last executing test programs: 11.186868743s ago: executing program 1 (id=480): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x38, 0x2, @thr={0x0, 0x0}}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x40) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10100, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x10000}, 0x0) syz_mount_image$btrfs(&(0x7f0000000100), &(0x7f0000000000)='./bus\x00', 0x810, &(0x7f0000000180)={[{@discard}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@discard_async}, {@usebackuproot}, {@skip_balance}, {@autodefrag}, {@commit={'commit', 0x3d, 0x9}}, {@acl}]}, 0xff, 0x513f, &(0x7f0000000980)="$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") memfd_create(&(0x7f0000000440)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x01\x83y\xf3\xb2\xe6b$\a\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\b\x00\x00\x00LR\xa1\x00\x00\x17\x1f$^\xe1\x00\x04\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\xce\xd5O\xcc\b\x9e\x19\x19#\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.h\xfc\x14\x05\x00\xfd\xa4\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$h\x0ew\x00&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x01\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xff\x06\xe7j\x9fTJ;T\xf3\xfa\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x00\x00\x00\x00\x00\x00\x00\x0f\x81\xf3\x05\xa3{\x96\xf9\xba\x9em\xe9\"\x03\x933P\xbb\xd6\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k2Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10\x00\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\x04\x87\xe1$a\xcd\xaf\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe28\xe3&:1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%u\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\xf7\xa9\xa4\x1c\x15+\x84\x04\xce#\xf6\xda\xaa\xeb|\xb9\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:l\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x8fw\xa9A\xf7m\xeec\xb6\\\xa4T\xeej\xe2\xba\xb2V\xaca\xc6|\xae]\xdb\x10\xb3\x80z\xd5\n\xa3u\xfb\b\x03\xe5\xca;\xe5uH<\x9a\x12\x84(\x9f\xd2\xe1k\x955;J\xa4\x81Lm\x90\x1a\xfdI}\xb0\xa1\xfa9\x17\xd1\xa2\xc7\xca\x98\xaeS\x92Ew`\xd2\x02\xda\xc9\xd4\xea\x02\x1d\xd3\xd5\x81\xdb\xd9~\xd6-:\xee\xe8\t\xf7\xe6\xf1\x88\x86\xb0\x04\x9ep\xb1\x93\x16\xf9\xdb\x15\x8a\xa3h<\xaf\xa0\xb5\xb0\x05ir\xff\xff\xff\xff\x00\x00\x00\x00\x83\x91\xad\x11\xf4\xbcz\x9b\x8bp]o\au\x175I\x1d\xe2\x97\xb6\x06\xdc\x14\x9b>\xd7F\xdb?\xc7%0n/\xf5S\xb5\xe8\xa5\xd1\xddN\xf9ir\xd1r\xf4L\xf73\xadDz\\\xf4`\x13\xf7)\x91w\a\xcc+E\xdd\xe9\xdbb\x9c\xff\x98\x03\xb7\x0e=\xba\xa3um\xde\xff$|\xb7\x86j+\x00\x00\x00\x00\x00\x00\x00Z\xef\xd6\xf4Zs\xfc\ro\x03\xabB\x18\xdc\a\xe3\r\x00\x00\x00\x00\x00\x00\xb2\xc9\xe4\x14A\x92P\x83o\xdb\x1d{E\xe8\xec\x85\xd4\xd2\x19\x18\xfd\xfcc~Y\x8f\xb3\x1d<\x91O\xe7\x04\x11\x1f\xbdz\xf1J\xc2\xb2\xdfH\xa7\xa7\xb80I\xc7P\xe9\n\xc8\xd6\x82\xc0\x1d\x82\x83$ky\xea\x9c5\xf3kF\xf5\xf3\xb2\xf4\r\xe3\xfe\xe0\xef8@|\xf9UGNI\xd2\xd1\xda\xcf:\x94Y\xb0\x80\xc4N\x95\xec\x90{\x19\\\f\x8b\xe1L\x06\xf42\x0e\xd1\xa9i)?\x7f;\xee\xfe\xc2\x10)\x1dQ\xcac\x14\xe8L\x16\x12!\x8120\x8e\xc9--\x96\xe3\x82\x8dT\x9b,\xc6\x83\xcb\x9bW\xa81\x9b\x88\xce\xaa\x01\xe0\x8cfVu\xdc\xf6\'\xc10a\x11\x98\xd6\x9cGp\xfeQ0x0, &(0x7f0000000140)=0x0, &(0x7f00000006c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000180)={0x7, &(0x7f0000000100)=[{0x1, 0x6, 0x2, 0x8}, {0x33, 0x0, 0xd, 0x9}, {0xd, 0x3, 0xf9, 0xfef}, {0xf, 0x6, 0x7, 0x9}, {0x6, 0x7f, 0x7, 0x1}, {0x9, 0x4, 0x2, 0x1ff}, {0x8000, 0xf, 0x1}]}) syz_io_uring_modify_offsets$generic(r4, r5, 0x2c, 0x4) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x20000e, &(0x7f0000000c80)={[{@i_version}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x201, 0x40000036, r6, 0x0) io_uring_enter(r3, 0x1, 0x20, 0x1, 0x0, 0x0) io_uring_enter(r3, 0x6516, 0x6d93, 0x8, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r8 = syz_open_procfs(r2, &(0x7f0000000000)='net/llc/socket\x00') read$midi(r8, &(0x7f0000000500)=""/4101, 0x1005) 9.742159484s ago: executing program 1 (id=494): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r5, 0xc0f85403, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x101001, 0x200) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r8, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010028bd8b005cab72613ed3090fe20e118d5b2c44ffdbdf250800000018000280100003800c00018057e7e29b78c31f10698a39b1af5d080001000700000004000100180001801400020073"], 0x44}}, 0x10004000) socket$nl_generic(0x10, 0x3, 0x10) remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2800000, 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x12e1b, 0x1a001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x3c}}, 0x20004000) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9203, 0x4000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) syz_usb_connect(0x2, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYRES16], 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102000000ff6a051100400001020301091ff3000101081039090400b0010301041ccd000001000122dd03ff03ff054c00000000"], &(0x7f0000000240)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x8d, 0xd1, 0xfd, 0x8, 0xb}, 0x48, &(0x7f0000000080)=ANY=[@ANYBLOB="050f4800050b100106000000000000000a1003020900010501800b10010c08005003ad060920100afa850000000f0006000fff0000de0000003f3fff003f00ff0000ff000003100b"], 0x1, [{0xc9, &(0x7f0000000140)=@string={0xc9, 0x3, "ebacc0a2d7ed985cde0897512fc78fb88f0cc67229b1a99a7540b6a09919693f40dbf88dfffc1c0e9718fe1f9cdc31f833884eb47cbfc6bd8163f4389b0b144448fe87078cd0b1348704dd1d979dc148fff3c7286e7318acdbbb3bdee1ba5657e0d0e24671abb5d9b410077d002e65b77cff1e11186810a0a0067703ab10d4e16a0b3e645d7302eefe752f170273f800b29f3178930612d0461610ffc6a359872b7b01aa7f2058bd14ca8a36d003d8e4c07a1bb0c6530a8a8cd25364088790d922f95fb4dc35fe"}}]}) socket$nl_audit(0x10, 0x3, 0x9) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) 6.810159201s ago: executing program 3 (id=504): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000003180)=[{{0x0, 0x0, &(0x7f0000000800)=[{0x0}, {&(0x7f0000000600)="2c060bc4d7c397b3a125cdeb124fab1b678f549f7f443087c96f944e8bc105aa2a95ffb4122b3ea59dc6aca9d0188c144c3fb283c4708917b5529361506224cfd51c4412660c", 0x46}], 0x2}}], 0x1, 0x0) (fail_nth: 4) 6.592189497s ago: executing program 3 (id=506): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x10840, &(0x7f0000000140)={[{@test_dummy_encryption_v1}, {@barrier}]}, 0x1, 0x241, &(0x7f0000000540)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000040000000600000000040000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/13], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0c00000004000000040000000000010000000000", @ANYRES32=r0, @ANYBLOB="000000000000090000000000000059abba00006c5a64d70e5a7556388737f1a32725256332ce", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000300"/28], 0x50) (async) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f00000000c0), 0x1, 0x4b4, &(0x7f0000000c80)="$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") r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000002c0)={0x7, 0x7, 0x0, 'queue1\x00'}) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000000)={0x0, 0x6, 0x7, {0x9d, 0x4}, 0x7, 0x5}) (async) r2 = socket(0x10, 0x2, 0x0) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) ioctl$TCSETAF(r3, 0x5408, &(0x7f00000000c0)={0xcf47, 0x4cc, 0xffff, 0x9dff, 0x1, "8003e3ffff072000"}) (async) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000c00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f0000000380), 0x2, 0x24d, &(0x7f00000006c0)="$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") (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) (async) write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x103, 0x10, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) r4 = syz_open_pts(r3, 0x0) r5 = dup3(r4, r0, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0xff) (async) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000140)=0x12) (async) write(r2, 0x0, 0x0) (async) ioctl$KVM_SET_FPU(r5, 0x41a0ae8d, &(0x7f0000000940)={'\x00', 0x10, 0x6, 0x5, 0x0, 0xd72f, 0xfff80000, 0x100000, '\x00', 0xf}) (async) pwrite64(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x9000) openat(0xffffffffffffffff, &(0x7f0000001280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181341, 0x40) (async) symlinkat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r6 = openat(0xffffffffffffff9c, 0x0, 0x28541, 0x140) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r6, 0xc4c85512, 0x0) (async) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$rfkill(r7, &(0x7f0000000100)={0x1, 0x3}, 0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000600)}, 0x99) 6.381892775s ago: executing program 1 (id=508): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000003800)=@newtaction={0x14, 0x30, 0x2, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x801) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee200090582"], 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000140)={0x6, 0x30, '\x00', 0x1, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r3 = getpgid(0x0) r4 = syz_pidfd_open(r3, 0x0) pidfd_send_signal(r4, 0x41, 0x0, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'dummy0\x00'}) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) setsockopt$MRT6_FLUSH(r5, 0x29, 0xd4, &(0x7f0000000080)=0x1, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x20, 0x4, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff024}, {0x6, 0x0, 0x0, 0x3}]}, 0x10) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) io_setup(0x1, &(0x7f0000000100)=0x0) io_submit(r7, 0xf3, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x19, 0x1, 0x0, r6, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000300)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0], 0x5, 0xa, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, r8}) 6.179881109s ago: executing program 0 (id=509): mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) write$tcp_congestion(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@newqdisc={0x70, 0x24, 0x3fe3aa0262d8c583, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xd6, 0x1, 0x0, 0x5, 0x9, 0x4}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x10, 0xa, 0xf, 0x10001, 0x0, 0x2934800, 0xfd}}, {0x4}}]}]}, 0x70}}, 0x0) connect$llc(r0, &(0x7f00000004c0)={0x1a, 0x1, 0xc0, 0x1, 0x3f, 0x0, @remote}, 0x10) r3 = gettid() syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r4 = syz_open_procfs(r3, &(0x7f0000000040)='pagemap\x00') read$midi(r4, &(0x7f00000023c0)=""/4096, 0x1000) read$FUSE(r4, &(0x7f0000000380)={0x2020}, 0x2020) 6.000105987s ago: executing program 0 (id=510): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f00000000c0)='./file1\x00', 0x1000812, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRESOCT, @ANYRES32, @ANYRES32=0x0, @ANYRES16, @ANYBLOB="0bffd5ece651e2a4648f9b08ce06626a8efcc3bee3ccef03f1e2279d8dc44bc4bd6a5d445f3f4f75b30ef3cc0a9d3c338a26ff996b57afbe65c46e61b66cf778b449292592952663ac34eb94f6fd4cfbda2af6c85c6e135955ca064c546ab638c56d2432e45e6d333181ee921f9f26a8ef"], 0x1, 0x30d, &(0x7f0000000880)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 5.771140972s ago: executing program 2 (id=511): r0 = mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, 0x0) mq_notify(r0, &(0x7f0000000100)={0x0, 0x17}) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) accept$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000080)={0x0, 0x1, r2, 0x3, 0x80000}) 5.353400141s ago: executing program 3 (id=512): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000800000091103b000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 5.096079759s ago: executing program 0 (id=514): syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000240)={[{@nouid32}, {@inlinecrypt}, {@noquota}, {@jqfmt_vfsv1}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@data_err_abort}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") (async) getpid() (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket(0x2, 0x80805, 0x0) (async) r1 = socket$packet(0x11, 0x3, 0x300) (async) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r2) (async) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x13, 0x3, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x18, 0x35}}, 0x0, 0x4}, 0x94) (async) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200000, &(0x7f0000000100)={[{@resgid}, {@errors_remount}, {@usrjquota}, {@sysvgroups}, {@usrquota}]}, 0x1, 0x50d, &(0x7f0000001bc0)="$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") (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000001000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000007000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000000000/0x14000)=nil, &(0x7f0000011000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) r3 = io_uring_setup(0x4, &(0x7f0000000040)={0x0, 0x73e6, 0x1c402, 0x2, 0x1e1}) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r3, 0x19, 0x0, 0x0) (async) io_uring_enter(r3, 0x2cbe, 0x7f66, 0x11, 0x0, 0x0) (async) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000390400000000fbdbdf2500000000", @ANYRES32=r4, @ANYBLOB="01980400419a04002800128008000100736974001c00028008000300ac1414bb06004900000000000500050001"], 0x48}}, 0x0) (async) sendto$packet(r1, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53b", 0x27, 0x40880, 0x0, 0x0) (async) unshare(0x22020400) (async) shutdown(r0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) (async) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$vcsa(0x0, 0x68, 0x101282) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) 4.991642691s ago: executing program 0 (id=516): socket$inet(0x2, 0x1, 0x0) (async) r0 = socket$inet(0x2, 0x1, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x463b100f, 0x800004}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0x0, 0xb, 0xd0e0011, 0x120, 0xc6, 0x1f8, 0x1d8, 0x190, 0x1f8, 0x1d8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'nr0\x00', '\x00', {}, {}, 0x1}, 0x0, 0xd8, 0x120, 0x7000000, {}, [@common=@icmp={{0x28}, {0x0, "0010"}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48}}, {{@ip={@remote, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'virt_wifi0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x20000, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, 0x0) (async) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000000), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CURSOR(r4, 0xc01c64a3, &(0x7f0000000340)={0x3, 0x0, 0xfffffffa, 0x4, 0xb, 0x1fd, 0x1}) r6 = socket$kcm(0x29, 0x7, 0x0) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file1\x00', 0x0, &(0x7f0000000140)={[{@uid={'uid', 0x3d, 0xee00}}, {@barrier}, {@part={'part', 0x3d, 0x6}}, {@force}, {@nls={'nls', 0x3d, 'cp1255'}}, {@gid}, {@gid}, {@nobarrier}]}, 0xfe, 0x5de, &(0x7f0000000d40)="$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") syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) (async) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) sendmsg$kcm(r6, 0x0, 0x4000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x8, 0x0, 0x7fffffff}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x8, 0x0, 0x7fffffff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0xf5, 0x9, 0x7fff0000}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0xf5, 0x9, 0x7fff0000}]}) ioctl$DRM_IOCTL_MODE_CURSOR(r4, 0xc01c64a3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) 4.496130659s ago: executing program 2 (id=517): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000003180)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000500)="e9c9c22b72771774d2d5211e3a2ac05a30bfc6fdc2c9fcb329d9949e00e882c2d555ac9b3fb59db05c2d0269bbf7e01218b7e3169af99a371cb8a64dbff785df29528b087e309d756317811037727b2b8cdef2865eb9ff5d57d8282f19ecbb5ace7a04b05c72042ad0ea0d465b82768de1d916faf5173953f9dd0cde90c9e43a322d0664df0f20fec228a9c605a088ecc9a7c6e153d9c1a5b32ec1baddec13b929792423c043ef70ad9936c996a43ca5f91fe81cee87b38ade2ca69fdccc093404c9bf615ed6c9af78ccbaec88b0f078577d8374e6", 0xd5}, {0x0}], 0x2, &(0x7f00000009c0)=[@dontfrag={{0x14, 0x29, 0x3e, 0x8}}, @tclass={{0x14, 0x29, 0x43, 0x40}}, @hopopts_2292={{0x1020, 0x29, 0x36, {0xff, 0x200, '\x00', [@padn={0x1, 0x1, [0x0]}, @generic={0x2, 0x1000, "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"}]}}}, @rthdr_2292={{0x78, 0x29, 0x39, {0x2c, 0xc, 0x0, 0x0, 0x0, [@remote, @local, @ipv4={'\x00', '\xff\xff', @broadcast}, @remote, @empty, @mcast2]}}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x5eb26d13f52ac347, 0x0, '\x00', [@ra={0x5, 0x2, 0x1}, @enc_lim={0x4, 0x1, 0x1}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x3}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x16, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x4}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xac19}}, @hopopts={{0xb8, 0x29, 0x36, {0x33, 0x13, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @ra={0x5, 0x2, 0x4}, @pad1, @pad1, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @generic={0xa, 0x77, "9b78f4ff2949cbce9aaee8110197534f2ff22d8ef5ce2638be81ee1025ee4a201df2eaf422cf04850255ded127372242968690de546702b80b0230ddc01721f7f3fcb754055b47483a19d2da261ee74b0a60c933d42c8736bb48e6af10a3555966c6151538bb94079d8249452a1890168700b05aaec8d1"}]}}}, @dstopts={{0x90, 0x29, 0x37, {0x59, 0xe, '\x00', [@calipso={0x7, 0x28, {0x1, 0x8, 0x9, 0x1, [0x9, 0x9, 0x1000, 0x800]}}, @ra={0x5, 0x2, 0x2}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x18, {0x0, 0x4, 0x5, 0x6, [0xdc, 0x2b2d]}}, @pad1, @enc_lim={0x4, 0x1, 0x3}, @jumbo={0xc2, 0x4, 0x2}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @ra={0x5, 0x2, 0x7}]}}}], 0x1280}}], 0x1, 0x0) 3.786348123s ago: executing program 3 (id=518): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r5, 0xc0f85403, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) write$tun(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="00d51df95391b9634a3e2b861e95df2900886caaaaaaaaaaaaaaaaaaaaaa1888a80800810028000011aa0e0000"], 0x1e) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r8, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010028bd8b005cab72613ed3090fe20e118d5b2c44ffdbdf250800000018000280100003800c00018057e7e29b78c31f10698a39b1af5d080001000700000004000100180001801400020073"], 0x44}}, 0x10004000) socket$nl_generic(0x10, 0x3, 0x10) remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2800000, 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x12e1b, 0x1a001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x3c}}, 0x20004000) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9203, 0x4000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) syz_usb_connect(0x2, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYRES16], 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102000000ff6a051100400001020301091ff3000101081039090400b0010301041ccd000001000122dd03ff03ff054c00000000"], &(0x7f0000000240)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x8d, 0xd1, 0xfd, 0x8, 0xb}, 0x48, &(0x7f0000000080)=ANY=[@ANYBLOB="050f4800050b100106000000000000000a1003020900010501800b10010c08005003ad060920100afa850000000f0006000fff0000de0000003f3fff003f00ff0000ff000003100b"], 0x1, [{0xc9, &(0x7f0000000140)=@string={0xc9, 0x3, "ebacc0a2d7ed985cde0897512fc78fb88f0cc67229b1a99a7540b6a09919693f40dbf88dfffc1c0e9718fe1f9cdc31f833884eb47cbfc6bd8163f4389b0b144448fe87078cd0b1348704dd1d979dc148fff3c7286e7318acdbbb3bdee1ba5657e0d0e24671abb5d9b410077d002e65b77cff1e11186810a0a0067703ab10d4e16a0b3e645d7302eefe752f170273f800b29f3178930612d0461610ffc6a359872b7b01aa7f2058bd14ca8a36d003d8e4c07a1bb0c6530a8a8cd25364088790d922f95fb4dc35fe"}}]}) socket$nl_audit(0x10, 0x3, 0x9) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) 3.64337172s ago: executing program 2 (id=519): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000003180)=[{{0x0, 0x1400, &(0x7f0000000800)=[{0x0}, {&(0x7f0000000600)="2c060bc4d7c397b3a125cdeb124fab1b678f549f7f443087c96f944e8bc105aa2a95ffb4122b3ea59dc6aca9d0188c144c3fb283c4708917b5529361506224cfd51c4412660c", 0x46}], 0x2}}], 0x1, 0x0) 2.586797447s ago: executing program 1 (id=520): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@empty, @in=@local, 0x4e24, 0x0, 0x4e22, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0x4000b, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x101}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x4d5, 0x3c}, 0xa, @in=@local, 0x6, 0x4, 0x3, 0x0, 0x401, 0x80000000}]}]}, 0xfc}}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xaece, 0x0) preadv(r4, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000003100)=""/4111, 0x100f}], 0x2, 0x8, 0x9) syz_emit_ethernet(0x3e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000286dd6018232500088800fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000010100000008"], 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x14, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={r5, 0x0, &(0x7f0000000340)=""/140}, 0x20) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) r7 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r7, r8, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x15, &(0x7f0000000000)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @ldst={0x2, 0x2, 0x6, 0x6, 0x6, 0xffffffffffffffc9, 0x4}, @exit, @jmp={0x5, 0x0, 0x6, 0x1, 0x1, 0x40, 0x1}, @generic={0x6, 0xa, 0x6, 0xfff7, 0x8000}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0xa2bb}], &(0x7f00000000c0)='GPL\x00', 0x1, 0x72, &(0x7f0000000100)=""/114, 0x40f00, 0x58, '\x00', r6, 0x25, r8, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0xa, 0x3c7db96, 0x400}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000280)=[r1], &(0x7f00000002c0)=[{0x5, 0x3, 0xc, 0x3}], 0x10, 0x5}, 0x94) 2.583627638s ago: executing program 2 (id=521): r0 = socket$inet_sctp(0x2, 0x6, 0x84) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x8480, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) r3 = socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000004c40)=[{{&(0x7f0000000500)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e, &(0x7f0000000580), 0x0, &(0x7f0000000ec0)=[@rights={{0x18, 0x1, 0x1, [r6, r0]}}, @cred={{0x1c, 0x1, 0x2, {r4}}}, @cred={{0x1c, 0x1, 0x2, {r4}}}, @rights={{0x1c, 0x1, 0x1, [r5, 0xffffffffffffffff, r1]}}, @cred={{0x1c, 0x1, 0x2, {r4, 0x0, 0xee01}}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r6, 0xffffffffffffffff, 0xffffffffffffffff, r6, r6, r0]}}, @rights={{0x28, 0x1, 0x1, [r3, r0, r1, 0xffffffffffffffff, r0, r5]}}, @cred={{0x1c, 0x1, 0x2, {r4}}}], 0x128, 0x2000}}, {{&(0x7f0000001fc0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f00000031c0)=[{&(0x7f0000002040)="07acb7c3199ce0fc1b9fd8ccf4fa20a6efb38ff776a33d03834b9776f3ec7a2c4eff202edbe011f250af64de51e760f0db81", 0x32}, {&(0x7f0000002080)="3b949098fa6dda7d300cec7de47964b71c2678fabfa944e1202abae55f3cb3bdc5647ea1aaba7106a93cf579a5376a8d03ae91a72cd5e13883571e4d2e21", 0x3e}, {&(0x7f0000002140)="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", 0x1000}, {&(0x7f0000003140)="29ff72e2e3c61f6057a4a97badaad27d88d6a274f0761ba688a92f08dd3d3de36467976d632172988ebca682805bbefa2a1322b135bd5d7558f875acf7331d3c2057a4b8e12ac403596c1b26deee470455f2e68853e70177cf918693c5fcf2902b40fd577d184c6458964ff2ef8f8a3a8dd35aefbadfe42b43", 0x79}], 0x4, &(0x7f0000003240)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60, 0x4040}}, {{&(0x7f00000032c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000004ac0)=[{&(0x7f0000003340)="86e151dc0fe83fd0009cfcd537189c5945c7bbaefeb2", 0x16}, {&(0x7f0000003380)="90205e68a87878fcedc761f94f756dd3610c7142e47682d0cde60eeb872f27c43cdbbaa59f5c7f07088fa0eb1b5f34624331839b900a97329a4ad0f2bccb98469ff460e78f31461881e0c139a1f6c532b042856fc089c93b8e066dfbb195ab0e664be50f5268b651cd55c1ab56de6d06732893405484c002fb4fd942d70d8fd8fb1ad16a5fe068", 0x87}, {&(0x7f0000003440)="aa50756a198a3acf28e5f2a6b921f9149a4cb96113a6ed745ca067dd1c832568f7e791b8a5ee75d4d29c5e5242dc70e518ee2dc5fbe15747d987a0cd834415412ea0a09782dc2f80f03ea3e5ecca7c07a8ff3976c5c63cdd60a34bd2b7624abbe7fdf1af4595cc9fc2335abb3c60ee84653d59250a16b58f220192b0758ff40e8dfcda6847991c0f8c2b1031fe75e494071c2d0f2800a095871c44d8626ab0fd80e1f08ca765d3ec4b73af7078fd679df0e763fc18ab792d1edaca1afd5e266ccd280980282e97cb42b18298aa87661dda5996f3a9181ff3c19c192256", 0xdd}, {&(0x7f0000003540)="edc1e06277151de134debb85eb", 0xd}, {&(0x7f0000003800)="85d9bbaba5e8b2f47fe3dd2d9031458aced75a49a4ee73657731afb28d11cbd96ce1eeafc9936e1431d8b9bc907bc731ee3b040074b1e6666021a885aaac1eeb569f56c2548f5793aa44020342b6a7a2115b49285e36a387c10316322788e9723e01e9704c80c88934741befafd4fcccc4119bfb0e6fc96e04008322b4731546d8138150f4639c60617d56ace5c949dad467a7314bb37f2588b1b4195a906c4ee1e43df8ea625bbb6e781a0ab6086caaeac40dc21fb50ff265a0f1363ea7a9b71ab4e59092e06fecb2a5ecc5f65a4f43acd92733fdb5a84e6436762360c519d46b7f64dc07b94ff633eb2afb95974fc8162acf04c60b249036a5139bf3231db1f874f00727b4f0d887d33a3a8df3216ca2a038f00ee81a35900fed745f2a7b167c8aa2f38f44e2d34d0663f5ca0ff28d130dd8b4e17ad6f384f26282f81f82342da0d1b00edafdcc76b3895fd67702df96ac7dc3c8c8b7ebd4fec9c3063e0680e5e869d900595174f121e37f0ce86694c3b46c02fa864ff16e271bd410a9e896187d73aea2fbe3250e6bdda0a6d9db0d2e6acb263e6a386efcc0d0998955af62c8012ca213a2fa59ad287e375e6fd29bef817cc0d419e24bf9115e06d4330f15a9243bd3895b926f96b072a999896291b40b632b255e7f311f0c612926e5deb48106ff314ab244cb4ff7e7ecb354d4a7d145e8ab7623c8db21441d2870792b56e4443af80467a1acad7b7e7505a3219e93e901976cfaa03c4b3644b238f5901253069c519c871638105a2aebd38697483e860bcb2227102585d09f0d7d312ccce6aa0182cc006e97909d15b8b99b2c6ff60d0248c62cbc31aa313974f1a22f87b9525822ac7bbc37ceb12b5af54bc8d45840310dc774bfc8a6a1d37190d7c2d275b2633595699b81ca27e4ac50d8dad6d21d7ee76088624346b7f1874dc4c532ac842c20b596fde2b3ffc3134f31f7c0bd12298ad8b629bc5cc35ba6bf47e2119dd8f1c8419da317bf15010edad1ffd326451f4a4252c9966f1ad3271caecf3ba5355c578ec2bfe1ae76b946f36fc0b21b28384ae5c9d7cc7c0310427c1fa3b58c0f3dd30dd1df37543c4ed430dc24151bf10659ad1359064c9fb1bd1daf5a3b5279799378dbe752e238fc3a0c88393deb7a39990744d57a6f867e8bb1ed5b02c8a2621285721d4311afcb34a5cdf943f7b5aec88df191a43ca33808dcd74d25e4e71429fcb6044304e46cc667130ed228f242660bc6b04d47bc268b857061455ffb33c152aa470ccf0a979d818265d5e04e6645af6c5d1f742ca9dccbd30d0776a4cd8dc15d54d8f7d016c7ff4fa45bdf2a48f5e86d82d1e07cc3c95156b1dca927ec2ae32a2b1bdd4042678e25dba6c509dbec4f908e113edbea12b7c36817519af4c2462678d8024dba7a00f8bcfda6715c9bc1c731bba17e0f429ca2d188b448ca4bece02285f5fb3b6eb24eba933708d012edf01cd849b242230740f2cd3957c590b43f82efb7bf484a4680410f47b5a59ff2f80c065e43612220eb3dba43eaac844c4b0f2572567331df85952c47b04ed9364e4e3f882ed83baed124dd8731adb22f2e9d3e1fbb193eabfd75e00fe57e80249df3507a4897a4bbf82561d8c544deed22fec1a771a7fa111cb9a0cb6bc656e862d0cddd6e1815ceae4f4b7fe1d133461d03edbc89e56377f842031579ec93ba7d8eff0a304407692ed75ead374df570a5a450830cd7b815192a0a1ddb34b39ea3f2d2bcb1b2d33f51f75159293e7155ea12593923873aea919a3a35d081554ba86abf8ff3d4073ec52a6882d3921232bfa9e4bb65915f7394638f9bddd3a302169c7f4951a1fab5955f576b28d111b09007dcee4bc11df50714181359a108e27ed6f20a8be664f915bce645a40d3462b2d9bb7d178a5492e09e59e27b35914d24188c298298ef51833b213b85845bab1585a27bd7020918d2e73fcf8e8a5bc58935eaddd17836ed0638c85a8879f75c0befd6897683a42df43510dc125f4b23c39d6e4826fc59e76c1e81432e7d4bc806a6e17ca8a3bde2c8f146012ea95f25d7c24090f491c13bc51e27ea29a3e94abec193e476f6ac1a77000050f09e59bb21f2eb0ca9975c29775f8a05509d875ee6afc2dd544e3356a427d89fbf6feeddb20a8685e3ff530df89910df035d43b2a081618fa5bbd357e3210993cbc87a7fb4918a617e2fe2b525710db68708b7cd2e327ac08bb8301f913b2561461521a23ea246b8d85d78e05d1f65b3081be82e5a57d93fc405e75cb5136258a13fcefb936e7a3a8d5926f7646952a1acc6217170a90e8765f14b3e0c16722a0b97714bc7eecf55bdfb0a490aa02097941e3f9a4879eda9261cbeb72f15807eff286cef69124d19eb99a4906aae78fb8896ab9633e90fc4bb58dcde7c9966329107b49a16452e0f55e4518e06a67977afe0d88dc215e2fbaa323dbeb1a52d0d69aac7863e0f3bdc7b1bb2a43fd9d9c595ce8c7bbae29a5db4a4a978e2182af5cca786e92eb38c31f6691de1a5f0a6b970f3b50ce09fc6106b46774b50fbaf8acc9717c0419f8b91d4ad24022e41cf41e0c0392024041497383744fce02f8ee9eb3ba65ac001ef2b725ff88117e2954f9fb76a0bb497db694013480a7a985435345d66909819e6cc14cc44ad871e9535eab3718da47829dfcceccdba5bf3042f754fc9380deff25f285fa6e09e64829afb1d470253a4dd1a16dbf0115d23b47a399c01be713b8378908b15d473165b248b338a1ec8248f65a43f2b842ec391f43019e3d0afbf13915daba960199ed4ebb7edb3ca20b9c005125efd2475467508020aa661c3adf3b374e02043f779ffb5876006d3761499b1602048a7da50b6eb25e0f24f18282ac1590d8b1697645b597318708c8f0f3035d5b34be6d3ebf2d562d0188cce2130bba12c813c6a78e6d82db5e1d681d583018880c79c032e92bfdf3a7c5a131011be2f9560bc5b6b34df8672998c0a82de437aa6b59da8ef8255be8d941d163b1dbe69932140a48b77579377100612f9a98c88e82427ce90b261fe6533251f2fd9a80fafa2f22c69aa8b372c1cf76b88af7e18587f381bc4c5c8b01dbf86a49a5cb5788ebb4d30c3d6bc9621cb5b154a7b477d77e8cbe7d56efd63592e1d8c435f1cbfcb3790ed80653ebb528a547abd467883a8e9b5768cc8e08328397ab8ef0e7e011ca708c496dd0a2741a5eedab05719cf3297505978f7ffddf34f6fe5c42e844a04b0b255534c3e81d077253927ede51936ec08affd97ed6128b287d2bd1f85192642528c4d63a2b53b5ddba2b01cdaeedfeb32e297865083f53c20e6bcb1ff1c3a250776dcf4278e6bb5373dad6dc562d80d43d4866100860c5cc84097b4d4ac97885a8e4fa8f348749975bddc4b8905e0df723c531643eeab3852a69d8b7d39aceb53699dd193223785582a33c612df53ac8321ba5296c6de86ddf85ab322de11da961ab01364801b29741e80039dc8c09936e685f90b1afdb16375fb179014c2246fea7d0b58b0d5e7d296b6232b098c869384f2b0da8e848b98436c1d6fd829898819f927c4feca2a8c1f960a2459f12d052b781116a728ff172a5e29e7a4e5070b66b49c8232681218947429d3c47688de76e7477d5865a126e44db94b91c29606a684e84eda14f2d24093c331e4174bb899025565ad5b9d2188956390bb0f23e3ace24d0db08ac8b2357f6e111f64e100582cc7190880bbce60676ec7d3edeea4a72fdfd518f799ebd770cc8988f87d5c4680240bc360006896ee98edb6871c4aea232c44f9d082ba27299e13fe0149ee81fc5db0cd9e9299683bf1f5a7400f07ee5699d809606b915fd79e2dc993ae83859c05d2f215383fb03c3e6c31ea013dc25ddc8d832a04c45d1e879f7838eaf3ff9ddf09bee4fa06016f5f32daab7fb2fc2e7de807ab7cf620f3eb35c85761a44cdec2d7e1bd51cf277c4b82b3153f5ec80235a73772841562a5a6a75e8db1efe1d4b100dc60859f5bf390e99efc07765fdc2502cfe3b91be42ac53cf47a780d926e646b77148fabc14e11c44e8c1f0f4f770c7ca7524a78d2dfaf33c3535f7c5ba3e12b0100faad766404b915d0173753a46b49ea7fa5f4f54e4d88febff69ea13e1c41fdcb7e6ba9f7f6e6b0cb4a0aa9a922da47213ba318b3c886cca1baffe17173b03a35f16976d928bb4e2308bfca7624eb1c82d6d047d60054cdb583e38e4f571fe56528ab2813ab4ac551ee3cd32e8f4e468c8bf61cfbc5444d105c3e91d9a1cb38bb7daa61e99cc14c638c5491d0300141443c253ac8823f86862ea16c4ec544c68e887551d416c946a2ed7c55604342f20a32704f2a1914434d4c25e4c20e4fa5e9d6f9107935ba6983fc9c6dec2d62d5c4331c557e1f9976248f8b690fb7b3875b7cfd8801999d667d039206b9336336a1a1ae41cc736bb67b914b88618db4a5a76a74d6fcc65418cb5ec531f826139313188e22a037c8309eaf8e1f9a22c4ae8ba58941af99de4b94c59c22898df755ef9dbefe6d28dafdfb84e40cff0fcf36e442c3397c448496ef8566e12f7e233a02e726e9e5eb4820302461ec928f2c6cd7503638b69dd442bc5a2b136e2570167f51001cf59d344343ad35bdf83a52ae47f422e4b4e97bcc6a5a4761bd1d9a9bbb75a5d300fd9ac296520e50ee81fe9fd4dda5602cbd2a7f958e1df80527cea4311fe74cef01df5df52673185b3236582b49e2ac8e974afe458a0f83c04f917aa9ad34189819aef35476fb394cf6eb47d0cb358bb5b1fa45f5d78bb9e6f7be5e03529df1743661f4c8224f71c99014208870c82b8d4f2781f5da5a4dbe09c52729bccc1a7ca325e1c9ba409ae3f8027319b37382b389d6c537150e6b449df2a768a789b407ec8e59c3a2570b87f5040be49b5f0d103276661d0bd45b197cb622805d15a3e8af07d7f56ce10ac25a7f2434b05e8aed9e00193868770658db7aac12cc4684853e9b93385afb6a30af223b95eafaf712dc4dff8e4d57dfe0d38173eaea0dd5ac3bb51d86693cb8d46d57cf8c24ec7efcbb4bbecb561d8475da9d8175a4247b61808be003791d6d4f250d33ccdd48fbf83ac7304c31faa2a8aa79c2e32165de72d2e45b5a831ce8248c874df8530f1db45a66127fa807cc6a4d382f84f505fd0ef43781749743da7e2abe4ce678a371073e7d04e24578b0b50c821e53f8c0f245a19274ce1bbe1c5c0eaeaffd23cd4550370da8dd65272cc746cdc7a73509f2a14dfffa54c27e1e22f8244d24652f8a4da5530c5d56a9103eea2ba6ac93dc2b817ce8f2f8689435e8cd215d8cf534116a3dc8d336bb9dd930d6ee933cc3d2fec2b6ce9fc9c78712281c8a05519b0ef61e64893059d57c85f7270512d953e96820edd94883725956eeb00966b6ae23891931d1a5a2ec4a6b36f8a85ab7b30dd16945dc7ce22c42af14a24675d2acdcda1835c3473a2e8d8b92c03c8c84ccf93d982c7d0ade81eff2dcfa58c1b705051ac7ed9e4fb6a2e4da06be2842c29d270f1a4f1cfc648df8f64e68ec0d0d295532ba3973cd0f918f49014dcff06ccec59272e79b722b555dd4e3eb64ae6835a44e8a90a0d8ffdd9e7f6bed88575d323b665ffe2b611fd99f7323b38d9e92dcc1bea39b92f5d2e07c6516e056289fc157a3c1af991b2facc872a1530bb31774bf6a7aa8fedecd53b5523eaef54a19580fb1b58f1e918d765581d132490846b0458687987b06b5d832cbaf1ac4f2addb5015e3acbe4dd2b0e0047bfb33e9ad3861fa9a9754f75457cd73d2a4", 0x1000}, {&(0x7f0000004800)="cb510c392108c71183f70dc6b51cdc0a163dfa706a5e14e459329a8b8e4e584118306219b4c8fba23698bd3bb4fcd1767fc30c19e62b0b573560cfc55e6e43acc5dbb2557d0a24b8f35ab9475d8eb566af1b23cb660de85281126ed0ece962b132a4b6b3451977472dfedf6f0f809bceb4cabdcd3917e8a425f7057e5cae48cfce1316206fecfb5b1bc6c30bf33a80aa6c4ff0c0c511ab0927a609c05ce3119398d9d0b2db1c068c16bafb90d52d3da142325ee13fb47c61a75c7d7e24725eabd767040b", 0xc4}, {&(0x7f0000004900)="f98c6f1160ec5ef26de69e5fe8c238fcf7b4a31dc79ffaf13e4fa2e7d38793cfc934f654c3d468e858dc669eba36b91ba47cc11feea7a1e07d8a64e276828a4c5fe88db640f4025f7ff8ddbb4901f43f82af5d27e3b54959a0dd1400b03f0a27dc6b6b5bb71594a0f4500f4ec7a2e421d11fbc8fe540c7d62560e7e4f9f32faf7db18c4f80cfc524f1d04ff5e32722ad11035f90b1f0b7466874808568a8e2ef15953126101761bb0e8e0cbcec768d53a5d4b890a0ac9b0568c7f262e94a44f6699317d400d71e654dd4e8db", 0xcc}, {&(0x7f0000004a00)="a29d3ff5cc813436fd1dd17c6a3fddc27539021df472ad69f03ae9ca940926a82c971b5fbc485fc5990b66d5a5457db1dfd2be7c3f68e3d2da935025f295abe51caa970cdbffe944bb25a94dfe5e132457d59728c7d0553d8ccd000d4682657c65af45990d351afc07a9b080284d5452e8c86cee6272f95ab8543cf4de8a7460579f153acb65353e1bb88ea9924b689382b6d8302e5a2dbe8f09e5639c982c45bfff0e361b757b08417b4465f2fb85f0b7d2b123378b192a750e865a817b", 0xbe}], 0x8, &(0x7f0000004bc0)=ANY=[@ANYBLOB="0000008100"/16, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000038000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r5, @ANYRES32], 0x58, 0x4000}}], 0x3, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rename(0x0, &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r2, 0x0, &(0x7f00004f9000/0x3000)=nil, 0x3000, 0x3}) socket$qrtr(0x2a, 0x2, 0x0) ioctl$IOMMU_IOAS_COPY(r1, 0x3b83, &(0x7f0000000100)={0x28, 0x0, r2, r2, 0x4000000000800, 0x7002, 0x400000000004002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000140)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0, 0x1}) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000280), &(0x7f00000001c0)=0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0xc00, 0xe}, 0x80, 0x0}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080008400000000814000580080001"], 0x5c}, 0x1, 0x0, 0x0, 0x20008800}, 0x0) r9 = syz_open_dev$radio(&(0x7f0000002100), 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r9, 0xc054561d, &(0x7f0000000200)={0xffffffff, "63ff8791919a5b70f918110cd2e1f7fbd15ec7918e806deb14c0f82379b49307", 0x3, 0x1, 0x3, 0xcd5, 0x4, 0x4, 0x400, 0x4}) sendto$inet(r0, &(0x7f00000000c0)="268fd64c41a98beb630fdb2d6569c3be21ad62c8e00cdf651d57e995a96ff63b06f4023e7d5589118167af1a4197358383d9ea7f87559cf2225737350cba569fe3be244efee8069fadbb2af9bab2e202e223ea54d9db99b84643e7a03090f277baf22b2673de5c0be131f84b1a2e384df5e1827fdceebf91ebc3", 0x7a, 0x4004004, &(0x7f0000000140)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) 1.816986341s ago: executing program 1 (id=522): mkdir(&(0x7f0000000000)='./control\x00', 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x2000, 0x0) fcntl$notify(r0, 0x402, 0x8000003d) fcntl$setsig(r0, 0xa, 0x21) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$inet6(r3, &(0x7f0000003b80)=[{{0x0, 0xd, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1, 0x0, 0x0, 0x7000000}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x23fff}], 0x1}, 0xff03}], 0x4000070, 0x8000) setsockopt$MRT_ASSERT(r3, 0x0, 0xcf, &(0x7f0000000080), 0x4) write$dsp(r1, &(0x7f0000000040)='\x00', 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) rmdir(&(0x7f0000000040)='./control\x00') 1.756321263s ago: executing program 0 (id=523): syz_mount_image$erofs(&(0x7f0000000140), &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x6005, &(0x7f0000000040)=ANY=[@ANYRESHEX=0x0, @ANYRES8], 0xc, 0x209, &(0x7f00000001c0)="$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") mount$fuse(0x0, &(0x7f0000000000)='./cgroup.net/devices.allow\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) 1.312220686s ago: executing program 0 (id=525): ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, 0x1b, 0x15, "54c870a8634edc745dfa1ab0a34a10622e64ee4edb80cc9bd36b93b23733e6180aa539ec68114b5aba1c98911df5ba72296d56740d56ea4d0434aa3592a47913", "fc0177a6f3bb16d509568693e0e50bbf206c0500997c00040000000000005f8a654e14dc7c4cc6020000003b3acc9f02cd3eac8be657b534bfa1142100696b29", "c921095856cdf9fd8199034f3b875fe5090094e3c7a178fb1c16c99189819ef4", [0x9, 0x6]}}) r0 = socket(0x1, 0x803, 0x0) poll(&(0x7f0000000140)=[{}, {}], 0x200001d0, 0x20002080) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000780)={'ip_vti0\x00', &(0x7f0000000a00)={'syztnl2\x00', 0x0, 0x10, 0x10, 0x2, 0x8, {{0x5, 0x4, 0x0, 0x9, 0x14, 0x66, 0x0, 0xa, 0x29, 0x0, @multicast2, @empty}}}}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0800000004000072000400000009000000000000a4795ee1186203c498144529aef78a2ff954029d9c1c3b227a7d3c8c78e0abd2b335b792842ca7fba7ab8735", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000140)={0xffffffff, "030000000000000023000000debd12ffff00000000000000000020000400"}) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0xf000, 0x3, &(0x7f0000009000/0xf000)=nil) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x6, 0x4, 0x8b, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x40, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0xa6, 0x3, 0x0, 0x5, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x1, 0x1, 0x1f461e2c, 0x7, 0xe660, 0x4, 0x7, 0x104, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x4, 0x5, 0x200006, 0x8, 0x4, 0x1, 0x40], [0xfdfffff7, 0xffff, 0x134, 0x7ffe, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x1, 0x7, 0x5, 0x0, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x4009, 0x400, 0x5, 0x800, 0x5, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0x10c, 0x4, 0x9, 0x0, 0x800, 0x6, 0xb, 0x8000, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x7, 0x9, 0x8b3, 0x42, 0x3], [0x400, 0x4, 0x0, 0x5, 0xfffffefe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x1006, 0x8, 0x83, 0x80000003, 0x9, 0x3e7, 0x9, 0x5, 0xffff, 0x2, 0x800f38, 0x5, 0xff, 0x6d01, 0x5, 0x38, 0x800003, 0x101, 0x8, 0x100, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0xfffffffe, 0x3, 0x7ff, 0x7feffffb, 0x1, 0x0, 0x2, 0x0, 0x1a, 0x1c, 0x120000, 0x9, 0x6, 0xaaed, 0x6, 0x65], [0x9, 0xbb31, 0x1, 0x10001, 0x5, 0x938, 0x6, 0x6, 0x0, 0x400, 0xce7, 0x20001f7, 0x2, 0xf58, 0x5, 0x80000001, 0x101, 0x10000, 0x6, 0x7ffe, 0x8, 0x200a620, 0x4, 0x5, 0x1, 0x2, 0x800014c, 0x60a7, 0xe, 0x6, 0x2, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x2, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0xffffffff, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7ff, 0x2, 0x6c1b, 0x0, 0x4, 0x2100005, 0xa, 0x1, 0x40200, 0xffbf2441, 0xfff]}, 0x45c) pselect6(0x40, &(0x7f0000000100)={0x0, 0x2, 0x1000, 0x0, 0x801, 0x100}, 0x0, &(0x7f0000000240)={0x1e, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f00000000c0), &(0x7f0000000100)=r2}, 0x20) syz_usb_connect(0x2, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r4, &(0x7f0000004280)=[{{&(0x7f0000000000)={0x2, 0x4e21, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private=0xa010101}}}], 0x20}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4000880) setsockopt$MRT_DEL_VIF(0xffffffffffffffff, 0x0, 0xcb, &(0x7f0000000080)={0x0, 0x0, 0xb, 0x3ff, @vifc_lcl_ifindex, @broadcast}, 0x10) r5 = syz_open_dev$sndctrl(&(0x7f00000007c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r5, 0xc10c5541, 0x0) setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, &(0x7f0000000040)='@3.\\-!+}\x00', 0x9) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f00000000c0)={0x0, 0x400, 0x10, 0xe3e0}, 0x10) 1.188367414s ago: executing program 2 (id=527): syz_usb_connect(0x2, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="120101028f671155f00a3170041e2000fffffff900"/36], &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x5, 0x34, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000892e79106d042107259c0102030109022200010000000009040000000e"], 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x9, 0x6, 0x9, 0x8, 0x40}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) syz_genetlink_get_family_id$gtp(&(0x7f0000000100), r2) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a300000000034000000060a01040000000000000000050000000900020073797a300000000008000a40000000000900010073797a30"], 0xa8}}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@nombcache}, {@nogrpid}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000001c0)={0xffff, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000200)=r4, 0x4) openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x511001, 0x488) 999.248637ms ago: executing program 4 (id=528): sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x30, 0x0, 0x413, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x1, 0x80000000}}}}, 0x30}}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="7f454c4600040000000000000000000003003e00e9ffffff940200000200000040000000000000000000200000000000000000002d8f38000300feff0500030001000000030000002dffffffffffffff06000000000000000800000000000000a12f0000000000000700000000000000010000000000000000000060fcffffff0000000053680000e70000000000000000800000000000000500000000000000d9ffffffffffffff000000000000000003"], 0xe8) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(0x0, r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, 0x0, 0x20000000) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEV(r1, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x14, r2, 0x100, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x5000) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="68000000cdbc1f5549595a89fa5f3a4d479a94348d4d3023d4660021dc918d665a2a363c06bb5d8923e33d5afe3f7a199d4f76bd1af3345cdd52bfd81cfea40573fea46a2d516a0389531a8f3c00ed", @ANYRES16=0x0, @ANYBLOB="000327bd7000fbdbdf25010000000000000009410000004c001830000000696200"/98], 0x68}, 0x1, 0x0, 0x0, 0x801}, 0x44) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0x2c, &(0x7f00000006c0)={0x88, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @rand_addr=0x64010102}}}, 0x108) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x7, 0x4}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f00000001c0)=0x3b) r4 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0x0, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0208000004"], 0x48) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0], 0x3c}, 0x1, 0x0, 0x0, 0x3f5bd9f5ab3ad8f3}, 0x4000050) open$dir(&(0x7f00000000c0)='./file0\x00', 0x20000, 0x2) 936.082351ms ago: executing program 4 (id=529): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000003180)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000500)="e9c9c22b72771774d2d5211e3a2ac05a30bfc6fdc2c9fcb329d9949e00e882c2d555ac9b3fb59db05c2d0269bbf7e01218b7e3169af99a371cb8a64dbff785df29528b087e309d756317811037727b2b8cdef2865eb9ff5d57d8282f19ecbb5ace7a04b05c72042ad0ea0d465b82768de1d916faf5173953f9dd0cde90c9e43a322d0664df0f20fec228a9c605a088ecc9a7c6e153d9c1a5b32ec1baddec13b929792423c043ef70ad9936c996a43ca5f91fe81cee87b38ade2ca69fdccc093404c9bf615ed6c9af78ccbaec88b0f078577d8374e6", 