last executing test programs: 13.230464245s ago: executing program 4 (id=406): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000040)={@local, @initdev, 0x0}, &(0x7f0000000080)=0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_clone(0x200, &(0x7f0000001240)="54fdf17f794127da2913aa78207495220b2c1a10b0b59604581988919c3121bd810fa44728a87f0a4396a38f96f88f62d165426482ef393fe0043b4c945e29487da39cd91f4202277df902aea6d4219a06ad1358b97f46954a6e80bb1312e795d20de2561a45ed8b89a0e2069e8e58b6b83d5b109122d1e225830f24920a81519018bdea40d3d055fbefaad835f80386b8650da6c41a63f38984a7d75d77480a23d1cb20be46cecbb3514fcb86bf950e8cf857e2b04e5b4a116d4175fa102d07c4269a7ba70d24afb01ccc92cd60d10f57f7a5324ab38a96cdec117d6155e122a80961f2ba5ce04be89378126b644fc25148b9c35070", 0xf6, &(0x7f0000001340), &(0x7f0000001380), &(0x7f00000013c0)="4856a846214dff7e2f2da0634f0fbf53da27bfbd43ef03763970b3ed22226383d72fb210") ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000001400)={0x0, 0x0}) syz_clone3(&(0x7f00000014c0)={0x40800400, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140), {0x1d}, &(0x7f0000000180)=""/181, 0xb5, &(0x7f0000000240)=""/4096, &(0x7f0000001480)=[0xffffffffffffffff, r2, r3], 0x3, {r0}}, 0x58) getpid() r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000016c0)={0x11, 0x5, &(0x7f0000001540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7}, [@map_idx_val={0x18, 0x3, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x61c3}]}, &(0x7f0000001580)='GPL\x00', 0x8, 0xb, &(0x7f00000015c0)=""/11, 0x40f00, 0x40, '\x00', r1, 0x0, r0, 0x8, &(0x7f0000001600)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000001640)={0x0, 0xa, 0x1, 0x4}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000001680)=[{0x4, 0x1, 0xd, 0xa}, {0x1, 0x3, 0xc, 0x6}, {0x2, 0x1, 0x2, 0xb}], 0x10, 0x22a3}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f00000017c0)=[0x0], &(0x7f0000001800)=[0x0], 0x0, 0x71, &(0x7f0000001840)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x51, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001a80)={r4, r0, 0x36, 0x0, @val=@target_btf_id=r5}, 0x14) ioctl$VHOST_VDPA_GET_STATUS(r0, 0x8001af71, &(0x7f0000001ac0)) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000001b00)={{0x1, 0x1, 0x18, r6, {0x6, 0xffff}}, './file0\x00'}) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000001d40)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001b80)={0x164, 0x1, 0x1, 0x300, 0x0, 0x0, {}, [@CTA_TUPLE_MASTER={0x1c, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_PROTOINFO={0x28, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x24, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x1}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0xe}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x4}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x5}]}}, @CTA_LABELS_MASK={0x8, 0x17, [0x3ff]}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x10000}, @CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}]}, @CTA_SEQ_ADJ_REPLY={0x2c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xd}, @CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5}]}, @CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}, @CTA_NAT_SRC={0x80, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @loopback}, @CTA_NAT_PROTO={0x3c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @empty}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private0}, @CTA_NAT_V4_MINIP={0x8, 0x1, @empty}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast2}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x44010}, 0x20000880) ioctl$VIDIOC_QUERYSTD(r7, 0x8008563f, &(0x7f0000001d80)) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000001dc0), &(0x7f0000001e40)=0x68) pipe2(&(0x7f0000001e80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) ioctl$GIO_CMAP(r8, 0x4b70, &(0x7f0000001ec0)) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), r0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r7, &(0x7f0000002240)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002200)={&(0x7f0000001f80)={0x274, r10, 0x10, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x481, 0x2b}}}}, [@NL80211_ATTR_REKEY_DATA={0x70, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="5b393094c6ad1df866a051a8b34c8b0c1ba36c66d2a1cefdce8ab1a5fa5e08b7"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x6}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="6401f82250a9900a1ac8f1972a99d5a7"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x984}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xc15}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="16d16f0a16587cf0f6741ac50329aaf66da68c50ed1f67e7"}]}, @NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "088ebd7bca420d3a"}]}, @NL80211_ATTR_REKEY_DATA={0x88, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="4a6589905ef54b2471ac104518b364d4"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "3b8766debf38dce1"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="c96c21d037af02dda7086d5cd5d9214f285cd3245830b546"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="418b20a44f688383395e26dd9ec96b94dd4401df486ed879"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "5c8730ac76519a84"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "0256640ad1532d56"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="c7dae799f7bb7e89af38fdfb9daff129"}]}, @NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="59a4824dbbd66c43fa9b881e05dd5190"}]}, @NL80211_ATTR_REKEY_DATA={0xb8, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="60a23d9d48687404d851a98765dce89f"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="9247f3f5c68d68a144a9958967be936819d95cc9a244f5da9659bee087c3644c"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="a64131ef21b1d972be1fbcfa8c9298a8"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xd}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="e7fcc76351007a929b48d15bade41ffb"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="85ef7be3a6e3bb9d32bd370e2f05311a"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="c09ec8eaa56bee993102d9b36d68307f1b3e9d16b70d7e07ba505cdfbd600b26"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="15efee5dbd0909c9149abf730e953d5a"}]}, @NL80211_ATTR_REKEY_DATA={0x24, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="0ad9dc73fd3d0634c4678491a0ad6773"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "864ee88acc5e78df"}]}, @NL80211_ATTR_REKEY_DATA={0x58, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="1eabd45ae00317677411b9a15d6ac743"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="16ed377eb69c281f76493f7e435a1856"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="d06a458c19057eda55ebf3ee86e5b122af78b15d3af441cae7a11170a702fd6b"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7}]}]}, 0x274}, 0x1, 0x0, 0x0, 0x4048080}, 0x10) socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000002280)) accept(r7, &(0x7f00000022c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f0000002340)=0x80) ioctl$KVM_SET_CPUID2(r9, 0x4008ae90, &(0x7f0000002380)={0x7, 0x0, [{0xc0000001, 0x400, 0x5, 0x5, 0xcea9, 0x79b, 0x2f}, {0xa0000011, 0x0, 0x5, 0x3, 0x2, 0x2, 0x1}, {0xc0000000, 0x9, 0x5, 0x3, 0xdf, 0x9, 0x8}, {0x80000000, 0x7, 0x6, 0x8d, 0x8, 0x5, 0xa}, {0x40000001, 0x10, 0x2, 0x10001, 0x7f, 0x6, 0x1}, {0x80000001, 0x7ff, 0x4, 0x1000, 0x10001, 0x126, 0x6}, {0x80000007, 0x10001, 0x0, 0x7, 0x5, 0x401, 0x9}]}) r12 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bind$netlink(r12, &(0x7f00000024c0)={0x10, 0x0, 0x25dfdbfd, 0x100000}, 0xc) sendmsg$NL80211_CMD_SET_WIPHY(r9, &(0x7f0000002600)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000025c0)={&(0x7f0000002540)={0x60, r10, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x3}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x1}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0x2c, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_CWMAX={0x6, 0x4, 0x91}, @NL80211_TXQ_ATTR_CWMIN={0x6, 0x3, 0x2}, @NL80211_TXQ_ATTR_CWMAX={0x6, 0x4, 0x8001}, @NL80211_TXQ_ATTR_QUEUE={0x5, 0x1, 0xfe}, @NL80211_TXQ_ATTR_TXOP={0x6, 0x2, 0x9}]}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x2}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x24040044}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x3, r3, 0x0, &(0x7f0000002640)) eventfd(0x401) write$cgroup_freezer_state(r0, &(0x7f0000002680)='FROZEN\x00', 0x7) sendmsg$NL80211_CMD_GET_KEY(r11, &(0x7f0000002800)={&(0x7f00000026c0), 0xc, &(0x7f00000027c0)={&(0x7f0000002700)={0x94, r10, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "64763e2400893da574fcef8648"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "aa3f2f0c76"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "d6b16f8698"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x2c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x8001}, 0x20008000) 13.04704617s ago: executing program 3 (id=407): r0 = userfaultfd(0x801) gettimeofday(&(0x7f00000000c0), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() syz_mount_image$btrfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x16, &(0x7f0000005440)={[{@noenospc_debug}, {@nossd_spread}, {@nodatasum}, {@notreelog}, {@max_inline={'max_inline', 0x3d, [0x6b, 0x39, 0x67, 0x3d, 0x31]}}, {@discard}]}, 0x9, 0x50f6, &(0x7f0000000340)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000100)='.\x00', 0x127a628, &(0x7f0000000e80)=ANY=[@ANYRES32=0x0, @ANYBLOB="34771e7745f2e26297cfd7ec55afcb50b97c5e40513e6b6a84c1445b948c59456dcaadcb51f62a8a639cf208239d2001e92bd765d672a4de1737e0502569bb4bb64c54bb10a754c2e1b6a0a988c6ccb74670d807dc592f35783caa7d73aa45688c4ccf67d7a0ba6ddfbb9719a755943090fc233d49f62ac31d233eb89ef27730695e3d7f505b565b4239ca10d9853b2e43368facfc9c6f7d67ea87a72dfd6b50ac126032a6112b077dd56137857e617eab50a4d4095930e644b61a263d3785e5e4db53e872d6bb558b554dee7a5c15466d05f907c0bd58bacc49f2417da7", @ANYRESDEC, @ANYRES8, @ANYRES8, @ANYRESDEC, @ANYBLOB="225591329ad1ba7d0f657bbc8cef0b86b8d8557e093c0e4d287db250cb2e2f0eec2ae27a11464d02c6151566110a8fb43227bcf035f9cd4f347ffeafa0fc44a44a4cc0d60fa5c54b123939211ecf5de969ebbd989f25bbebbb188926cc7c7f0462818ebc4a83a75a87772c33bc408963c67a3b5f2e33c2cbedd9d2eef6b43a71b90b67c0e935f29a4879965f3968fe720aa7601eaac4b8af73346e100c185efcda4023f8e22a5bb36397fd1e377925f69b443a9ce77e3ba66565da919582bde5a2799acdd59915fa", @ANYRESDEC, @ANYRES8, @ANYRES32, @ANYRES16, @ANYRES64, @ANYRESHEX, @ANYRES8], 0xb, 0x0, &(0x7f0000000040)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r3, &(0x7f0000000140)='2', 0x1, 0x8080c61) lseek(r2, 0x595e, 0x3) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000480)={@in6={{0xa, 0x0, 0x20000000, @remote, 0x1}}, 0x0, 0x0, 0x0, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) syz_create_resource$binfmt(0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/rt_acct\x00') read$FUSE(r6, &(0x7f0000002a80)={0x2020}, 0x2020) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x50e, &(0x7f00000000c0), 0x3, 0x45a, &(0x7f0000000cc0)="$eJzs289vFFUcAPDvTFuggLYi/uCHWkVj44+WFlQOHtRo4kETEy94rG0hyEINrYkQomgMHg2Jd+PRxL/Ak16MejLxqndDQgwX0dOa2Z1hf7Bb2mXbQfbzSYa+N/OG975983bfzOsEMLAmsn+SiJ0R8XtEjNWzrQUm6j+uXT0//8/V8/NJVKtv/5XUyv199fx8UbQ4b0eemUwj0s+S2Neh3uWz507OVSqLZ/L89Mqp96eXz5579sSpueOLxxdPzx45cvjQzAvPzz7Xlzjvydq696Ol/Xtef+fSm/NHL73787dJEX9bHH0ysdrBJ6rVPldXrrua0slwiQ1hXYYiIuuukdr4H4uhaHTeWLz2aamNAzZUNdfl8IUqcAdLouwWAOUovuiz+99i27zZR/muvFy/AcrivpZv9SPDkeZlRtrub/tpIiKOXvj3q2yLjXkOAQDQ4vts/vNMp/lfGvc3lbs7Xxsaz9dSdkXEvRGxOyLui6iVfSAiHlxn/e2LJDfOf9LLPQW2Rtn878V8bat1/lfM/mJ8qJ7bVsvESHLsRGXxYP47mYyRrVl+ZpU6fnj1ty+6HWue/2VbVn8xF8zbcXl4a+s5C3Mrc7cQcosrn0TsHe4Uf3J9JSCJiD0RsbfHOk489c3+bsduHv8q+rDOVP064sl6/1+ItvgLyerrk9PborJ4cLq4Km70y68X3+pW/y3F3wdZ/2/veP1fj388aV6vXV5/HRf/+LzrPc1UT9d/Y8eW/OeHcysrZ2YitiRv1BvdvH+2cW6RL8pn8U8e6Dz+d0XjN7EvIrKL+KGIeDgiHsn77tGIeCwiDnQOL7t1jJ9eefy9bvHfDv2/0Nb/461F2vq/kdgS7Xs6J4ZO/vhd6//YSK7t8+9wLTWZ71nL599a2tXb1QwAAAD/P2lE7IwknbqeHk2npup/w787tqeVpeWVp48tfXB6of6OwHiMpMWTrrGm56Ez+W19kZ9tyx/Knxt/OTRay0/NL1UWyg4eBtyOG8Z/Whv/mT+Hym4dsOG8rwWDq2n8N7/7+1IZbQE2l+9/GFzGPwyuDuN/tIx2AJuv0/f/xyW0A9h8bePfsh8MEPf/MLiMfxhczeM/KbEdwKZaHo2bvyTfKbEtejlL4o5JRHpbNKM/iaTHUXByLllT4Z1lB7j+RNmfTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP3xXwAAAP//pqLniQ==") ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) keyctl$clear(0x7, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) syz_clone(0x1001000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) 10.236984535s ago: executing program 3 (id=411): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}, 0x8000}, {{0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000000440)=""/197, 0xc5}, {0x0}], 0x2}, 0x400000}], 0x2, 0x10002, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) 8.43382832s ago: executing program 2 (id=416): r0 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r0, 0x0, 0x0) connect$can_j1939(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socket$alg(0x26, 0x5, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xd0, 0x0) 8.095481844s ago: executing program 0 (id=417): r0 = syz_open_dev$video(&(0x7f0000000380), 0x4, 0x220000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="dbaa00fea0000000711028000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x5}, 0x94) r1 = socket(0x80000000000000a, 0x2, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_wakeup_irq', 0x100, 0x0) finit_module(r2, 0x0, 0x3) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, 0x0, 0x0) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000003c0)=0xfffff8e3) 7.601556741s ago: executing program 0 (id=419): sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300)={0x0}, &(0x7f0000000340)=0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) epoll_create1(0x0) landlock_create_ruleset(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) sendmsg$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)="2905f74dd00887", 0x206c}], 0x1}, 0x4000010) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f00000000c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000000006010100000000000000000700000505000100070000000900020073797a30000000002986c7a373b42b6be9e9c01815330530e1e683d3702ae34b7d8f2c1c2f67"], 0x28}, 0x1, 0x0, 0x0, 0x4000800}, 0x44040) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r4 = io_uring_setup(0x6, &(0x7f0000000040)={0x0, 0x12dc, 0xc000, 0x8, 0xc1}) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r6, 0x4b34, 0x3bf) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000001c0)=0xf) fcntl$dupfd(r8, 0x0, r8) 7.354392884s ago: executing program 2 (id=421): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x3, 0x7ffcfff9}]}) socket(0x2, 0x80805, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20080058) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) clock_adjtime(0x2, 0x0) syz_usb_connect$cdc_ecm(0xfffffffffffffffd, 0x56, 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x48000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_128={{0x303}, "c4631c1a8d551b6d", "56b2f21b29256a8663421b20cfb66bdb", "3e660562", "1d35f9abdd5937ab"}, 0x28) r4 = syz_open_dev$vcsu(&(0x7f0000000140), 0x100000000, 0x4000) write$binfmt_register(r4, &(0x7f0000000180)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x800, 0x3a, '', 0x3a, '(', 0x3a, './file0', 0x3a, [0x46]}, 0x29) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r5}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000000)={'sit0\x00', r5, 0x7, 0x20, 0x101, 0x2, {{0x5, 0x4, 0x3, 0x2f, 0x14, 0x64, 0x0, 0x8, 0x4, 0x0, @broadcast, @broadcast}}}}) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000080)=0x7, 0x4) 6.429271646s ago: executing program 1 (id=422): r0 = userfaultfd(0x801) gettimeofday(&(0x7f00000000c0), &(0x7f0000000100)) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() syz_mount_image$btrfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x16, &(0x7f0000005440)={[{@noenospc_debug}, {@nossd_spread}, {@nodatasum}, {@notreelog}, {@max_inline={'max_inline', 0x3d, [0x6b, 0x39, 0x67, 0x3d, 0x31]}}, {@discard}]}, 0x9, 0x50f6, &(0x7f0000000340)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000100)='.\x00', 0x127a628, &(0x7f0000000e80)=ANY=[@ANYRES32=0x0, @ANYBLOB="34771e7745f2e26297cfd7ec55afcb50b97c5e40513e6b6a84c1445b948c59456dcaadcb51f62a8a639cf208239d2001e92bd765d672a4de1737e0502569bb4bb64c54bb10a754c2e1b6a0a988c6ccb74670d807dc592f35783caa7d73aa45688c4ccf67d7a0ba6ddfbb9719a755943090fc233d49f62ac31d233eb89ef27730695e3d7f505b565b4239ca10d9853b2e43368facfc9c6f7d67ea87a72dfd6b50ac126032a6112b077dd56137857e617eab50a4d4095930e644b61a263d3785e5e4db53e872d6bb558b554dee7a5c15466d05f907c0bd58bacc49f2417da7", @ANYRESDEC, @ANYRES8, @ANYRES8, @ANYRESDEC, @ANYBLOB="225591329ad1ba7d0f657bbc8cef0b86b8d8557e093c0e4d287db250cb2e2f0eec2ae27a11464d02c6151566110a8fb43227bcf035f9cd4f347ffeafa0fc44a44a4cc0d60fa5c54b123939211ecf5de969ebbd989f25bbebbb188926cc7c7f0462818ebc4a83a75a87772c33bc408963c67a3b5f2e33c2cbedd9d2eef6b43a71b90b67c0e935f29a4879965f3968fe720aa7601eaac4b8af73346e100c185efcda4023f8e22a5bb36397fd1e377925f69b443a9ce77e3ba66565da919582bde5a2799acdd59915fa", @ANYRESDEC, @ANYRES8, @ANYRES32, @ANYRES16, @ANYRES64, @ANYRESHEX, @ANYRES8], 0xb, 0x0, &(0x7f0000000040)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r3, &(0x7f0000000140)='2', 0x1, 0x8080c61) lseek(r2, 0x595e, 0x3) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000480)={@in6={{0xa, 0x0, 0x20000000, @remote, 0x1}}, 0x0, 0x0, 0x0, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) syz_create_resource$binfmt(0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/rt_acct\x00') read$FUSE(r6, &(0x7f0000002a80)={0x2020}, 0x2020) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x50e, &(0x7f00000000c0), 0x3, 0x45a, &(0x7f0000000cc0)="$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") ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) keyctl$clear(0x7, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) syz_clone(0x1001000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) 6.29802556s ago: executing program 4 (id=423): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000000006"], 0x28}, 0x1, 0x0, 0x0, 0x4000800}, 0x44040) 6.120542107s ago: executing program 4 (id=424): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r1 = socket$key(0xf, 0x3, 0x2) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@random="0ba348949114", @broadcast, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @random="94de5ca00a17", @remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @loopback}}}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0xffff, 0x0, 0x2844}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x4}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0x4008894) sendmsg$key(r1, &(0x7f00000014c0)={0x2, 0x0, 0x0}, 0x20000000) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0xfffffffe, 0x3, 0x1}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r3], 0x20}}, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x3, &(0x7f0000000180)=0xe3, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "b03fd4f6", "ec3fff9afd96e6c0"}, 0x38) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) close(0x3) 6.020291638s ago: executing program 0 (id=425): preadv(0xffffffffffffffff, 0x0, 0x0, 0x7ff, 0x4f) r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x8042) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_io_uring_setup(0xf00, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x80c406, &(0x7f0000000540)=ANY=[@ANYBLOB='dots,dots,dmask=000000000200000,nodots,discard,nfs=nostale_ro,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c646f733178666c6f70707900000000000000003030ffffffff303030303031373737373737373756c0f39fdb37372c004c0f1208ec0c34b7df4ba1c1e6b76697434db8574db9bcaef6a61a12c3f260bebc7ac5b1b11361119b83f1cf9f686b715b8e58fd37cea6623dc422c2ddbcefe94e5c255b5e8c90613e6b598b3b7a2c05de53dab7"], 0x1, 0x291, &(0x7f0000000280)="$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") statfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)=""/234) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffffffffffd7d, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102400, 0x19000) socket$rds(0x15, 0x5, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) socket$rxrpc(0x21, 0x2, 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x22, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10102, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000880)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@canfd={0xd, {{0x4, 0x1, 0x0, 0x1}, 0xb, 0x0, 0x0, 0x0, "02533f2776b0c6f137f1995deda840d92228ae021f7122d9e5177788a4ab3130e0e1de4b9753f5c43a5af634b79bae65670fa7bd671986d383eb4e1795cb3501"}}}}, 0x0) 5.858560868s