730][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 838.844902][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 839.424569][ T11] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 840.146511][ T9955] Bluetooth: hci0: unexpected Set CIG Parameters response data [ 840.245151][ T9955] Bluetooth: hci0: unexpected event for opcode 0x2062 [ 840.925105][ T11] usb 3-1: device descriptor read/64, error -71 [ 841.765356][ T11] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 841.954186][ T11] usb 3-1: device descriptor read/64, error -71 [ 842.076528][ T11] usb usb3-port1: attempt power cycle [ 842.324037][ T9955] Bluetooth: hci0: command 0x0406 tx timeout [ 842.595510][T10656] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 842.814531][ T5089] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 842.825962][ T5089] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 842.835490][ T5089] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 842.847484][ T5089] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 842.859484][ T5089] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 842.893458][T10855] overlayfs: workdir and upperdir must reside under the same mount [ 844.215939][T10856] chnl_net:caif_netlink_parms(): no params data found [ 844.234718][T10873] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1491'. [ 844.245628][T10873] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1491'. [ 844.334602][ T5089] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 844.343259][ T5089] Bluetooth: hci0: Injecting HCI hardware error event [ 844.352694][ T5089] Bluetooth: hci0: hardware error 0x00 [ 844.954391][ T9955] Bluetooth: hci1: command tx timeout [ 845.727903][T10886] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1495'. [ 846.503152][ T5089] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 846.939576][T10856] bridge0: port 1(bridge_slave_0) entered blocking state [ 846.948925][T10856] bridge0: port 1(bridge_slave_0) entered disabled state [ 846.956879][T10856] bridge_slave_0: entered allmulticast mode [ 846.966647][T10856] bridge_slave_0: entered promiscuous mode [ 846.987742][ T5089] Bluetooth: hci1: command tx timeout [ 847.225535][T10856] bridge0: port 2(bridge_slave_1) entered blocking state [ 847.233404][T10856] bridge0: port 2(bridge_slave_1) entered disabled state [ 847.241400][T10856] bridge_slave_1: entered allmulticast mode [ 847.251249][T10856] bridge_slave_1: entered promiscuous mode [ 847.701265][T10656] veth0_vlan: entered promiscuous mode [ 847.881391][ T1150] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 848.068975][T10856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 848.174832][ T1150] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 848.723330][T10856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 848.751863][T10904] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1502'. [ 848.762049][T10904] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1502'. [ 848.826872][T10656] veth1_vlan: entered promiscuous mode [ 848.878982][ T1150] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 849.053964][ T5089] Bluetooth: hci1: command tx timeout [ 849.424174][ T1150] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 850.050730][T10856] team0: Port device team_slave_0 added [ 850.148489][T10856] team0: Port device team_slave_1 added [ 850.162903][ T1150] bridge_slave_1: left allmulticast mode [ 850.172849][ T1150] bridge_slave_1: left promiscuous mode [ 850.179664][ T1150] bridge0: port 2(bridge_slave_1) entered disabled state [ 850.235994][ T1150] bridge_slave_0: left allmulticast mode [ 850.241893][ T1150] bridge_slave_0: left promiscuous mode [ 850.248444][ T1150] bridge0: port 1(bridge_slave_0) entered disabled state [ 851.015853][ T1150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 851.108161][ T1150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 851.124800][ T5089] Bluetooth: hci1: command tx timeout [ 851.157685][ T1150] bond0 (unregistering): Released all slaves [ 851.427314][ T1150] tipc: Left network mode [ 851.436331][T10656] veth0_macvtap: entered promiscuous mode [ 851.474701][T10856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 