0xd5}, {0x0}], 0x2, &(0x7f00000009c0)=[@dontfrag={{0x14, 0x29, 0x3e, 0x8}}, @tclass={{0x14, 0x29, 0x43, 0x40}}, @hopopts_2292={{0x1020, 0x29, 0x36, {0xff, 0x200, '\x00', [@padn={0x1, 0x1, [0x0]}, @generic={0x2, 0x1000, "34406773f725fafd72bf2e5b5473a5576024d5cb16177b3467eec9db021c9ad13fb1a43a3a38dbb70a73447e069235b4ec9dddcafdecc4ce0ddb45562740ee948309c1578a4531bd8fbbb2f6769162618e0958fb9a07792ab3d97dc056a8815d3a306d8c9bce11cbdb9aed582f5d77cf44fc4f9568c9f61f870b1d26be0e1af182f5f16ba1302429a3e5ddb6efdb214e9c748e5e21a835791d0b49d4dc3cb6ab87ca019267b66473193be902462664c2407e218cf2907f786c739f13f35bba7175e92217c5f99f103dadd4f78acab422cbc2b68a8262c05018a95f63ba39e74a5842d315bbc9068dcba81981ed85809436590d512001badda7165735375250fb039b466f4beddc6f7fbde41c5ce7d65598c556174780ca62fc03802a70d8cc802ad75577537e9dcac38cf8cb29ab027f4c6b16a78bd1af44d0353f6faa55c6d758c8a8114475c37fa64dbddcad403bda0319f408c1bed3b6babd09c2bcbfd088743176a9712ee67b2be715b8074e268d4e46a9eb8965c5cbe6e17c5bcda05ba3ff76c472c2929a2c6bbf4a4126cbdf99d4add997c092b7abd8d09c0cba7aa07b2ecb54aa4f9c6b979f60de7d6f05fc35ed0e5a0bcc6ffa4abf4c9d5b67c6bf45aa46924b02cde803cc249d5fa323d805384b8b9d29c45ddf512df00648bfda1465ea30dbfb8bf6b5e49af13ac9039ce276ce647713230b1bb5ee0e7fe49ad8752f32a96c6e3c5dc514a151971e0a8a6220a22bc2d48bb91f1c1de664963acfb6961c0f1315da00f4a925e6cd2d028dc2d16067082913579f45df91f453d60ee6c31e6ea4d9f555e108b9da104b3216fea3cc8ec18b196f0fc75f65b66df9706f1a6a8deb2ebcbb4575e9195e36611631ad4afd8cc0ed624d69f5c318d4a21f663ef281e423651dcf3e2a6083ee03544741dc40c15f8660a808b1167282146062a2950564ddf25046678bc6129e1cdc2e8486c6eeb1c8c61e711c213525f06337655a9af5dadd3bd6e4aca4cdb9de960342f9dcfa15f8ed700ee94b5b6ebe155bfb2ab72dce4dee00c42ee4e0e1690e7688f4495283310513c02e6ece777faf24ac7760cc2e779624579ff055a6485c19f451be9bfdeeb5c938b4b444f3d87bff4b42baf1bc749cf6ccf114702e4b5c9a784da69275d62b199d0989a007154ce605a57522d130a123485f607f7ad36a4440d16f8ea694d2fcf860ee12639c2e1999e93cd9ae6889eecdac7cc29e434e09357182d46cf81fb749f613893703e1400902c1510b5eb825da61c0edc3d7216bd155990cb5d2a9ed047e9a0ad8b4daad10e9ed8537220507f6c58dc4b3bdef637c979dc723b0a80a04714d83d26fa45060fa2f381c9844f20687d429834c7eb27d0f45245b9fa922b76108726e14829579066c9e8db025592f582a71264d57e908d5c278bf85f9c6d1603b9e5a81e43c41dc9e98eeeec8a5749fabddd473b49c3206832d3b29c15670f4fb581b658e0660869dc169e5f182edd5135867ccdeb44bd7e0e3b51953ed24bdf75c30095fc185a928a21d6c8b10b48f4452a3a3f7c2b46a1c8846dc4b561156de441953489a77e93ddecb035ae79d49f80d1cedfe4ebcc5ac11656787a60cb31112fc6df9e525458597af6decc8dd2fc4418cc5c5b3a1700beb6562fdfd056b5613c3d2bde58a40fa73010ab3b2a7de8fe63cefb37d7a9fab799ea732cd665c7cfbbd232d0ace0a82cb84def61ef31ecf83e4e9a0519a5e87ef267fe6ade7c99fa9cba2b3bca4fef36989786ee84d17e4f676c35cc372bac8cb25ee592d0a46cbad8686b0fa7f0e3a9f6a10cc60529773d9ba36b069c208cb5061b50d39c295d4d0ce37aa1af7cdfc5e0b77ffa60315c2b436b169d1003c80b2b95755ff6b383182167d27dade0204ae30a41a181b099dd9c63e7fe7b5cffbabd3237f4c3e225dbbd252c8a33a14364b00dd01a3f502ab858d756c3ceb36853acc81cc929b528eece698ed4a9077b76885015e54972023405e58087233ccd7fb6dda868ad266cfcb56d9abcb581693dd1b0785455c65ebd0e72d17feb6facfa008d406ac1395f1f2826a094d66b77959e22796ff7ae21e1a3e0c2d637b50dfeec4a3963f1407a80686c629a9545cb0924ddfa5c00ea7b66280ed0e84123e0ba93b33667367e722bdab50706cac5f3f00ed2bf54ff2980a7e6a75ea2d911dd55d4f131ad1d29f1b46485f871163f241e8e8a5a713c096bf581d4ce9282a3cf258feb499b7070b8730c8b847e3d86cdb0d62deb0855896a957d06e6730afa07bc434296aeb7956a8f85aab7ac1c45367ea999bc8f4ebe900312f86effaaabe417274c2337198f05ac7ea1b7cccc388f7ef20be03ba68afaaf6b8c44c3921715a6c82d8ee82118e7d5449bd1a8e1b5b6ff567f8ea3a1916b9736e4d9c5f36759fd9b9675e979c3ba9042330c78fe7f3d89ba462bca4f60ba20de081b9c51213c9dec069cea2b38bf51a8838f253a801e78e5cb16b746ed84834cb4c7aca19604715f44bdcaa2c65bb7a353ed298c50cb20cb3efe60d51f6ce5eac5eceeb0b57d9dea71ff95bab6f93c7a2977fb83714e9593b46310eefa223002fe9b1226feae26867ce538fdd60408afbd0098e261ea67bd06c9ce7ceec02fdf3257bb99ea03701fcbb0cbbcb24432fde8168e63ee940e5d4008abd83ed30622f0b143dca8fa3c9a0a6d58a89c0bacf69daa1e6c8a71c4cea736836865aa5907954ec7c09443bb04675be6ff29a31c173df9e2b3c26208b109df10a8caf674392c9a5d05d17064219e644285d77d28bc636f1d6746cc0a0b6bb0a549947c0367a906db3c56d2ea41c71f557f684f888a6cdcc4a3cca7b4edf1fbd65c3d7cb537391aa252080fc5568e23b3edb3ea39e0e7718d3e1ac3d631d7a91390f1735a2a74d3c899294adbae1ba9cf9a343e950c9b5ab35a284b1bb063d1f733ec989d2d4cffbfb081602adfcd285461598a9aac75993067e1f7c30470d8f623694c2c17709551ccd32c7e1af37e003cff1a9ad4e64912819dea1252cf10afe53d5a2ada5c8aef90314468ff9efd15c5c9f3379c2b61c772f0b788c6f48ba96214918d81c5302cb23baff1a01832a70420e8b6e48c037c4e9e4529e8ff6fb16059cf2022fda0f4eccb7ea54b57b896a6034a8c2ef0d8a6923c502a0dee2db30125ea80212b5319b95b6df3562ea2ca245f40fab52f75d303cbc5c4e62202b5d07a17ab04df306edbb9736fd27cea1cff4402b15118e1fc6808f76634e531d555594b112ecaad64e488186f7ca7b122d74b91c59d26fdc247d6a2f521c9d5f92054550cad2827bbe486b627225d4e0d2ff34e4110ac622a4fcf0a45e5e6846f41e5ecd74f64124ac66c635717b23b7bcc7f10ef8004aa11b297f3e7bd1954432fa9d50560b1c4f9d80f2bc4845254cb66de69d44452581e60dec6e82d62afdc1ff809f626273d98c621274df5bc2d797f662d313a826e229eac936cf879d6af95c440c7f93c479d66521e54e5a9bb1c63b49ccd08398c14e370c9dbe543f380d579097d7ce034a54f9c78fa247b46c64f1cd2e12dcb39bf942b103c9a9cb20b3fdea8488003e736674776da2c4208f1ef73963ee90ec1e4314db22479a18d82d7f5c84bddeb65e7ddd87d28f4a927c7bcc27207749dd814bbb09213cb2d5cfab7535ef97e93f22a191ab0f4cc311f45616fdcef7979eccb888c3ba4291e33aa3a9cb8858a3b5eb4225f9450d419aa72132c2fddbec0e140559a32952ec0d5dc7d4fc94b6453dd333afd73a20366d8fe775e3ee190cb752f22131aec38664998b7ff7b87114412189fc10996b555b701359a82a67bbf57a58abdf42bbecea240d2bb9244b1dfe42af5bb1abe50767a13aeb06f15be324ec93b40746123f659a059cddf672993192c4637e9c96ad269c95ac8a0a598eeb7b7a607154feea014b8ead0aa54a65de7ebeb342cb044dd43b62c28858cd4838035d4bc616fc99bf3794bbea3b93c9a03aebfafe2fd7c324823962271f73cb69208242df28b07125c38ed97529322c7b7916019a3e8426df7814a084e1418e47705e5deefa726cef6ffcf891ad1cea9e8c8850bfc1e11033b22ee3d5e099e6c27b6bd29b5c93605feffcb6e4d5e985c25d5d87e09af4cdfe3ad280f05667252161509edf2956bd96ff942dc6adc09c88769a5e84a3d498663798c06409c33737e51e7aa16ff8d49b4f8f71261d20a8dfa2e01ee150bddfa4a7ecff3ab12495be196c2f9a2d7c7b4b999bd73b5cfd7833c16c86714f8b388c1b08eb3a223c971a17a0b1d10172c1abe79b154cec6ccd6877dd8cd551afc1c19941f1811e4e7147086888ea1153a2b8ce98a7ce07eb91c20e697e311470984b8672dd88babe2b8aee72f797bd8417fc31d9caf9ffed7715bd1949d2816f64de8ab45c078706e5c875bcc70464e84f479275fe240ce28002aee4d6cb91be93fc0e67355b803e0808e1a06372075cfae961318a6893be50444059f3a42ba626dddabb23d65b1fc7070d1866a81c4dc99caab008708840a647c3f3fcad2ced68b2ec1691fcbd455f6940ff5e18c735b7d209e16348bcac79237a0a17c0afb1927bbd82526e01092fbde5fc8448333dcb3c6b7be993f0f76168f2c94369ba64ea0a330e7fc55569b5ca25e39e3534d6f0d1179bffa4ac377db8a414b14b3c56cd31be404340b3a76247c023bdce903e9ae5cfc5fb15cc3b4cb3f7631a33cf19ba43f2b99e9929eb107e55c370c44354d533512350d4fa54f0be4e51f0942d6baab492dd64d4528ed8f3901e8b9ed06c70af6d38be0152ede5648728fe9309b1bc8baa54fe56f2551a835ff9abecc82b7eca90c95170ee49de42f3dc9e934acb807c22c359a9db5e2770c682381b549dccea6bb4304d08889a401e0fb3a52c432c41b04a34e9b2168716a621e1f62099dcd8aee4a73f18a7e4ebf191bf20fad7686a00edb643e2a36ff58e4ca67354101081777366275887cb8c1a6cdc1f3c003c050fec6c3ffa1519c3b990a96cc077faea9f61d52d86f1f12c6583684209cd3c276ad7ff0968e36e63d61fb6214311f11dc1306660615b870528de040e8c70e341d2ceffad3a61f9651f26fe48af4b6454dfc9f4fb96a11ed2ebdc34c0507be0f03b3c5d7311916f075e0023f106ef169150a829504020f650d01df3dd4d912d0af15eb9dc4fc334edcc0f1210e6ab6a8a2451230642841829eddd2abf5c6077043d6e510c2f1ad3cdb4eb735c1762c7b156edbc58975374e58a1055ba8ab97c569fc8bcb854ed500ffce614178d7c8bbfb7ae6f41cc321835fb7dec73b5b395eb3fe33f287d20b0c68b5503c67cf4c1c99b8b55490232e8af4e81f0d11a7aedeb3d9b49c1461f8fd9a58114f96c069ce6b5175df47fa15dddb6b53ed5592829e600305e9272e55b322bc39c2f77c09f4608cd20bcb5e106e86deedf65d2d58caf9f139f686a90196c01ac27374b57ad4fbdbb62efa49ccaeb2e6390b8ac9a5598635e8f49644c6c44b689116996404df88c3be109aa8f4a141c0f4b6047d421d5d194e8dcf8a368b6738deb841ce877fccfed7486179b772c51e742e229a1ef5c43c3ea4cf153026eec5da26e143294c8278e434c611fd8221fa57fa1c7c2165a8ebac10fe67046040416ae2526fb69e98e5dca0ea53951d738fa791dc949083513b5056197e7b6782fa669b49e337d26b591532e715c63a4a22ae84e92fc71e48df53530a72aa3af32879d456ee665599f6de9524ae160ade95827413d98484d31ea010f0b06b804fe98"}]}}}, @rthdr_2292={{0x78, 0x29, 0x39, {0x2c, 0xc, 0x0, 0x0, 0x0, [@remote, @local, @ipv4={'\x00', '\xff\xff', @broadcast}, @remote, @empty, @mcast2]}}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x5eb26d13f52ac347, 0x0, '\x00', [@ra={0x5, 0x2, 0x1}, @enc_lim={0x4, 0x1, 0x1}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x3}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x16, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x4}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xac19}}, @hopopts={{0xb8, 0x29, 0x36, {0x33, 0x13, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @ra={0x5, 0x2, 0x4}, @pad1, @pad1, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @generic={0xa, 0x77, "9b78f4ff2949cbce9aaee8110197534f2ff22d8ef5ce2638be81ee1025ee4a201df2eaf422cf04850255ded127372242968690de546702b80b0230ddc01721f7f3fcb754055b47483a19d2da261ee74b0a60c933d42c8736bb48e6af10a3555966c6151538bb94079d8249452a1890168700b05aaec8d1"}]}}}, @dstopts={{0x90, 0x29, 0x37, {0x59, 0xe, '\x00', [@calipso={0x7, 0x28, {0x1, 0x8, 0x9, 0x1, [0x9, 0x9, 0x1000, 0x800]}}, @ra={0x5, 0x2, 0x2}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x18, {0x0, 0x4, 0x5, 0x6, [0xdc, 0x2b2d]}}, @pad1, @enc_lim={0x4, 0x1, 0x3}, @jumbo={0xc2, 0x4, 0x2}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @ra={0x5, 0x2, 0x7}]}}}], 0x1280}}], 0x1, 0x0) 865.012531ms ago: executing program 1 (id=530): mknod$loop(&(0x7f00000190c0)='./file0\x00', 0xfff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 862.914153ms ago: executing program 4 (id=531): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000003180)=[{{0x0, 0x4000, &(0x7f0000000800)=[{0x0}, {&(0x7f0000000600)="2c060bc4d7c397b3a125cdeb124fab1b678f549f7f443087c96f944e8bc105aa2a95ffb4122b3ea59dc6aca9d0188c144c3fb283c4708917b5529361506224cfd51c4412660c", 0x46}], 0x2}}], 0x1, 0x0) 740.318079ms ago: executing program 4 (id=532): mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) write$tcp_congestion(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f00000004c0)={0x1a, 0x1, 0xc0, 0x1, 0x3f, 0x0, @local}, 0x10) r1 = gettid() syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r2 = syz_open_procfs(r1, &(0x7f0000000000)='net/llc/socket\x00') read$midi(r2, &(0x7f00000023c0)=""/4096, 0x1000) read$FUSE(r2, &(0x7f0000000380)={0x2020}, 0x2020) 671.791998ms ago: executing program 3 (id=533): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x6}}, {{0xa, 0xfffe, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}}}, 0x108) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) getrlimit(0xf, &(0x7f0000000000)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmmsg$sock(r1, &(0x7f0000003ac0)=[{{&(0x7f0000000800)=@rc={0x1f, @any, 0x8}, 0x80, 0x0}}, {{&(0x7f0000002540)=@nfc_llcp={0x27, 0x0, 0xfffffffb, 0x6, 0x6, 0x4, "28839e3f0d065c97361e42d944b1661f81be1063c82d2dab2db7606161f1ab5e58037806c0ca1099295fcf6a9301135139f80cf8f8d42084a8d4fd41e5a157", 0x1a}, 0x80, &(0x7f0000000340)=[{0x0}], 0x1}}], 0x2, 0x20048894) ioprio_set$uid(0x3, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='blkio.bfq.time\x00', 0x275a, 0x0) preadv2(r2, &(0x7f0000000340)=[{&(0x7f0000000200)=""/261, 0x105}], 0x1, 0x102, 0xfffffffd, 0x3b) 502.450767ms ago: executing program 3 (id=534): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = dup(r0) setreuid(0x0, 0xee00) keyctl$restrict_keyring(0xf, 0xfffffffffffffffc, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x1000) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'bridge0\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x10, 0x5, 0x0, 0x400000]}}) 280.819746ms ago: executing program 4 (id=535): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000980), 0xffffffffffffffff) mq_open(&(0x7f0000000040)='..\x00', 0x2, 0xa, 0x0) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f00000009c0)={0x18, r1, 0x9e85ddcf5c0b3b2b, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0xc804) 0s ago: executing program 4 (id=536): socket(0xf, 0xa, 0x1000) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x800000}, 0x6e) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) (async) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00003d2000/0x400000)=nil) (async) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffdbb}, 0x48) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="28050000", @ANYRES16=r2, @ANYBLOB="010026bd7000fddbdf250f00000014000780080001001000000008000100ffffffff"], 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x20008000) kernel console output (not intermixed with test programs): different from the descriptor's value: 3 [ 132.397499][ T5750] usb 2-1: config 150 has no interface number 0 [ 132.397522][ T5750] usb 2-1: config 150 interface 204 has no altsetting 0 [ 132.399855][ T5750] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 132.399871][ T5750] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.399883][ T5750] usb 2-1: Product: syz [ 132.399890][ T5750] usb 2-1: Manufacturer: syz [ 132.399896][ T5750] usb 2-1: SerialNumber: syz [ 132.442910][ T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 132.597084][ T6252] loop2: detected capacity change from 0 to 64 [ 132.634392][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 132.647988][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 132.648067][ T10] usb 1-1: too many configurations: 32, using maximum allowed: 8 [ 132.672303][ T10] usb 1-1: config 9 has an invalid interface number: 57 but max is 0 [ 132.672327][ T10] usb 1-1: config 9 has no interface number 0 [ 132.672356][ T10] usb 1-1: config 9 interface 57 has no altsetting 0 [ 132.680376][ T10] usb 1-1: config 9 has an invalid interface number: 57 but max is 0 [ 132.680399][ T10] usb 1-1: config 9 has no interface number 0 [ 132.680426][ T10] usb 1-1: config 9 interface 57 has no altsetting 0 [ 132.716649][ T10] usb 1-1: config 9 has an invalid interface number: 57 but max is 0 [ 132.716674][ T10] usb 1-1: config 9 has no interface number 0 [ 132.716701][ T10] usb 1-1: config 9 interface 57 has no altsetting 0 [ 132.724682][ T10] usb 1-1: config 9 has an invalid interface number: 57 but max is 0 [ 132.724705][ T10] usb 1-1: config 9 has no interface number 0 [ 132.724734][ T10] usb 1-1: config 9 interface 57 has no altsetting 0 [ 132.733376][ T6254] loop4: detected capacity change from 0 to 128 [ 132.733832][ T10] usb 1-1: config 9 has an invalid interface number: 57 but max is 0 [ 132.733852][ T10] usb 1-1: config 9 has no interface number 0 [ 132.733879][ T10] usb 1-1: config 9 interface 57 has no altsetting 0 [ 132.735977][ T10] usb 1-1: config 9 has an invalid interface number: 57 but max is 0 [ 132.735998][ T10] usb 1-1: config 9 has no interface number 0 [ 132.736025][ T10] usb 1-1: config 9 interface 57 has no altsetting 0 [ 132.765578][ T10] usb 1-1: config 9 has an invalid interface number: 57 but max is 0 [ 132.765602][ T10] usb 1-1: config 9 has no interface number 0 [ 132.765631][ T10] usb 1-1: config 9 interface 57 has no altsetting 0 [ 132.770825][ T10] usb 1-1: config 9 has an invalid interface number: 57 but max is 0 [ 132.770846][ T10] usb 1-1: config 9 has no interface number 0 [ 132.770873][ T10] usb 1-1: config 9 interface 57 has no altsetting 0 [ 132.794439][ T6254] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 132.826475][ T10] usb 1-1: string descriptor 0 read error: -22 [ 132.826622][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=61.f7 [ 132.826642][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.832855][ T6254] UDF-fs: warning (device loop4): udf_fill_super: No fileset found [ 132.925964][ T5750] xr_serial 2-1:150.204: skipping garbage [ 132.926061][ T5750] xr_serial 2-1:150.204: xr_serial converter detected [ 132.941037][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.941297][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.075827][ T5621] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 133.096347][ T5621] Bluetooth: hci3: Injecting HCI hardware error event [ 133.121074][ T5624] Bluetooth: hci3: hardware error 0x00 [ 133.636426][ T5750] xr_serial ttyUSB0: Failed to set reg 0x0e: -71 [ 133.636531][ T5750] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 133.721596][ T5750] usb 2-1: USB disconnect, device number 6 [ 133.730170][ T6254] syz.4.124 (6254) used greatest stack depth: 18536 bytes left [ 133.856985][ T5750] xr_serial 2-1:150.204: device disconnected [ 134.079592][ T6258] sctp: [Deprecated]: syz.2.125 (pid 6258) Use of struct sctp_assoc_value in delayed_ack socket option. [ 134.079592][ T6258] Use struct sctp_sack_info instead [ 134.478466][ T10] video4linux radio48: keene_cmd_main failed (-110) [ 134.478490][ T10] radio-keene 1-1:9.57: V4L2 device registered as radio48 [ 135.162428][ T6280] loop4: detected capacity change from 0 to 512 [ 135.709469][ T5624] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 135.710076][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 135.715639][ T6280] EXT4-fs (loop4): Test dummy encryption mode enabled [ 135.715655][ T6280] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 135.715666][ T6280] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 135.755627][ T6280] EXT4-fs (loop4): corrupt root inode, run e2fsck [ 135.755725][ T6280] EXT4-fs (loop4): mount failed [ 135.818854][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 135.916205][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 136.091147][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.091171][ T10] usb 3-1: config 0 has no interfaces? [ 136.094913][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 136.102580][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC6, changing to 0x86 [ 136.102611][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 136.102631][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 0 [ 136.102652][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 136.102670][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 136.106084][ T9] usb 2-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 136.106108][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.106124][ T9] usb 2-1: Product: syz [ 136.106137][ T9] usb 2-1: Manufacturer: syz [ 136.106149][ T9] usb 2-1: SerialNumber: syz [ 136.128548][ T10] usb 3-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 136.128574][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.128591][ T10] usb 3-1: Product: syz [ 136.128603][ T10] usb 3-1: Manufacturer: syz [ 136.128615][ T10] usb 3-1: SerialNumber: syz [ 136.145333][ T9] usb 2-1: config 0 descriptor?? [ 136.183980][ T10] usb 3-1: config 0 descriptor?? [ 136.242413][ T4942] usb 4-1: New USB device found, idVendor=0763, idProduct=1033, bcdDevice= 0.40 [ 136.242441][ T4942] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.253747][ T1799] usb 1-1: USB disconnect, device number 5 [ 136.436547][ T6289] fuse: Unknown parameter 'grò&ºoup_iâVq3íéć]Í'1Êœ~ò;ŠõõbÒW×d—Fb®¹f00000000000000000000' [ 136.437467][ T6287] loop3: detected capacity change from 0 to 64 [ 136.448796][ T9] port100 2-1:0.0: NFC: Could not get supported command types [ 136.497876][ T10] usb 3-1: USB disconnect, device number 2 [ 136.524597][ T6289] loop4: detected capacity change from 0 to 1024 [ 136.553267][ T6289] hfsplus: Unknown parameter '/dev/vga_arbiter' [ 136.591123][ T6289] 9p: Bad value for 'rfdno' [ 136.726655][ T4942] usb 4-1: can't set config #1, error -71 [ 136.785385][ T4942] usb 4-1: USB disconnect, device number 4 [ 136.793538][ T9] usb 2-1: USB disconnect, device number 7 [ 137.182831][ T1799] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 137.199564][ T6298] loop2: detected capacity change from 0 to 64 [ 137.282516][ T6298] sctp: [Deprecated]: syz.2.141 (pid 6298) Use of struct sctp_assoc_value in delayed_ack socket option. [ 137.282516][ T6298] Use struct sctp_sack_info instead [ 137.346227][ T1799] usb 1-1: config 0 has an invalid interface number: 175 but max is 0 [ 137.346254][ T1799] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 137.346270][ T1799] usb 1-1: config 0 has no interface number 0 [ 137.346311][ T1799] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 137.346331][ T1799] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.410275][ T1799] usb 1-1: config 0 descriptor?? [ 137.412914][ T10] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 137.536586][ T6303] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 137.592511][ T10] usb 5-1: config 150 has an invalid interface number: 204 but max is 2 [ 137.592536][ T10] usb 5-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 137.592554][ T10] usb 5-1: config 150 has no interface number 0 [ 137.592594][ T10] usb 5-1: config 150 interface 204 has no altsetting 0 [ 137.597811][ T10] usb 5-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 137.597835][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.597852][ T10] usb 5-1: Product: syz [ 137.597864][ T10] usb 5-1: Manufacturer: syz [ 137.597876][ T10] usb 5-1: SerialNumber: syz [ 137.840987][ T6285] netlink: 44 bytes leftover after parsing attributes in process `syz.0.133'. [ 137.841645][ T10] xr_serial 5-1:150.204: skipping garbage [ 137.841687][ T10] xr_serial 5-1:150.204: xr_serial converter detected [ 137.921960][ T6312] netlink: 12 bytes leftover after parsing attributes in process `syz.3.144'. [ 138.029696][ T6312] loop3: detected capacity change from 0 to 128 [ 138.175706][ T6312] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 138.230388][ T6312] hpfs: filesystem error: improperly stopped [ 138.230425][ T6312] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 138.230437][ T6312] hpfs: You really don't want any checks? You are crazy... [ 138.230879][ T6312] hpfs: hpfs_map_sector(): read error [ 138.230889][ T6312] hpfs: code page support is disabled [ 138.242049][ T6321] loop2: detected capacity change from 0 to 64 [ 138.325934][ T6312] hpfs: hpfs_map_4sectors(): unaligned read [ 138.326321][ T6312] hpfs: hpfs_map_4sectors(): unaligned read [ 138.326337][ T6312] hpfs: filesystem error: unable to find root dir [ 138.650198][ T10] usb 5-1: xr_serial converter now attached to ttyUSB0 [ 138.851324][ T4942] usb 5-1: USB disconnect, device number 8 [ 138.869503][ T4942] xr_serial ttyUSB0: xr_serial converter now disconnected from ttyUSB0 [ 138.870887][ T4942] xr_serial 5-1:150.204: device disconnected [ 139.154128][ T6324] loop1: detected capacity change from 0 to 32768 [ 139.155439][ T6324] btrfs: Deprecated parameter 'usebackuproot' [ 139.155457][ T6324] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 139.278628][ T6324] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.148 (6324) [ 140.315324][ T6324] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 140.315364][ T6324] BTRFS info (device loop1): using crc32c checksum algorithm [ 140.412051][ T4942] usb 1-1: USB disconnect, device number 6 [ 140.443303][ T6335] loop4: detected capacity change from 0 to 64 [ 140.617988][ T2765] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 140.618707][ T6324] BTRFS error (device loop1): failed to load root extent [ 140.618746][ T6324] BTRFS warning (device loop1): try to load backup roots slot 1 [ 140.619040][ T2765] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0xc092cdc2 level 0 [ 140.619164][ T6324] BTRFS warning (device loop1): couldn't read tree root [ 140.619182][ T6324] BTRFS warning (device loop1): try to load backup roots slot 2 [ 140.619465][ T2765] BTRFS error (device loop1): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 140.619580][ T6324] BTRFS warning (device loop1): couldn't read tree root [ 140.619597][ T6324] BTRFS warning (device loop1): try to load backup roots slot 3 [ 141.021245][ T6353] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 141.198371][ T6353] netlink: 8 bytes leftover after parsing attributes in process `syz.2.151'. [ 141.374756][ T5624] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 141.374912][ T5624] Bluetooth: hci4: Injecting HCI hardware error event [ 141.376906][ T5621] Bluetooth: hci4: hardware error 0x00 [ 141.623146][ T5624] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 141.624179][ T5624] Bluetooth: hci0: Injecting HCI hardware error event [ 141.626158][ T5624] Bluetooth: hci0: hardware error 0x00 [ 141.966575][ T6360] 9p: Bad value for 'rfdno' [ 142.249947][ T6324] BTRFS error (device loop1): open_ctree failed: -4 [ 143.691669][ T6372] loop4: detected capacity change from 0 to 2048 [ 143.726502][ T10] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 143.803616][ T5621] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 143.887456][ T6372] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 143.915394][ T10] usb 3-1: config 150 has an invalid interface number: 204 but max is 2 [ 143.915418][ T10] usb 3-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 143.915437][ T10] usb 3-1: config 150 has no interface number 0 [ 143.915472][ T10] usb 3-1: config 150 interface 204 has no altsetting 0 [ 143.918567][ T10] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 143.918617][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.918633][ T10] usb 3-1: Product: syz [ 143.918645][ T10] usb 3-1: Manufacturer: syz [ 143.918656][ T10] usb 3-1: SerialNumber: syz [ 144.109766][ T5624] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 144.163301][ T4942] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 144.223695][ T10] xr_serial 3-1:150.204: skipping garbage [ 144.223746][ T10] xr_serial 3-1:150.204: xr_serial converter detected [ 144.490480][ T4942] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 144.490507][ T4942] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.490524][ T4942] usb 1-1: Product: syz [ 144.490536][ T4942] usb 1-1: Manufacturer: syz [ 144.490549][ T4942] usb 1-1: SerialNumber: syz [ 145.398329][ T6378] loop0: detected capacity change from 0 to 16 [ 145.771081][ T10] xr_serial ttyUSB0: Failed to set reg 0x0e: -71 [ 145.771138][ T10] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 145.816535][ T10] usb 3-1: USB disconnect, device number 3 [ 145.820208][ T10] xr_serial 3-1:150.204: device disconnected [ 145.895325][ T6386] loop1: detected capacity change from 0 to 128 [ 145.905116][ T6387] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 146.021398][ T6386] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 146.052576][ T6386] UDF-fs: warning (device loop1): udf_fill_super: No fileset found [ 146.558177][ T6392] loop2: detected capacity change from 0 to 64 [ 147.198210][ T4942] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 147.214665][ T4942] usb 1-1: USB disconnect, device number 7 [ 148.823588][ T6416] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 148.906379][ T6416] netlink: 8 bytes leftover after parsing attributes in process `syz.0.166'. [ 149.662855][ T5750] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 149.736807][ T6408] loop2: detected capacity change from 0 to 512 [ 149.761442][ T6408] EXT4-fs: Ignoring removed nomblk_io_submit option [ 149.761511][ T6408] EXT4-fs: Ignoring removed mblk_io_submit option [ 149.822824][ T5750] usb 2-1: Using ep0 maxpacket: 16 [ 149.842937][ T5750] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC6, changing to 0x86 [ 149.842966][ T5750] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 149.842986][ T5750] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 0 [ 149.843005][ T5750] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 149.843021][ T5750] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 149.907325][ T5750] usb 2-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 149.907352][ T5750] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.907369][ T5750] usb 2-1: Product: syz [ 149.907382][ T5750] usb 2-1: Manufacturer: syz [ 149.907395][ T5750] usb 2-1: SerialNumber: syz [ 149.940148][ T6408] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 149.940181][ T6408] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 149.986395][ T5750] usb 2-1: config 0 descriptor?? [ 150.051845][ T5750] port100 2-1:0.0: NFC: Could not get supported command types [ 150.127373][ T6408] EXT4-fs (loop2): 1 truncate cleaned up [ 150.187960][ T6408] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.225066][ T5750] usb 2-1: USB disconnect, device number 8 [ 150.657973][ T6438] netlink: 108 bytes leftover after parsing attributes in process `syz.3.172'. [ 151.661425][ T5614] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.141061][ T6464] mmap: syz.2.174 (6464) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 153.192881][ T5619] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 153.219228][ T6469] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 153.223371][ T6469] netlink: 8 bytes leftover after parsing attributes in process `syz.1.179'. [ 153.575981][ T5619] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 153.576012][ T5619] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 153.576035][ T5619] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 153.578826][ T5619] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 153.578850][ T5619] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.578868][ T5619] usb 3-1: Product: syz [ 153.578880][ T5619] usb 3-1: Manufacturer: syz [ 153.578893][ T5619] usb 3-1: SerialNumber: syz [ 153.661081][ T6448] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.663725][ T6448] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.729275][ T5619] usb 3-1: config 0 descriptor?? [ 153.753878][ T5619] streamzap 3-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 153.881031][ T6477] loop3: detected capacity change from 0 to 512 [ 153.979751][ T6477] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 154.010270][ T6448] bridge_slave_0: left allmulticast mode [ 154.010298][ T6448] bridge_slave_0: left promiscuous mode [ 154.010544][ T6448] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.019173][ T6477] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 154.019240][ T6477] EXT4-fs (loop3): failed to initialize system zone (-117) [ 154.040024][ T6477] EXT4-fs (loop3): mount failed [ 154.077700][ T6480] loop1: detected capacity change from 0 to 64 [ 154.145768][ T6480] FAULT_INJECTION: forcing a failure. [ 154.145768][ T6480] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 154.145802][ T6480] CPU: 1 UID: 0 PID: 6480 Comm: syz.1.182 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 154.145813][ T6480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 154.145824][ T6480] Call Trace: [ 154.145828][ T6480] [ 154.145834][ T6480] dump_stack_lvl+0xe8/0x150 [ 154.145852][ T6480] should_fail_ex+0x46b/0x600 [ 154.145868][ T6480] strncpy_from_user+0x36/0x2b0 [ 154.145883][ T6480] do_getname+0x77/0x250 [ 154.145900][ T6480] __se_sys_renameat2+0x43/0x2c0 [ 154.145909][ T6480] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.145920][ T6480] do_syscall_64+0x15f/0x560 [ 154.145930][ T6480] ? trace_irq_disable+0x3b/0x140 [ 154.145942][ T6480] ? clear_bhb_loop+0x40/0x90 [ 154.145954][ T6480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.145964][ T6480] RIP: 0033:0x7f16ce03ce59 [ 154.145977][ T6480] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.145985][ T6480] RSP: 002b:00007f16cc296028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 154.145996][ T6480] RAX: ffffffffffffffda RBX: 00007f16ce2b5fa0 RCX: 00007f16ce03ce59 [ 154.146003][ T6480] RDX: ffffffffffffff9c RSI: 0000200000000780 RDI: ffffffffffffff9c [ 154.146009][ T6480] RBP: 00007f16cc296090 R08: 0000000000000000 R09: 0000000000000000 [ 154.146015][ T6480] R10: 00002000000007c0 R11: 0000000000000246 R12: 0000000000000001 [ 154.146021][ T6480] R13: 00007f16ce2b6038 R14: 00007f16ce2b5fa0 R15: 00007fff677a5678 [ 154.146036][ T6480] [ 154.303106][ T6448] bridge_slave_1: left allmulticast mode [ 154.303133][ T6448] bridge_slave_1: left promiscuous mode [ 154.303412][ T6448] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.474104][ T6448] bond0: (slave bond_slave_0): Releasing backup interface [ 154.511661][ T6483] loop1: detected capacity change from 0 to 24 [ 154.567224][ T6448] bond0: (slave bond_slave_1): Releasing backup interface [ 154.783810][ T6448] team0: Port device team_slave_0 removed [ 154.825366][ T6448] team0: Port device team_slave_1 removed [ 154.828645][ T6448] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.831439][ T6448] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 154.867808][ T6448] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.870531][ T6448] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 154.930653][ T6448] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 154.954521][ T6465] batman_adv: batadv0: Adding interface: vlan2 [ 154.954537][ T6465] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 154.954562][ T6465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.954575][ T6465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.954584][ T6465] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 154.973234][ T44] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 155.125543][ T44] usb 2-1: Using ep0 maxpacket: 16 [ 155.129872][ T44] usb 2-1: unable to get BOS descriptor or descriptor too short [ 155.131579][ T44] usb 2-1: config 251 has an invalid interface number: 131 but max is 0 [ 155.131600][ T44] usb 2-1: config 251 has no interface number 0 [ 155.131628][ T44] usb 2-1: config 251 interface 131 has no altsetting 0 [ 155.135924][ T44] usb 2-1: New USB device found, idVendor=0545, idProduct=8333, bcdDevice=79.15 [ 155.135947][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.135964][ T44] usb 2-1: Product: syz [ 155.135976][ T44] usb 2-1: Manufacturer: syz [ 155.135989][ T44] usb 2-1: SerialNumber: syz [ 155.407606][ T44] gspca_main: tv8532-2.14.0 probing 0545:8333 [ 155.604181][ T5736] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 155.613611][ T44] usb 2-1: USB disconnect, device number 9 [ 155.721983][ T6495] netlink: 108 bytes leftover after parsing attributes in process `syz.4.187'. [ 156.592586][ T4942] usb 3-1: USB disconnect, device number 4 [ 156.626448][ T5736] usb 1-1: Using ep0 maxpacket: 16 [ 156.639484][ T5736] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC6, changing to 0x86 [ 156.639514][ T5736] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 156.639532][ T5736] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 0 [ 156.639554][ T5736] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 156.639571][ T5736] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 156.713199][ T5736] usb 1-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 156.713224][ T5736] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.713241][ T5736] usb 1-1: Product: syz [ 156.713252][ T5736] usb 1-1: Manufacturer: syz [ 156.713263][ T5736] usb 1-1: SerialNumber: syz [ 156.920920][ T5736] usb 1-1: config 0 descriptor?? [ 156.933835][ T5736] port100 1-1:0.0: NFC: Could not get supported command types [ 157.374481][ T6512] loop1: detected capacity change from 0 to 1024 [ 157.377346][ T6518] loop4: detected capacity change from 0 to 64 [ 157.389199][ T44] usb 1-1: USB disconnect, device number 8 [ 157.397900][ T6518] FAULT_INJECTION: forcing a failure. [ 157.397900][ T6518] name failslab, interval 1, probability 0, space 0, times 1 [ 157.397929][ T6518] CPU: 1 UID: 0 PID: 6518 Comm: syz.4.193 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 157.397948][ T6518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 157.397957][ T6518] Call Trace: [ 157.397964][ T6518] [ 157.397978][ T6518] dump_stack_lvl+0xe8/0x150 [ 157.398004][ T6518] should_fail_ex+0x46b/0x600 [ 157.398031][ T6518] should_failslab+0xa8/0x100 [ 157.398053][ T6518] kmem_cache_alloc_noprof+0x87/0x680 [ 157.398072][ T6518] ? do_getname+0x2e/0x250 [ 157.398099][ T6518] do_getname+0x2e/0x250 [ 157.398125][ T6518] __se_sys_renameat2+0x43/0x2c0 [ 157.398142][ T6518] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.398160][ T6518] do_syscall_64+0x15f/0x560 [ 157.398177][ T6518] ? trace_irq_disable+0x3b/0x140 [ 157.398196][ T6518] ? clear_bhb_loop+0x40/0x90 [ 157.398215][ T6518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.398231][ T6518] RIP: 0033:0x7ff45285ce59 [ 157.398247][ T6518] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.398261][ T6518] RSP: 002b:00007ff450ab6028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 157.398279][ T6518] RAX: ffffffffffffffda RBX: 00007ff452ad5fa0 RCX: 00007ff45285ce59 [ 157.398291][ T6518] RDX: ffffffffffffff9c RSI: 0000200000000780 RDI: ffffffffffffff9c [ 157.398302][ T6518] RBP: 00007ff450ab6090 R08: 0000000000000000 R09: 0000000000000000 [ 157.398312][ T6518] R10: 00002000000007c0 R11: 0000000000000246 R12: 0000000000000001 [ 157.398323][ T6518] R13: 00007ff452ad6038 R14: 00007ff452ad5fa0 R15: 00007fffc7431d08 [ 157.398348][ T6518] [ 157.611020][ T6519] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 157.689326][ T6519] netlink: 8 bytes leftover after parsing attributes in process `syz.2.191'. [ 158.666453][ T6512] EXT4-fs: Ignoring removed bh option [ 158.780899][ T6524] loop0: detected capacity change from 0 to 64 [ 158.867523][ T6512] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.991511][ T6535] netlink: 8 bytes leftover after parsing attributes in process `syz.0.195'. [ 160.602162][ T6546] netlink: 108 bytes leftover after parsing attributes in process `syz.3.199'. [ 161.399518][ T6537] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 161.472259][ T6537] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 161.763972][ T10] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 162.008393][ T6563] batman_adv: batadv0: Adding interface: vlan2 [ 162.008410][ T6563] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 162.008435][ T6563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.008449][ T6563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.008458][ T6563] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 162.707758][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 162.714342][ T10] usb 3-1: config 0 has an invalid interface number: 137 but max is 0 [ 162.714366][ T10] usb 3-1: config 0 has no interface number 0 [ 162.714405][ T10] usb 3-1: config 0 interface 137 altsetting 1 has an endpoint descriptor with address 0x11, changing to 0x1 [ 162.714428][ T10] usb 3-1: config 0 interface 137 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 162.714449][ T10] usb 3-1: config 0 interface 137 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 162.714468][ T10] usb 3-1: config 0 interface 137 has no altsetting 0 [ 162.716606][ T10] usb 3-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=32.10 [ 162.716636][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.716652][ T10] usb 3-1: Product: syz [ 162.716665][ T10] usb 3-1: Manufacturer: syz [ 162.716677][ T10] usb 3-1: SerialNumber: syz [ 162.762377][ T10] usb 3-1: config 0 descriptor?? [ 162.778922][ T6565] netlink: 4 bytes leftover after parsing attributes in process `syz.1.205'. [ 162.800556][ T10] xbox_remote_probe: Unexpected endpoint_in [ 162.953884][ T9] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 163.107002][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 163.107032][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 163.107056][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 163.110239][ T9] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 163.110262][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.110280][ T9] usb 1-1: Product: syz [ 163.110292][ T9] usb 1-1: Manufacturer: syz [ 163.110304][ T9] usb 1-1: SerialNumber: syz [ 163.128897][ T9] usb 1-1: config 0 descriptor?? [ 163.168910][ T9] streamzap 1-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 163.380891][ T6556] loop3: detected capacity change from 0 to 32768 [ 163.443649][ T6573] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 163.448299][ T6573] netlink: 8 bytes leftover after parsing attributes in process `syz.1.207'. [ 163.473462][ T6556] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.204 (6556) [ 163.623261][ T10] usb 3-1: USB disconnect, device number 5 [ 164.006785][ T6556] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 164.006816][ T6556] BTRFS info (device loop3): using crc32c checksum algorithm [ 164.118682][ T6578] fuseblk: block size(7936) > page size(4096) not supported by filesystem [ 164.237614][ T6592] loop4: detected capacity change from 0 to 512 [ 164.339825][ T6592] EXT4-fs (loop4): filesystem is read-only [ 164.806300][ T6556] BTRFS info (device loop3): setting nodatasum [ 164.806324][ T6556] BTRFS info (device loop3): setting nodatacow [ 164.806343][ T6556] BTRFS info (device loop3): turning on async discard [ 164.806358][ T6556] BTRFS info (device loop3): enabling free space tree [ 164.806375][ T6556] BTRFS info (device loop3): enabling auto defrag [ 164.806397][ T6556] BTRFS info (device loop3): max_inline set to 0 [ 165.696147][ T4942] usb 1-1: USB disconnect, device number 9 [ 165.846998][ T6616] loop0: detected capacity change from 0 to 64 [ 166.297637][ T5612] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 168.171635][ T6622] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.266834][ T6622] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.851823][ T6644] loop4: detected capacity change from 0 to 64 [ 168.989453][ T6644] FAULT_INJECTION: forcing a failure. [ 168.989453][ T6644] name failslab, interval 1, probability 0, space 0, times 0 [ 168.989485][ T6644] CPU: 1 UID: 0 PID: 6644 Comm: syz.4.226 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 168.989505][ T6644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 168.989515][ T6644] Call Trace: [ 168.989522][ T6644] [ 168.989530][ T6644] dump_stack_lvl+0xe8/0x150 [ 168.989557][ T6644] should_fail_ex+0x46b/0x600 [ 168.989585][ T6644] should_failslab+0xa8/0x100 [ 168.989609][ T6644] kmem_cache_alloc_lru_noprof+0x8b/0x680 [ 168.989631][ T6644] ? __d_alloc+0x37/0x6f0 [ 168.989660][ T6644] __d_alloc+0x37/0x6f0 [ 168.989685][ T6644] d_alloc+0x4b/0x190 [ 168.989703][ T6644] ? lookup_one_qstr_excl+0xc4/0x360 [ 168.989726][ T6644] lookup_one_qstr_excl+0xd8/0x360 [ 168.989751][ T6644] __start_renaming+0x1db/0x410 [ 168.989781][ T6644] filename_renameat2+0x38c/0x9c0 [ 168.989797][ T6644] ? __might_fault+0xaf/0x130 [ 168.989818][ T6644] ? __might_fault+0xaf/0x130 [ 168.989845][ T6644] ? __pfx_filename_renameat2+0x10/0x10 [ 168.989878][ T6644] ? do_getname+0x151/0x250 [ 168.989904][ T6644] __se_sys_renameat2+0x5a/0x2c0 [ 168.989922][ T6644] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.989941][ T6644] do_syscall_64+0x15f/0x560 [ 168.989959][ T6644] ? trace_irq_disable+0x3b/0x140 [ 168.989979][ T6644] ? clear_bhb_loop+0x40/0x90 [ 168.990000][ T6644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.990017][ T6644] RIP: 0033:0x7ff45285ce59 [ 168.990034][ T6644] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.990047][ T6644] RSP: 