ago: executing program 4 (id=426): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) recvmmsg(r0, &(0x7f0000003800)=[{{&(0x7f0000000340)=@tipc, 0x80, &(0x7f00000008c0)=[{&(0x7f00000004c0)=""/104, 0x68}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/82, 0x52}, {&(0x7f0000000780)=""/177, 0xb1}, {&(0x7f0000000840)=""/94, 0x5e}], 0x5}, 0x4}, {{&(0x7f0000000940)=@tipc=@name, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000a40)=""/234, 0xea}, {&(0x7f0000000b40)=""/166, 0xa6}, {&(0x7f0000000c00)=""/23, 0x17}], 0x3, &(0x7f0000000c80)=""/234, 0xea}, 0x6}, {{0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f00000024c0)=""/168, 0xa8}, {&(0x7f0000002580)=""/42, 0x2a}, {&(0x7f00000025c0)=""/194, 0xc2}, {&(0x7f00000026c0)=""/227, 0xe3}], 0x4, &(0x7f0000002800)=""/4096, 0x1000}, 0x4}], 0x3, 0x0, &(0x7f0000003900)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40186f40, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r5, 0x89ef, &(0x7f0000000000)=0x8) socket$inet6(0xa, 0x4, 0x800) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ip_tables_targets\x00') preadv(r7, &(0x7f0000000100), 0x0, 0xb, 0x0) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000140)='net/udp6\x00') preadv(r9, &(0x7f0000000300)=[{&(0x7f0000000540)=""/229, 0xe5}], 0x1, 0xa3, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) sendmsg$GTP_CMD_GETPDP(r7, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x24, r8, 0x100, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r9}, @GTPA_NET_NS_FD={0x8, 0x7, r10}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c884}, 0x4000) 5.213552057s ago: executing program 3 (id=427): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x147, 0x0, &(0x7f0000001300)="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", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffd}, 0x50) r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x200c2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_int(r2, 0x1, 0x7, 0x0, &(0x7f0000003f00)) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000340)={0x0, 0x5}, &(0x7f00000000c0)=0x8) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 3.949848355s ago: executing program 2 (id=428): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0xb) syz_open_dev$vim2m(0x0, 0x1, 0x2) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r4, 0x0, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0xffff, @loopback}, 0x4}}, 0x2e) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)={0x30, r7, 0x1, 0x70bd25, 0x3, {0x7}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7}, @L2TP_ATTR_IFNAME={0x14}]}, 0x30}, 0x1, 0x0, 0x0, 0x14}, 0x2400c046) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) getpeername(r4, &(0x7f0000000500)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f00000000c0)=0x80) r8 = fsmount(r3, 0x0, 0x6) fchdir(r8) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x8910, 0x20004) getdents64(r9, 0x0, 0x0) 3.824368493s ago: executing program 4 (id=429): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00_\x00]'], 0x20}], 0x1, 0x0, 0x0, 0x20040001}, 0x40040) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELTABLE={0x150, 0x2, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x93, 0x6, "e7d0568748de2cc67be0155fc90bb29fdd84d3a58f707da5ea92b002954c946358d0d228ff74705920c52eed91f737a137b5e6b02fa396820dbb75f16cabf106fc6df15a685fec38764db6654ce4d1e906d59dd29be135673ae70f8e046d10e0a6e771cf9193f0ac5c7103e5926c56cc43d22f1d453bdd773a2d956417f892adf57aa09689ad64c9d6f63901ac0328"}, @NFTA_TABLE_USERDATA={0x9d, 0x6, "2f9798d8314ee304492edfecc4fdf4e392e78a95a2697eea050fddc3d1c09758e14bb813eeec963679c90e005d0d7a3bdc192e2b559dfc519eb818d5a7892a9829a395d892ba71022345068702e9354b358d446bc44f790e4e73d12e1f8b6f88e83e3af2f046bf7495e8a2cb2e2ee1de98b2691fca69657c00664e87beb73d31ecf9ecf61e46cfdf002e7348b9bd4c02d2a6a86f5636855e83"}]}, @NFT_MSG_NEWCHAIN={0x98, 0x3, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_USERDATA={0x33, 0xc, "fb6c0e55ef3f27a05b86afdbcc015929f58a4bf73640b72ba151f68cce4e0ae71750b4596a2f14668b01d1cc2f4839"}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x20ca6c09}]}]}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_DELCHAIN={0x28, 0x5, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x0, 0x0, 0x0, {0x9d64dddc5ead073d, 0x0, 0x4}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x2c0}, 0x1, 0x0, 0x0, 0x40}, 0x10044001) r1 = syz_usb_connect(0x2, 0x46, &(0x7f0000000400)=ANY=[@ANYBLOB="12011003013bea20110412003990010203010902340001f98050050904"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001000)=@newlink={0x48, 0x10, 0x439, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xb881}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24008006}, 0x4044800) syz_usb_control_io$rtl8150(r1, &(0x7f0000000240)={0x14, &(0x7f0000000000)={0x0, 0x1, 0xd2, {0xd2, 0x31, "bfd9c0e7e570a01b2dedf3804ec774b37bb2e5a6dcb77a5cf621003eea58235e5eee8121449d871539414f6e814567bad78fec7bf682336757c0b694c5f297f42cd5717c228e3481da487d4a1a64ac5fefe14a5ce2869536e1c72f7fde99d42a52732513386786d714e6b8ff76809c3eed6ea66e8552c815680c14e163fc9aa6ef1d46b877e3b8add75f13b5ad062125fcb830dad145d0e006cb51d76f4e4e0ef179f65998c56c0ce34fe8b32d84b44937c0ac1a3ac25e8bc0dff33287efe7cdcae09ad1cf1804a8059b0cf4f9672c93"}}, &(0x7f0000000140)={0x0, 0x3, 0xe0, @string={0xe0, 0x3, "5303309f19a0a6f5decfc259c15e30b5652777565d3f08e26315b177e1f00b9711d46093a3dcc9bd60218c595bd5acee3eabdad2b79306199a495f367e635dba12367f8f582091c90b780be2d390dae2855a774937b699f0246ed8fb1cad9e1ed23da97452a4b0fd55d7297fd9cfeb9d01d870a625f4e81c6fa6618f922c7fd55d67878fc57cdaf92529e81ddbaf09ce883a47f494d8f92f70b8dc93cccaf7f9d3b4f610aa77cf80e15be87a3bf2480d8d56cca1debe658153fd53c2e7e7b3fa6235f28f2521a47fe2b08b24d1fe27fb52ba295d8c1d72c5a9a8ad146f6f"}}}, &(0x7f00000003c0)={0x2c, &(0x7f0000000280)={0x0, 0x18, 0x20, "dd7562e328e972471ba2572dc5b671ab0596d7e78cce808734be1d83b65aa89c"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000340)={0xc0, 0x5, 0x3, "8498f2"}, &(0x7f0000000380)={0x40, 0x5, 0x5, "b62fd51eb5"}}) 2.601465978s ago: executing program 2 (id=430): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) connect$can_bcm(r6, &(0x7f00000000c0)={0x1d, r7}, 0x10) sendmsg$can_bcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="0100000082020000ffffffff00000000", @ANYRES16=r2, @ANYBLOB="a8838f715cc8381851a51fdbf91c6338d9d129f18c66753db641d989116566c59f65862811bbc3c3c44780c0962bd338b2fdea3746b4cf031bf8a7724e8ad223172428d7b80e3f08e33d6683519adc45919dadeae1b0629efcc2732dd5223977703b0373ea32b244a748388141aaaa950c1fa9bd00331ed51f42206d515ac9fe67dd3b142e9b799fab9bc8940c017746adaa0994ebf2f33f2e7688ae61699ce5", @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000100"], 0x48}}, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000003340)}) r8 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x0) inotify_rm_watch(r9, 0x0) ioctl$NILFS_IOCTL_RESIZE(r9, 0x40086e8b, &(0x7f0000000240)=0x7f) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000bbc0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001180)}], 0x1, 0x0, 0x0, 0x20000041}}], 0x1, 0xc004) r10 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r10, r0, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) 2.601092482s ago: executing program 3 (id=431): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000380)={0xa, 0x4e21, 0x1, @loopback, 0x400014}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc895d8eb00066c2", "c5998c867c22b401046a89606ffcf92e", "2c5be7ad", "a0ca05c0707e52f4"}, 0x28) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a", 0x50}], 0x1}, 0x0) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f00000000c0)=ANY=[], 0x1c) recvfrom$inet6(r1, &(0x7f00000000c0)=""/3, 0x3, 0x300, 0x0, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r0, 0xc040aed4, &(0x7f0000000000)={0x8}) splice(r1, 0x0, r0, 0x0, 0x10000008ebc, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x8000) 2.555493331s ago: executing program 0 (id=432): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x80580, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000100)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$snddsp(r5, &(0x7f0000000200), 0x0) close_range(r0, r2, 0x0) r6 = socket$inet6(0xa, 0x1, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 1.424397628s ago: executing program 1 (id=433): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, 0xffffffffffffffff, 0x0}]) 1.18171701s ago: executing program 0 (id=434): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000000006"], 0x28}, 0x1, 0x0, 0x0, 0x4000800}, 0x44040) 1.061575764s ago: executing program 3 (id=435): syz_mount_image$squashfs(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x4, &(0x7f0000000280)=ANY=[], 0x1, 0x1cc, &(0x7f0000000540)="$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") listxattr(&(0x7f00000004c0)='./file1\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x6000003, 0x42031, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f00000000c0)=0x3, 0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendto$inet(r0, &(0x7f0000000040)="0400", 0xffec, 0x0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) prctl$PR_SET_MM(0x23, 0x6, &(0x7f000005b000/0x2000)=nil) brk(0x200000ffd000) r1 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000000)={'fscrypt:', @desc1}, &(0x7f00000001c0)={0x0, "4326f9f448171085461b21346f24301660ad2d457155bab6574f72fb946dcaf05690831f90eabaa22f05856b2e5b7c953267d3f50ff92bb43b0acc3e3d66b1f4", 0x16}, 0x48, 0xffffffffffffffff) keyctl$clear(0x7, r1) brk(0xf178) modify_ldt$write(0x1, &(0x7f0000000040)={0x401, 0x1000, 0x4000, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x10) 905.56311ms ago: executing program 2 (id=436): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r1 = socket$key(0xf, 0x3, 0x2) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@random="0ba348949114", @broadcast, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @random="94de5ca00a17", @remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @loopback}}}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0xffff, 0x0, 0x2844}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x4}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0x4008894) sendmsg$key(r1, &(0x7f00000014c0)={0x2, 0x0, 0x0}, 0x20000000) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0xfffffffe, 0x3, 0x1}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r3], 0x20}}, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x3, &(0x7f0000000180)=0xe3, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "b03fd4f6", "ec3fff9afd96e6c0"}, 0x38) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) close(0x3) 831.749318ms ago: executing program 0 (id=437): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}, 0x8000}, {{0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000000440)=""/197, 0xc5}, {0x0}], 0x2}, 0x400000}], 0x2, 0x10002, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) 767.657251ms ago: executing program 1 (id=438): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 413.548453ms ago: executing program 3 (id=439): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) recvmmsg(r0, &(0x7f0000003800)=[{{&(0x7f0000000340)=@tipc, 0x80, &(0x7f00000008c0)=[{&(0x7f00000004c0)=""/104, 0x68}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/82, 0x52}, {&(0x7f0000000780)=""/177, 0xb1}, {&(0x7f0000000840)=""/94, 0x5e}], 0x5}, 0x4}, {{&(0x7f0000000940)=@tipc=@name, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000a40)=""/234, 0xea}, {&(0x7f0000000b40)=""/166, 0xa6}, {&(0x7f0000000c00)=""/23, 0x17}], 0x3, &(0x7f0000000c80)=""/234, 0xea}, 0x6}, {{0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f00000024c0)=""/168, 0xa8}, {&(0x7f0000002580)=""/42, 0x2a}, {&(0x7f00000025c0)=""/194, 0xc2}, {&(0x7f00000026c0)=""/227, 0xe3}], 0x4, &(0x7f0000002800)=""/4096, 0x1000}, 0x4}], 0x3, 0x0, &(0x7f0000003900)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40186f40, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r5, 0x89ef, &(0x7f0000000000)=0x8) socket$inet6(0xa, 0x4, 0x800) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ip_tables_targets\x00') preadv(r7, &(0x7f0000000100), 0x0, 0xb, 0x0) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000140)='net/udp6\x00') preadv(r9, &(0x7f0000000300)=[{&(0x7f0000000540)=""/229, 0xe5}], 0x1, 0xa3, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) sendmsg$GTP_CMD_GETPDP(r7, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x24, r8, 0x100, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r9}, @GTPA_NET_NS_FD={0x8, 0x7, r10}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c884}, 0x4000) 413.307663ms ago: executing program 1 (id=440): r0 = syz_open_dev$video(&(0x7f00000002c0), 0x52bb000000, 0x1c2ac1) fsetxattr(r0, &(0x7f0000000380)=@known='user.syz\x00', &(0x7f00000003c0)='[\'*\'\x00', 0x5, 0x3) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0xa, @vbi={0xfffffffe, 0x3ff, 0x40, 0x48524742, [0x3, 0x8], [0x5, 0x7ea3], 0x30}}) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x8040, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x1, 0x2, @empty, 0xa09c}, {0xa, 0x2, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0xa}, 0x41}, r4, 0x1}}, 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000040000000160a01020000000000000000010000000900010073797a30000000000900020073797a3020000000140003800800024000000000080001400000000040000000160a01010000000000000000010000000900020073797a30000000000900010073797a3000000000140003"], 0xc8}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="21012cbd7000000000001400000008000300", @ANYRES32=r7, @ANYBLOB="0600360000000000050029"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x440) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r6) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000080)={0x134, r8, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x9, 0x13, [{}, {0x3, 0x1}, {0x2, 0x1}, {0x6c, 0x1}, {0x9}]}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x1}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xfa, 0xac, "0e04281d993713506dacdbb218ff1b9d536c2fd1b075de18265f19f1507c18dab4aa02a5a9b1f12bcdf058b4c9f5367f8eb671c56f9e52ed7bbc2669615e62c6eb26a6fa7852cb578abbbdfc383d9c93ab6ee7a6505e67e832ef2400c42b7597b4a049abda196be1bcd3c409e0b7fa84b15fc2c9409641589f5278372dc97e33474cbf654c0e48f528c3473430fcf8dfa2b142556c5a9ae909982faa9fd752b10df14a538039aa6790306ee0158f8111c07f3df082c90ccb9115d2184f91dfb8e4dd84ff2cb66e2c1a7cf0550ef75a4447b785f2c6eec9330a6f890d8347b51578d02b779b7e37d8403495a8f3dc467f9416baa163ad"}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x61f}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x680}]}, 0x134}, 0x1, 0x0, 0x0, 0x4000}, 0x94) 399.444438ms ago: executing program 2 (id=441): syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x44}) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/mnt\x00') setns(r0, 0x20000) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x34, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x34}}, 0x0) r1 = syz_open_dev$dvb_frontend(0x0, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100009080e140fc044a500243010203010902120001000000000904"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="000e01eacab95801b31579bad8f0a2d360d36900000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) ioctl$FE_SET_PROPERTY(r1, 0x40086f52, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x95, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000040)={0x8, 0x1, 0x100, "963f1c8b242d497bcdbb936f610300000065c20d7c5c98452500000000000002", 0x36314d59}) 225.347382ms ago: executing program 1 (id=442): ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0x0}}, './file0\x00'}) ioctl$FE_READ_SIGNAL_STRENGTH(r0, 0x80026f47, &(0x7f0000000040)) (async) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x4e20, @empty}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x38}}, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x26, 0x0, 0x0, 0x0, 0x4cc, &(0x7f0000000080)='virt_wifi0\x00', 0xffffffffffffff7b, 0xfffffffffffff801, 0x2520}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x20, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xd, 0xd}, {0xf}, {0x0, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x6}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008040}, 0x20000000) (async) r3 = semget(0x1, 0x4, 0x402) semctl$SEM_STAT_ANY(r3, 0x14527e8422047dfa, 0x14, &(0x7f0000000240)=""/162) (async) sendmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000300)="1c0a77d2d502201c4c1ffd8bfc6f25420a8fce64d49b87a84c07dd131c91b07b6046a08b05b3fc6deea1c3ecdce8e6a65f31eebdf868864cdaa00bca9000ce11237e1da33488bcf1d1cb4091984475d634c6f485b657db9faa4e1024dfb9510594783728a0665094de982e0335ba3ab406f3af5a589a52d98c65425bdea3c9f301f8ad0c1c063eb07c7f1a87222df7b5b853071260c2ca893bb32bd7258712f265148e70eaff3b4b0326c627603dd63bc5", 0xb1}, {&(0x7f00000003c0)="8f3cc11492b3ae168ce111757402f7e0919eda283b169457664b38b53dc17ed5aaaab91ab86d31fd381fe142203806252dcf8e", 0x33}, {&(0x7f0000000400)="eee7af94cbb7ecc27eef6df12841ed806aaf4900ea7615f10f8adeb2f0198c9b9634da6fef9bd1bff3faa06316b9163e6d62c431f8b9b5aa4959fa43e4f3d2abf5356547bcfc914e29a0c253710143ea157a39388000284952ba5b8a9809fc3f736f462fb4ac724737a50104ba92d92dcc248dd33f1f44e35e3e80efe6470175d9c98bc64a59077572829e873947da77b092d685c476ca0a09c691cd3ef655670416f5c5525491c7be693315056160d400b7a04d", 0xb4}, {&(0x7f00000004c0)="634d4f3f06c4ce266bab78ecde1739706bd1f61af84cac5c06008602fd6f0f24a8e9cf082267fa1830faf2c78c472cf387c88ffc1bc88f8efcfd15a62b6f64102dcac1a633e7b38a2157b8a8cedf9af38b4d5aab38343b7fb779caed0551650041cd59e6b2a65cf6eb683e1385067183f1716809d0227c3e573224c50f3b16c15d196b32e30683878dc0ef1ba70b8e1d99c29705afb553d674e4229e1d23ee439af24dcc2d27530f280299786b1e23c5ee97012349f4694c5086d7a4aee0d0b6ea1a0da8212107b1d7b8c993b31549ae134732d90898324ede88f65a3b42", 0xde}, {&(0x7f00000005c0)="0178359af428e89d638c7abc2c23a8b8c7022f1719199760329416c4d676d2ae6bf2f2ef07d62ca16698fb1624c2c8d2e803a71ba56e1d37908a313ee4acb1a794715d6b8d2a448a0a35413db27602d303426a5afcf4605b8cd896917f4925a094e4953acb440fa9841f429de128b7173f2b8470bd2366b5f87d40bbc044ae82fb3859e784386245dfd908c440176aff755c96a8c7390fa501f41f25fa7b737ad10306e3f95d93d3", 0xa8}, {&(0x7f0000000680)="fec479d84033c415ecfdbff1b88bf90efcea2cc624bfef6693f66f07c55c93b76ad50fb0c18a603ff56e15d37ad84b9a63e13314d57975b313638104e3846146934ab18faae4ba70bedb38451e3a7dfa8c6ccbf4f86d4176befc6bde4314ee3d1638d3f8c848c3cba79c3812fe189d", 0x6f}, {&(0x7f0000000700)}], 0x7, &(0x7f00000007c0)=[{0xd8, 0xff, 0xfffffffa, "ca7149be0a536cf7ac81e003f9c5f36c3a3568a6261069f38d62a7e4f7001b517b97ec21242a32f996b367a2f51ce0bb05b37c800c9a950fa951515b6471829de9e51010e30ac7fa9b9b2c191060246dd1a0bf8b05677e31483ee48f112ee55b57f530b080791630a593e03f63cce2d778d365c054cf7d7efda2e06a0a97c9816752ed033c09ce1fcf73875990e955c4df62d5a6a202d9f7fd9f88e0487134c7ee96ddb8137f6b289bcf7626818f499908d0d5517d1b7013e65165013bb8ecd1a0d465"}, {0x48, 0x1, 0x8, "074a7082a90b0fa915179e774262c5050e5525061a8a64b68f72f12c11d2dfc265b20b60057c6eeb1615f1f3faac6015979009e31e83"}], 0x120}, 0x0) (async) read$msr(r0, &(0x7f0000000940)=""/164, 0xa4) (async) sendmmsg$alg(r0, &(0x7f0000000f40)=[{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000a00)="8184e37bed59ea728cc0b0856ced5a5793263794229d60cdeebe9c050681979de7295b35480ec9ad29c2e9b28ef98847745fb8bf7cd5fcb70171c8cd7fa85c3a9194689174090f99d7b75c1b1f9c60234003a7d844f2d682bdd0d86b49980d1f89eed539c39639d87bf1023bf7e32d5a01b0778e97209f09ea148330ddaf2bf3a5081aece5ce8649b420063dd9c5b1f087334560b34cd852acd332bc065b980dd9203ad5c6da", 0xa6}, {&(0x7f0000000ac0)="20610a0330d811cb1b48dff78a45664032237587cf774834fb814c426d2b039c36331b51ff1d510f33e1af24a6f605e89b19973b551d1de170b63ef84c560b5f08cd26396132f4ea173358bc7bafa9d0023451eb40290771562ad3179388ba6950f952f13abce5134d79dce82fd0a86ef79ef39a5b2b718f671fffdde668076a26d19a1da447915a3b9656a86b9b91ce401bf48207bc52b8bd1dc313e8cca939e275c1937215976ffa3a8fa2defd9dfb7e9b531b3aeddbbb2d25cb0377ec6d352573cd872a5312d2056fe1d359a6e22acc4d67ad7981164012c1", 0xda}], 0x2, &(0x7f0000000c00)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x5}, @assoc={0x18, 0x117, 0x4, 0x7ff}, @assoc={0x18, 0x117, 0x4, 0x3}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x388}], 0xa8, 0x40000}, {0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000cc0)="4064b81f84e9c5a914dac78cb35edd9357aa0aa1244e1b6429a324177b8c85c60be8edebf42e90ce91d45ec29a2784ee25edb7c1335969603d5dc50a09df2532d2c84f3cba963fc1843972db6b5935b0abb07d65d3e82f3200fccc16ff60475fc3009eb12f6c5b21fcba41d660594c668b760bd60b16f3d75c011687e632adad2bb0dd7f9b513fd81dc13ca6fad7f62e61ede0f0f6db0f77e45c6c993283ec19961c537628e98c50895dac040840769281", 