851.481924][T10856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 851.509065][T10856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 853.721735][T10856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 853.729167][T10856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 853.756009][T10856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 853.830196][T10656] veth1_macvtap: entered promiscuous mode [ 853.987728][ T1150] hsr_slave_0: left promiscuous mode [ 854.014206][ T1150] hsr_slave_1: left promiscuous mode [ 854.021450][ T1150] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 854.029222][ T1150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 854.052627][ T1150] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 854.060560][ T1150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 854.110165][ T1150] veth1_macvtap: left promiscuous mode [ 854.117300][ T1150] veth0_macvtap: left promiscuous mode [ 854.123143][ T1150] veth1_vlan: left promiscuous mode [ 854.130482][ T1150] veth0_vlan: left promiscuous mode [ 854.918233][ T1150] team0 (unregistering): Port device team_slave_1 removed [ 854.971482][ T1150] team0 (unregistering): Port device team_slave_0 removed [ 855.353350][T10656] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 855.388286][T10656] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 855.658655][T10656] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 855.667956][T10656] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 855.677192][T10656] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 855.687238][T10656] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 855.746151][T10856] hsr_slave_0: entered promiscuous mode [ 855.759295][T10856] hsr_slave_1: entered promiscuous mode [ 856.224936][T10941] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1512'. [ 856.234658][T10941] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1512'. [ 857.407276][T10856] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 857.521216][T10856] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 857.659913][T10856] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 858.166276][T10856] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 859.874868][ T9955] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 859.897050][ T9955] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 859.917164][ T9955] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 859.930743][ T9955] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 859.943241][ T9955] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 860.839732][ T5876] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 861.104292][ T5876] usb 2-1: Using ep0 maxpacket: 32 [ 861.186929][ T5876] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.1f [ 861.196754][ T5876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.327663][ T5876] usb 2-1: config 0 descriptor?? [ 861.437458][T10953] chnl_net:caif_netlink_parms(): no params data found [ 861.604993][T10856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 861.640198][ T5876] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 861.981187][T10959] ===================================================== [ 861.988745][T10959] BUG: KMSAN: kernel-infoleak in _copy_to_user+0xcc/0x120 [ 861.996437][T10959] _copy_to_user+0xcc/0x120 [ 862.002009][T10959] i2cdev_ioctl_smbus+0x586/0x660 [ 862.007795][T10959] i2cdev_ioctl+0xa14/0xf40 [ 862.012495][T10959] __se_sys_ioctl+0x23c/0x400 [ 862.017587][T10959] __x64_sys_ioctl+0x97/0xe0 [ 862.022490][T10959] x64_sys_call+0x1ebe/0x3db0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 862.027591][T10959] do_syscall_64+0xd9/0x210 [ 862.032396][T10959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 862.038753][T10959] [ 862.041211][T10959] Uninit was stored to memory at: [ 862.046643][T10959] __i2c_smbus_xfer+0x254d/0x2f60 [ 862.051937][T10959] i2c_smbus_xfer+0x31d/0x4d0 [ 862.057068][T10959] i2cdev_ioctl_smbus+0x4a1/0x660 [ 862.062333][T10959] i2cdev_ioctl+0xa14/0xf40 [ 862.067287][T10959] __se_sys_ioctl+0x23c/0x400 [ 862.072231][T10959] __x64_sys_ioctl+0x97/0xe0 [ 862.077313][T10959] x64_sys_call+0x1ebe/0x3db0 [ 862.082283][T10959] do_syscall_64+0xd9/0x210 [ 862.087317][T10959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 862.093448][T10959] [ 862.096090][T10959] Local variable msgbuf1.i created at: [ 862.102630][T10959] __i2c_smbus_xfer+0x86a/0x2f60 [ 862.108510][T10959] i2c_smbus_xfer+0x31d/0x4d0 [ 862.113451][T10959] [ 862.116058][T10959] Bytes 0-1 of 2 are uninitialized [ 862.121329][T10959] Memory access of size 2 starts at ffff88804ebcbd06 [ 862.128343][T10959] Data copied to user address 0000200000000040 [ 862.134967][T10959] [ 862.137466][T10959] CPU: 1 UID: 0 PID: 10959 Comm: syz.1.1517 Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(undef) [ 862.150044][T10959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 862.160529][T10959] ===================================================== [ 862.168386][T10959] Disabling lock debugging due to kernel taint [ 862.174850][T10959] Kernel panic - not syncing: kmsan.panic set ... [ 862.181481][T10959] CPU: 1 UID: 0 PID: 10959 Comm: syz.1.1517 Tainted: G B 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(undef) [ 862.195517][T10959] Tainted: [B]=BAD_PAGE [ 862.199918][T10959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 862.210278][T10959] Call Trace: [ 862.213716][T10959] [ 862.216809][T10959] __dump_stack+0x26/0x30 [ 862.221419][T10959] dump_stack_lvl+0x53/0x270 [ 862.226285][T10959] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 862.232407][T10959] dump_stack+0x1e/0x25 [ 862.236890][T10959] panic+0x4bd/0xd50 [ 862.241118][T10959] kmsan_report+0x31c/0x320 [ 862.245926][T10959] ? kmsan_internal_check_memory+0x1e1/0x230 [ 862.252140][T10959] ? kmsan_copy_to_user+0xf1/0x190 [ 862.257485][T10959] ? _copy_to_user+0xcc/0x120 [ 862.262380][T10959] ? i2cdev_ioctl_smbus+0x586/0x660 [ 862.267790][T10959] ? i2cdev_ioctl+0xa14/0xf40 [ 862.272686][T10959] ? __se_sys_ioctl+0x23c/0x400 [ 862.277773][T10959] ? __x64_sys_ioctl+0x97/0xe0 [ 862.282749][T10959] ? x64_sys_call+0x1ebe/0x3db0 [ 862.287861][T10959] ? do_syscall_64+0xd9/0x210 [ 862.292772][T10959] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 862.299069][T10959] ? __pfx_az6027_i2c_xfer+0x10/0x10 [ 862.304580][T10959] ? __i2c_transfer+0x11cd/0x3110 [ 862.309862][T10959] ? kmsan_get_metadata+0xfb/0x160 [ 862.315257][T10959] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 862.321889][T10959] ? kmsan_get_metadata+0xfb/0x160 [ 862.327283][T10959] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 862.333408][T10959] ? __i2c_smbus_xfer+0x1e93/0x2f60 [ 862.338924][T10959] ? kmsan_get_metadata+0xfb/0x160 [ 862.344369][T10959] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 862.350484][T10959] kmsan_internal_check_memory+0x1e1/0x230 [ 862.356558][T10959] kmsan_copy_to_user+0xf1/0x190 [ 862.361800][T10959] _copy_to_user+0xcc/0x120 [ 862.366556][T10959] i2cdev_ioctl_smbus+0x586/0x660 [ 862.371883][T10959] i2cdev_ioctl+0xa14/0xf40 [ 862.376627][T10959] ? kmsan_get_shadow_origin_ptr+0x1/0xb0 [ 862.382601][T10959] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 862.388364][T10959] __se_sys_ioctl+0x23c/0x400 [ 862.393329][T10959] __x64_sys_ioctl+0x97/0xe0 [ 862.398190][T10959] x64_sys_call+0x1ebe/0x3db0 [ 862.403141][T10959] do_syscall_64+0xd9/0x210 [ 862.407850][T10959] ? irqentry_exit+0x16/0x60 [ 862.412649][T10959] ? clear_bhb_loop+0x40/0x90 [ 862.417567][T10959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 862.423773][T10959] RIP: 0033:0x7fc5b3b8e929 [ 862.428355][T10959] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 862.448181][T10959] RSP: 002b:00007fc5b19f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 862.456808][T10959] RAX: ffffffffffffffda RBX: 00007fc5b3db5fa0 RCX: 00007fc5b3b8e929 [ 862.464974][T10959] RDX: 0000200000000140 RSI: 0000000000000720 RDI: 0000000000000004 [ 862.473146][T10959] RBP: 00007fc5b3c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 862.481289][T10959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 862.489429][T10959] R13: 0000000000000000 R14: 00007fc5b3db5fa0 R15: 00007ffc96e03348 [ 862.497603][T10959] [ 862.501140][T10959] Kernel Offset: disabled [ 862.505570][T10959] Rebooting in 86400 seconds..