002b:00007ff450ab6028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 168.990066][ T6644] RAX: ffffffffffffffda RBX: 00007ff452ad5fa0 RCX: 00007ff45285ce59 [ 168.990079][ T6644] RDX: ffffffffffffff9c RSI: 0000200000000780 RDI: ffffffffffffff9c [ 168.990091][ T6644] RBP: 00007ff450ab6090 R08: 0000000000000000 R09: 0000000000000000 [ 168.990102][ T6644] R10: 00002000000007c0 R11: 0000000000000246 R12: 0000000000000001 [ 168.990113][ T6644] R13: 00007ff452ad6038 R14: 00007ff452ad5fa0 R15: 00007fffc7431d08 [ 168.990142][ T6644] [ 169.312916][ T9] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 169.422541][ T6637] loop0: detected capacity change from 0 to 32768 [ 170.003799][ T6652] No source specified [ 170.767084][ T6663] batman_adv: batadv0: Adding interface: vlan2 [ 170.767103][ T6663] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.767130][ T6663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.767144][ T6663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.767153][ T6663] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 171.693834][ T4942] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 171.846196][ T4942] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 171.846225][ T4942] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 171.846250][ T4942] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 171.889004][ T4942] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 171.889031][ T4942] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.889059][ T4942] usb 4-1: Product: syz [ 171.889071][ T4942] usb 4-1: Manufacturer: syz [ 171.889083][ T4942] usb 4-1: SerialNumber: syz [ 171.959564][ T4942] usb 4-1: config 0 descriptor?? [ 171.970777][ T4942] streamzap 4-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 172.063146][ T5619] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 172.134051][ T6675] loop4: detected capacity change from 0 to 4096 [ 172.213076][ T5619] usb 3-1: Using ep0 maxpacket: 8 [ 172.215556][ T5619] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 172.215581][ T5619] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 172.215603][ T5619] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 172.215626][ T5619] usb 3-1: config 1 interface 0 has no altsetting 1 [ 172.218533][ T5619] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 172.218557][ T5619] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.218575][ T5619] usb 3-1: Product: syz [ 172.218587][ T5619] usb 3-1: Manufacturer: syz [ 172.218599][ T5619] usb 3-1: SerialNumber: syz [ 172.264862][ T5619] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 172.484432][ T1799] usb 3-1: USB disconnect, device number 7 [ 172.545633][ T6678] loop0: detected capacity change from 0 to 32768 [ 172.563110][ T6678] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.230 (6678) [ 172.866364][ T6678] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 172.866397][ T6678] BTRFS info (device loop0): using crc32c checksum algorithm [ 173.120206][ T6678] BTRFS info (device loop0): setting nodatasum [ 173.120245][ T6678] BTRFS info (device loop0): setting nodatacow [ 173.120260][ T6678] BTRFS info (device loop0): turning on async discard [ 173.120275][ T6678] BTRFS info (device loop0): enabling free space tree [ 173.120290][ T6678] BTRFS info (device loop0): enabling auto defrag [ 173.120305][ T6678] BTRFS info (device loop0): max_inline set to 0 [ 173.350911][ T6703] loop2: detected capacity change from 0 to 64 [ 173.407783][ T1799] usb 4-1: USB disconnect, device number 5 [ 173.544244][ T5613] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 173.568075][ T6703] FAULT_INJECTION: forcing a failure. [ 173.568075][ T6703] name failslab, interval 1, probability 0, space 0, times 0 [ 173.568105][ T6703] CPU: 0 UID: 0 PID: 6703 Comm: syz.2.238 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 173.568124][ T6703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 173.568134][ T6703] Call Trace: [ 173.568140][ T6703] [ 173.568147][ T6703] dump_stack_lvl+0xe8/0x150 [ 173.568174][ T6703] should_fail_ex+0x46b/0x600 [ 173.568205][ T6703] should_failslab+0xa8/0x100 [ 173.568226][ T6703] __kmalloc_noprof+0xdf/0x7b0 [ 173.568246][ T6703] ? hfs_find_init+0xaa/0x300 [ 173.568267][ T6703] ? do_raw_spin_lock+0x12b/0x2f0 [ 173.568289][ T6703] hfs_find_init+0xaa/0x300 [ 173.568313][ T6703] hfs_lookup+0x175/0x320 [ 173.568333][ T6703] ? __pfx_hfs_lookup+0x10/0x10 [ 173.568360][ T6703] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 173.568388][ T6703] ? rt_spin_unlock+0x160/0x200 [ 173.568411][ T6703] ? d_alloc+0x144/0x190 [ 173.568432][ T6703] lookup_one_qstr_excl+0x12d/0x360 [ 173.568457][ T6703] __start_renaming+0x1db/0x410 [ 173.568487][ T6703] filename_renameat2+0x38c/0x9c0 [ 173.568502][ T6703] ? __might_fault+0xaf/0x130 [ 173.568523][ T6703] ? __might_fault+0xaf/0x130 [ 173.568552][ T6703] ? __pfx_filename_renameat2+0x10/0x10 [ 173.568588][ T6703] ? do_getname+0x151/0x250 [ 173.568614][ T6703] __se_sys_renameat2+0x5a/0x2c0 [ 173.568631][ T6703] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.568650][ T6703] do_syscall_64+0x15f/0x560 [ 173.568667][ T6703] ? trace_irq_disable+0x3b/0x140 [ 173.568686][ T6703] ? clear_bhb_loop+0x40/0x90 [ 173.568712][ T6703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.568729][ T6703] RIP: 0033:0x7fb8e0d5ce59 [ 173.568746][ T6703] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.568759][ T6703] RSP: 002b:00007fb8defae028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 173.568778][ T6703] RAX: ffffffffffffffda RBX: 00007fb8e0fd5fa0 RCX: 00007fb8e0d5ce59 [ 173.568789][ T6703] RDX: ffffffffffffff9c RSI: 0000200000000780 RDI: ffffffffffffff9c [ 173.568800][ T6703] RBP: 00007fb8defae090 R08: 0000000000000000 R09: 0000000000000000 [ 173.568811][ T6703] R10: 00002000000007c0 R11: 0000000000000246 R12: 0000000000000001 [ 173.568822][ T6703] R13: 00007fb8e0fd6038 R14: 00007fb8e0fd5fa0 R15: 00007fff37bcb6d8 [ 173.568850][ T6703] [ 174.173059][ T5749] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 174.302883][ T5749] usb 4-1: device descriptor read/64, error -71 [ 174.614881][ T5749] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 174.783284][ T5749] usb 4-1: device descriptor read/64, error -71 [ 175.041393][ T5749] usb usb4-port1: attempt power cycle [ 176.175549][ T5749] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 176.196705][ T5749] usb 4-1: device descriptor read/8, error -71 [ 176.433060][ T5749] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 176.455172][ T5749] usb 4-1: device descriptor read/8, error -71 [ 176.547072][ T6734] autofs4:pid:6734:validate_dev_ioctl: invalid path supplied for cmd(0xc018937a) [ 176.566804][ T5749] usb usb4-port1: unable to enumerate USB device [ 176.634303][ T6730] Can't find ip_set type bitmap:ip,mac [ 177.578773][ T37] audit: type=1326 audit(1779764642.166:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6733 comm="syz.4.251" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff45285ce59 code=0x7fc00000 [ 177.902873][ T4942] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 177.913667][ T6753] loop4: detected capacity change from 0 to 64 [ 177.915571][ T6752] loop3: detected capacity change from 0 to 64 [ 178.046113][ T6753] FAULT_INJECTION: forcing a failure. [ 178.046113][ T6753] name failslab, interval 1, probability 0, space 0, times 0 [ 178.046144][ T6753] CPU: 0 UID: 0 PID: 6753 Comm: syz.4.252 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 178.046164][ T6753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 178.046173][ T6753] Call Trace: [ 178.046180][ T6753] [ 178.046187][ T6753] dump_stack_lvl+0xe8/0x150 [ 178.046215][ T6753] should_fail_ex+0x46b/0x600 [ 178.046244][ T6753] should_failslab+0xa8/0x100 [ 178.046267][ T6753] __kmalloc_noprof+0xdf/0x7b0 [ 178.046285][ T6753] ? kfree+0x4d/0x6c0 [ 178.046302][ T6753] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 178.046328][ T6753] tomoyo_realpath_from_path+0xe3/0x5d0 [ 178.046349][ T6753] ? tomoyo_domain+0xd7/0x130 [ 178.046374][ T6753] ? tomoyo_path2_perm+0x299/0x760 [ 178.046399][ T6753] tomoyo_path2_perm+0x2c5/0x760 [ 178.046430][ T6753] ? __pfx_tomoyo_path2_perm+0x10/0x10 [ 178.046455][ T6753] ? __asan_memset+0x22/0x50 [ 178.046472][ T6753] ? current_check_refer_path+0x402/0x11f0 [ 178.046520][ T6753] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 178.046539][ T6753] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 178.046568][ T6753] tomoyo_path_rename+0x14e/0x1b0 [ 178.046591][ T6753] ? __pfx_tomoyo_path_rename+0x10/0x10 [ 178.046626][ T6753] security_path_rename+0x248/0x460 [ 178.046651][ T6753] filename_renameat2+0x4c1/0x9c0 [ 178.046667][ T6753] ? __might_fault+0xaf/0x130 [ 178.046689][ T6753] ? __might_fault+0xaf/0x130 [ 178.046715][ T6753] ? __pfx_filename_renameat2+0x10/0x10 [ 178.046747][ T6753] ? do_getname+0x151/0x250 [ 178.046773][ T6753] __se_sys_renameat2+0x5a/0x2c0 [ 178.046789][ T6753] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.046808][ T6753] do_syscall_64+0x15f/0x560 [ 178.046824][ T6753] ? trace_irq_disable+0x3b/0x140 [ 178.046848][ T6753] ? clear_bhb_loop+0x40/0x90 [ 178.046868][ T6753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.046883][ T6753] RIP: 0033:0x7ff45285ce59 [ 178.046900][ T6753] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.046914][ T6753] RSP: 002b:00007ff450ab6028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 178.046932][ T6753] RAX: ffffffffffffffda RBX: 00007ff452ad5fa0 RCX: 00007ff45285ce59 [ 178.046944][ T6753] RDX: ffffffffffffff9c RSI: 0000200000000780 RDI: ffffffffffffff9c [ 178.046957][ T6753] RBP: 00007ff450ab6090 R08: 0000000000000000 R09: 0000000000000000 [ 178.046967][ T6753] R10: 00002000000007c0 R11: 0000000000000246 R12: 0000000000000001 [ 178.046978][ T6753] R13: 00007ff452ad6038 R14: 00007ff452ad5fa0 R15: 00007fffc7431d08 [ 178.047005][ T6753] [ 178.047015][ T6753] ERROR: Out of memory at tomoyo_realpath_from_path. [ 178.084990][ T4942] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 178.085021][ T4942] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 178.085044][ T4942] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 178.088074][ T4942] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 178.088102][ T4942] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.088119][ T4942] usb 1-1: Product: syz [ 178.088132][ T4942] usb 1-1: Manufacturer: syz [ 178.088144][ T4942] usb 1-1: SerialNumber: syz [ 178.113547][ T4942] usb 1-1: config 0 descriptor?? [ 178.149832][ T4942] streamzap 1-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 179.720789][ T4942] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 179.876355][ T4942] usb 5-1: unable to get BOS descriptor or descriptor too short [ 179.877090][ T4942] usb 5-1: not running at top speed; connect to a high speed hub [ 179.878200][ T4942] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 179.880928][ T4942] usb 5-1: New USB device found, idVendor=047f, idProduct=c010, bcdDevice= 0.40 [ 179.880952][ T4942] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.880970][ T4942] usb 5-1: Product: ë£–ë“²ìš“ï·æª±æ’‘ᛜᾃ룂䟸嫠⊌슎輪䢳éˆã„䎑曢愑ç´äšî™©ê°¦î³²î˜Öˆâ˜‡á¸€ê¶‘絗㭉좙ä¸è ç¯¯å™êƒˆè§ï¶”è®áŒã¬ˆæ´ºëž´è—앇᰸魈廉씚â’귪厕駤蘤敵씾匢⫅뉓甈괵괮炸뢹⸡㿴䆻ిë™ê¸”䠜⢇ऻé“껼蹕♰éµä«±à ¦ê¿Šã¼œç˜›è²ˆâ¸é®šß«â¼ã¦¸í„¤î¾©ê‰¾ç³ªÃ摛뀳â‡Ð‘鈘厡갻蛟䅌 [ 179.880991][ T4942] usb 5-1: Manufacturer:  [ 179.881001][ T4942] usb 5-1: SerialNumber: syz [ 179.978979][ T1799] usb 1-1: USB disconnect, device number 10 [ 180.305917][ T4942] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 180.334645][ T4942] usb 5-1: USB disconnect, device number 9 [ 181.308226][ T1799] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 181.465859][ T6802] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 181.504791][ T1799] usb 1-1: device descriptor read/64, error -71 [ 181.547068][ T6807] loop4: detected capacity change from 0 to 1024 [ 181.563283][ T6807] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 181.661676][ T6809] loop2: detected capacity change from 0 to 2048 [ 181.715758][ T6809] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 181.716676][ T6809] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 181.716694][ T6809] UDF-fs: Scanning with blocksize 512 failed [ 181.795685][ T1799] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 181.814721][ T6809] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 182.158871][ T6815] batman_adv: batadv0: Adding interface: vlan2 [ 182.158918][ T6815] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 182.158987][ T6815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.159022][ T6815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.159052][ T6815] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 182.862475][ T1799] usb 1-1: device descriptor read/64, error -71 [ 182.910492][ T6802] 9p: Bad value for 'rfdno' [ 182.977743][ T1799] usb usb1-port1: attempt power cycle [ 183.180478][ T32] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 183.224168][ T6807] overlay: filesystem on ./file0 not supported [ 183.321190][ T6825] loop0: detected capacity change from 0 to 16 [ 183.346580][ T32] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 183.346612][ T32] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 183.346634][ T32] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 183.349292][ T32] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 183.349319][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.349336][ T32] usb 2-1: Product: syz [ 183.349347][ T32] usb 2-1: Manufacturer: syz [ 183.349359][ T32] usb 2-1: SerialNumber: syz [ 183.352481][ T6825] erofs: Unknown parameter 'cache_stretegy' [ 183.357491][ T32] usb 2-1: config 0 descriptor?? [ 183.375547][ T32] streamzap 2-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 184.273543][ T6836] loop2: detected capacity change from 0 to 32768 [ 184.294178][ T6845] loop0: detected capacity change from 0 to 4096 [ 184.295596][ T6845] ntfs3: Unknown parameter '›š0;jõ ' [ 184.330675][ T6836] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.277 (6836) [ 184.363262][ T32] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 184.381110][ T6836] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 184.381142][ T6836] BTRFS info (device loop2): using crc32c checksum algorithm [ 184.516813][ T32] usb 4-1: config 150 has an invalid interface number: 204 but max is 2 [ 184.516838][ T32] usb 4-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 184.516856][ T32] usb 4-1: config 150 has no interface number 0 [ 184.516896][ T32] usb 4-1: config 150 interface 204 has no altsetting 0 [ 184.521049][ T32] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 184.521075][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.521093][ T32] usb 4-1: Product: syz [ 184.521105][ T32] usb 4-1: Manufacturer: syz [ 184.521117][ T32] usb 4-1: SerialNumber: syz [ 184.787286][ T32] xr_serial 4-1:150.204: skipping garbage [ 184.787337][ T32] xr_serial 4-1:150.204: xr_serial converter detected [ 184.829325][ T1799] usb 2-1: USB disconnect, device number 10 [ 184.976211][ T6836] BTRFS info (device loop2): setting nodatasum [ 184.976237][ T6836] BTRFS info (device loop2): setting nodatacow [ 184.976251][ T6836] BTRFS info (device loop2): enabling ssd optimizations [ 184.976266][ T6836] BTRFS info (device loop2): turning on flush-on-commit [ 184.976280][ T6836] BTRFS info (device loop2): turning on async discard [ 184.976294][ T6836] BTRFS info (device loop2): enabling free space tree [ 184.976308][ T6836] BTRFS info (device loop2): enabling auto defrag [ 184.976536][ T6836] BTRFS info (device loop2): max_inline set to 0 [ 186.035166][ T5619] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 186.202980][ T5619] usb 3-1: Using ep0 maxpacket: 8 [ 186.213301][ T5619] usb 3-1: config 168 has an invalid descriptor of length 109, skipping remainder of the config [ 186.213339][ T5619] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 186.213375][ T5619] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 186.213398][ T5619] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 59391, setting to 1024 [ 186.213421][ T5619] usb 3-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 186.213444][ T5619] usb 3-1: config 168 interface 0 has no altsetting 0 [ 186.248119][ T5619] usb 3-1: config 168 has an invalid descriptor of length 109, skipping remainder of the config [ 186.248172][ T5619] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 186.248209][ T5619] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 186.248232][ T5619] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 59391, setting to 1024 [ 186.248253][ T5619] usb 3-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 186.248275][ T5619] usb 3-1: config 168 interface 0 has no altsetting 0 [ 186.260958][ T32] usb 4-1: xr_serial converter now attached to ttyUSB0 [ 186.322833][ T5619] usb 3-1: config 168 has an invalid descriptor of length 109, skipping remainder of the config [ 186.322874][ T5619] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 186.322911][ T5619] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 186.322934][ T5619] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 59391, setting to 1024 [ 186.322958][ T5619] usb 3-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 186.322981][ T5619] usb 3-1: config 168 interface 0 has no altsetting 0 [ 186.360375][ T6860] loop0: detected capacity change from 0 to 32768 [ 186.361411][ T6860] btrfs: Deprecated parameter 'usebackuproot' [ 186.361428][ T6860] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 186.389011][ T6860] BTRFS info: device /dev/loop0 (7:0) using temp-fsid 66e1cff7-c0bc-49a9-a925-4e4df2c413c3 [ 186.389081][ T6860] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.284 (6860) [ 186.401472][ T6860] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 186.401501][ T6860] BTRFS info (device loop0): using crc32c checksum algorithm [ 186.464134][ T32] usb 4-1: USB disconnect, device number 10 [ 186.470209][ T5619] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 186.470234][ T5619] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.470249][ T5619] usb 3-1: Product: syz [ 186.470260][ T5619] usb 3-1: Manufacturer: syz [ 186.470272][ T5619] usb 3-1: SerialNumber: syz [ 186.483021][ T4942] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 186.547040][ T32] xr_serial ttyUSB0: xr_serial converter now disconnected from ttyUSB0 [ 186.548289][ T32] xr_serial 4-1:150.204: device disconnected [ 186.613272][ T4942] usb 2-1: device descriptor read/64, error -71 [ 186.637215][ T99] BTRFS warning (device loop0): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 186.637403][ T6860] BTRFS error (device loop0): failed to load root extent [ 186.637437][ T6860] BTRFS warning (device loop0): try to load backup roots slot 1 [ 186.639180][ T57] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0xc092cdc2 level 0 [ 186.668097][ T6860] BTRFS warning (device loop0): couldn't read tree root [ 186.668120][ T6860] BTRFS warning (device loop0): try to load backup roots slot 2 [ 186.670087][ T6468] BTRFS error (device loop0): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 186.670218][ T6860] BTRFS warning (device loop0): couldn't read tree root [ 186.670236][ T6860] BTRFS warning (device loop0): try to load backup roots slot 3 [ 186.754192][ T6860] BTRFS info (device loop0): rebuilding free space tree [ 186.805960][ T5619] adutux 3-1:168.0: interrupt endpoints not found [ 186.819616][ T5619] usb 3-1: USB disconnect, device number 8 [ 186.852910][ T4942] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 186.874896][ T5614] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 186.992845][ T4942] usb 2-1: device descriptor read/64, error -71 [ 187.121407][ T4942] usb usb2-port1: attempt power cycle [ 187.522946][ T4942] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 187.549023][ T4942] usb 2-1: device descriptor read/8, error -71 [ 187.808677][ T4942] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 187.825758][ T4942] usb 2-1: device descriptor read/8, error -71 [ 187.849264][ T6889] loop3: detected capacity change from 0 to 32768 [ 187.863707][ T6889] jfs: Unknown parameter 'fsname' [ 187.939317][ T4942] usb usb2-port1: unable to enumerate USB device [ 188.166168][ T6860] BTRFS info (device loop0): checking UUID tree [ 188.166238][ T6860] BTRFS error (device loop0): failed to check the UUID tree: -4 [ 188.266614][ T6860] BTRFS error (device loop0): open_ctree failed: -4 [ 188.503207][ T6905] loop3: detected capacity change from 0 to 512 [ 189.128823][ T6916] loop3: detected capacity change from 0 to 40427 [ 189.179687][ T6916] F2FS-fs (loop3): invalid crc value [ 189.318838][ T6916] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 189.324139][ T6916] F2FS-fs (loop3): f2fs_disable_checkpoint starts, unusable: 0 [ 189.324171][ T6916] F2FS-fs (loop3): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 189.324374][ T6916] F2FS-fs (loop3): Start checkpoint disabled! [ 189.386191][ T6916] F2FS-fs (loop3): f2fs_disable_checkpoint finishes, err:0 [ 189.410145][ T6916] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 189.437427][ T37] audit: type=1800 audit(1779764654.016:4): pid=6916 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.296" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 189.483383][ T6925] loop2: detected capacity change from 0 to 64 [ 189.810720][ T6930] syz.3.296: attempt to access beyond end of device [ 189.810720][ T6930] loop3: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 189.815002][ T6930] syz.3.296: attempt to access beyond end of device [ 189.815002][ T6930] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 