0xb1}, {&(0x7f0000000d80)="47686344da2cd12a794f1fc73a3b2e3ab7f09d06cfa5137fdb6035c0f576f8d13d2f95161cac6de4ac3ced3dae91fcf6082963fdd786e4b4cfb3cbe2620b8c9128b8b04c3a4ebef85d2d9508bbfeb677a425de1cd4a1bef6814ecf27b2f0db47b6a589ce94285df869638ad0385fc4f686f2d564194aaa61f0413d754d3f2d4d9f4006e27b65071bc9f5c091c845288c870e0c833b5dbecf0d3ab737fdee102f3344dba601b75ce7633bd07ee5a632c9a8411432ce3730e768fe7e986ff6e14ed6", 0xc1}, {&(0x7f0000000e80)="0a98d4d912b6766948fb2c49cf586cfe3765cf3cc14864a19842e3363b1600e8a820f68d923a00fda0b718b3088a64cae13556bf8b6c40d22de395305f57b935be81fca09e636be721e922f29f2ed16aae01fe6b471e96b02276d284e3238b2e", 0x60}], 0x3, 0x0, 0x0, 0x4000000}], 0x2, 0x8000) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000fc0)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001000)={0x1d, r4}, 0x10) (async) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000014c0), 0x1a1001, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000001500)=0x0) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000001540)='./file0\x00', &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) r8 = syz_open_dev$midi(&(0x7f0000002c80), 0xe38, 0x14200) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000002cc0)={0xffffffffffffffff}) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = inotify_init() r12 = socket$pppl2tp(0x18, 0x1, 0x1) (async) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000002d00)=0xffffffffffffffff) (async) r14 = fcntl$getown(r0, 0x9) (async) r15 = getpid() (async) r16 = openat$mice(0xffffffffffffff9c, &(0x7f0000002d40), 0x400402) r17 = getpgid(0x0) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000002d80)='./file0\x00', &(0x7f0000002dc0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) (async) getgroups(0x6, &(0x7f0000002e40)=[r2, r2, r2, r2, r2, r2]) (async) fcntl$getownex(r0, 0x10, &(0x7f0000002e80)={0x0, 0x0}) sendmmsg$unix(r0, &(0x7f0000002fc0)=[{{&(0x7f0000001040)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000001440)=[{&(0x7f00000010c0)="c4b236df16c0c373aa55f18a6c7f87649df3e44beaf2a4edb3fac1cdaf62465b0523f3276abd84c908789ca3b228d0720725b731cb67bb3ff6e82a71daebf89bb60e9519f9eef080c944104641cf2828ef475618c3a53dd6f24eac74edc48a805ce2d67c66a4f4", 0x67}, {&(0x7f0000001140)="6e0096a59c5600bc60a338b8a95bfc6fd91ce77a376ae87e9dcd7bd885221afb62e7c8eaabae1e1cec9c37bc64c7ad4b551fd2cc04d3cb95c49cba79b5f0ff585cf9ebcaf75e2dbf2e0892052e6cc489e59ef5ccc16100f56ed622", 0x5b}, {&(0x7f00000011c0)="11b6badff7117e765aa48b97f39de19bbd9853b26438e8a1001ef4752538b05ea55b2a77469c23aa905078c0f7e37e4a538a3bdb9f4fbce409fc2588e9039b675920ca86d9bcc55d5f96ef65742ddc6fe18f022d78a92d196193fc0dafe8ca2bd167c9759991c451e7964babd7b7f8d38800d5ca38bae3cf287fcadc10e73c5dfeed6a7841019ee877fdc43aa2c78218dec2ae73d0110788ede6ce49ed28bf8880543eedb16311c9aeaa811783491f593c842464c1286de27e8c446fafbcf4061acc7d13d31e78267b18b1e1a921da3d7f025f9db746d051e0e8c42db16a8b9bf795b3539e6b3bfbb4196c9afe1b834e", 0xf0}, {&(0x7f00000012c0)="13705512f38b768e8674903d933c014b2d0297640344363185d60ba5c9e69f49f4dff4b2358e0eac15fbbd7f16f17c23c0f33766cb36307d4b2e5bf6315a45fa8de32dbe0ccd82efa69262928048bfd15a72507132b68ddf491418d8ab276221ada4623678f11c7a1662", 0x6a}, {&(0x7f0000001340)="911006217efd56d5e5ed2be434b0e2204d0837d317412f54823f2beb4ff539579514805d4be195a53cc0cbc7a8d22edd4c249165482868639baddddafa663b2d6ecf4c1af35876a47bd231b93b921573824222ed50f7bf17eda2d1ecd5081328d1d927d68c919a750736be0fd76bfbeaef443e57ffccba2f341031aad099a2a3818f48a06ce06fbf99360088d3ef417ee9a309a11728ec97dd8b96d33ff250eca933da01b80cac12b0ec1ac73f1eec3a02151d32a83a014d82e103ac5d5c2ebfc5498612df8ba3d0527babe4d25f842c62469cf68cf80a3161fb", 0xda}], 0x5, &(0x7f0000001600)=[@rights={{0x2c, 0x1, 0x1, [r0, 0xffffffffffffffff, r5, r0, r0, r0, r0]}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r0]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {r6, r1, r7}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r1, r2}}}], 0xa8, 0x40000}}, {{0x0, 0x0, &(0x7f0000002840)=[{&(0x7f00000016c0)="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", 0x1000}, {&(0x7f00000026c0)="2fd141907c86b457336d83241ba968e1ed7ee52853f24390aab68c756761cd94fa742ae24a4f1bfd23dc3f19835fcfd90f44446d5eb314f4ce9cb83f86c725e08d0d232a3216db85432167432350b4b41a5b62edeec521826000118fa2d4b6ffbb8768574350a7f62f0e741f7cb4fdb6648c9b2b2dbc79cdbeaa6d8da0a58737ce85bd833cc147bbd4e45834dff138cf71600fcc5ca52f890b484d07733d3b6f3911678098dac706af6287f4472e0ef4076fde61e88301ea243aee926ddcc2363e70d545330e", 0xc6}, {&(0x7f00000027c0)="37fa38da2dd1fd961179802ac8d89daea92c80ed0411ad059f87c621731f4d9045b45627956087973c7e48c135d4e3c43f42933c70e3e9de311725e42075ed31bcb0c01e84bf6971fa06a7a142bc83b7945e4266f12880a8136b67b9ef", 0x5d}], 0x3, 0x0, 0x0, 0x1}}, {{&(0x7f0000002880)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000002c00)=[{&(0x7f0000002900)="98bd917bab8e1511947a47ad2dd1a088267fb2ebe63a7ea6bf5cf044d9dd931bb915fc3993a6608a2ea547c13f8338ce47a33fe282922f9934d79e5f97913e9fe5a7fa5075133cc4b09d7a03ddf2e041bf2c14ffb5697fecf6d05bc7a4b846fffbe19d3e85ca5e71938cecdfcde13bc904ecf1d9875475190d2876884f6e820d8fb5abee55fb34457ecb9da26041e3f36263a6b3eb9d", 0x96}, {&(0x7f00000029c0)="45b33bd6671c2c8a1e98d6494423be05ca5ab585e242d86773f58500b4f67f81247feea131183143ba99e1fc738ebe79e27bfd04510c", 0x36}, {&(0x7f0000002a00)="6e61cef26b5a7fdb07af9fce39b7df1088a1124f0721dbec0549f6b718b38b5139a0b2c9fa3a053623b2b94d55a2a0162623925f6c78e354cca8fe72d038553b660c28fd3e74c3b97bb25cf40171cab6fb389f3d6dec29e4779aacbbcb", 0x5d}, {&(0x7f0000002a80)="68ee7d24511616a30da98fd37eacf92aee8efe7fb50bd94e5bfe2f70a182e45205ad656ae1d97df0244228be7fee65e95f2bda3aaca0533af3ac7c58d2a262e8cf635f082b5f83222ec196cc9cc2325c2f41817e83838d2ca42a8506d20fa9bbe2676722badeb30c6c4329980f69b1e59f67fba772c2fc6b24a473a6d97c3c567a3d05d3506c0c0d3d98f0f41c543fe80bd04c07635807756badfc96388710a4a31de2e698c9ad0b4f57c03b907d45a7917cca8b50a254b8b635809d644a315f3a507ab0feb04e5cda095aa3bcb83a5272acc0005940ee5b5db81340e49121e8d7", 0xe1}, {&(0x7f0000002b80)="24abbb76903d8be85002507a1f8781162ffa2584d7ff71c666fc7771583df423f5024a6b4a69c32d63de7d699b578943b42a68f65565c3f480568c65273a57eac1fb2ac7f252ec55073a4075cdb03c7a7c7554c49d5213c846a66e17d4456559e16cfd447ecd890f748cb75e226309bf925904cae36d", 0x76}], 0x5, &(0x7f0000002ec0)=[@rights={{0x30, 0x1, 0x1, [r0, r8, r9, r10, r11, r12, r0, r13]}}, @cred={{0x1c, 0x1, 0x2, {r14, r1, r2}}}, @cred={{0x1c, 0x1, 0x2, {r15, r1, r2}}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, r0, r0, r0, r0, r0, r0, r0, r0, r16]}}, @cred={{0x1c, 0x1, 0x2, {r17, r18, r19}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {r20, r1, 0xee00}}}], 0x100, 0x8014}}], 0x3, 0x4) (async) ioctl$KVM_GET_REG_LIST(r5, 0xc008aeb0, &(0x7f0000003080)={0x7, [0x400, 0x3, 0x3, 0x8000, 0x1, 0x81, 0xfffffffffffffffa]}) (async) open(&(0x7f00000030c0)='./file1\x00', 0x800, 0x50) 122.275544ms ago: executing program 4 (id=443): r0 = userfaultfd(0x801) gettimeofday(&(0x7f00000000c0), &(0x7f0000000100)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() syz_mount_image$btrfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x16, &(0x7f0000005440)={[{@noenospc_debug}, {@nossd_spread}, {@nodatasum}, {@notreelog}, {@max_inline={'max_inline', 0x3d, [0x6b, 0x39, 0x67, 0x3d, 0x31]}}, {@discard}]}, 0x9, 0x50f6, &(0x7f0000000340)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000100)='.\x00', 0x127a628, &(0x7f0000000e80)=ANY=[@ANYRES32=0x0, @ANYBLOB="34771e7745f2e26297cfd7ec55afcb50b97c5e40513e6b6a84c1445b948c59456dcaadcb51f62a8a639cf208239d2001e92bd765d672a4de1737e0502569bb4bb64c54bb10a754c2e1b6a0a988c6ccb74670d807dc592f35783caa7d73aa45688c4ccf67d7a0ba6ddfbb9719a755943090fc233d49f62ac31d233eb89ef27730695e3d7f505b565b4239ca10d9853b2e43368facfc9c6f7d67ea87a72dfd6b50ac126032a6112b077dd56137857e617eab50a4d4095930e644b61a263d3785e5e4db53e872d6bb558b554dee7a5c15466d05f907c0bd58bacc49f2417da7", @ANYRESDEC, @ANYRES8, @ANYRES8, @ANYRESDEC, @ANYBLOB="225591329ad1ba7d0f657bbc8cef0b86b8d8557e093c0e4d287db250cb2e2f0eec2ae27a11464d02c6151566110a8fb43227bcf035f9cd4f347ffeafa0fc44a44a4cc0d60fa5c54b123939211ecf5de969ebbd989f25bbebbb188926cc7c7f0462818ebc4a83a75a87772c33bc408963c67a3b5f2e33c2cbedd9d2eef6b43a71b90b67c0e935f29a4879965f3968fe720aa7601eaac4b8af73346e100c185efcda4023f8e22a5bb36397fd1e377925f69b443a9ce77e3ba66565da919582bde5a2799acdd59915fa", @ANYRESDEC, @ANYRES8, @ANYRES32, @ANYRES16, @ANYRES64, @ANYRESHEX, @ANYRES8], 0xb, 0x0, &(0x7f0000000040)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r3, &(0x7f0000000140)='2', 0x1, 0x8080c61) lseek(r2, 0x595e, 0x3) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000480)={@in6={{0xa, 0x0, 0x20000000, @remote, 0x1}}, 0x0, 0x0, 0x0, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) syz_create_resource$binfmt(0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/rt_acct\x00') read$FUSE(r6, &(0x7f0000002a80)={0x2020}, 0x2020) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x50e, &(0x7f00000000c0), 0x3, 0x45a, &(0x7f0000000cc0)="$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") ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) keyctl$clear(0x7, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) syz_clone(0x1001000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) 0s ago: executing program 1 (id=444): sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000740)}], 0x2}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640), 0x2, 0x40448d0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async, rerun: 32) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async, rerun: 32) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000680)={r7, 0x10000201, 0x7, 0x81, 0x3, [0x0, 0x0, 0x0, 0x0], [0x3fd86826, 0xfffffffd], [0x0, 0x7, 0x9], [0x0, 0x0, 0xfffffffffefffffc, 0x9]}) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r8, 0x0, 0x0, r9], [0x2b8]}) (async, rerun: 64) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) (async, rerun: 64) r11 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r11, 0xc0184800, &(0x7f0000000100)={0x20004, r10, 0x2}) r13 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r13, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r12}) ioctl$DRM_IOCTL_GEM_FLINK(r13, 0xc008640a, &(0x7f0000000300)={r14}) ioctl$DRM_IOCTL_PANTHOR_BO_SYNC(r2, 0xc010644f, &(0x7f0000000340)={{0x18, 0x4, &(0x7f00000002c0)=[{r8, 0x0, 0x0, 0x5}, {0x0, 0x1, 0x4, 0x5}, {0x0, 0x0, 0x8, 0x1}, {r14, 0x1, 0x8, 0x5}]}}) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r15 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r15, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000d40)=[@assoc={0x18, 0x117, 0x4, 0xffff}], 0x18}], 0x1, 0x40800) (async) recvmsg(r15, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async, rerun: 32) r16 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (rerun: 32) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r16, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) (async) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) (async, rerun: 32) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) (async, rerun: 32) ioctl$KVM_RUN(r16, 0xae80, 0x0) kernel console output (not intermixed with test programs): 9 [ 79.850711][ T61] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.852228][ T61] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.854775][ T61] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.865763][ T61] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.866413][ T61] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.996058][ T5621] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 80.023619][ T5621] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 80.024370][ T5621] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 80.025383][ T5621] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 80.026144][ T5621] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 80.071402][ T4925] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.078860][ T4925] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.088683][ T4925] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.091279][ T4925] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.092754][ T4925] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.831474][ T61] Bluetooth: hci0: command tx timeout [ 81.911299][ T61] Bluetooth: hci2: command tx timeout [ 81.991952][ T61] Bluetooth: hci1: command tx timeout [ 82.071226][ T61] Bluetooth: hci4: command tx timeout [ 82.152537][ T61] Bluetooth: hci3: command tx timeout [ 82.377181][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.377681][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.377878][ T5610] bridge_slave_0: entered allmulticast mode [ 82.380082][ T5610] bridge_slave_0: entered promiscuous mode [ 82.425270][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.425428][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.425572][ T5609] bridge_slave_0: entered allmulticast mode [ 82.427306][ T5609] bridge_slave_0: entered promiscuous mode [ 82.433056][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.433327][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.433558][ T5610] bridge_slave_1: entered allmulticast mode [ 82.439860][ T5610] bridge_slave_1: entered promiscuous mode [ 82.494383][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.494546][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.494850][ T5609] bridge_slave_1: entered allmulticast mode [ 82.496682][ T5609] bridge_slave_1: entered promiscuous mode [ 82.584860][ T5617] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.585135][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.585417][ T5617] bridge_slave_0: entered allmulticast mode [ 82.587240][ T5617] bridge_slave_0: entered promiscuous mode [ 82.644049][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.644918][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.645205][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.645715][ T5617] bridge_slave_1: entered allmulticast mode [ 82.647464][ T5617] bridge_slave_1: entered promiscuous mode [ 82.649831][ T5618] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.650014][ T5618] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.650150][ T5618] bridge_slave_0: entered allmulticast mode [ 82.656547][ T5618] bridge_slave_0: entered promiscuous mode [ 82.690538][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.697118][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.721571][ T5618] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.722097][ T5618] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.722378][ T5618] bridge_slave_1: entered allmulticast mode [ 82.725342][ T5618] bridge_slave_1: entered promiscuous mode [ 82.728056][ T5620] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.728320][ T5620] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.728547][ T5620] bridge_slave_0: entered allmulticast mode [ 82.732709][ T5620] bridge_slave_0: entered promiscuous mode [ 82.743458][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.803241][ T5620] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.803438][ T5620] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.803750][ T5620] bridge_slave_1: entered allmulticast mode [ 82.805492][ T5620] bridge_slave_1: entered promiscuous mode [ 82.852619][ T5617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.904004][ T5610] team0: Port device team_slave_0 added [ 82.909357][ T5617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.916544][ T5618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.940499][ T5609] team0: Port device team_slave_0 added [ 82.945178][ T5610] team0: Port device team_slave_1 added [ 82.966447][ T5618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.971246][ T5620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.976650][ T5609] team0: Port device team_slave_1 added [ 83.023876][ T5620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.055001][ T5617] team0: Port device team_slave_0 added [ 83.097450][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.097460][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.097473][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.102524][ T5617] team0: Port device team_slave_1 added [ 83.106646][ T5618] team0: Port device team_slave_0 added [ 83.133121][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.133135][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.133159][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.136330][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.136343][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.136367][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.166272][ T5618] team0: Port device team_slave_1 added [ 83.171321][ T5620] team0: Port device team_slave_0 added [ 83.174017][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.174029][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.174065][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.279479][ T5620] team0: Port device team_slave_1 added [ 83.301056][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.301071][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.301095][ T5617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.354658][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.354668][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.354683][ T5617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.356085][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.356094][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.356106][ T5618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.423888][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.423903][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.423927][ T5618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.426488][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.426500][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.426523][ T5620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.494379][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.494394][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.494418][ T5620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.509863][ T5610] hsr_slave_0: entered promiscuous mode [ 83.512606][ T5610] hsr_slave_1: entered promiscuous mode [ 83.568218][ T5609] hsr_slave_0: entered promiscuous mode [ 83.570249][ T5609] hsr_slave_1: entered promiscuous mode [ 83.572628][ T5609] debugfs: 'hsr0' already exists in 'hsr' [ 83.572743][ T5609] Cannot create hsr debugfs directory [ 83.910448][ T61] Bluetooth: hci0: command tx timeout [ 83.990493][ T61] Bluetooth: hci2: command tx timeout [ 84.071100][ T61] Bluetooth: hci1: command tx timeout [ 84.145418][ T5617] hsr_slave_0: entered promiscuous mode [ 84.146574][ T5617] hsr_slave_1: entered promiscuous mode [ 84.147457][ T5617] debugfs: 'hsr0' already exists in 'hsr' [ 84.147478][ T5617] Cannot create hsr debugfs directory [ 84.152597][ T61] Bluetooth: hci4: command tx timeout [ 84.219244][ T5618] hsr_slave_0: entered promiscuous mode [ 84.221092][ T5618] hsr_slave_1: entered promiscuous mode [ 84.222700][ T5618] debugfs: 'hsr0' already exists in 'hsr' [ 84.222722][ T5618] Cannot create hsr debugfs directory [ 84.230629][ T61] Bluetooth: hci3: command tx timeout [ 84.277748][ T5620] hsr_slave_0: entered promiscuous mode [ 84.278876][ T5620] hsr_slave_1: entered promiscuous mode [ 84.279743][ T5620] debugfs: 'hsr0' already exists in 'hsr' [ 84.279764][ T5620] Cannot create hsr debugfs directory [ 85.087061][ T5610] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 85.151633][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.157122][ T5610] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 85.179632][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.198865][ T5610] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 85.234456][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.258191][ T5610] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 85.295070][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.424150][ T5617] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 85.453675][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.456270][ T5617] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 85.500613][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.510164][ T5617] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 85.555879][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.575892][ T5617] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 85.618054][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.738691][ T5618] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.775567][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.786862][ T5618] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.815557][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.824276][ T5618] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.856135][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.881092][ T5618] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.925599][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.992053][ T61] Bluetooth: hci0: command tx timeout [ 86.070793][ T61] Bluetooth: hci2: command tx timeout [ 86.089060][ T5620] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.124289][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.129965][ T5620] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.152671][ T61] Bluetooth: hci1: command tx timeout [ 86.173730][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.178165][ T5620] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.213442][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.231586][ T61] Bluetooth: hci4: command tx timeout [ 86.254466][ T5620] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.287345][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.312342][ T61] Bluetooth: hci3: command tx timeout [ 86.354980][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.448857][ T5609] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 86.477265][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.490114][ T5609] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 86.537524][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.548952][ T5609] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 86.575600][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.589980][ T5609] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 86.625028][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.629837][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.679339][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.685875][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.733210][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.752318][ T10] cfg80211: failed to load regulatory.db [ 86.777860][ T1696] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.777973][ T1696] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.912046][ T5617] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.960102][ T1696] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.960236][ T1696] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.991428][ T5618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.024439][ T1696] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.024595][ T1696] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.144247][ T5618] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.226767][ T5620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.248833][ T1431] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.249113][ T1431] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.338302][ T4296] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.338461][ T4296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.434119][ T5620] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.483116][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.523239][ T1563] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.523469][ T1563] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.646345][ T1563] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.646530][ T1563] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.767861][ T5609] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.839590][ T1563] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.839724][ T1563] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.927551][ T1563] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.927708][ T1563] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.074900][ T61] Bluetooth: hci0: command tx timeout [ 88.109721][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.151751][ T61] Bluetooth: hci2: command tx timeout [ 88.232040][ T61] Bluetooth: hci1: command tx timeout [ 88.312894][ T61] Bluetooth: hci4: command tx timeout [ 88.390962][ T61] Bluetooth: hci3: command tx timeout [ 88.524616][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.696505][ T5610] veth0_vlan: entered promiscuous mode [ 88.792235][ T5610] veth1_vlan: entered promiscuous mode [ 89.058257][ T5617] veth0_vlan: entered promiscuous mode [ 89.104958][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.157417][ T5620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.182430][ T5617] veth1_vlan: entered promiscuous mode [ 89.197251][ T5610] veth0_macvtap: entered promiscuous mode [ 89.247433][ T5610] veth1_macvtap: entered promiscuous mode [ 89.385648][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.425453][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.466096][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.495890][ T5617] veth0_macvtap: entered promiscuous mode [ 89.542187][ T5618] veth0_vlan: entered promiscuous mode [ 89.574175][ T1563] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.584278][ T5617] veth1_macvtap: entered promiscuous mode [ 89.619716][ T1563] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.658213][ T1563] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.674910][ T1563] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.683436][ T5620] veth0_vlan: entered promiscuous mode [ 89.695321][ T5618] veth1_vlan: entered promiscuous mode [ 89.860487][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.904308][ T5620] veth1_vlan: entered promiscuous mode [ 90.025750][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.176804][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.206075][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.216826][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.245369][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.344193][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.344218][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.382396][ T5618] veth0_macvtap: entered promiscuous mode [ 90.556414][ T5618] veth1_macvtap: entered promiscuous mode [ 90.660232][ T5609] veth0_vlan: entered promiscuous mode [ 90.694459][ T5620] veth0_macvtap: entered promiscuous mode [ 90.715215][ T1563] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.715231][ T1563] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.764632][ T5620] veth1_macvtap: entered promiscuous mode [ 90.835045][ T5609] veth1_vlan: entered promiscuous mode [ 90.845836][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.845854][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.922304][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.969921][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.036675][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.063501][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.063519][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.065204][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.080652][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.087369][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.094186][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.105770][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.165521][ T44] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.167132][ T44] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.278359][ T44] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.294679][ T44] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.445321][ T5609] veth0_macvtap: entered promiscuous mode [ 91.659637][ T5609] veth1_macvtap: entered promiscuous mode [ 91.903438][ T5810] tmpfs: Unknown parameter '' [ 92.113752][ T5811] kAFS: unable to lookup cell 'syz0' [ 92.308351][ T1012] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 92.379624][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.418278][ T1431] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.418297][ T1431] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.443589][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.558812][ T4296] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.579275][ T1012] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 92.579298][ T1012] usb 2-1: config 0 has no interface number 0 [ 92.579337][ T1012] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 92.584582][ T1012] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 92.584609][ T1012] usb 2-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 92.584628][ T1012] usb 2-1: Manufacturer: syz [ 92.584641][ T1012] usb 2-1: SerialNumber: syz [ 92.638712][ T4296] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.645293][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.645312][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.671340][ T4296] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.713881][ T4296] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.758909][ T1012] usb 2-1: config 0 descriptor?? [ 92.839518][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.839537][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.064934][ T38] audit: type=1326 audit(1781965698.538:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5815 comm="syz.3.7" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f885830ce59 code=0x7ffc0000 [ 93.064969][ T38] audit: type=1326 audit(1781965698.548:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5815 comm="syz.3.7" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f885830ce59 code=0x7ffc0000 [ 93.102433][ T38] audit: type=1326 audit(1781965698.568:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5815 comm="syz.3.7" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f885830ce59 code=0x7ffc0000 [ 93.102479][ T38] audit: type=1326 audit(1781965698.578:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5815 comm="syz.3.7" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f885830ce59 code=0x7ffc0000 [ 93.102514][ T38] audit: type=1326 audit(1781965698.578:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5815 comm="syz.3.7" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f885830ce59 code=0x7ffc0000 [ 93.115926][ T38] audit: type=1326 audit(1781965698.588:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5815 comm="syz.3.7" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f885830ce59 code=0x7ffc0000 [ 93.115972][ T38] audit: type=1326 audit(1781965698.588:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5815 comm="syz.3.7" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f885830ce59 code=0x7ffc0000 [ 93.116008][ T38] audit: type=1326 audit(1781965698.588:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5815 comm="syz.3.7" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f885830ce59 code=0x7ffc0000 [ 93.234708][ T38] audit: type=1326 audit(1781965698.718:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5815 comm="syz.3.7" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f885830ce59 code=0x7ffc0000 [ 93.234758][ T38] audit: type=1326 audit(1781965698.718:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5815 comm="syz.3.7" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f885830ce59 code=0x7ffc0000 [ 93.437466][ T1696] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.437486][ T1696] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.920577][ T5715] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 93.997314][ T5828] loop2: detected capacity change from 0 to 8 [ 94.111268][ T5715] usb 4-1: Using ep0 maxpacket: 32 [ 94.136028][ T5715] usb 4-1: unable to get BOS descriptor or descriptor too short [ 94.194220][ T5715] usb 4-1: New USB device found, idVendor=0763, idProduct=0150, bcdDevice= 0.40 [ 94.194249][ T5715] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.194267][ T5715] usb 4-1: Product: syz [ 94.194280][ T5715] usb 4-1: Manufacturer: syz [ 94.194293][ T5715] usb 4-1: SerialNumber: syz [ 94.340997][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.341016][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.476169][ T5828] SQUASHFS error: zlib decompression failed, data probably corrupt [ 94.476200][ T5828] SQUASHFS error: Failed to read block 0x9b: -5 [ 94.476215][ T5828] SQUASHFS error: Unable to read metadata cache entry [99] [ 94.476235][ T5828] SQUASHFS error: Unable to read inode 0x127 [ 94.717474][ T5715] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 94.717538][ T5715] usb 4-1: MIDIStreaming interface descriptor not found [ 95.106455][ T1563] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.106474][ T1563] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.457274][ T5616] usb 2-1: USB disconnect, device number 2 [ 95.894952][ T5715] usb 4-1: USB disconnect, device number 2 [ 95.989641][ T5836] loop3: detected capacity change from 0 to 256 [ 96.092616][ T5836] exfat: Bad value for 'dmask' [ 96.254236][ T5849] loop4: detected capacity change from 0 to 256 [ 96.318322][ T5849] exfat: Deprecated parameter 'utf8' [ 96.318413][ T5849] exfat: Deprecated parameter 'namecase' [ 96.504672][ T5849] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe6e0c303, utbl_chksum : 0xe619d30d) [ 96.650463][ T5745] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 97.323061][ T5849] capability: warning: `syz.4.5' uses deprecated v2 capabilities in a way that may be insecure [ 97.668750][ T5745] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 97.668780][ T5745] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.809810][ T5745] usb 3-1: config 0 descriptor?? [ 97.974011][ T5745] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 98.260927][ T5862] RDS: rds_bind could not find a transport for fc02::1, load rds_tcp or rds_rdma? [ 98.980712][ T5875] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 99.751732][ T5883] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20'. [ 99.906564][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 100.002978][ T5881] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20'. [ 100.035340][ T5745] usb 3-1: USB disconnect, device number 2 [ 100.163955][ T10] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 100.163985][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.164004][ T10] usb 2-1: Product: syz [ 100.164019][ T10] usb 2-1: Manufacturer: syz [ 100.164032][ T10] usb 2-1: SerialNumber: syz [ 100.352118][ T10] usb 2-1: config 0 descriptor?? [ 100.867653][ T5875] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18'. [ 100.942253][ T5896] netlink: 'syz.2.22': attribute type 3 has an invalid length. [ 101.028262][ T5899] loop3: detected capacity change from 0 to 512 [ 101.029298][ T5899] ======================================================= [ 101.029298][ T5899] WARNING: The mand mount option has been deprecated and [ 101.029298][ T5899] and is ignored by this kernel. Remove the mand [ 101.029298][ T5899] option from the mount to silence this warning. [ 101.029298][ T5899] ======================================================= [ 101.262095][ T10] usb 2-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 101.262121][ T10] usb 2-1: Firmware version (0.0) predates our first public release. [ 101.262138][ T10] usb 2-1: Please update to version 0.2 or newer [ 101.394931][ T5899] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 101.394952][ T5899] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 101.533126][ T5903] FAULT_INJECTION: forcing a failure. [ 101.533126][ T5903] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 101.533174][ T5903] CPU: 1 UID: 0 PID: 5903 Comm: syz.2.24 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 101.533198][ T5903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 101.533216][ T5903] Call Trace: [ 101.533226][ T5903] [ 101.533234][ T5903] dump_stack_lvl+0xe8/0x150 [ 101.533260][ T5903] should_fail_ex+0x467/0x600 [ 101.533288][ T5903] _copy_from_user+0x2d/0xb0 [ 101.533315][ T5903] do_sock_getsockopt+0x200/0x7e0 [ 101.533346][ T5903] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 101.533385][ T5903] ? __fget_files+0x3a8/0x420 [ 101.533404][ T5903] ? __fget_files+0x2a/0x420 [ 101.533428][ T5903] __x64_sys_getsockopt+0x1aa/0x250 [ 101.533456][ T5903] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.533476][ T5903] do_syscall_64+0x174/0x580 [ 101.533496][ T5903] ? trace_irq_disable+0x3b/0x140 [ 101.533516][ T5903] ? clear_bhb_loop+0x40/0x90 [ 101.533536][ T5903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.533552][ T5903] RIP: 0033:0x7f8924eece59 [ 101.533574][ T5903] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.533588][ T5903] RSP: 002b:00007f8923146028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 101.533606][ T5903] RAX: ffffffffffffffda RBX: 00007f8925165fa0 RCX: 00007f8924eece59 [ 101.533617][ T5903] RDX: 0000000000000039 RSI: 0000000000000001 RDI: 0000000000000003 [ 101.533626][ T5903] RBP: 00007f8923146090 R08: 00002000000000c0 R09: 0000000000000000 [ 101.533638][ T5903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.533648][ T5903] R13: 00007f8925166038 R14: 00007f8925165fa0 R15: 00007fff7870d498 [ 101.533675][ T5903] [ 102.682140][ T10] usb 2-1: USB disconnect, device number 3 [ 103.008282][ T5899] EXT4-fs error (device loop3): xattr_find_entry:337: inode #15: comm syz.3.23: corrupted xattr entries [ 103.008617][ T5899] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 103.014617][ C0] EXT4-fs (loop3): initial error at time 1781965708: xattr_find_entry:337: inode 15 [ 103.014649][ C0] EXT4-fs (loop3): last error at time 1781965708: xattr_find_entry:337: inode 15 [ 103.063189][ T5899] EXT4-fs (loop3): Remounting filesystem read-only [ 103.063211][ T5899] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 103.063580][ T5899] EXT4-fs (loop3): 1 truncate cleaned up [ 103.117307][ T5899] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.119676][ T5921] loop0: detected capacity change from 0 to 764 [ 103.653492][ T5931] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 103.686283][ T5931] syz.3.23 uses obsolete (PF_INET,SOCK_PACKET) [ 104.332141][ T5916] netlink: 3 bytes leftover after parsing attributes in process `syz.1.28'. [ 104.360332][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 104.380318][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 104.390324][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 104.400312][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 104.410309][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 104.420318][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 104.430310][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 104.440314][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 104.450309][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 104.790318][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 105.827702][ T5922] trusted_key: syz.1.28 sent an empty control message without MSG_MORE. [ 106.469179][ T5617] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.220777][ T5938] xfrm0 speed is unknown, defaulting to 1000 [ 108.223165][ T5731] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 108.242238][ T5938] xfrm0 speed is unknown, defaulting to 1000 [ 108.430399][ T5731] usb 4-1: Using ep0 maxpacket: 16 [ 108.432535][ T5731] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 108.432694][ T5731] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 108.499851][ T5731] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 108.499879][ T5731] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.499897][ T5731] usb 4-1: Product: syz [ 108.499910][ T5731] usb 4-1: Manufacturer: syz [ 108.499923][ T5731] usb 4-1: SerialNumber: syz [ 108.597969][ T5938] xfrm0 speed is unknown, defaulting to 1000 [ 108.737603][ T5731] usb 4-1: config 0 descriptor?? [ 108.745303][ T5938] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 108.745335][ T5938] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 108.745370][ T5938] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 109.019289][ T5941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.029529][ T5941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.032207][ T5938] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 109.052722][ T5731] em28xx 4-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 109.476028][ T5731] usb 4-1: USB disconnect, device number 3 [ 109.513606][ T5938] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 110.233140][ T5938] xfrm0 speed is unknown, defaulting to 1000 [ 110.293222][ T5938] xfrm0 speed is unknown, defaulting to 1000 [ 110.322920][ T5938] xfrm0 speed is unknown, defaulting to 1000 [ 110.368583][ T5938] xfrm0 speed is unknown, defaulting to 1000 [ 110.377048][ T5938] xfrm0 speed is unknown, defaulting to 1000 [ 110.692253][ T5888] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 110.893433][ T5888] usb 4-1: unable to get BOS descriptor or descriptor too short [ 110.931042][ T5888] usb 4-1: config 186 has an invalid interface number: 13 but max is 1 [ 110.931069][ T5888] usb 4-1: config 186 has an invalid descriptor of length 0, skipping remainder of the config [ 110.931089][ T5888] usb 4-1: config 186 has 1 interface, different from the descriptor's value: 2 [ 110.931109][ T5888] usb 4-1: config 186 has no interface number 0 [ 110.931139][ T5888] usb 4-1: config 186 interface 13 has no altsetting 0 [ 110.989814][ T5888] usb 4-1: New USB device found, idVendor=0c45, idProduct=6251, bcdDevice=74.3d [ 110.989831][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.989841][ T5888] usb 4-1: Product: syz [ 110.989848][ T5888] usb 4-1: Manufacturer: syz [ 110.989855][ T5888] usb 4-1: SerialNumber: syz [ 111.526825][ T5954] loop4: detected capacity change from 0 to 4096 [ 111.828552][ T5954] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 111.960636][ T5954] ntfs3(loop4): $Volume is corrupted. [ 112.890455][ T5715] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 113.122601][ T5715] usb 2-1: Using ep0 maxpacket: 16 [ 113.172867][ T5715] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 113.172894][ T5715] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 113.198409][ T5715] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 113.198505][ T5715] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.198526][ T5715] usb 2-1: Product: syz [ 113.198540][ T5715] usb 2-1: Manufacturer: syz [ 113.198554][ T5715] usb 2-1: SerialNumber: syz [ 113.469816][ T5715] usb 2-1: 0:2 : does not exist [ 113.723202][ T5715] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 114.496619][ T5963] loop2: detected capacity change from 0 to 32768 [ 114.678768][ T5715] usb 2-1: USB disconnect, device number 4 [ 114.682260][ T5963] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.37 (5963) [ 114.770434][ T5745] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 114.940462][ T5745] usb 5-1: Using ep0 maxpacket: 16 [ 114.943433][ T5745] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 114.943458][ T5745] usb 5-1: config 0 has no interface number 0 [ 114.943488][ T5745] usb 5-1: config 0 interface 255 has no altsetting 0 [ 114.958522][ T5888] hub 4-1:186.13: bad descriptor, ignoring hub [ 114.958558][ T5888] hub 4-1:186.13: probe with driver hub failed with error -5 [ 114.977844][ T5888] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6251 [ 114.985028][ T5888] gspca_sn9c20x: Write register 1000 failed -71 [ 114.985060][ T5888] gspca_sn9c20x: Device initialization failed [ 114.985139][ T5888] gspca_sn9c20x 4-1:186.13: probe with driver gspca_sn9c20x failed with error -71 [ 115.030630][ T5745] usb 5-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 115.030658][ T5745] usb 5-1: New USB device strings: Mfr=1, Product=6, SerialNumber=3 [ 115.030675][ T5745] usb 5-1: Product: syz [ 115.030687][ T5745] usb 5-1: Manufacturer: syz [ 115.030700][ T5745] usb 5-1: SerialNumber: syz [ 116.554382][ T5978] ptrace attach of "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[5617] was attempted by " € "[5978] [ 116.735108][ T5888] usb 4-1: USB disconnect, device number 4 [ 116.788921][ T5745] usb 5-1: config 0 descriptor?? [ 116.841648][ T5745] ums-onetouch 5-1:0.255: USB Mass Storage device detected [ 116.986746][ T5963] BTRFS error (device loop2): open_ctree failed: -4 [ 117.041966][ T5968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.054032][ T5968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.398145][ T5874] udevd[5874]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 117.749781][ T37] usb 5-1: USB disconnect, device number 2 [ 119.162864][ T37] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 119.356820][ T37] usb 4-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 119.356850][ T37] usb 4-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 119.356870][ T37] usb 4-1: Product: syz [ 119.356884][ T37] usb 4-1: Manufacturer: syz [ 119.356897][ T37] usb 4-1: SerialNumber: syz [ 119.452434][ T37] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 119.660022][ T37] vp7045: USB control message 'out' went wrong. [ 119.660052][ T37] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 119.660085][ T37] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 119.759046][ T37] usb 4-1: USB disconnect, device number 5 [ 120.860505][ T37] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 121.022913][ T37] usb 4-1: Using ep0 maxpacket: 8 [ 121.035529][ T37] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 121.035691][ T37] usb 4-1: config 0 has no interface number 0 [ 121.035732][ T37] usb 4-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 121.035772][ T37] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 121.035794][ T37] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.102491][ T37] usb 4-1: config 0 descriptor?? [ 121.129444][ T37] iowarrior 4-1:0.1: no interrupt-in endpoint found [ 121.422478][ T5888] usb 4-1: USB disconnect, device number 6 [ 122.146876][ T61] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 122.175266][ T61] Bluetooth: hci3: Injecting HCI hardware error event [ 122.204287][ T61] Bluetooth: hci3: hardware error 0x00 [ 123.586200][ T6026] loop4: detected capacity change from 0 to 32768 [ 123.976839][ T6046] loop3: detected capacity change from 0 to 64 [ 124.038643][ T6046] bfs: Unknown parameter '' [ 124.415488][ T6026] workqueue: Failed to create a rescuer kthread for wq "xfs-inodegc/loop4": -EINTR [ 125.284490][ T61] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 125.612358][ T32] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 125.782116][ T32] usb 5-1: Using ep0 maxpacket: 8 [ 125.787043][ T32] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 125.787069][ T32] usb 5-1: config 0 has no interface number 0 [ 125.787108][ T32] usb 5-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 125.787145][ T32] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 125.787167][ T32] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.913067][ T32] usb 5-1: config 0 descriptor?? [ 125.996510][ T32] iowarrior 5-1:0.1: no interrupt-in endpoint found [ 126.734304][ T5715] usb 5-1: USB disconnect, device number 3 [ 127.124326][ T6089] netlink: 16 bytes leftover after parsing attributes in process `syz.3.72'. [ 127.500599][ T6097] loop1: detected capacity change from 0 to 4096 [ 129.042417][ T6115] loop3: detected capacity change from 0 to 1024 [ 129.301778][ T6121] RDS: rds_bind could not find a transport for fc02::1, load rds_tcp or rds_rdma? [ 129.317059][ T6097] ntfs3(loop1): Failed to load $Extend (-22). [ 129.317082][ T6097] ntfs3(loop1): Failed to initialize $Extend. [ 129.419651][ T6115] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 129.419774][ T6115] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.640425][ T5730] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 129.792057][ T5730] usb 1-1: Using ep0 maxpacket: 32 [ 129.799904][ T5730] usb 1-1: unable to get BOS descriptor or descriptor too short [ 129.816271][ T5730] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 129.838430][ T5730] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 129.838458][ T5730] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.838476][ T5730] usb 1-1: Product: syz [ 129.838490][ T5730] usb 1-1: Manufacturer: syz [ 129.838503][ T5730] usb 1-1: SerialNumber: syz [ 129.944255][ T5617] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 130.085643][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 130.139626][ T6123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.146123][ T6123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.226134][ T5730] usb 1-1: Limiting number of CPorts to U8_MAX [ 130.251058][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 130.270969][ T10] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 130.270994][ T10] usb 2-1: config 0 has no interface number 0 [ 130.271035][ T10] usb 2-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 130.271076][ T10] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 130.271099][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.341702][ T10] usb 2-1: config 0 descriptor?? [ 130.353746][ T5730] usb 1-1: Not enough endpoints found in device, aborting! [ 130.388756][ T10] iowarrior 2-1:0.1: no interrupt-in endpoint found [ 130.475606][ T5730] usb 1-1: USB disconnect, device number 2 [ 130.673154][ T10] usb 2-1: USB disconnect, device number 5 [ 130.775647][ T6139] loop4: detected capacity change from 0 to 256 [ 130.901222][ T6143] netlink: 12 bytes leftover after parsing attributes in process `syz.1.90'. [ 131.776351][ T6152] loop1: detected capacity change from 0 to 128 [ 132.111861][ T6157] loop3: detected capacity change from 0 to 1024 [ 132.304575][ T6157] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 132.304707][ T6157] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.563527][ T6149] xfrm0 speed is unknown, defaulting to 1000 [ 132.577236][ T37] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 132.665661][ T5617] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 132.666593][ T6170] RDS: rds_bind could not find a transport for fc02::1, load rds_tcp or rds_rdma? [ 132.739620][ T32] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 132.763542][ T37] usb 1-1: Using ep0 maxpacket: 8 [ 132.765793][ T37] usb 1-1: config 0 has an invalid descriptor of length 64, skipping remainder of the config [ 132.765844][ T37] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 132.765868][ T37] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.798829][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.798922][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.807285][ T37] usb 1-1: config 0 descriptor?? [ 132.849000][ T37] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 132.859583][ T6172] loop1: detected capacity change from 0 to 2048 [ 132.982605][ T6172] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 133.052830][ T32] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 133.052886][ T32] usb 5-1: config 1 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 133.052965][ T32] usb 5-1: config 1 interface 0 has no altsetting 0 [ 133.093168][ T32] usb 5-1: string descriptor 0 read error: -22 [ 133.093318][ T32] usb 5-1: New USB device found, idVendor=0c70, idProduct=040b, bcdDevice= 0.00 [ 133.093341][ T32] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 133.270553][ T61] Bluetooth: hci4: command tx timeout [ 133.373668][ T37] gspca_vc032x: reg_r err -110 [ 133.373769][ T37] vc032x 1-1:0.0: probe with driver vc032x failed with error -110 [ 133.483280][ T6175] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 133.518725][ T6172] syz.1.98: attempt to access beyond end of device [ 133.518725][ T6172] loop1: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 133.621778][ T32] usb 5-1: USB disconnect, device number 4 [ 133.667711][ T37] usb 1-1: USB disconnect, device number 3 [ 133.682831][ T6174] loop3: detected capacity change from 0 to 32768 [ 133.723943][ T6172] syz.1.98: attempt to access beyond end of device [ 133.723943][ T6172] loop1: rw=0, sector=33554430, nr_sectors = 2 limit=2048 [ 133.804133][ T6172] NILFS (loop1): I/O error reading meta-data file (ino=6, block-offset=3) [ 133.804160][ T6172] NILFS (loop1): error -5 reading inode: ino=12 [ 133.841259][ T6174] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.96 (6174) [ 134.188951][ T6174] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 134.189007][ T6174] BTRFS info (device loop3): using crc32c checksum algorithm [ 134.327576][ T6162] syz.4.93 (6162) used greatest stack depth: 15824 bytes left [ 134.550398][ T37] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 134.701519][ T37] usb 1-1: Using ep0 maxpacket: 8 [ 134.713960][ T37] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 134.713985][ T37] usb 1-1: config 0 has no interface number 0 [ 134.714025][ T37] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 134.714063][ T37] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 134.714092][ T37] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.833626][ T37] usb 1-1: config 0 descriptor?? [ 134.872598][ T37] iowarrior 1-1:0.1: no interrupt-in endpoint found [ 135.045829][ T6174] BTRFS info (device loop3): setting nodatasum [ 135.045853][ T6174] BTRFS info (device loop3): enabling ssd optimizations [ 135.045873][ T6174] BTRFS info (device loop3): disabling tree log [ 135.045888][ T6174] BTRFS info (device loop3): turning on sync discard [ 135.045904][ T6174] BTRFS info (device loop3): enabling free space tree [ 135.045931][ T6174] BTRFS info (device loop3): max_inline set to 0 [ 135.243021][ T32] usb 1-1: USB disconnect, device number 4 [ 135.802706][ T5617] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 136.068069][ T6211] loop1: detected capacity change from 0 to 1024 [ 136.237598][ T6211] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 136.237726][ T6211] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.466930][ T5610] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 136.853121][ T6219] loop0: detected capacity change from 0 to 2048 [ 136.954719][ T6219] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 137.062788][ T6220] g: entered promiscuous mode [ 137.191936][ T6219] syz.0.109: attempt to access beyond end of device [ 137.191936][ T6219] loop0: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 137.196155][ T6225] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 137.529632][ T6219] syz.0.109: attempt to access beyond end of device [ 137.529632][ T6219] loop0: rw=0, sector=33554430, nr_sectors = 2 limit=2048 [ 137.529724][ T6219] NILFS (loop0): I/O error reading meta-data file (ino=6, block-offset=3) [ 137.529743][ T6219] NILFS (loop0): error -5 reading inode: ino=12 [ 137.590655][ T32] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 137.720769][ T32] usb 2-1: device descriptor read/64, error -71 [ 137.930572][ T5745] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 138.993895][ T5745] usb 3-1: Using ep0 maxpacket: 8 [ 138.997393][ T5745] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 138.997417][ T5745] usb 3-1: config 0 has no interface number 0 [ 138.997458][ T5745] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 138.997496][ T5745] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 138.997519][ T5745] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.010623][ T32] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 139.046124][ T5745] usb 3-1: config 0 descriptor?? [ 139.086541][ T5745] iowarrior 3-1:0.1: no interrupt-in endpoint found [ 139.143727][ T32] usb 2-1: device descriptor read/64, error -71 [ 139.812186][ T6254] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 140.272637][ T32] usb usb2-port1: attempt power cycle [ 140.352440][ T37] usb 3-1: USB disconnect, device number 3 [ 140.578470][ T6259] loop1: detected capacity change from 0 to 1024 [ 140.829549][ T6259] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 140.829670][ T6259] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.928193][ T5610] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 141.206722][ T6272] loop2: detected capacity change from 0 to 256 [ 141.399782][ T6278] IPVS: length: 139 != 5347067864 [ 141.682771][ T5888] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 141.810591][ T5888] usb 5-1: device descriptor read/64, error -71 [ 142.108755][ T6287] loop1: detected capacity change from 0 to 32768 [ 142.130679][ T6287] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.127 (6287) [ 142.169319][ T6287] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 142.169352][ T6287] BTRFS info (device loop1): using sha256 checksum algorithm [ 142.260690][ T5888] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 142.272022][ T32] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 142.317101][ T6287] BTRFS info (device loop1): enabling ssd optimizations [ 142.317125][ T6287] BTRFS info (device loop1): turning on sync discard [ 142.317142][ T6287] BTRFS info (device loop1): enabling free space tree [ 142.317172][ T6287] BTRFS info (device loop1): use zlib compression, level 3 [ 142.430618][ T32] usb 3-1: Using ep0 maxpacket: 8 [ 142.432707][ T32] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 142.432730][ T32] usb 3-1: config 0 has no interface number 0 [ 142.432772][ T32] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 142.432812][ T32] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 142.432834][ T32] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.446279][ T32] usb 3-1: config 0 descriptor?? [ 142.463338][ T32] iowarrior 3-1:0.1: no interrupt-in endpoint found [ 142.615767][ T5888] usb 5-1: device descriptor read/64, error -71 [ 142.724725][ T5888] usb usb5-port1: attempt power cycle [ 142.746851][ T37] usb 3-1: USB disconnect, device number 4 [ 142.783768][ T5610] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 143.832113][ T5888] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 143.851074][ T5888] usb 5-1: device descriptor read/8, error -71 [ 144.049741][ T6317] netlink: 12 bytes leftover after parsing attributes in process `syz.2.133'. [ 144.049784][ T6317] netlink: 12 bytes leftover after parsing attributes in process `syz.2.133'. [ 144.411937][ T5888] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 144.591785][ T6326] FAULT_INJECTION: forcing a failure. [ 144.591785][ T6326] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 144.591825][ T6326] CPU: 1 UID: 0 PID: 6326 Comm: syz.3.136 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 144.591846][ T6326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 144.591856][ T6326] Call Trace: [ 144.591864][ T6326] [ 144.591872][ T6326] dump_stack_lvl+0xe8/0x150 [ 144.591897][ T6326] should_fail_ex+0x467/0x600 [ 144.591924][ T6326] _copy_to_user+0x31/0xb0 [ 144.591951][ T6326] simple_read_from_buffer+0xe1/0x170 [ 144.591978][ T6326] proc_fail_nth_read+0x1be/0x230 [ 144.592000][ T6326] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 144.592023][ T6326] ? rw_verify_area+0x250/0x4d0 [ 144.592048][ T6326] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 144.592065][ T6326] vfs_read+0x219/0xa90 [ 144.592094][ T6326] ? __pfx_vfs_read+0x10/0x10 [ 144.592117][ T6326] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 144.592140][ T6326] ? lockdep_hardirqs_on+0x7a/0x110 [ 144.592161][ T6326] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 144.592184][ T6326] ? mutex_lock_nested+0x152/0x1d0 [ 144.592200][ T6326] ? fdget_pos+0x252/0x320 [ 144.592228][ T6326] ksys_read+0x156/0x270 [ 144.592259][ T6326] ? __pfx_ksys_read+0x10/0x10 [ 144.592286][ T6326] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.592306][ T6326] do_syscall_64+0x174/0x580 [ 144.592328][ T6326] ? trace_irq_disable+0x3b/0x140 [ 144.592351][ T6326] ? clear_bhb_loop+0x40/0x90 [ 144.592373][ T6326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.592391][ T6326] RIP: 0033:0x7f88582cd68e [ 144.592413][ T6326] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 144.592427][ T6326] RSP: 002b:00007f885655dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 144.592454][ T6326] RAX: ffffffffffffffda RBX: 00007f885655e6c0 RCX: 00007f88582cd68e [ 144.592467][ T6326] RDX: 000000000000000f RSI: 00007f885655e0a0 RDI: 0000000000000006 [ 144.592478][ T6326] RBP: 00007f885655e090 R08: 0000000000000000 R09: 0000000000000000 [ 144.592489][ T6326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.592500][ T6326] R13: 00007f8858586038 R14: 00007f8858585fa0 R15: 00007ffd84668308 [ 144.592528][ T6326] [ 144.605653][ T5888] usb 5-1: device descriptor read/8, error -71 [ 144.712283][ T5888] usb usb5-port1: unable to enumerate USB device [ 144.963726][ T6332] netlink: 'syz.1.138': attribute type 20 has an invalid length. [ 144.963759][ T6332] IPv6: NLM_F_CREATE should be specified when creating new route [ 144.998349][ T6335] netlink: 'syz.1.138': attribute type 20 has an invalid length. [ 145.440512][ T5730] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 146.537362][ T5730] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 146.537380][ T5730] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 146.537390][ T5730] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 146.537400][ T5730] usb 5-1: config 220 has no interface number 2 [ 146.537436][ T5730] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 146.537450][ T5730] usb 5-1: config 220 interface 0 has no altsetting 0 [ 146.537459][ T5730] usb 5-1: config 220 interface 76 has no altsetting 0 [ 146.537469][ T5730] usb 5-1: config 220 interface 1 has no altsetting 0 [ 146.539183][ T5730] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 146.539199][ T5730] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.539209][ T5730] usb 5-1: Product: syz [ 146.539216][ T5730] usb 5-1: Manufacturer: syz [ 146.539223][ T5730] usb 5-1: SerialNumber: syz [ 147.325427][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 147.382850][ T5730] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 147.382881][ T5730] uvcvideo 5-1:220.0: No valid video chain found. [ 147.382994][ T5730] usb 5-1: selecting invalid altsetting 0 [ 147.571467][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 147.646927][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 147.647953][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 147.647975][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 147.672558][ T9] usb 4-1: string descriptor 0 read error: -22 [ 147.672645][ T9] usb 4-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 147.672657][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.856034][ T5730] usb 5-1: selecting invalid altsetting 0 [ 147.856057][ T5730] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 147.890976][ T9] usb 4-1: cannot find UAC_HEADER [ 147.925274][ T5730] usb 5-1: USB disconnect, device number 9 [ 148.093713][ T10] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 148.222628][ T10] usb 2-1: device descriptor read/64, error -71 [ 148.237662][ T6361] loop4: detected capacity change from 0 to 4096 [ 148.252057][ T6363] loop0: detected capacity change from 0 to 128 [ 148.259139][ T6361] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512). [ 148.260745][ T9] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 148.276013][ T9] usb 4-1: USB disconnect, device number 7 [ 148.920783][ T10] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 149.053591][ T10] usb 2-1: device descriptor read/64, error -71 [ 149.134515][ T6367] binder: 6365:6367 ioctl 4018620d 0 returned -22 [ 149.169482][ T10] usb usb2-port1: attempt power cycle [ 149.228944][ T6370] netlink: 64 bytes leftover after parsing attributes in process `syz.2.150'. [ 149.560469][ T10] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 149.571098][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 149.581247][ T10] usb 2-1: device descriptor read/8, error -71 [ 149.682751][ T6377] trusted_key: encrypted_key: insufficient parameters specified [ 149.740921][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 149.795840][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 149.795873][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 149.795895][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 149.795908][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 149.795932][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 149.795944][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.842121][ T10] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 149.865657][ T10] usb 2-1: device descriptor read/8, error -71 [ 149.976791][ T10] usb usb2-port1: unable to enumerate USB device [ 150.030599][ T9] usb 3-1: GET_CAPABILITIES returned 0 [ 150.030643][ T9] usbtmc 3-1:16.0: can't read capabilities [ 150.266757][ T5888] usb 3-1: USB disconnect, device number 5 [ 150.480644][ T5745] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 150.643903][ T5745] usb 5-1: Using ep0 maxpacket: 8 [ 150.647847][ T5745] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 150.647904][ T5745] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 150.647927][ T5745] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 150.647951][ T5745] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 150.647974][ T5745] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 150.648015][ T5745] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 150.648038][ T5745] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.879105][ T5745] usb 5-1: GET_CAPABILITIES returned 0 [ 150.879155][ T5745] usbtmc 5-1:16.0: can't read capabilities [ 151.114897][ T6395] loop0: detected capacity change from 0 to 256 [ 151.157339][ T5745] usb 5-1: USB disconnect, device number 10 [ 151.206300][ T6395] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 151.413275][ T6402] loop2: detected capacity change from 0 to 128 [ 151.590603][ T5616] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 152.514370][ T5616] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x92, changing to 0x82 [ 152.514423][ T5616] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 152.514445][ T5616] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 152.514468][ T5616] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 152.518989][ T5616] usb 1-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=9e.7f [ 152.519015][ T5616] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.519033][ T5616] usb 1-1: Product: syz [ 152.519047][ T5616] usb 1-1: Manufacturer: syz [ 152.519060][ T5616] usb 1-1: SerialNumber: syz [ 152.541004][ T5616] usb 1-1: config 0 descriptor?? [ 152.568082][ T5616] redrat3 1-1:0.0: Couldn't find all endpoints [ 152.816853][ T5888] usb 1-1: USB disconnect, device number 5 [ 152.998003][ T6414] kvm: kvm [6413]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 153.043773][ T6417] loop3: detected capacity change from 0 to 64 [ 153.075368][ T6417] bfs: Unknown parameter '' [ 153.616010][ T6434] loop0: detected capacity change from 0 to 256 [ 153.682716][ T6434] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 153.756620][ T6439] exFAT-fs (loop0): start_clu is invalid cluster(0xffffffff) [ 154.599357][ T6442] loop1: detected capacity change from 0 to 4096 [ 154.612557][ T6442] EXT4-fs: Ignoring removed nomblk_io_submit option [ 154.683960][ T6442] EXT4-fs (loop1): Test dummy encryption mode enabled [ 154.731854][ T6442] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 154.732020][ T6442] System zones: 0-5 [ 155.796296][ T6442] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.207140][ T6470] netlink: 28 bytes leftover after parsing attributes in process `syz.0.180'. [ 157.461895][ T6475] loop0: detected capacity change from 0 to 8 [ 157.688412][ T5610] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.830884][ T6475] SQUASHFS error: lzo decompression failed, data probably corrupt [ 157.830912][ T6475] SQUASHFS error: Failed to read block 0x91: -5 [ 157.830926][ T6475] SQUASHFS error: Unable to read metadata cache entry [8f] [ 157.830941][ T6475] SQUASHFS error: Unable to read inode 0x11f [ 158.064840][ T6506] capability: warning: `syz.0.184' uses 32-bit capabilities (legacy support in use) [ 158.077967][ T6506] Zero length message leads to an empty skb [ 159.262212][ T5730] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 159.276049][ T6519] 9p: Bad value for 'wfdno' [ 159.331932][ T5745] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 159.632218][ T5730] usb 2-1: Using ep0 maxpacket: 32 [ 159.637103][ T5730] usb 2-1: config index 0 descriptor too short (expected 6918, got 863) [ 159.637129][ T5730] usb 2-1: config 12 has too many interfaces: 45, using maximum allowed: 32 [ 159.637149][ T5730] usb 2-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 159.637168][ T5730] usb 2-1: config 12 has 0 interfaces, different from the descriptor's value: 45 [ 159.643689][ T5730] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 159.643718][ T5730] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.643737][ T5730] usb 2-1: Product: syz [ 159.643752][ T5730] usb 2-1: Manufacturer: syz [ 159.643766][ T5730] usb 2-1: SerialNumber: syz [ 161.813225][ T5745] usb 3-1: device descriptor read/all, error -71 [ 162.137446][ T5730] usb 2-1: can't set config #12, error -71 [ 162.140668][ T5730] usb 2-1: USB disconnect, device number 13 [ 163.697993][ T6541] nfs4: Unknown parameter 'øÿÿÿ' [ 164.065490][ T6548] netlink: 28 bytes leftover after parsing attributes in process `syz.0.195'. [ 164.810398][ T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 164.900588][ T5745] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 164.961618][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 164.964504][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 164.964541][ T9] usb 5-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00 [ 164.964564][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.991444][ T9] usb 5-1: config 0 descriptor?? [ 165.073032][ T5745] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 165.073062][ T5745] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.098323][ T5745] usb 2-1: config 0 descriptor?? [ 165.132076][ T5745] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 167.338897][ T5745] usb 2-1: USB disconnect, device number 14 [ 168.684722][ T9] uclogic 0003:28BD:0075.0001: interface is invalid, ignoring [ 168.697279][ T9] usb 5-1: USB disconnect, device number 11 [ 170.277098][ T6588] loop1: detected capacity change from 0 to 4096 [ 170.529194][ T6597] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 170.649143][ T6588] netlink: 64 bytes leftover after parsing attributes in process `syz.1.209'. [ 170.792375][ T6600] macvtap1: entered promiscuous mode [ 170.799035][ T6600] macvtap1: entered allmulticast mode [ 170.799059][ T6600] veth1_vlan: entered allmulticast mode [ 171.160671][ T61] block nbd0: Receive control failed (result -32) [ 171.178990][ T6612] loop2: detected capacity change from 0 to 32768 [ 171.185466][ T6612] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.216 (6612) [ 171.311472][ T9] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 171.375573][ T6612] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 171.375606][ T6612] BTRFS info (device loop2): using crc32c checksum algorithm [ 172.236649][ T9] usb 5-1: not running at top speed; connect to a high speed hub [ 172.237784][ T9] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 245, changing to 4 [ 172.237813][ T9] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 172.237848][ T9] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 5035, setting to 1023 [ 172.241718][ T9] usb 5-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice= 0.40 [ 172.241745][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.241763][ T9] usb 5-1: Manufacturer: ൦廈è·ê»®æž¬é£Žè£ëƒ™ä£—㸠냅䜬⇔â²éµ‡é®è¡‘警篭è¨ãˆ¶î¶‚çƒ¾â©¤ë„ˆèŽ“æ…«ã§†éª§â¨¯á¬«çž¦ç¨ªé‚¾êƒæ¬í”™î¨† [ 172.241782][ T9] usb 5-1: SerialNumber: syz [ 172.259189][ T6612] BTRFS info (device loop2): setting nodatasum [ 172.259214][ T6612] BTRFS info (device loop2): enabling ssd optimizations [ 172.259230][ T6612] BTRFS info (device loop2): disabling tree log [ 172.259244][ T6612] BTRFS info (device loop2): turning on sync discard [ 172.259259][ T6612] BTRFS info (device loop2): enabling free space tree [ 172.259276][ T6612] BTRFS info (device loop2): max_inline set to 0 [ 174.011257][ T9] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 174.061320][ T6612] BTRFS warning (device loop2): discard failed for extent [5267456, 5271551]: errno=-512 unknown [ 174.066534][ T6612] BTRFS warning (device loop2): discard failed for extent [5332992, 5345279]: errno=-512 unknown [ 174.067137][ T6612] BTRFS info (device loop2 state M): max_inline set to 0 [ 174.171770][ T9] usb 5-1: 2:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 174.171799][ T9] usb 5-1: found format II with max.bitrate = 8, frame size=32769 [ 174.171823][ T9] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 174.177316][ T9] usb 5-1: unit 1 not found! [ 174.206806][ T5618] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 174.410437][ T5730] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 174.414547][ T9] usb 5-1: USB disconnect, device number 12 [ 174.570416][ T5730] usb 2-1: Using ep0 maxpacket: 8 [ 174.586029][ T5730] usb 2-1: too many endpoints for config 0 interface 0 altsetting 255: 254, using maximum allowed: 30 [ 174.586110][ T5730] usb 2-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 174.586136][ T5730] usb 2-1: config 0 interface 0 has no altsetting 0 [ 174.586169][ T5730] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 174.586189][ T5730] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.643648][ T5730] usb 2-1: config 0 descriptor?? [ 175.037751][ T6657] loop3: detected capacity change from 0 to 32768 [ 175.088694][ T6657] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.227 (6657) [ 175.146246][ T6657] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 175.146278][ T6657] BTRFS info (device loop3): using crc32c checksum algorithm [ 176.894587][ T5730] usbhid 2-1:0.0: can't add hid device: -71 [ 176.894700][ T5730] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 177.147664][ T6657] BTRFS info (device loop3): setting nodatasum [ 177.147688][ T6657] BTRFS info (device loop3): enabling ssd optimizations [ 177.147705][ T6657] BTRFS info (device loop3): disabling tree log [ 177.147720][ T6657] BTRFS info (device loop3): turning on sync discard [ 177.147736][ T6657] BTRFS info (device loop3): enabling free space tree [ 177.147753][ T6657] BTRFS info (device loop3): max_inline set to 0 [ 177.188553][ T5730] usb 2-1: USB disconnect, device number 15 [ 178.402903][ T5874] udevd[5874]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 178.409216][ T6657] BTRFS warning (device loop3): discard failed for extent [5267456, 5271551]: errno=-512 unknown [ 178.409864][ T6657] BTRFS warning (device loop3): discard failed for extent [5332992, 5345279]: errno=-512 unknown [ 178.410022][ T6657] BTRFS info (device loop3 state M): max_inline set to 0 [ 178.633171][ T5617] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 178.801965][ T6702] loop2: detected capacity change from 0 to 128 [ 180.174037][ T32] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 180.245726][ T6718] netlink: 'syz.1.238': attribute type 4 has an invalid length. [ 180.245748][ T6718] netlink: 152 bytes leftover after parsing attributes in process `syz.1.238'. [ 180.888476][ T32] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 180.888506][ T32] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.921013][ T32] usb 1-1: config 0 descriptor?? [ 180.949170][ T32] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 181.062543][ T6718] .`: renamed from bond0 (while UP) [ 183.103767][ T6751] loop1: detected capacity change from 0 to 1024 [ 183.121388][ T37] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 183.284597][ T37] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 183.284627][ T37] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.296478][ T32] usb 1-1: USB disconnect, device number 6 [ 183.357929][ T37] usb 3-1: config 0 descriptor?? [ 183.407633][ T37] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 183.810724][ T6754] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 183.981842][ T6751] loop1: detected capacity change from 0 to 136 [ 183.982545][ T6751] iso9660: Unknown parameter 'xœìÝOkçðï¬×²å‚½IìÄ”€E mSQ{Wë¦n/uK):„(ôÂ^G"k%H›¢„Òªÿ¯} éAo ·Üé!§öÜ“®¡Ð»n.3;+­#E‘bÅ»Š?xæyžyæyæ™ßÎÌî¬ੵ8ŸæfŠ' [ 184.029364][ T6751] kAFS: No cell specified [ 184.312048][ T32] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 184.501091][ T32] usb 4-1: Using ep0 maxpacket: 16 [ 184.512463][ T32] usb 4-1: unable to get BOS descriptor or descriptor too short [ 184.515790][ T32] usb 4-1: config 64 has an invalid interface number: 61 but max is 0 [ 184.515814][ T32] usb 4-1: config 64 has no interface number 0 [ 184.515842][ T32] usb 4-1: too many endpoints for config 64 interface 61 altsetting 127: 220, using maximum allowed: 30 [ 184.515934][ T32] usb 4-1: config 64 interface 61 altsetting 127 has 0 endpoint descriptors, different from the interface descriptor's value: 220 [ 184.515960][ T32] usb 4-1: config 64 interface 61 has no altsetting 0 [ 184.536704][ T32] usb 4-1: New USB device found, idVendor=0ab4, idProduct=0010, bcdDevice=a6.3b [ 184.536733][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.536752][ T32] usb 4-1: Product: syz [ 184.536765][ T32] usb 4-1: Manufacturer: syz [ 184.536778][ T32] usb 4-1: SerialNumber: syz [ 185.085337][ T37] usb 3-1: USB disconnect, device number 8 [ 185.089407][ T32] usb 4-1: USB disconnect, device number 8 [ 187.664015][ T6795] faux_driver vgem: [drm] Unknown color mode 3; guessing buffer size. [ 187.700459][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 187.756492][ T6797] process 'syz.2.261' launched './file0' with NULL argv: empty string added [ 187.778646][ T38] kauditd_printk_skb: 10 callbacks suppressed [ 187.778662][ T38] audit: type=1326 audit(1781965793.258:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6796 comm="syz.2.261" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8924eece59 code=0x7ffc0000 [ 187.778702][ T38] audit: type=1326 audit(1781965793.258:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6796 comm="syz.2.261" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8924eece59 code=0x7ffc0000 [ 187.778738][ T38] audit: type=1326 audit(1781965793.258:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6796 comm="syz.2.261" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8924eece59 code=0x7ffc0000 [ 187.780031][ T38] audit: type=1326 audit(1781965793.258:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6796 comm="syz.2.261" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f8924eece59 code=0x7ffc0000 [ 187.780797][ T38] audit: type=1326 audit(1781965793.258:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6796 comm="syz.2.261" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8924eece59 code=0x7ffc0000 [ 187.782917][ T38] audit: type=1326 audit(1781965793.268:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6796 comm="syz.2.261" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8924eece59 code=0x7ffc0000 [ 187.782960][ T38] audit: type=1326 audit(1781965793.268:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6796 comm="syz.2.261" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8924eece59 code=0x7ffc0000 [ 187.809253][ T38] audit: type=1326 audit(1781965793.268:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6796 comm="syz.2.261" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f8924eece59 code=0x7ffc0000 [ 187.809302][ T38] audit: type=1326 audit(1781965793.288:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6796 comm="syz.2.261" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8924eece59 code=0x7ffc0000 [ 187.818162][ T38] audit: type=1326 audit(1781965793.298:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6796 comm="syz.2.261" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8924eece59 code=0x7ffc0000 [ 187.875009][ T5616] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 187.960534][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 187.960564][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.072679][ T5616] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 188.072707][ T5616] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.106848][ T9] usb 4-1: config 0 descriptor?? [ 188.112638][ T5616] usb 2-1: config 0 descriptor?? [ 188.133190][ T9] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 188.215297][ T5616] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 188.216105][ T6797] loop2: detected capacity change from 0 to 4096 [ 188.259762][ T6797] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 189.004583][ T5616] usb 2-1: USB disconnect, device number 16 [ 189.182191][ T6797] ntfs3(loop2): ino=3, ntfs_set_state failed, -22. [ 189.182219][ T6797] ntfs3(loop2): Failed to initialize $Extend/$Reparse. [ 189.265497][ T6479] ntfs3(loop2): ino=3, ntfs3_write_inode failed, -22. [ 189.288478][ T5618] ntfs3(loop2): ino=3, ntfs_set_state failed, -22. [ 189.288521][ T5618] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 189.288537][ T5618] ntfs3(loop2): ino=3, ntfs_set_state failed, -22. [ 189.314216][ T3960] ntfs3(loop2): ino=3, ntfs3_write_inode failed, -22. [ 189.355028][ T6799] loop4: detected capacity change from 0 to 4096 [ 190.646094][ T9] usb 4-1: USB disconnect, device number 9 [ 191.201913][ T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 191.540106][ T6823] loop3: detected capacity change from 0 to 32768 [ 191.547715][ T6823] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.269 (6823) [ 191.564804][ T6823] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 191.564836][ T6823] BTRFS info (device loop3): using crc32c checksum algorithm [ 