189.815953][ T6930] syz.3.296: attempt to access beyond end of device [ 189.815953][ T6930] loop3: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 189.816412][ T6930] syz.3.296: attempt to access beyond end of device [ 189.816412][ T6930] loop3: rw=2049, sector=45120, nr_sectors = 8 limit=40427 [ 189.817089][ T6930] syz.3.296: attempt to access beyond end of device [ 189.817089][ T6930] loop3: rw=2049, sector=45128, nr_sectors = 8 limit=40427 [ 189.818625][ T6930] syz.3.296: attempt to access beyond end of device [ 189.818625][ T6930] loop3: rw=2049, sector=45136, nr_sectors = 16 limit=40427 [ 189.819074][ T6930] syz.3.296: attempt to access beyond end of device [ 189.819074][ T6930] loop3: rw=2049, sector=45152, nr_sectors = 8 limit=40427 [ 189.819491][ T6930] syz.3.296: attempt to access beyond end of device [ 189.819491][ T6930] loop3: rw=2049, sector=45160, nr_sectors = 8 limit=40427 [ 189.819920][ T6930] syz.3.296: attempt to access beyond end of device [ 189.819920][ T6930] loop3: rw=2049, sector=45168, nr_sectors = 8 limit=40427 [ 189.820386][ T6930] syz.3.296: attempt to access beyond end of device [ 189.820386][ T6930] loop3: rw=2049, sector=45176, nr_sectors = 8 limit=40427 [ 191.509408][ T6945] loop2: detected capacity change from 0 to 64 [ 191.510506][ T57] CPU: 0 UID: 0 PID: 57 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 191.510529][ T57] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 191.510539][ T57] Workqueue: writeback wb_workfn (flush-7:3) [ 191.510566][ T57] Call Trace: [ 191.510573][ T57] [ 191.510579][ T57] dump_stack_lvl+0xe8/0x150 [ 191.510602][ T57] f2fs_stop_checkpoint+0x3ef/0x5d0 [ 191.510630][ T57] f2fs_write_end_io+0x1274/0x1740 [ 191.510664][ T57] __submit_merged_bio+0x256/0x6a0 [ 191.510692][ T57] __submit_merged_write_cond+0x3c9/0x4e0 [ 191.510722][ T57] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 191.510764][ T57] f2fs_write_data_pages+0x287e/0x34f0 [ 191.510822][ T57] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 191.510844][ T57] ? finish_task_switch+0x41f/0xbe0 [ 191.510880][ T57] ? __schedule+0x170f/0x5500 [ 191.510937][ T57] ? finish_task_switch+0x41f/0xbe0 [ 191.510960][ T57] ? __pfx___schedule+0x10/0x10 [ 191.510983][ T57] ? __lock_acquire+0x6b5/0x2d10 [ 191.511015][ T57] ? irqentry_exit+0x218/0x760 [ 191.511032][ T57] ? lockdep_hardirqs_on+0x7a/0x110 [ 191.511049][ T57] ? rcu_is_watching+0x15/0xb0 [ 191.511083][ T57] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 191.511113][ T57] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 191.511140][ T57] do_writepages+0x32e/0x550 [ 191.511161][ T57] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 191.511196][ T57] __writeback_single_inode+0x133/0x10e0 [ 191.511217][ T57] ? rt_spin_unlock+0x160/0x200 [ 191.511240][ T57] writeback_sb_inodes+0x97f/0x1980 [ 191.511276][ T57] ? lockdep_hardirqs_on+0x7a/0x110 [ 191.511301][ T57] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 191.511353][ T57] ? rcu_is_watching+0x15/0xb0 [ 191.511384][ T57] wb_writeback+0x445/0xb00 [ 191.511406][ T57] ? queue_io+0x251/0x440 [ 191.511431][ T57] ? __pfx_wb_writeback+0x10/0x10 [ 191.511463][ T57] wb_workfn+0x3fd/0xf20 [ 191.511483][ T57] ? look_up_lock_class+0x57/0x110 [ 191.511515][ T57] ? __pfx_wb_workfn+0x10/0x10 [ 191.511544][ T57] ? do_raw_spin_unlock+0xf5/0x210 [ 191.511568][ T57] ? process_one_work+0x8be/0x1630 [ 191.511594][ T57] ? process_one_work+0x8be/0x1630 [ 191.511627][ T57] ? process_one_work+0x8be/0x1630 [ 191.511649][ T57] process_one_work+0x98b/0x1630 [ 191.511690][ T57] ? __pfx_process_one_work+0x10/0x10 [ 191.511712][ T57] ? do_raw_spin_lock+0x12b/0x2f0 [ 191.511746][ T57] worker_thread+0xb49/0x1140 [ 191.511788][ T57] kthread+0x388/0x470 [ 191.511808][ T57] ? __pfx_worker_thread+0x10/0x10 [ 191.511823][ T57] ? __pfx_kthread+0x10/0x10 [ 191.511844][ T57] ret_from_fork+0x514/0xb70 [ 191.511869][ T57] ? __pfx_ret_from_fork+0x10/0x10 [ 191.511894][ T57] ? __switch_to+0xc79/0x1410 [ 191.511914][ T57] ? __pfx_kthread+0x10/0x10 [ 191.511940][ T57] ret_from_fork_asm+0x1a/0x30 [ 191.511976][ T57] [ 191.512214][ T57] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 191.633966][ T6945] FAULT_INJECTION: forcing a failure. [ 191.633966][ T6945] name failslab, interval 1, probability 0, space 0, times 0 [ 191.633997][ T6945] CPU: 1 UID: 0 PID: 6945 Comm: syz.2.305 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 191.634016][ T6945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 191.634026][ T6945] Call Trace: [ 191.634032][ T6945] [ 191.634039][ T6945] dump_stack_lvl+0xe8/0x150 [ 191.634067][ T6945] should_fail_ex+0x46b/0x600 [ 191.634094][ T6945] should_failslab+0xa8/0x100 [ 191.634117][ T6945] __kmalloc_noprof+0xdf/0x7b0 [ 191.634137][ T6945] ? hfs_find_init+0xaa/0x300 [ 191.634159][ T6945] ? __lock_acquire+0x6b5/0x2d10 [ 191.634188][ T6945] hfs_find_init+0xaa/0x300 [ 191.634213][ T6945] hfs_cat_move+0x1bd/0xbd0 [ 191.634240][ T6945] ? __pfx_hfs_cat_move+0x10/0x10 [ 191.634257][ T6945] ? __lock_acquire+0x6b5/0x2d10 [ 191.634288][ T6945] ? do_raw_spin_lock+0x12b/0x2f0 [ 191.634319][ T6945] ? lockdep_hardirqs_on+0x7a/0x110 [ 191.634339][ T6945] ? rwbase_write_lock+0x568/0x730 [ 191.634363][ T6945] hfs_rename+0x111/0x1d0 [ 191.634380][ T6945] ? __pfx_hfs_rename+0x10/0x10 [ 191.634399][ T6945] vfs_rename+0xbc6/0xee0 [ 191.634427][ T6945] ? __pfx_vfs_rename+0x10/0x10 [ 191.634459][ T6945] ? bpf_lsm_path_rename+0x9/0x20 [ 191.634477][ T6945] ? security_path_rename+0x17d/0x460 [ 191.634501][ T6945] filename_renameat2+0x539/0x9c0 [ 191.634516][ T6945] ? __might_fault+0xaf/0x130 [ 191.634536][ T6945] ? __might_fault+0xaf/0x130 [ 191.634562][ T6945] ? __pfx_filename_renameat2+0x10/0x10 [ 191.634593][ T6945] ? do_getname+0x151/0x250 [ 191.634619][ T6945] __se_sys_renameat2+0x5a/0x2c0 [ 191.634636][ T6945] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.634654][ T6945] do_syscall_64+0x15f/0x560 [ 191.634670][ T6945] ? trace_irq_disable+0x3b/0x140 [ 191.634689][ T6945] ? clear_bhb_loop+0x40/0x90 [ 191.634715][ T6945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.634732][ T6945] RIP: 0033:0x7fb8e0d5ce59 [ 191.634748][ T6945] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.634761][ T6945] RSP: 002b:00007fb8defae028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 191.634779][ T6945] RAX: ffffffffffffffda RBX: 00007fb8e0fd5fa0 RCX: 00007fb8e0d5ce59 [ 191.634791][ T6945] RDX: ffffffffffffff9c RSI: 0000200000000780 RDI: ffffffffffffff9c [ 191.634803][ T6945] RBP: 00007fb8defae090 R08: 0000000000000000 R09: 0000000000000000 [ 191.634813][ T6945] R10: 00002000000007c0 R11: 0000000000000246 R12: 0000000000000002 [ 191.634824][ T6945] R13: 00007fb8e0fd6038 R14: 00007fb8e0fd5fa0 R15: 00007fff37bcb6d8 [ 191.634853][ T6945] [ 192.545003][ T32] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 192.738427][ T32] usb 2-1: device descriptor read/64, error -71 [ 192.977377][ T32] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 192.989175][ T6972] loop2: detected capacity change from 0 to 4096 [ 193.004993][ T6972] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 193.086935][ T6983] loop4: detected capacity change from 0 to 64 [ 193.103733][ T32] usb 2-1: device descriptor read/64, error -71 [ 193.142545][ T6983] FAULT_INJECTION: forcing a failure. [ 193.142545][ T6983] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 193.142574][ T6983] CPU: 1 UID: 0 PID: 6983 Comm: syz.4.318 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 193.142592][ T6983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 193.142601][ T6983] Call Trace: [ 193.142607][ T6983] [ 193.142614][ T6983] dump_stack_lvl+0xe8/0x150 [ 193.142641][ T6983] should_fail_ex+0x46b/0x600 [ 193.142678][ T6983] _copy_to_user+0x31/0xb0 [ 193.142698][ T6983] simple_read_from_buffer+0xe1/0x170 [ 193.142722][ T6983] proc_fail_nth_read+0x1be/0x230 [ 193.142744][ T6983] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 193.142765][ T6983] ? rw_verify_area+0x2ac/0x4e0 [ 193.142785][ T6983] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 193.142806][ T6983] vfs_read+0x212/0xa80 [ 193.142834][ T6983] ? __pfx_vfs_read+0x10/0x10 [ 193.142856][ T6983] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 193.142873][ T6983] ? lockdep_hardirqs_on+0x7a/0x110 [ 193.142889][ T6983] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 193.142905][ T6983] ? mutex_lock_nested+0x152/0x1d0 [ 193.142925][ T6983] ? fdget_pos+0x252/0x320 [ 193.142949][ T6983] ksys_read+0x156/0x270 [ 193.142971][ T6983] ? __pfx_ksys_read+0x10/0x10 [ 193.142991][ T6983] ? __se_sys_renameat2+0x18a/0x2c0 [ 193.143014][ T6983] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.143033][ T6983] do_syscall_64+0x15f/0x560 [ 193.143050][ T6983] ? trace_irq_disable+0x3b/0x140 [ 193.143070][ T6983] ? clear_bhb_loop+0x40/0x90 [ 193.143090][ T6983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.143107][ T6983] RIP: 0033:0x7ff45281d68e [ 193.143123][ T6983] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 193.143137][ T6983] RSP: 002b:00007ff450ab5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 193.143155][ T6983] RAX: ffffffffffffffda RBX: 00007ff450ab66c0 RCX: 00007ff45281d68e [ 193.143166][ T6983] RDX: 000000000000000f RSI: 00007ff450ab60a0 RDI: 0000000000000005 [ 193.143177][ T6983] RBP: 00007ff450ab6090 R08: 0000000000000000 R09: 0000000000000000 [ 193.143187][ T6983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 193.143196][ T6983] R13: 00007ff452ad6038 R14: 00007ff452ad5fa0 R15: 00007fffc7431d08 [ 193.143223][ T6983] [ 193.365201][ T32] usb usb2-port1: attempt power cycle [ 194.271191][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.271280][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.411501][ T6972] ntfs3(loop2): ino=19, mi_enum_attr [ 194.411531][ T6972] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 194.553877][ T6972] ntfs3(loop2): Failed to load root (-22). [ 194.573669][ T32] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 194.598260][ T32] usb 2-1: device descriptor read/8, error -71 [ 194.745772][ T6981] loop3: detected capacity change from 0 to 32768 [ 194.767331][ T6981] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.317 (6981) [ 194.846836][ T32] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 194.863549][ T32] usb 2-1: device descriptor read/8, error -71 [ 194.874585][ T6981] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 194.874617][ T6981] BTRFS info (device loop3): using crc32c checksum algorithm [ 194.971467][ T1799] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 194.979802][ T32] usb usb2-port1: unable to enumerate USB device [ 195.047965][ T6981] BTRFS info (device loop3): setting nodatasum [ 195.047992][ T6981] BTRFS info (device loop3): setting nodatacow [ 195.048011][ T6981] BTRFS info (device loop3): turning on async discard [ 195.048028][ T6981] BTRFS info (device loop3): enabling free space tree [ 195.048044][ T6981] BTRFS info (device loop3): enabling auto defrag [ 195.048061][ T6981] BTRFS info (device loop3): max_inline set to 0 [ 195.082847][ T5729] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 195.130254][ T1799] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 195.130299][ T1799] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 195.130312][ T1799] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 195.130324][ T1799] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 195.130334][ T1799] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 195.182004][ T1799] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 195.182031][ T1799] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 195.182048][ T1799] usb 1-1: Product: syz [ 195.182060][ T1799] usb 1-1: Manufacturer: syz [ 195.182072][ T1799] usb 1-1: SerialNumber: syz [ 195.200576][ T1799] usb 1-1: config 0 descriptor?? [ 195.242924][ T5729] usb 5-1: Using ep0 maxpacket: 16 [ 195.246134][ T5729] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 195.246159][ T5729] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.279974][ T5729] usb 5-1: config 0 descriptor?? [ 195.289119][ T5729] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 195.419184][ T1799] radio-si470x 1-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 195.419208][ T1799] radio-si470x 1-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 195.487901][ T6997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.489034][ T6997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.506801][ T7018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.540658][ T7018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.618433][ T1799] radio-si470x 1-1:0.0: software version 0, hardware version 0 [ 195.618456][ T1799] radio-si470x 1-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 195.618475][ T1799] radio-si470x 1-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 195.657070][ T5729] usb 5-1: Detected FT232A [ 195.661857][ T5729] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 195.681760][ T5729] usb 5-1: USB disconnect, device number 10 [ 195.766349][ T5729] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 195.767728][ T5729] ftdi_sio 5-1:0.0: device disconnected [ 196.004668][ T1799] radio-si470x 1-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 196.004731][ T1799] radio-si470x 1-1:0.0: submitting int urb failed (-90) [ 196.010513][ T1799] radio-si470x 1-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 196.010864][ T1799] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -22 [ 196.022217][ T5612] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 196.057198][ T1799] usb 1-1: USB disconnect, device number 14 [ 196.452911][ T7032] loop4: detected capacity change from 0 to 512 [ 196.456406][ T7032] ext4: Unknown parameter 'permit_directio' [ 196.592638][ T37] audit: type=1326 audit(1779764661.156:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7033 comm="syz.1.331" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f16ce03ce59 code=0x0 [ 196.860972][ T7044] syz.0.333 uses obsolete (PF_INET,SOCK_PACKET) [ 197.250066][ T7023] bridge_slave_0: left allmulticast mode [ 197.250090][ T7023] bridge_slave_0: left promiscuous mode [ 197.250282][ T7023] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.397871][ T5812] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 197.431996][ T7023] bridge_slave_1: left allmulticast mode [ 197.432021][ T7023] bridge_slave_1: left promiscuous mode [ 197.432196][ T7023] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.466225][ T7053] loop3: detected capacity change from 0 to 64 [ 197.527306][ T5812] usb 5-1: device descriptor read/64, error -71 [ 197.603641][ T7023] bond0: (slave bond_slave_0): Releasing backup interface [ 197.693641][ T7023] bond0: (slave bond_slave_1): Releasing backup interface [ 197.772896][ T5729] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 197.776491][ T7023] team0: Port device team_slave_0 removed [ 197.788796][ T5812] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 197.824371][ T7023] team0: Port device team_slave_1 removed [ 197.829069][ T7023] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.833045][ T7023] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 197.868303][ T7023] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.871277][ T7023] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 197.912991][ T5729] usb 2-1: device descriptor read/64, error -71 [ 197.913165][ T7023] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 197.942877][ T5812] usb 5-1: device descriptor read/64, error -71 [ 198.054174][ T5812] usb usb5-port1: attempt power cycle [ 198.146120][ T7062] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 198.164921][ T5729] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 198.292853][ T5729] usb 2-1: device descriptor read/64, error -71 [ 198.393003][ T5812] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 198.412555][ T5729] usb usb2-port1: attempt power cycle [ 198.417776][ T5812] usb 5-1: device descriptor read/8, error -71 [ 198.663127][ T5812] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 198.694248][ T5812] usb 5-1: device descriptor read/8, error -71 [ 198.782838][ T5729] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 198.803425][ T5729] usb 2-1: device descriptor read/8, error -71 [ 198.815107][ T5812] usb usb5-port1: unable to enumerate USB device [ 198.918087][ T7080] loop2: detected capacity change from 0 to 4096 [ 199.064527][ T7078] loop3: detected capacity change from 0 to 32768 [ 199.066065][ T5729] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 199.070150][ T7078] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.342 (7078) [ 199.100608][ T5729] usb 2-1: device descriptor read/8, error -71 [ 199.130917][ T7078] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 199.130949][ T7078] BTRFS info (device loop3): using crc32c checksum algorithm [ 199.203699][ T5729] usb usb2-port1: unable to enumerate USB device [ 199.251840][ T7078] BTRFS info (device loop3): setting nodatasum [ 199.251865][ T7078] BTRFS info (device loop3): setting nodatacow [ 199.251881][ T7078] BTRFS info (device loop3): turning on async discard [ 199.251896][ T7078] BTRFS info (device loop3): enabling free space tree [ 199.251911][ T7078] BTRFS info (device loop3): enabling auto defrag [ 199.251926][ T7078] BTRFS info (device loop3): max_inline set to 0 [ 199.575086][ T5612] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 199.922633][ T37] audit: type=1326 audit(1779764664.506:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7104 comm="syz.3.345" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6ac746ce59 code=0x0 [ 199.997250][ T7109] loop2: detected capacity change from 0 to 512 [ 200.086853][ T7113] loop0: detected capacity change from 0 to 64 [ 200.089358][ T7113] hfs: Unknown parameter '' [ 200.696078][ T7109] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.348: bg 0: block 127: padding at end of block bitmap is not set [ 200.732303][ T7109] loop2: lost filesystem error report for type 5 error -117 [ 200.740932][ C0] EXT4-fs (loop2): initial error at time 1779764665: ext4_validate_block_bitmap:441 [ 200.740962][ C0] EXT4-fs (loop2): last error at time 1779764665: ext4_validate_block_bitmap:441 [ 201.467706][ T5621] Bluetooth: hci1: command 0x0406 tx timeout [ 201.547162][ T5621] Bluetooth: hci2: command 0x0406 tx timeout [ 201.851915][ T7124] loop3: detected capacity change from 0 to 512 [ 201.853044][ T7124] EXT4-fs: Ignoring removed i_version option [ 201.893311][ T7109] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 201.893865][ T7109] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.348: iget: bad extra_isize 58 (inode size 256) [ 201.894087][ T7109] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 202.111648][ T7106] loop4: detected capacity change from 0 to 32768 [ 202.122080][ T7109] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.348: error while reading EA inode 11 err=-117 [ 202.122111][ T7109] loop2: lost filesystem error report for type 5 error -117 [ 202.129197][ T7109] EXT4-fs (loop2): 1 orphan inode deleted [ 202.147277][ T7106] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.347 (7106) [ 202.209601][ T7109] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.211910][ T7109] EXT4-fs error (device loop2): __ext4_iget:5481: inode #14: block 1886221359: comm syz.2.348: invalid block [ 202.288416][ T7106] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 202.288443][ T7106] BTRFS info (device loop4): using crc32c checksum algorithm [ 202.445501][ T7124] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.445660][ T7124] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.509585][ T7106] BTRFS info (device loop4): setting nodatasum [ 202.509605][ T7106] BTRFS info (device loop4): setting nodatacow [ 202.509617][ T7106] BTRFS info (device loop4): turning on async discard [ 202.509627][ T7106] BTRFS info (device loop4): enabling free space tree [ 202.509638][ T7106] BTRFS info (device loop4): enabling auto defrag [ 202.509648][ T7106] BTRFS info (device loop4): max_inline set to 0 [ 202.573886][ T7106] FAULT_INJECTION: forcing a failure. [ 202.573886][ T7106] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 202.573917][ T7106] CPU: 1 UID: 0 PID: 7106 Comm: syz.4.347 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 202.573936][ T7106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 202.573946][ T7106] Call Trace: [ 202.573954][ T7106] [ 202.573960][ T7106] dump_stack_lvl+0xe8/0x150 [ 202.573987][ T7106] should_fail_ex+0x46b/0x600 [ 202.574014][ T7106] _copy_to_user+0x31/0xb0 [ 202.574034][ T7106] simple_read_from_buffer+0xe1/0x170 [ 202.574059][ T7106] proc_fail_nth_read+0x1be/0x230 [ 202.574082][ T7106] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 202.574106][ T7106] ? rw_verify_area+0x2ac/0x4e0 [ 202.574127][ T7106] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 202.574149][ T7106] vfs_read+0x212/0xa80 [ 202.574177][ T7106] ? __pfx_vfs_read+0x10/0x10 [ 202.574199][ T7106] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 202.574225][ T7106] ? lockdep_hardirqs_on+0x7a/0x110 [ 202.574242][ T7106] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 202.574260][ T7106] ? mutex_lock_nested+0x152/0x1d0 [ 202.574281][ T7106] ? fdget_pos+0x252/0x320 [ 202.574306][ T7106] ksys_read+0x156/0x270 [ 202.574329][ T7106] ? __pfx_ksys_read+0x10/0x10 [ 202.574357][ T7106] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.574377][ T7106] do_syscall_64+0x15f/0x560 [ 202.574394][ T7106] ? trace_irq_disable+0x3b/0x140 [ 202.574414][ T7106] ? clear_bhb_loop+0x40/0x90 [ 202.574436][ T7106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.574453][ T7106] RIP: 0033:0x7ff45281d68e [ 202.574470][ T7106] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 202.574485][ T7106] RSP: 002b:00007ff450ab5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 202.574504][ T7106] RAX: ffffffffffffffda RBX: 00007ff450ab66c0 RCX: 00007ff45281d68e [ 202.574517][ T7106] RDX: 000000000000000f RSI: 00007ff450ab60a0 RDI: 0000000000000006 [ 202.574529][ T7106] RBP: 00007ff450ab6090 R08: 0000000000000000 R09: 0000000000000000 [ 202.574540][ T7106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.574551][ T7106] R13: 00007ff452ad6038 R14: 00007ff452ad5fa0 R15: 00007fffc7431d08 [ 202.574581][ T7106] [ 202.821025][ T5612] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.009461][ T5617] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 203.205173][ T5614] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.382911][ T6745] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 203.384496][ T7160] loop4: detected capacity change from 0 to 256 [ 203.550777][ T7163] Bluetooth: MGMT ver 1.23 [ 203.565798][ T6745] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.565827][ T6745] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.565862][ T6745] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 203.565883][ T6745] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.592557][ T6745] usb 2-1: config 0 descriptor?? [ 203.732900][ T5619] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 203.819291][ T37] audit: type=1326 audit(1779764668.406:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7171 comm="syz.2.362" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb8e0d5ce59 code=0x0 [ 203.876620][ T5619] usb 1-1: device descriptor read/64, error -71 [ 203.902100][ T7160] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe0a6470d, utbl_chksum : 0xe619d30d) [ 204.123159][ T5619] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 204.252423][ T6745] hid-led 0003:27B8:01ED.0001: unbalanced collection at end of report description [ 204.261802][ T6745] hid-led 0003:27B8:01ED.0001: probe with driver hid-led failed with error -22 [ 204.272901][ T5619] usb 1-1: device descriptor read/64, error -71 [ 204.383307][ T5619] usb usb1-port1: attempt power cycle [ 204.384276][ T6745] usb 2-1: USB disconnect, device number 23 [ 204.483106][ T7163] loop3: detected capacity change from 0 to 32768 [ 204.499689][ T7163] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.355 (7163) [ 204.546298][ T7178] loop4: detected capacity change from 0 to 64 [ 204.734625][ T5619] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 204.760395][ T5619] usb 1-1: device descriptor read/8, error -71 [ 204.809596][ T7180] netlink: 24 bytes leftover after parsing attributes in process `syz.2.364'. [ 204.839017][ T7180] vlan3: entered promiscuous mode [ 204.839036][ T7180] geneve1: entered promiscuous mode [ 204.839234][ T7180] vlan3: entered allmulticast mode [ 204.839248][ T7180] geneve1: entered allmulticast mode [ 204.900199][ T7163] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 204.900231][ T7163] BTRFS info (device loop3): using crc32c checksum algorithm [ 204.992875][ T5619] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 205.053270][ T5619] usb 1-1: device descriptor read/8, error -71 [ 205.233273][ T5619] usb usb1-port1: unable to enumerate USB device [ 205.304633][ T7163] BTRFS info (device loop3): setting nodatasum [ 205.304650][ T7163] BTRFS info (device loop3): setting nodatacow [ 205.304658][ T7163] BTRFS info (device loop3): turning on async discard [ 205.304666][ T7163] BTRFS info (device loop3): enabling free space tree [ 205.304674][ T7163] BTRFS info (device loop3): enabling auto defrag [ 205.304682][ T7163] BTRFS info (device loop3): max_inline set to 0 [ 205.532939][ T5619] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 205.573916][ T5612] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 205.713027][ T5619] usb 3-1: Using ep0 maxpacket: 32 [ 205.717613][ T5619] usb 3-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 205.717641][ T5619] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.717658][ T5619] usb 3-1: Product: syz [ 205.717671][ T5619] usb 3-1: Manufacturer: syz [ 205.717684][ T5619] usb 3-1: SerialNumber: syz [ 205.720587][ T5619] usb 3-1: config 0 descriptor?? [ 207.397849][ T5619] peak_usb 3-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 207.397878][ T5619] peak_usb 3-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 207.925000][ T37] audit: type=1326 audit(1779764672.516:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7225 comm="syz.4.374" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff45285ce59 code=0x0 [ 208.090101][ T5619] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -71 [ 208.107607][ T5619] usb 3-1: USB disconnect, device number 9 [ 208.935040][ T7239] loop4: detected capacity change from 0 to 128 [ 209.037639][ T7239] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 209.037693][ T7239] hpfs: filesystem error: improperly stopped [ 209.037706][ T7239] hpfs: You really don't want any checks? You are crazy... [ 209.124773][ T7243] loop2: detected capacity change from 0 to 64 [ 209.188733][ T7243] hfs: unable to load codepage "mýÿroman" [ 209.200852][ T5624] Bluetooth: hci2: unexpected event for opcode 0x0c5b [ 209.227473][ T7239] hpfs: hpfs_map_sector(): read error [ 209.227485][ T7239] hpfs: code page support is disabled [ 209.227562][ T7239] hpfs: hpfs_map_4sectors(): unaligned read [ 209.227615][ T7239] hpfs: hpfs_map_4sectors(): unaligned read [ 209.227621][ T7239] hpfs: filesystem error: unable to find root dir [ 209.328156][ T7246] netlink: 40 bytes leftover after parsing attributes in process `syz.2.378'. [ 209.467244][ T7229] loop3: detected capacity change from 0 to 40427 [ 209.521858][ T7229] F2FS-fs (loop3): build fault injection rate: 174 [ 209.521880][ T7229] F2FS-fs (loop3): build fault injection type: 0x3bfe8c [ 209.526145][ T7229] F2FS-fs (loop3): invalid crc value [ 209.701390][ T7251] loop0: detected capacity change from 0 to 128 [ 209.722913][ T5619] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 209.745864][ T7251] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 209.868207][ T7251] UDF-fs: warning (device loop0): udf_fill_super: No fileset found [ 209.885860][ T5619] usb 2-1: Using ep0 maxpacket: 16 [ 209.890001][ T5619] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 209.890024][ T5619] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 209.917035][ T5619] usb 2-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 209.917063][ T5619] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.917081][ T5619] usb 2-1: Product: syz [ 209.917095][ T5619] usb 2-1: Manufacturer: syz [ 209.917108][ T5619] usb 2-1: SerialNumber: syz [ 209.963692][ T5619] usb 2-1: config 0 descriptor?? [ 210.172982][ T5619] usb 2-1: USB disconnect, device number 24 [ 210.371502][ T7261] loop0: detected capacity change from 0 to 4096 [ 210.443977][ T7246] loop2: detected capacity change from 0 to 32768 [ 210.486838][ T7229] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 210.500073][ T7262] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 210.507060][ T7246] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.378 (7246) [ 210.579624][ T7246] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 210.579657][ T7246] BTRFS info (device loop2): using crc32c checksum algorithm [ 210.861331][ T7246] BTRFS info (device loop2): setting nodatasum [ 210.861356][ T7246] BTRFS info (device loop2): setting nodatacow [ 210.861371][ T7246] BTRFS info (device loop2): turning on async discard [ 210.861386][ T7246] BTRFS info (device loop2): enabling free space tree [ 210.861400][ T7246] BTRFS info (device loop2): enabling auto defrag [ 210.861424][ T7246] BTRFS info (device loop2): max_inline set to 0 [ 210.971715][ T37] audit: type=1326 audit(1779764675.546:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7278 comm="syz.4.387" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff45285ce59 code=0x0 [ 211.110311][ T5614] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 211.863942][ T5905] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 211.889949][ T5624] Bluetooth: hci2: unexpected event for opcode 0x0c5b [ 211.992904][ T5905] usb 1-1: device descriptor read/64, error -71 [ 212.282865][ T5905] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 212.454211][ T5905] usb 1-1: device descriptor read/64, error -71 [ 212.503009][ T5619] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 212.563446][ T5905] usb usb1-port1: attempt power cycle [ 212.672934][ T5619] usb 3-1: Using ep0 maxpacket: 8 [ 212.678732][ T5619] usb 3-1: config 0 has an invalid interface number: 143 but max is 0 [ 212.678755][ T5619] usb 3-1: config 0 has no interface number 0 [ 212.678797][ T5619] usb 3-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 212.678816][ T5619] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.692632][ T5619] usb 3-1: config 0 descriptor?? [ 213.520339][ T5905] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 213.535407][ T5905] usb 1-1: device descriptor read/8, error -71 [ 213.612138][ T5619] viperboard 3-1:0.143: version 0.00 found at bus 003 address 010 [ 213.716495][ T5619] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 213.716524][ T5619] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 213.729235][ T5624] Bluetooth: hci2: unexpected event for opcode 0x0c5b [ 213.772900][ T5905] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 213.793626][ T5905] usb 1-1: device descriptor read/8, error -71 [ 213.833285][ T5619] usb 3-1: USB disconnect, device number 10 [ 213.914114][ T5905] usb usb1-port1: unable to enumerate USB device [ 214.482879][ T32] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 214.569866][ T7355] netlink: 'syz.1.406': attribute type 9 has an invalid length. [ 214.569879][ T7355] netlink: 44 bytes leftover after parsing attributes in process `syz.1.406'. [ 214.642854][ T32] usb 5-1: Using ep0 maxpacket: 8 [ 214.645703][ T32] usb 5-1: unable to get BOS descriptor or descriptor too short [ 214.660070][ T32] usb 5-1: config 1 interface 0 altsetting 98 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 214.660099][ T32] usb 5-1: config 1 interface 0 altsetting 98 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 214.660123][ T32] usb 5-1: config 1 interface 0 has no altsetting 0 [ 214.703747][ T32] usb 5-1: New USB device found, idVendor=0eef, idProduct=7224, bcdDevice= 0.40 [ 214.703774][ T32] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.703791][ T32] usb 5-1: Product: à ‡ [ 214.703803][ T32] usb 5-1: Manufacturer: 寮ޫ촽ᣔ퓹惾ഌç•ℰ摆㎷꧂⅙힬龖䣾哋ꕬ泠뒱쵼ੇÖ쿨䪃嗩砠阗럺暸걑╉ì¿ã‚™ä‰·â›µà±¦é•–訢뼵㋨è¡ã‰†æ§å—¼æ•®ç¿‚ྂè¾ë†…섔꺓æ€ê¿ [ 214.703823][ T32] usb 5-1: SerialNumber: syz [ 214.823790][ T5619] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 215.027239][ T5619] usb 3-1: config 150 has an invalid interface number: 204 but max is 2 [ 215.027266][ T5619] usb 3-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 215.027285][ T5619] usb 3-1: config 150 has no interface number 0 [ 215.027326][ T5619] usb 3-1: config 150 interface 204 has no altsetting 0 [ 215.061977][ T32] usbhid 5-1:1.0: can't add hid device: -71 [ 215.062084][ T32] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 215.079014][ T5619] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 215.079041][ T5619] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.079057][ T5619] usb 3-1: Product: syz [ 215.079070][ T5619] usb 3-1: Manufacturer: syz [ 215.079082][ T5619] usb 3-1: SerialNumber: syz [ 215.117056][ T32] usb 5-1: USB disconnect, device number 15 [ 215.204025][ T10] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 215.361949][ T10] usb 4-1: config 150 has an invalid interface number: 204 but max is 2 [ 215.361977][ T10] usb 4-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 215.361996][ T10] usb 4-1: config 150 has no interface number 0 [ 215.362038][ T10] usb 4-1: config 150 interface 204 has no altsetting 0 [ 215.399816][ T10] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 215.399844][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.400081][ T10] usb 4-1: Product: syz [ 215.400096][ T10] usb 4-1: Manufacturer: syz [ 215.400109][ T10] usb 4-1: SerialNumber: syz [ 215.453879][ T5619] xr_serial 3-1:150.204: skipping garbage [ 215.454039][ T5619] xr_serial 3-1:150.204: xr_serial converter detected [ 215.756726][ T10] xr_serial 4-1:150.204: skipping garbage [ 215.756985][ T10] xr_serial 4-1:150.204: xr_serial converter detected [ 215.841078][ T5619] xr_serial ttyUSB0: Failed to set reg 0x0c: -71 [ 215.841136][ T5619] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 215.945484][ T5619] usb 3-1: USB disconnect, device number 11 [ 216.006982][ T5619] xr_serial 3-1:150.204: device disconnected [ 216.038179][ T7373] loop0: detected capacity change from 0 to 64 [ 216.125969][ T10] xr_serial ttyUSB1: Failed to set reg 0x0c: -71 [ 216.126086][ T10] xr_serial ttyUSB1: probe with driver xr_serial failed with error -71 [ 216.149255][ T10] usb 4-1: USB disconnect, device number 11 [ 216.160589][ T10] xr_serial 4-1:150.204: device disconnected [ 216.367774][ T7382] capability: warning: `syz.4.418' uses deprecated v2 capabilities in a way that may be insecure [ 216.371819][ T7382] capability: warning: `syz.4.418' uses 32-bit capabilities (legacy support in use) [ 216.652894][ T32] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 217.660646][ T32] usb 5-1: config index 0 descriptor too short (expected 65535, got 18) [ 217.660673][ T32] usb 5-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 217.660691][ T32] usb 5-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 217.660708][ T32] usb 5-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 217.660742][ T32] usb 5-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 217.660762][ T32] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.915523][ T32] usb 5-1: string descriptor 0 read error: -71 [ 217.932104][ T32] usb 5-1: USB disconnect, device number 16 [ 217.933008][ T5729] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 218.096502][ T5729] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 218.096533][ T5729] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 218.096556][ T5729] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 218.098844][ T5729] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 218.098870][ T5729] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.098888][ T5729] usb 4-1: Product: syz [ 218.098900][ T5729] usb 4-1: Manufacturer: syz [ 218.098913][ T5729] usb 4-1: SerialNumber: syz [ 218.114431][ T5729] usb 4-1: config 0 descriptor?? [ 218.122462][ T5729] streamzap 4-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 218.840153][ T7424] loop4: detected capacity change from 0 to 64 [ 218.848577][ T7422] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 219.297879][ T7433] loop2: detected capacity change from 0 to 512 [ 219.648785][ T7433] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e019, mo2=0002] [ 219.648889][ T7433] System zones: 0-2, 18-18, 34-34 [ 219.764286][ T6745] usb 4-1: USB disconnect, device number 12 [ 219.843935][ T7447] loop3: detected capacity change from 0 to 256 [ 219.932912][ T32] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 220.075036][ T7433] EXT4-fs (loop2): 1 orphan inode deleted [ 220.080961][ T7433] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.081300][ T7433] ext4 filesystem being mounted at /92/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 220.082930][ T32] usb 5-1: Using ep0 maxpacket: 8 [ 220.124217][ T32] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.124250][ T32] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 220.124289][ T32] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice= 0.00 [ 220.124308][ T32] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.132483][ T32] usb 5-1: config 0 descriptor?? [ 220.192353][ T7433] EXT4-fs (loop2): Online defrag not supported with bigalloc [ 220.194524][ T5619] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 220.352901][ T5619] usb 1-1: Using ep0 maxpacket: 16 [ 220.360879][ T5619] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 220.360928][ T5619] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 220.392485][ T5619] usb 1-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 220.392511][ T5619] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.392529][ T5619] usb 1-1: Product: syz [ 220.392542][ T5619] usb 1-1: Manufacturer: syz [ 220.392555][ T5619] usb 1-1: SerialNumber: syz [ 220.430344][ T5619] usb 1-1: config 0 descriptor?? [ 220.445771][ T5619] port100 1-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 220.478914][ T5614] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.648754][ T5619] usb 1-1: USB disconnect, device number 23 [ 221.642450][ T32] apple 0003:05AC:0219.0002: unknown main item tag 0x5 [ 221.646272][ T32] apple 0003:05AC:0219.0002: unknown global tag 0xc [ 221.646337][ T32] apple 0003:05AC:0219.0002: item 0 1 1 12 parsing failed [ 221.661221][ T32] apple 0003:05AC:0219.0002: parse failed [ 221.674592][ T32] apple 0003:05AC:0219.0002: probe with driver apple failed with error -22 [ 222.841124][ T5729] usb 5-1: USB disconnect, device number 17 [ 243.795906][ T7469] loop2: detected capacity change from 0 to 4096 [ 245.173934][ T7499] loop3: detected capacity change from 0 to 64 [ 245.242224][ T7499] fuse: Unknown parameter 'f' [ 245.246109][ T32] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 245.252957][ T5729] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 245.325029][ T7469] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 245.424099][ T5729] usb 5-1: Using ep0 maxpacket: 16 [ 245.431486][ T5729] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 245.431535][ T5729] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 245.438254][ T32] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 245.438339][ T32] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 245.438364][ T32] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 245.439488][ T5729] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 245.439513][ T5729] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.439531][ T5729] usb 5-1: Product: syz [ 245.439543][ T5729] usb 5-1: Manufacturer: syz [ 245.439556][ T5729] usb 5-1: SerialNumber: syz [ 245.451337][ T32] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 245.451363][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.451381][ T32] usb 1-1: Product: syz [ 245.451393][ T32] usb 1-1: Manufacturer: syz [ 245.451406][ T32] usb 1-1: SerialNumber: syz [ 245.479876][ T5729] usb 5-1: config 0 descriptor?? [ 245.509842][ T5729] port100 5-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 245.605910][ T32] usb 1-1: config 0 descriptor?? [ 245.628643][ T32] streamzap 1-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 246.703339][ T32] usb 5-1: USB disconnect, device number 18 [ 246.835498][ T7512] FAULT_INJECTION: forcing a failure. [ 246.835498][ T7512] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 246.835531][ T7512] CPU: 0 UID: 0 PID: 7512 Comm: syz.3.459 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 246.835550][ T7512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 246.835568][ T7512] Call Trace: [ 246.835576][ T7512] [ 246.835583][ T7512] dump_stack_lvl+0xe8/0x150 [ 246.835611][ T7512] should_fail_ex+0x46b/0x600 [ 246.835638][ T7512] _copy_from_user+0x2d/0xb0 [ 246.835656][ T7512] ___sys_sendmsg+0x1c6/0x360 [ 246.835675][ T7512] ? __lock_acquire+0x6b5/0x2d10 [ 246.835700][ T7512] ? __pfx____sys_sendmsg+0x10/0x10 [ 246.835724][ T7512] ? kstrtouint+0x6e/0xe0 [ 246.835769][ T7512] ? __fget_files+0x2a/0x420 [ 246.835787][ T7512] ? __fget_files+0x3a6/0x420 [ 246.835815][ T7512] __sys_sendmmsg+0x282/0x4e0 [ 246.835842][ T7512] ? __pfx___sys_sendmmsg+0x10/0x10 [ 246.835869][ T7512] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 246.835905][ T7512] ? ksys_write+0x248/0x270 [ 246.835929][ T7512] ? __pfx_ksys_write+0x10/0x10 [ 246.835956][ T7512] __x64_sys_sendmmsg+0xa0/0xc0 [ 246.835975][ T7512] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.835993][ T7512] do_syscall_64+0x15f/0x560 [ 246.836012][ T7512] ? clear_bhb_loop+0x40/0x90 [ 246.836034][ T7512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.836049][ T7512] RIP: 0033:0x7f6ac746ce59 [ 246.836067][ T7512] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 246.836081][ T7512] RSP: 002b:00007f6ac56be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 246.836100][ T7512] RAX: ffffffffffffffda RBX: 00007f6ac76e5fa0 RCX: 00007f6ac746ce59 [ 246.836113][ T7512] RDX: 0000000000000001 RSI: 0000200000003180 RDI: 0000000000000003 [ 246.836124][ T7512] RBP: 00007f6ac56be090 R08: 0000000000000000 R09: 0000000000000000 [ 246.836136][ T7512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 246.836146][ T7512] R13: 00007f6ac76e6038 R14: 00007f6ac76e5fa0 R15: 00007ffc4e247aa8 [ 246.836175][ T7512] [ 246.955395][ T1186] ntfs3(loop2): ino=9, ntfs3_write_inode failed, -22. [ 246.956281][ T5614] ntfs3(loop2): ino=9, ntfs_sync_fs failed, -22. [ 247.213160][ T5729] usb 1-1: USB disconnect, device number 24 [ 247.562900][ T32] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 247.622408][ T7535] netlink: 8 bytes leftover after parsing attributes in process `syz.1.463'. [ 247.712913][ T32] usb 4-1: Using ep0 maxpacket: 16 [ 247.714969][ T32] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 247.714992][ T32] usb 4-1: config 0 has no interface number 0 [ 247.715032][ T32] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 