191.764217][ T6823] BTRFS info (device loop3): setting nodatasum [ 191.764241][ T6823] BTRFS info (device loop3): enabling ssd optimizations [ 191.764259][ T6823] BTRFS info (device loop3): disabling tree log [ 191.764274][ T6823] BTRFS info (device loop3): turning on sync discard [ 191.764288][ T6823] BTRFS info (device loop3): enabling free space tree [ 191.764304][ T6823] BTRFS info (device loop3): max_inline set to 0 [ 191.805097][ T9] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 191.805126][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.805145][ T9] usb 2-1: Product: syz [ 191.805158][ T9] usb 2-1: Manufacturer: syz [ 191.805170][ T9] usb 2-1: SerialNumber: syz [ 191.856126][ T9] usb 2-1: config 0 descriptor?? [ 193.106771][ T6823] BTRFS info (device loop3 state M): max_inline set to 0 [ 193.390079][ T9] usb 2-1: Firmware: major: 210, minor: 0, hardware type: ATUSB (0) [ 194.197067][ T6821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.197634][ T6821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.259359][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.259978][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.392362][ T9] usb 2-1: failed to fetch extended address, random address set [ 194.587621][ T9] usb 2-1: USB disconnect, device number 17 [ 194.755500][ T32] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 194.922782][ T32] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 194.922812][ T32] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.968376][ T32] usb 1-1: config 0 descriptor?? [ 195.052141][ T32] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 195.058114][ T6863] loop2: detected capacity change from 0 to 128 [ 196.063054][ T6865] netlink: 'syz.1.278': attribute type 21 has an invalid length. [ 196.063075][ T6865] netlink: 44 bytes leftover after parsing attributes in process `syz.1.278'. [ 197.061030][ T32] usb 1-1: USB disconnect, device number 7 [ 197.820109][ T5617] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 198.473801][ T6880] loop2: detected capacity change from 0 to 32768 [ 198.659772][ T6880] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.283 (6880) [ 199.156983][ T38] kauditd_printk_skb: 48 callbacks suppressed [ 199.156999][ T38] audit: type=1326 audit(1781965804.638:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6894 comm="syz.4.288" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7dcd7ce59 code=0x7ffc0000 [ 199.157041][ T38] audit: type=1326 audit(1781965804.638:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6894 comm="syz.4.288" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7dcd7ce59 code=0x7ffc0000 [ 199.157077][ T38] audit: type=1326 audit(1781965804.638:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6894 comm="syz.4.288" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7dcd7ce59 code=0x7ffc0000 [ 199.158382][ T38] audit: type=1326 audit(1781965804.638:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6894 comm="syz.4.288" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7fc7dcd7ce59 code=0x7ffc0000 [ 199.158438][ T38] audit: type=1326 audit(1781965804.638:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6894 comm="syz.4.288" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7dcd7ce59 code=0x7ffc0000 [ 199.158475][ T38] audit: type=1326 audit(1781965804.638:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6894 comm="syz.4.288" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7dcd7ce59 code=0x7ffc0000 [ 199.158827][ T38] audit: type=1326 audit(1781965804.638:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6894 comm="syz.4.288" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7dcd7ce59 code=0x7ffc0000 [ 199.184140][ T38] audit: type=1326 audit(1781965804.668:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6894 comm="syz.4.288" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7dcd7ce59 code=0x7ffc0000 [ 199.184172][ T38] audit: type=1326 audit(1781965804.668:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6894 comm="syz.4.288" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fc7dcd7ce59 code=0x7ffc0000 [ 199.184194][ T38] audit: type=1326 audit(1781965804.668:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6894 comm="syz.4.288" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7dcd7ce59 code=0x7ffc0000 [ 199.422206][ T6880] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 199.422237][ T6880] BTRFS info (device loop2): using crc32c checksum algorithm [ 201.382777][ T6880] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 201.383404][ T6880] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 201.587699][ T6880] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 201.587990][ T6880] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 201.588268][ T6880] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 201.588531][ T6880] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 201.588800][ T6880] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 201.589064][ T6880] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 201.589338][ T6880] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 201.589601][ T6880] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 201.623912][ T6880] BTRFS error (device loop2): open_ctree failed: -12 [ 202.090436][ T6922] input: syz0 as /devices/virtual/input/input5 [ 203.690493][ T5888] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 203.823515][ T10] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 203.860410][ T5888] usb 5-1: Using ep0 maxpacket: 8 [ 203.878427][ T5888] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 203.878459][ T5888] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 203.878479][ T5888] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 203.878498][ T5888] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 203.878518][ T5888] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 203.878553][ T5888] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 203.878574][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.029338][ T5888] usb 5-1: config 0 descriptor?? [ 204.042076][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 204.042095][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.072184][ T10] usb 1-1: config 0 descriptor?? [ 204.124181][ T10] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 204.206200][ T37] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 204.392268][ T37] usb 4-1: Using ep0 maxpacket: 32 [ 204.706078][ T4925] Bluetooth: hci5: urb ffff888021b0b500 submission failed (90) [ 204.771612][ T37] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 204.771639][ T37] usb 4-1: config 0 has no interface number 0 [ 204.821773][ T5888] usb 5-1: USB disconnect, device number 13 [ 204.870029][ T37] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 204.870073][ T37] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.870092][ T37] usb 4-1: Product: syz [ 204.870105][ T37] usb 4-1: Manufacturer: syz [ 204.870119][ T37] usb 4-1: SerialNumber: syz [ 205.166596][ T37] usb 4-1: config 0 descriptor?? [ 205.598959][ T37] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 205.598988][ T37] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 205.921368][ T10] usb 1-1: USB disconnect, device number 8 [ 206.204559][ T6956] loop2: detected capacity change from 0 to 128 [ 206.537252][ T38] kauditd_printk_skb: 152 callbacks suppressed [ 206.537269][ T38] audit: type=1326 audit(1781965812.018:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6964 comm="syz.4.303" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7dcd7ce59 code=0x7ffc0000 [ 206.543490][ T38] audit: type=1326 audit(1781965812.018:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6964 comm="syz.4.303" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7dcd7ce59 code=0x7ffc0000 [ 206.596630][ T38] audit: type=1326 audit(1781965812.078:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6964 comm="syz.4.303" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7dcd7ce59 code=0x7ffc0000 [ 206.606033][ T38] audit: type=1326 audit(1781965812.088:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6964 comm="syz.4.303" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7dcd7ce59 code=0x7ffc0000 [ 206.615381][ T38] audit: type=1326 audit(1781965812.088:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6964 comm="syz.4.303" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fc7dcd7ce59 code=0x7ffc0000 [ 206.630535][ T4925] Bluetooth: hci2: command 0x0406 tx timeout [ 206.630724][ T4925] Bluetooth: hci1: command 0x0406 tx timeout [ 206.759988][ T38] audit: type=1326 audit(1781965812.238:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6964 comm="syz.4.303" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc7dcd3d68e code=0x7ffc0000 [ 206.787912][ T38] audit: type=1326 audit(1781965812.268:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6964 comm="syz.4.303" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc7dcd3d68e code=0x7ffc0000 [ 206.816698][ T38] audit: type=1326 audit(1781965812.298:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6964 comm="syz.4.303" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc7dcd3d68e code=0x7ffc0000 [ 206.817968][ T38] audit: type=1326 audit(1781965812.298:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6964 comm="syz.4.303" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc7dcd3d68e code=0x7ffc0000 [ 206.836822][ T38] audit: type=1326 audit(1781965812.318:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6964 comm="syz.4.303" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc7dcd3d68e code=0x7ffc0000 [ 207.529297][ T6941] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 207.664042][ T37] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 207.664600][ T37] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 207.752985][ T6972] loop0: detected capacity change from 0 to 512 [ 207.768839][ T37] usb 4-1: USB disconnect, device number 10 [ 207.829779][ T6972] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 207.830083][ T6972] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (52406!=33349) [ 207.830105][ T6972] EXT4-fs (loop0): group descriptors corrupted! [ 208.125270][ T6972] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.504293][ T6987] loop3: detected capacity change from 0 to 128 [ 208.540826][ T6968] loop1: detected capacity change from 0 to 32768 [ 208.623248][ T6968] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.304 (6968) [ 209.127902][ T6968] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 209.127947][ T6968] BTRFS info (device loop1): using crc32c checksum algorithm [ 209.687764][ T6968] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 209.689758][ T6968] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 209.689924][ T6968] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 209.879761][ T6968] BTRFS error (device loop1): open_ctree failed: -12 [ 212.209759][ T38] kauditd_printk_skb: 6 callbacks suppressed [ 212.209771][ T38] audit: type=1326 audit(1781965817.688:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7027 comm="syz.0.318" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57d9f3ce59 code=0x7ffc0000 [ 212.230734][ T38] audit: type=1326 audit(1781965817.698:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7027 comm="syz.0.318" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57d9f3ce59 code=0x7ffc0000 [ 212.230765][ T38] audit: type=1326 audit(1781965817.718:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7027 comm="syz.0.318" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f57d9f3ce59 code=0x7ffc0000 [ 212.230786][ T38] audit: type=1326 audit(1781965817.718:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7027 comm="syz.0.318" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57d9f3ce59 code=0x7ffc0000 [ 212.255445][ T38] audit: type=1326 audit(1781965817.738:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7027 comm="syz.0.318" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57d9f3ce59 code=0x7ffc0000 [ 212.255620][ T38] audit: type=1326 audit(1781965817.738:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7027 comm="syz.0.318" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57d9f3ce59 code=0x7ffc0000 [ 212.255948][ T38] audit: type=1326 audit(1781965817.738:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7027 comm="syz.0.318" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57d9f3ce59 code=0x7ffc0000 [ 212.256045][ T38] audit: type=1326 audit(1781965817.738:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7027 comm="syz.0.318" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57d9f3ce59 code=0x7ffc0000 [ 212.256218][ T38] audit: type=1326 audit(1781965817.738:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7027 comm="syz.0.318" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f57d9f3ce59 code=0x7ffc0000 [ 212.304051][ T38] audit: type=1326 audit(1781965817.788:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7027 comm="syz.0.318" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57d9f3ce59 code=0x7ffc0000 [ 212.620611][ T32] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 212.791135][ T32] usb 4-1: Using ep0 maxpacket: 32 [ 212.793606][ T32] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 212.793630][ T32] usb 4-1: config 0 has no interface number 0 [ 212.793670][ T32] usb 4-1: config 0 interface 12 has no altsetting 0 [ 212.796671][ T32] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 212.796697][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.796716][ T32] usb 4-1: Product: syz [ 212.796730][ T32] usb 4-1: Manufacturer: syz [ 212.796742][ T32] usb 4-1: SerialNumber: syz [ 212.819988][ T32] usb 4-1: config 0 descriptor?? [ 212.966481][ T7022] loop1: detected capacity change from 0 to 32768 [ 213.090129][ T32] f81534 4-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71 [ 213.090183][ T32] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 213.090198][ T32] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 213.090640][ T32] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 213.139496][ T32] usb 4-1: USB disconnect, device number 11 [ 214.798904][ T7047] loop0: detected capacity change from 0 to 128 [ 214.969121][ T7022] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 216.109501][ T7022] JBD2: Ignoring recovery information on journal [ 217.269092][ T7022] JBD2: journal reset failed [ 217.269107][ T7022] (syz.1.316,7022,1):ocfs2_journal_load:1163 ERROR: Failed to load journal! [ 217.269131][ T7022] (syz.1.316,7022,1):ocfs2_check_volume:2373 ERROR: ocfs2 journal load failed! -4 [ 218.372762][ T7073] sctp: [Deprecated]: syz.3.333 (pid 7073) Use of int in maxseg socket option. [ 218.372762][ T7073] Use struct sctp_assoc_value instead [ 220.006757][ T38] kauditd_printk_skb: 22 callbacks suppressed [ 220.006774][ T38] audit: type=1326 audit(1781965825.488:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7094 comm="syz.1.341" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f509bdace59 code=0x7ffc0000 [ 220.006817][ T38] audit: type=1326 audit(1781965825.488:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7094 comm="syz.1.341" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f509bdace59 code=0x7ffc0000 [ 220.006854][ T38] audit: type=1326 audit(1781965825.488:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7094 comm="syz.1.341" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f509bdace59 code=0x7ffc0000 [ 220.022482][ T38] audit: type=1326 audit(1781965825.488:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7094 comm="syz.1.341" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f509bdace59 code=0x7ffc0000 [ 220.022527][ T38] audit: type=1326 audit(1781965825.508:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7094 comm="syz.1.341" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f509bdace59 code=0x7ffc0000 [ 220.022562][ T38] audit: type=1326 audit(1781965825.508:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7094 comm="syz.1.341" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f509bdace59 code=0x7ffc0000 [ 220.022599][ T38] audit: type=1326 audit(1781965825.508:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7094 comm="syz.1.341" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f509bdace59 code=0x7ffc0000 [ 220.022633][ T38] audit: type=1326 audit(1781965825.508:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7094 comm="syz.1.341" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f509bdace59 code=0x7ffc0000 [ 220.071990][ T38] audit: type=1326 audit(1781965825.558:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7094 comm="syz.1.341" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f509bdace59 code=0x7ffc0000 [ 220.072288][ T38] audit: type=1326 audit(1781965825.558:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7094 comm="syz.1.341" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f509bdace59 code=0x7ffc0000 [ 220.270490][ T5715] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 221.292079][ T5715] usb 4-1: Using ep0 maxpacket: 32 [ 221.297296][ T5715] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 221.297322][ T5715] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 221.297341][ T5715] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 221.297396][ T5715] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 221.297417][ T5715] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 221.297439][ T5715] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 221.297490][ T5715] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 221.297512][ T5715] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.414059][ T5715] usb 4-1: config 0 descriptor?? [ 221.490679][ T37] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 221.677259][ T37] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 221.677293][ T37] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 221.677330][ T37] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 221.677351][ T37] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.076285][ T5715] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 12 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 222.186647][ T7098] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 222.233647][ T37] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 222.337909][ T5715] usb 4-1: USB disconnect, device number 12 [ 222.569196][ T5715] usblp0: removed [ 223.906667][ T5715] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 225.055002][ T37] usb 3-1: USB disconnect, device number 9 [ 225.681750][ T38] kauditd_printk_skb: 128 callbacks suppressed [ 225.681767][ T38] audit: type=1326 audit(1781965831.168:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7136 comm="syz.3.355" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f885830ce59 code=0x7ffc0000 [ 225.684085][ T38] audit: type=1326 audit(1781965831.168:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7136 comm="syz.3.355" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f885830ce59 code=0x7ffc0000 [ 225.684213][ T38] audit: type=1326 audit(1781965831.168:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7136 comm="syz.3.355" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f885830ce59 code=0x7ffc0000 [ 225.684435][ T38] audit: type=1326 audit(1781965831.168:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7136 comm="syz.3.355" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f885830ce59 code=0x7ffc0000 [ 225.684678][ T38] audit: type=1326 audit(1781965831.168:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7136 comm="syz.3.355" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f885830ce59 code=0x7ffc0000 [ 225.684895][ T38] audit: type=1326 audit(1781965831.168:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7136 comm="syz.3.355" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f885830ce59 code=0x7ffc0000 [ 225.685033][ T38] audit: type=1326 audit(1781965831.168:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7136 comm="syz.3.355" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f885830ce59 code=0x7ffc0000 [ 225.686771][ T38] audit: type=1326 audit(1781965831.168:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7136 comm="syz.3.355" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f885830ce59 code=0x7ffc0000 [ 225.744142][ T38] audit: type=1326 audit(1781965831.218:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7136 comm="syz.3.355" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f88582cd68e code=0x7ffc0000 [ 225.744187][ T38] audit: type=1326 audit(1781965831.218:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7136 comm="syz.3.355" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f88582cd68e code=0x7ffc0000 [ 225.916445][ T37] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 226.070579][ T37] usb 3-1: device descriptor read/64, error -71 [ 226.457163][ T37] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 227.152096][ T37] usb 3-1: device descriptor read/64, error -71 [ 227.261125][ T37] usb usb3-port1: attempt power cycle [ 227.736388][ T7162] loop2: detected capacity change from 0 to 32768 [ 227.783857][ T7162] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 228.028609][ T7162] XFS (loop2): Ending clean mount [ 228.057352][ T7162] XFS (loop2): Quotacheck needed: Please wait. [ 228.875474][ T7162] XFS (loop2): Quotacheck: Done. [ 230.203157][ T5715] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 230.296409][ T7176] loop1: detected capacity change from 0 to 32768 [ 230.328685][ T7176] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.367 (7176) [ 230.350446][ T5715] usb 1-1: Using ep0 maxpacket: 8 [ 230.370666][ T5715] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 230.370694][ T5715] usb 1-1: config 0 has no interface number 0 [ 230.370737][ T5715] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 230.370779][ T5715] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 230.370802][ T5715] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.424013][ T5715] usb 1-1: config 0 descriptor?? [ 230.592916][ T5618] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 230.638352][ T7176] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 230.638386][ T7176] BTRFS info (device loop1): using crc32c checksum algorithm [ 230.796429][ T5715] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 232.939071][ T7176] BTRFS error (device loop1): open_ctree failed: -4 [ 232.994050][ T32] usb 1-1: USB disconnect, device number 9 [ 234.928174][ T32] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 235.074536][ T10] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 235.477139][ T32] usb 1-1: config 0 has an invalid interface number: 3 but max is 1 [ 235.477164][ T32] usb 1-1: config 0 has an invalid interface descriptor of length 2, skipping [ 235.477182][ T32] usb 1-1: config 0 has an invalid interface number: 51 but max is 1 [ 235.477201][ T32] usb 1-1: config 0 has no interface number 0 [ 235.477216][ T32] usb 1-1: config 0 has no interface number 1 [ 235.477263][ T32] usb 1-1: config 0 interface 3 altsetting 8 bulk endpoint 0xD has invalid maxpacket 1024 [ 235.477286][ T32] usb 1-1: config 0 interface 3 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 235.477352][ T32] usb 1-1: config 0 interface 3 has no altsetting 0 [ 235.477494][ T32] usb 1-1: config 0 interface 51 has no altsetting 0 [ 235.961907][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 235.961934][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.995566][ T32] usb 1-1: New USB device found, idVendor=04da, idProduct=250d, bcdDevice=e0.08 [ 235.995604][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.995623][ T32] usb 1-1: Product: syz [ 235.995636][ T32] usb 1-1: Manufacturer: syz [ 235.995649][ T32] usb 1-1: SerialNumber: syz [ 236.048547][ T10] usb 3-1: config 0 descriptor?? [ 236.068014][ T10] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 236.069108][ T32] usb 1-1: config 0 descriptor?? [ 236.071194][ T7227] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 236.977748][ T32] usb 1-1: USB disconnect, device number 10 [ 238.105868][ T7242] loop3: detected capacity change from 0 to 32768 [ 238.147316][ T7242] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.384 (7242) [ 238.279529][ T10] usb 3-1: USB disconnect, device number 13 [ 238.479569][ T7242] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 238.479600][ T7242] BTRFS info (device loop3): using crc32c checksum algorithm [ 238.532206][ T5850] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 238.624612][ T7255] loop0: detected capacity change from 0 to 24 [ 238.645197][ T7255] romfs: bad initial checksum on dev loop0. [ 238.680828][ T5850] usb 5-1: Using ep0 maxpacket: 8 [ 238.683258][ T5850] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 238.683283][ T5850] usb 5-1: config 0 has no interface number 0 [ 238.683326][ T5850] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 238.683365][ T5850] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 238.683440][ T5850] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.723362][ T5850] usb 5-1: config 0 descriptor?? [ 238.804037][ T7259] loop1: detected capacity change from 0 to 32768 [ 238.817142][ T7259] BTRFS info: device /dev/loop1 (7:1) using temp-fsid b8bfb15b-60a6-447e-b885-cdeb62b39398 [ 238.817205][ T7259] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.390 (7259) [ 238.849357][ T7259] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 238.849397][ T7259] BTRFS info (device loop1): using crc32c checksum algorithm [ 238.978011][ T5850] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 238.997846][ T5850] usb 5-1: USB disconnect, device number 14 [ 239.345813][ T7251] bond1 (unregistering): Released all slaves [ 239.369886][ T7259] BTRFS info (device loop1): setting nodatasum [ 239.369911][ T7259] BTRFS info (device loop1): enabling ssd optimizations [ 239.369928][ T7259] BTRFS info (device loop1): disabling tree log [ 239.369943][ T7259] BTRFS info (device loop1): turning on sync discard [ 239.369959][ T7259] BTRFS info (device loop1): enabling free space tree [ 239.369976][ T7259] BTRFS info (device loop1): max_inline set to 0 [ 240.213930][ T7259] BTRFS info (device loop1 state M): max_inline set to 0 [ 240.249228][ T7242] BTRFS info (device loop3): setting nodatasum [ 240.249259][ T7242] BTRFS info (device loop3): enabling ssd optimizations [ 240.249276][ T7242] BTRFS info (device loop3): disabling tree log [ 240.249292][ T7242] BTRFS info (device loop3): turning on sync discard [ 240.249307][ T7242] BTRFS info (device loop3): enabling free space tree [ 240.249324][ T7242] BTRFS info (device loop3): max_inline set to 0 [ 240.840744][ T5617] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 241.379858][ T7309] random: crng reseeded on system resumption [ 242.536963][ T5610] BTRFS info (device loop1): last unmount of filesystem b8bfb15b-60a6-447e-b885-cdeb62b39398 [ 244.041737][ T5744] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 244.200546][ T5744] usb 5-1: Using ep0 maxpacket: 8 [ 244.202775][ T5744] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 244.202806][ T5744] usb 5-1: config 0 has no interface number 0 [ 244.202849][ T5744] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 244.202890][ T5744] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 244.202913][ T5744] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.282152][ T5744] usb 5-1: config 0 descriptor?? [ 244.305595][ T5744] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 244.734500][ T5744] usb 5-1: USB disconnect, device number 15 [ 245.484660][ T7353] loop3: detected capacity change from 0 to 32768 [ 245.493286][ T7353] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.407 (7353) [ 245.524852][ T7353] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 245.524880][ T7353] BTRFS info (device loop3): using crc32c checksum algorithm [ 245.790431][ T5888] usb 2-1: new low-speed USB device number 18 using dummy_hcd [ 245.827787][ T7353] BTRFS info (device loop3): setting nodatasum [ 245.827812][ T7353] BTRFS info (device loop3): enabling ssd optimizations [ 245.827849][ T7353] BTRFS info (device loop3): disabling tree log [ 245.827865][ T7353] BTRFS info (device loop3): turning on sync discard [ 245.827879][ T7353] BTRFS info (device loop3): enabling free space tree [ 245.827896][ T7353] BTRFS info (device loop3): max_inline set to 0 [ 245.839149][ T7349] xfrm0 speed is unknown, defaulting to 1000 [ 245.950422][ T5888] usb 2-1: Invalid ep0 maxpacket: 16 [ 246.100952][ T5888] usb 2-1: new low-speed USB device number 19 using dummy_hcd [ 246.102772][ T7340] loop2: detected capacity change from 0 to 32768 [ 246.178998][ T7340] BTRFS info: device /dev/loop2 (7:2) using temp-fsid 9cce22be-025a-4b19-9c7c-e9e68282e457 [ 246.179062][ T7340] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.404 (7340) [ 246.256853][ T5888] usb 2-1: Invalid ep0 maxpacket: 16 [ 246.257326][ T5888] usb usb2-port1: attempt power cycle [ 246.374485][ T7340] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 246.374519][ T7340] BTRFS info (device loop2): using crc32c checksum algorithm [ 246.465627][ T7353] BTRFS info (device loop3 state M): max_inline set to 0 [ 246.771179][ T5888] usb 2-1: new low-speed USB device number 20 using dummy_hcd [ 246.804009][ T5888] usb 2-1: Invalid ep0 maxpacket: 16 [ 247.833613][ T5888] usb 2-1: new low-speed USB device number 21 using dummy_hcd [ 247.852044][ T5888] usb 2-1: Invalid ep0 maxpacket: 16 [ 247.852362][ T5888] usb usb2-port1: unable to enumerate USB device [ 248.078555][ T7340] BTRFS error (device loop2): open_ctree failed: -4 [ 248.262327][ T7397] netlink: 20 bytes leftover after parsing attributes in process `syz.2.412'. [ 249.536967][ T5617] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 250.131665][ T10] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 250.280620][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 250.288467][ T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 250.288498][ T10] usb 3-1: config 0 has no interface number 0 [ 250.288543][ T10] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 250.288585][ T10] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 250.288607][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.342315][ T10] usb 3-1: config 0 descriptor?? [ 250.413824][ T10] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 250.651793][ T5850] usb 3-1: USB disconnect, device number 14 [ 251.035943][ T38] kauditd_printk_skb: 66 callbacks suppressed [ 251.035955][ T38] audit: type=1326 audit(1781965856.518:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7421 comm="syz.2.421" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8924eece59 code=0x7ffc0000 [ 251.035981][ T38] audit: type=1326 audit(1781965856.518:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7421 comm="syz.2.421" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8924eece59 code=0x7ffc0000 [ 251.036001][ T38] audit: type=1326 audit(1781965856.518:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7421 comm="syz.2.421" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8924eece59 code=0x7ffc0000 [ 251.036022][ T38] audit: type=1326 audit(1781965856.518:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7421 comm="syz.2.421" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f8924eece59 code=0x7ffc0000 [ 251.036043][ T38] audit: type=1326 audit(1781965856.518:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7421 comm="syz.2.421" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8924eece59 code=0x7ffc0000 [ 251.037118][ T38] audit: type=1326 audit(1781965856.518:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7421 comm="syz.2.421" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8924eece59 code=0x7ffc0000 [ 251.066450][ T38] audit: type=1326 audit(1781965856.548:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7421 comm="syz.2.421" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8924eece59 code=0x7ffc0000 [ 251.068094][ T38] audit: type=1326 audit(1781965856.548:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7421 comm="syz.2.421" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8924eece59 code=0x7ffc0000 [ 251.078004][ T38] audit: type=1326 audit(1781965856.558:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7421 comm="syz.2.421" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f8924eece59 code=0x7ffc0000 [ 251.078310][ T38] audit: type=1326 audit(1781965856.558:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7421 comm="syz.2.421" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8924eece59 code=0x7ffc0000 [ 252.170726][ T7438] loop0: detected capacity change from 0 to 128 [ 254.323743][ T7446] program syz.3.427 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 255.520418][ T5715] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 255.835856][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.835914][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.743533][ T5715] usb 5-1: unable to get BOS descriptor or descriptor too short [ 256.746178][ T5715] usb 5-1: not running at top speed; connect to a high speed hub [ 256.787979][ T5715] usb 5-1: config 249 has an invalid descriptor of length 0, skipping remainder of the config [ 256.800599][ T5715] usb 5-1: New USB device found, idVendor=0411, idProduct=0012, bcdDevice=90.39 [ 256.800626][ T5715] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.800644][ T5715] usb 5-1: Product: syz [ 256.800657][ T5715] usb 5-1: Manufacturer: syz [ 256.800670][ T5715] usb 5-1: SerialNumber: syz [ 257.057096][ T7470] loop3: detected capacity change from 0 to 8 [ 257.247957][ T7470] SQUASHFS error: Failed to read block 0x730: -5 [ 257.247996][ T7470] SQUASHFS error: Unable to read metadata cache entry [72e] [ 257.274724][ T7470] raw_sendmsg: syz.3.435 forgot to set AF_INET. Fix it! [ 257.332407][ T5715] rtl8150 5-1:249.0: couldn't find required endpoints [ 257.332649][ T5715] rtl8150 5-1:249.0: probe with driver rtl8150 failed with error -5 [ 257.543838][ T5715] usb 5-1: USB disconnect, device number 16 [ 258.081951][ T5888] ------------[ cut here ]------------ [ 258.081965][ T5888] in_task() && kcov_mode_enabled(mode) [ 258.081980][ T5888] WARNING: kernel/kcov.c:894 at kcov_remote_start+0x5bb/0x6f0, CPU#0: kworker/0:7/5888 [ 258.082029][ T5888] Modules linked in: [ 258.082056][ T5888] CPU: 0 UID: 0 PID: 5888 Comm: kworker/0:7 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 258.082084][ T5888] Tainted: [L]=SOFTLOCKUP [ 258.082091][ T5888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 258.082105][ T5888] Workqueue: usb_hub_wq hub_event [ 258.082133][ T5888] RIP: 0010:kcov_remote_start+0x5bb/0x6f0 [ 258.082159][ T5888] Code: 03 00 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 fc 93 eb 02 90 0f 0b 90 eb d1 90 0f 0b 90 0f b7 83 c0 04 00 00 e9 b7 fa ff ff 90 <0f> 0b 90 eb 04 90 0f 0b 90 e8 47 f9 6a 09 89 c0 48 c7 c7 c0 52 75 [ 258.082176][ T5888] RSP: 0018:ffffc90005cc7868 EFLAGS: 00010202 [ 258.082193][ T5888] RAX: 0000000000000000 RBX: ffff888031f0be00 RCX: 0000000080000001 [ 258.082209][ T5888] RDX: 0000000000000000 RSI: ffffffff8baa4c60 RDI: ffffffff8baa4c20 [ 258.082224][ T5888] RBP: ffffc90005cc7b70 R08: ffffffff8b325920 R09: 0000000000000000 [ 258.082239][ T5888] R10: 0000000000000000 R11: ffffffff8dfc3040 R12: 1ffff110063e1858 [ 258.082253][ T5888] R13: dffffc0000000000 R14: 0100000000000003 R15: ffff88802a454000 [ 258.082269][ T5888] FS: 0000000000000000(0000) GS:ffff888125ed4000(0000) knlGS:0000000000000000 [ 258.082286][ T5888] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 258.082299][ T5888] CR2: 00007f885653cff8 CR3: 000000005f2c0000 CR4: 00000000003526f0 [ 258.082318][ T5888] Call Trace: [ 258.082326][ T5888] [ 258.082338][ T5888] hub_event+0x15d/0x4cf0 [ 258.082373][ T5888] ? __lock_acquire+0x683/0x2ce0 [ 258.082406][ T5888] ? register_lock_class+0x31/0x2e0 [ 258.082436][ T5888] ? __lock_acquire+0x683/0x2ce0 [ 258.082475][ T5888] ? do_raw_spin_lock+0x12b/0x2f0 [ 258.082501][ T5888] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 258.082529][ T5888] ? __pfx_hub_event+0x10/0x10 [ 258.082555][ T5888] ? process_one_work+0x8cd/0x12b0 [ 258.082592][ T5888] ? process_one_work+0x8cd/0x12b0 [ 258.082620][ T5888] ? rcu_is_watching+0x15/0xb0 [ 258.082638][ T5888] ? process_one_work+0x8cd/0x12b0 [ 258.082669][ T5888] ? process_one_work+0x8cd/0x12b0 [ 258.082698][ T5888] process_one_work+0x93a/0x12b0 [ 258.082771][ T5888] ? __pfx_process_one_work+0x10/0x10 [ 258.082800][ T5888] ? do_raw_spin_lock+0x12b/0x2f0 [ 258.082834][ T5888] ? assign_work+0x3cf/0x5d0 [ 258.082867][ T5888] worker_thread+0xb05/0x10d0 [ 258.082898][ T5888] ? __kthread_parkme+0x71/0x1f0 [ 258.082932][ T5888] kthread+0x388/0x470 [ 258.082957][ T5888] ? __pfx_worker_thread+0x10/0x10 [ 258.082975][ T5888] ? __pfx_kthread+0x10/0x10 [ 258.083002][ T5888] ret_from_fork+0x514/0xb70 [ 258.083039][ T5888] ? __pfx_ret_from_fork+0x10/0x10 [ 258.083065][ T5888] ? __switch_to+0xc89/0x1420 [ 258.083090][ T5888] ? __pfx_kthread+0x10/0x10 [ 258.083117][ T5888] ret_from_fork_asm+0x1a/0x30 [ 258.083163][ T5888] [ 258.083201][ T5888] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 258.083220][ T5888] CPU: 0 UID: 0 PID: 5888 Comm: kworker/0:7 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 258.083248][ T5888] Tainted: [L]=SOFTLOCKUP [ 258.083255][ T5888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 258.083265][ T5888] Workqueue: usb_hub_wq hub_event [ 258.083288][ T5888] Call Trace: [ 258.083295][ T5888] [ 258.083302][ T5888] vpanic+0x56c/0xa60 [ 258.083328][ T5888] ? __pfx__printk+0x10/0x10 [ 258.083348][ T5888] ? __pfx_vpanic+0x10/0x10 [ 258.083372][ T5888] ? is_bpf_text_address+0x292/0x2b0 [ 258.083403][ T5888] ? is_bpf_text_address+0x26/0x2b0 [ 258.083436][ T5888] panic+0xc5/0xd0 [ 258.083462][ T5888] ? __pfx_panic+0x10/0x10 [ 258.083494][ T5888] ? ret_from_fork_asm+0x1a/0x30 [ 258.083525][ T5888] __warn+0x315/0x4c0 [ 258.083548][ T5888] ? kcov_remote_start+0x5bb/0x6f0 [ 258.083573][ T5888] ? kcov_remote_start+0x5bb/0x6f0 [ 258.083595][ T5888] __report_bug+0x331/0x530 [ 258.083622][ T5888] ? kcov_remote_start+0x5bb/0x6f0 [ 258.083642][ T5888] ? __pfx___report_bug+0x10/0x10 [ 258.083663][ T5888] ? wg_packet_decrypt_worker+0xd58/0xd90 [ 258.083685][ T5888] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 258.083706][ T5888] ? rt_spin_lock+0x1e0/0x400 [ 258.083722][ T5888] ? rt_spin_lock+0x1e0/0x400 [ 258.083739][ T5888] ? kcov_remote_start+0x5bb/0x6f0 [ 258.083757][ T5888] report_bug+0x16a/0x220 [ 258.083777][ T5888] ? kcov_remote_start+0x5bb/0x6f0 [ 258.083796][ T5888] ? kcov_remote_start+0x5bd/0x6f0 [ 258.083817][ T5888] handle_bug+0x9c/0x200 [ 258.083844][ T5888] exc_invalid_op+0x1a/0x50 [ 258.083866][ T5888] asm_exc_invalid_op+0x1a/0x20 [ 258.083884][ T5888] RIP: 0010:kcov_remote_start+0x5bb/0x6f0 [ 258.083908][ T5888] Code: 03 00 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 fc 93 eb 02 90 0f 0b 90 eb d1 90 0f 0b 90 0f b7 83 c0 04 00 00 e9 b7 fa ff ff 90 <0f> 0b 90 eb 04 90 0f 0b 90 e8 47 f9 6a 09 89 c0 48 c7 c7 c0 52 75 [ 258.083925][ T5888] RSP: 0018:ffffc90005cc7868 EFLAGS: 00010202 [ 258.083940][ T5888] RAX: 0000000000000000 RBX: ffff888031f0be00 RCX: 0000000080000001 [ 258.083953][ T5888] RDX: 0000000000000000 RSI: ffffffff8baa4c60 RDI: ffffffff8baa4c20 [ 258.083966][ T5888] RBP: ffffc90005cc7b70 R08: ffffffff8b325920 R09: 0000000000000000 [ 258.083978][ T5888] R10: 0000000000000000 R11: ffffffff8dfc3040 R12: 1ffff110063e1858 [ 258.083992][ T5888] R13: dffffc0000000000 R14: 0100000000000003 R15: ffff88802a454000 [ 258.084024][ T5888] ? rt_spin_lock+0x1e0/0x400 [ 258.084051][ T5888] ? kcov_remote_start+0xda/0x6f0 [ 258.084075][ T5888] hub_event+0x15d/0x4cf0 [ 258.084106][ T5888] ? __lock_acquire+0x683/0x2ce0 [ 258.084136][ T5888] ? register_lock_class+0x31/0x2e0 [ 258.084166][ T5888] ? __lock_acquire+0x683/0x2ce0 [ 258.084205][ T5888] ? do_raw_spin_lock+0x12b/0x2f0 [ 258.084229][ T5888] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 258.084255][ T5888] ? __pfx_hub_event+0x10/0x10 [ 258.084282][ T5888] ? process_one_work+0x8cd/0x12b0 [ 258.084316][ T5888] ? process_one_work+0x8cd/0x12b0 [ 258.084343][ T5888] ? rcu_is_watching+0x15/0xb0 [ 258.084360][ T5888] ? process_one_work+0x8cd/0x12b0 [ 258.084387][ T5888] ? process_one_work+0x8cd/0x12b0 [ 258.084413][ T5888] process_one_work+0x93a/0x12b0 [ 258.084456][ T5888] ? __pfx_process_one_work+0x10/0x10 [ 258.084481][ T5888] ? do_raw_spin_lock+0x12b/0x2f0 [ 258.084526][ T5888] ? assign_work+0x3cf/0x5d0 [ 258.084557][ T5888] worker_thread+0xb05/0x10d0 [ 258.084586][ T5888] ? __kthread_parkme+0x71/0x1f0 [ 258.084616][ T5888] kthread+0x388/0x470 [ 258.084641][ T5888] ? __pfx_worker_thread+0x10/0x10 [ 258.084658][ T5888] ? __pfx_kthread+0x10/0x10 [ 258.084683][ T5888] ret_from_fork+0x514/0xb70 [ 258.084711][ T5888] ? __pfx_ret_from_fork+0x10/0x10 [ 258.084736][ T5888] ? __switch_to+0xc89/0x1420 [ 258.084761][ T5888] ? __pfx_kthread+0x10/0x10 [ 258.084787][ T5888] ret_from_fork_asm+0x1a/0x30 [ 258.084831][ T5888] [ 258.085110][ T5888] Kernel Offset: disabled