247.715058][ T32] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 247.730243][ T32] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 247.730270][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.730287][ T32] usb 4-1: Product: syz [ 247.730300][ T32] usb 4-1: Manufacturer: syz [ 247.730312][ T32] usb 4-1: SerialNumber: syz [ 247.764813][ T7546] loop2: detected capacity change from 0 to 512 [ 247.808816][ T7546] EXT4-fs: Invalid want_extra_isize 21582 [ 247.810824][ T32] usb 4-1: config 0 descriptor?? [ 247.814889][ T7522] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 247.815057][ T7522] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 247.879598][ T5624] Bluetooth: hci1: unexpected event for opcode 0x0c5b [ 248.021585][ T7522] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 248.022237][ T7522] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 248.383608][ T7559] netlink: 816 bytes leftover after parsing attributes in process `syz.2.471'. [ 248.405597][ T7563] loop4: detected capacity change from 0 to 1024 [ 248.805139][ T32] asix 4-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 248.827259][ T7560] netlink: 816 bytes leftover after parsing attributes in process `syz.2.471'. [ 249.028877][ T32] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 249.029144][ T32] asix 4-1:0.34: probe with driver asix failed with error -71 [ 249.048558][ T7563] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 249.099473][ T32] usb 4-1: USB disconnect, device number 13 [ 250.552911][ T5729] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 250.713635][ T5619] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 250.782966][ T5904] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 250.784238][ T5729] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 250.784267][ T5729] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 250.784289][ T5729] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 250.786854][ T5729] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 250.786880][ T5729] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.786897][ T5729] usb 1-1: Product: syz [ 250.786909][ T5729] usb 1-1: Manufacturer: syz [ 250.786922][ T5729] usb 1-1: SerialNumber: syz [ 250.795402][ T5729] usb 1-1: config 0 descriptor?? [ 250.800143][ T5729] streamzap 1-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 250.953007][ T5904] usb 3-1: Using ep0 maxpacket: 16 [ 250.968922][ T5904] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 250.969540][ T5904] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 250.997389][ T5619] usb 5-1: unable to get BOS descriptor or descriptor too short [ 251.008806][ T5619] usb 5-1: not running at top speed; connect to a high speed hub [ 251.035122][ T5904] usb 3-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 251.035151][ T5904] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.035169][ T5904] usb 3-1: Product: syz [ 251.035181][ T5904] usb 3-1: Manufacturer: syz [ 251.035247][ T5904] usb 3-1: SerialNumber: syz [ 251.084319][ T5619] usb 5-1: config 1 interface 0 has no altsetting 0 [ 251.095040][ T5619] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 251.095060][ T5619] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.095070][ T5619] usb 5-1: Product: syz [ 251.095077][ T5619] usb 5-1: Manufacturer: syz [ 251.095084][ T5619] usb 5-1: SerialNumber: syz [ 251.098754][ T5904] usb 3-1: config 0 descriptor?? [ 251.121013][ T5904] port100 3-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 251.381180][ T5905] usb 3-1: USB disconnect, device number 12 [ 251.445721][ T5619] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 251.507146][ T5619] usb 5-1: USB disconnect, device number 19 [ 251.530830][ T5617] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.939813][ T7593] loop4: detected capacity change from 0 to 4096 [ 252.097262][ T5729] usb 1-1: USB disconnect, device number 25 [ 252.313521][ T7606] FAULT_INJECTION: forcing a failure. [ 252.313521][ T7606] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 252.313553][ T7606] CPU: 0 UID: 0 PID: 7606 Comm: syz.2.485 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 252.313573][ T7606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 252.313583][ T7606] Call Trace: [ 252.313589][ T7606] [ 252.313597][ T7606] dump_stack_lvl+0xe8/0x150 [ 252.313628][ T7606] should_fail_ex+0x46b/0x600 [ 252.313655][ T7606] _copy_from_user+0x2d/0xb0 [ 252.313682][ T7606] ___sys_sendmsg+0x1c6/0x360 [ 252.313700][ T7606] ? __lock_acquire+0x6b5/0x2d10 [ 252.313725][ T7606] ? __pfx____sys_sendmsg+0x10/0x10 [ 252.313771][ T7606] ? __fget_files+0x2a/0x420 [ 252.313788][ T7606] ? __fget_files+0x3a6/0x420 [ 252.313813][ T7606] __x64_sys_sendmsg+0x1c3/0x2a0 [ 252.313834][ T7606] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 252.313862][ T7606] ? __pfx_ksys_write+0x10/0x10 [ 252.313892][ T7606] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.313911][ T7606] do_syscall_64+0x15f/0x560 [ 252.313928][ T7606] ? trace_irq_disable+0x3b/0x140 [ 252.313947][ T7606] ? clear_bhb_loop+0x40/0x90 [ 252.313969][ T7606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.313986][ T7606] RIP: 0033:0x7fb8e0d5ce59 [ 252.314003][ T7606] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.314016][ T7606] RSP: 002b:00007fb8def8d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 252.314035][ T7606] RAX: ffffffffffffffda RBX: 00007fb8e0fd6090 RCX: 00007fb8e0d5ce59 [ 252.314047][ T7606] RDX: 000000000000c804 RSI: 0000200000000c00 RDI: 0000000000000003 [ 252.314058][ T7606] RBP: 00007fb8def8d090 R08: 0000000000000000 R09: 0000000000000000 [ 252.314068][ T7606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.314078][ T7606] R13: 00007fb8e0fd6128 R14: 00007fb8e0fd6090 R15: 00007fff37bcb6d8 [ 252.314103][ T7606] [ 252.636780][ T7612] FAULT_INJECTION: forcing a failure. [ 252.636780][ T7612] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 252.636811][ T7612] CPU: 0 UID: 0 PID: 7612 Comm: syz.0.490 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 252.636830][ T7612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 252.636841][ T7612] Call Trace: [ 252.636848][ T7612] [ 252.636855][ T7612] dump_stack_lvl+0xe8/0x150 [ 252.636880][ T7612] should_fail_ex+0x46b/0x600 [ 252.636907][ T7612] _copy_from_iter+0x4ff/0x1670 [ 252.636942][ T7612] ? __pfx__copy_from_iter+0x10/0x10 [ 252.636970][ T7612] ? __sk_mem_schedule+0x7f/0xf0 [ 252.636996][ T7612] ? sk_msg_alloc+0xa04/0xac0 [ 252.637024][ T7612] sk_msg_memcopy_from_iter+0x360/0x700 [ 252.637062][ T7612] tcp_bpf_sendmsg+0x63b/0x1ae0 [ 252.637087][ T7612] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 252.637108][ T7612] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 252.637146][ T7612] ? __pfx_tcp_bpf_sendmsg+0x10/0x10 [ 252.637228][ T7612] ? aa_sk_perm+0x703/0x950 [ 252.637251][ T7612] ? sock_rps_record_flow+0x19/0x350 [ 252.637275][ T7612] ? inet_send_prepare+0x5c/0x270 [ 252.637301][ T7612] ? inet6_sendmsg+0x101/0x120 [ 252.637323][ T7612] ? __pfx_inet6_sendmsg+0x10/0x10 [ 252.637343][ T7612] sock_sendmsg_nosec+0x90/0x150 [ 252.637367][ T7612] ____sys_sendmsg+0x55c/0x870 [ 252.637392][ T7612] ? __pfx_____sys_sendmsg+0x10/0x10 [ 252.637420][ T7612] ? import_iovec+0x73/0xa0 [ 252.637441][ T7612] ___sys_sendmsg+0x2a5/0x360 [ 252.637458][ T7612] ? __lock_acquire+0x6b5/0x2d10 [ 252.637484][ T7612] ? __pfx____sys_sendmsg+0x10/0x10 [ 252.637507][ T7612] ? kstrtouint+0x6e/0xe0 [ 252.637553][ T7612] ? __fget_files+0x2a/0x420 [ 252.637572][ T7612] ? __fget_files+0x3a6/0x420 [ 252.637599][ T7612] __sys_sendmmsg+0x282/0x4e0 [ 252.637624][ T7612] ? __pfx___sys_sendmmsg+0x10/0x10 [ 252.637659][ T7612] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 252.637695][ T7612] ? ksys_write+0x248/0x270 [ 252.637719][ T7612] ? __pfx_ksys_write+0x10/0x10 [ 252.637747][ T7612] __x64_sys_sendmmsg+0xa0/0xc0 [ 252.637766][ T7612] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.637788][ T7612] do_syscall_64+0x15f/0x560 [ 252.637806][ T7612] ? trace_irq_disable+0x3b/0x140 [ 252.637826][ T7612] ? clear_bhb_loop+0x40/0x90 [ 252.637847][ T7612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.637864][ T7612] RIP: 0033:0x7fd8663ece59 [ 252.637881][ T7612] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.637896][ T7612] RSP: 002b:00007fd86463e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 252.637916][ T7612] RAX: ffffffffffffffda RBX: 00007fd866665fa0 RCX: 00007fd8663ece59 [ 252.637929][ T7612] RDX: 0000000000000001 RSI: 0000200000003180 RDI: 0000000000000003 [ 252.637941][ T7612] RBP: 00007fd86463e090 R08: 0000000000000000 R09: 0000000000000000 [ 252.637952][ T7612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.637963][ T7612] R13: 00007fd866666038 R14: 00007fd866665fa0 R15: 00007ffec754bd98 [ 252.637993][ T7612] [ 252.667143][ T7614] loop4: detected capacity change from 0 to 64 [ 253.459130][ T32] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 254.102973][ T5619] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 254.133217][ T32] usb 3-1: device descriptor read/64, error -71 [ 254.202918][ T5750] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 254.255093][ T5619] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.255124][ T5619] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.255144][ T5619] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 254.255182][ T5619] usb 1-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 254.255201][ T5619] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.284256][ T5619] usb 1-1: config 0 descriptor?? [ 254.377947][ T32] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 254.395005][ T5750] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 254.395034][ T5750] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 254.395058][ T5750] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 254.429900][ T5750] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 254.429929][ T5750] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.429948][ T5750] usb 2-1: Product: syz [ 254.429961][ T5750] usb 2-1: Manufacturer: syz [ 254.429973][ T5750] usb 2-1: SerialNumber: syz [ 254.473570][ T5750] usb 2-1: config 0 descriptor?? [ 254.505393][ T5750] streamzap 2-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 254.521387][ T32] usb 3-1: device descriptor read/64, error -71 [ 254.623436][ T32] usb usb3-port1: attempt power cycle [ 254.698269][ T7638] loop4: detected capacity change from 0 to 32768 [ 254.704373][ T7638] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.499 (7638) [ 254.735716][ T7638] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 254.735752][ T7638] BTRFS info (device loop4): using crc32c checksum algorithm [ 254.952103][ T5619] playstation 0003:054C:09CC.0003: hidraw0: USB HID vff.fd Device [HID 054c:09cc] on usb-dummy_hcd.0-1/input0 [ 254.964073][ T32] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 255.005555][ T32] usb 3-1: device descriptor read/8, error -71 [ 255.028238][ T7638] BTRFS info (device loop4): setting nodatasum [ 255.028253][ T7638] BTRFS info (device loop4): setting nodatacow [ 255.028262][ T7638] BTRFS info (device loop4): turning on async discard [ 255.028270][ T7638] BTRFS info (device loop4): enabling free space tree [ 255.028278][ T7638] BTRFS info (device loop4): enabling auto defrag [ 255.160404][ T5619] playstation 0003:054C:09CC.0003: Failed to retrieve feature with reportID 18: -71 [ 255.160431][ T5619] playstation 0003:054C:09CC.0003: Failed to retrieve DualShock4 pairing info: -71 [ 255.160478][ T5619] playstation 0003:054C:09CC.0003: Failed to get MAC address from DualShock4 [ 255.160492][ T5619] playstation 0003:054C:09CC.0003: Failed to create dualshock4. [ 255.196160][ T7638] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 255.274559][ T32] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 255.286718][ T5619] playstation 0003:054C:09CC.0003: probe with driver playstation failed with error -71 [ 255.300488][ T32] usb 3-1: device descriptor read/8, error -71 [ 255.350625][ T5619] usb 1-1: USB disconnect, device number 26 [ 255.403321][ T32] usb usb3-port1: unable to enumerate USB device [ 255.651767][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.651864][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.067629][ T7675] loop3: detected capacity change from 0 to 128 [ 256.069744][ T7675] EXT4-fs (loop3): Test dummy encryption mode enabled [ 256.803485][ T32] usb 2-1: USB disconnect, device number 25 [ 256.876706][ T7687] loop0: detected capacity change from 0 to 64 [ 256.929945][ T7675] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 256.978128][ T7687] hfs: get root inode failed [ 257.049230][ T7675] ext4 filesystem being mounted at /102/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 257.390016][ T32] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 257.393263][ T5612] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 257.543386][ T32] usb 2-1: Using ep0 maxpacket: 32 [ 257.550885][ T32] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 257.550911][ T32] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 257.550930][ T32] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 257.550954][ T32] usb 2-1: config 1 has no interface number 0 [ 257.551000][ T32] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 257.551021][ T32] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 257.551058][ T32] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 257.551079][ T32] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.707665][ T32] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 257.963564][ T32] snd_usb_pod 2-1:1.1: invalid control EP [ 257.963583][ T32] snd_usb_pod 2-1:1.1: cannot start listening: -22 [ 257.964250][ T32] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 257.964796][ T32] snd_usb_pod 2-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 258.779902][ T5619] usb 2-1: USB disconnect, device number 26 [ 259.992880][ T32] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 260.315427][ T32] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 260.315457][ T32] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 260.315481][ T32] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 260.350414][ T32] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 260.350442][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.350460][ T32] usb 4-1: Product: syz [ 260.350472][ T32] usb 4-1: Manufacturer: syz [ 260.350486][ T32] usb 4-1: SerialNumber: syz [ 260.356223][ T7730] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 260.360792][ T7730] netlink: 8 bytes leftover after parsing attributes in process `syz.2.521'. [ 260.410772][ T32] usb 4-1: config 0 descriptor?? [ 260.426098][ T32] streamzap 4-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 260.806658][ T7737] loop0: detected capacity change from 0 to 16 [ 260.880124][ T7740] loop4: detected capacity change from 0 to 64 [ 260.995178][ T37] audit: type=1326 audit(1779764725.576:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7735 comm="syz.1.522" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f16ce03ce59 code=0x0 [ 261.603426][ T32] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 261.632869][ T6745] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 261.735964][ T32] usb 3-1: device descriptor read/64, error -71 [ 261.785535][ T6745] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 261.785589][ T6745] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 256, setting to 64 [ 261.787597][ T6745] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 261.787623][ T6745] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 261.787641][ T6745] usb 1-1: Manufacturer: syz [ 261.803253][ T6745] usb 1-1: config 0 descriptor?? [ 261.920593][ T44] usb 4-1: USB disconnect, device number 14 [ 261.976225][ T6745] rc_core: IR keymap rc-hauppauge not found [ 261.976244][ T6745] Registered IR keymap rc-empty [ 262.028688][ T6745] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 262.051288][ T6745] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input8 [ 262.056186][ T32] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 262.208910][ T32] usb 3-1: device descriptor read/64, error -71 [ 262.322242][ T32] usb usb3-port1: attempt power cycle [ 262.554918][ T6745] ------------[ cut here ]------------ [ 262.554933][ T6745] usb 1-1: BOGUS control dir, pipe 80001b80 doesn't match bRequestType 20 [ 262.554957][ T6745] WARNING: drivers/usb/core/urb.c:413 at usb_submit_urb+0x1074/0x18c0, CPU#1: kworker/1:7/6745 [ 262.554992][ T6745] Modules linked in: [ 262.555013][ T6745] CPU: 1 UID: 0 PID: 6745 Comm: kworker/1:7 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 262.555041][ T6745] Tainted: [L]=SOFTLOCKUP [ 262.555047][ T6745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 262.555060][ T6745] Workqueue: usb_hub_wq hub_event [ 262.555084][ T6745] RIP: 0010:usb_submit_urb+0x1122/0x18c0 [ 262.555103][ T6745] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 b4 f2 ff ff 89 e9 [ 262.555139][ T6745] RSP: 0018:ffffc9001bba6d48 EFLAGS: 00010246 [ 262.555155][ T6745] RAX: 0000000000000000 RBX: ffff8880322d6d00 RCX: 0000000080001b80 [ 262.555167][ T6745] RDX: ffff88802a9090e0 RSI: ffffffff8bf0a080 RDI: ffffffff8f988780 [ 262.555181][ T6745] RBP: 1ffff1100bdc144a R08: 0000000000000020 R09: 0000000000000000 [ 262.555193][ T6745] R10: dffffc0000000000 R11: fffffbfff1f17d7f R12: ffff888060e5e100 [ 262.555206][ T6745] R13: ffff88805ee0a250 R14: 0000000080001b80 R15: ffff88802a9090e0 [ 262.555219][ T6745] FS: 0000000000000000(0000) GS:ffff888125fec000(0000) knlGS:0000000000000000 [ 262.555240][ T6745] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 262.555253][ T6745] CR2: 00007ff4536056b8 CR3: 0000000022b34000 CR4: 00000000003526f0 [ 262.555270][ T6745] Call Trace: [ 262.555277][ T6745] [ 262.555292][ T6745] ? swiotlb_dev_init+0xd/0x50 [ 262.555321][ T6745] igorplugusb_probe+0x812/0xc70 [ 262.555353][ T6745] usb_probe_interface+0x659/0xc70 [ 262.555390][ T6745] ? __pfx_usb_probe_interface+0x10/0x10 [ 262.555413][ T6745] really_probe+0x267/0xaf0 [ 262.555443][ T6745] __driver_probe_device+0x1e2/0x350 [ 262.555466][ T6745] driver_probe_device+0x4f/0x240 [ 262.555489][ T6745] __device_attach_driver+0x270/0x410 [ 262.555512][ T6745] bus_for_each_drv+0x25b/0x2f0 [ 262.555537][ T6745] ? __pfx___device_attach_driver+0x10/0x10 [ 262.555557][ T6745] ? __pfx_bus_for_each_drv+0x10/0x10 [ 262.555580][ T6745] ? rt_spin_unlock+0x160/0x200 [ 262.555612][ T6745] __device_attach+0x2c8/0x450 [ 262.555634][ T6745] ? __pfx___device_attach+0x10/0x10 [ 262.555652][ T6745] ? rt_spin_unlock+0x160/0x200 [ 262.555684][ T6745] device_initial_probe+0xa1/0xd0 [ 262.555706][ T6745] bus_probe_device+0x12d/0x220 [ 262.555734][ T6745] device_add+0x7ec/0xb90 [ 262.555763][ T6745] usb_set_configuration+0x1a87/0x2110 [ 262.555812][ T6745] usb_generic_driver_probe+0x8d/0x150 [ 262.555837][ T6745] usb_probe_device+0x1c4/0x3b0 [ 262.555866][ T6745] ? __pfx_usb_probe_device+0x10/0x10 [ 262.555886][ T6745] really_probe+0x267/0xaf0 [ 262.555911][ T6745] __driver_probe_device+0x1e2/0x350 [ 262.555931][ T6745] driver_probe_device+0x4f/0x240 [ 262.555955][ T6745] __device_attach_driver+0x270/0x410 [ 262.555979][ T6745] bus_for_each_drv+0x25b/0x2f0 [ 262.556000][ T6745] ? __pfx___device_attach_driver+0x10/0x10 [ 262.556020][ T6745] ? __pfx_bus_for_each_drv+0x10/0x10 [ 262.556043][ T6745] ? rt_spin_unlock+0x160/0x200 [ 262.556072][ T6745] __device_attach+0x2c8/0x450 [ 262.556094][ T6745] ? __pfx___device_attach+0x10/0x10 [ 262.556113][ T6745] ? rt_spin_unlock+0x160/0x200 [ 262.556141][ T6745] device_initial_probe+0xa1/0xd0 [ 262.556162][ T6745] bus_probe_device+0x12d/0x220 [ 262.556189][ T6745] device_add+0x7ec/0xb90 [ 262.556219][ T6745] usb_new_device+0x9f8/0x16e0 [ 262.556264][ T6745] ? __pfx_usb_new_device+0x10/0x10 [ 262.556318][ T6745] hub_event+0x2a49/0x4f60 [ 262.556395][ T6745] ? __pfx_hub_event+0x10/0x10 [ 262.556416][ T6745] ? process_one_work+0x8be/0x1630 [ 262.556455][ T6745] ? process_one_work+0x8be/0x1630 [ 262.556479][ T6745] process_one_work+0x98b/0x1630 [ 262.556526][ T6745] ? __pfx_process_one_work+0x10/0x10 [ 262.556549][ T6745] ? do_raw_spin_lock+0x12b/0x2f0 [ 262.556588][ T6745] worker_thread+0xb49/0x1140 [ 262.556614][ T6745] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 262.556648][ T6745] kthread+0x388/0x470 [ 262.556669][ T6745] ? __pfx_worker_thread+0x10/0x10 [ 262.556686][ T6745] ? __pfx_kthread+0x10/0x10 [ 262.556708][ T6745] ret_from_fork+0x514/0xb70 [ 262.556736][ T6745] ? __pfx_ret_from_fork+0x10/0x10 [ 262.556759][ T6745] ? __switch_to+0xc79/0x1410 [ 262.556782][ T6745] ? __pfx_kthread+0x10/0x10 [ 262.556804][ T6745] ret_from_fork_asm+0x1a/0x30 [ 262.556847][ T6745] [ 262.556857][ T6745] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 262.556875][ T6745] CPU: 1 UID: 0 PID: 6745 Comm: kworker/1:7 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 262.556900][ T6745] Tainted: [L]=SOFTLOCKUP [ 262.556907][ T6745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 262.556919][ T6745] Workqueue: usb_hub_wq hub_event [ 262.556940][ T6745] Call Trace: [ 262.556948][ T6745] [ 262.556955][ T6745] vpanic+0x56c/0xa60 [ 262.556980][ T6745] ? __pfx__printk+0x10/0x10 [ 262.556997][ T6745] ? __pfx_vpanic+0x10/0x10 [ 262.557017][ T6745] ? is_bpf_text_address+0x292/0x2b0 [ 262.557038][ T6745] ? is_bpf_text_address+0x26/0x2b0 [ 262.557069][ T6745] panic+0xc5/0xd0 [ 262.557091][ T6745] ? __pfx_panic+0x10/0x10 [ 262.557133][ T6745] ? ret_from_fork_asm+0x1a/0x30 [ 262.557163][ T6745] __warn+0x315/0x4c0 [ 262.557186][ T6745] ? usb_submit_urb+0x1074/0x18c0 [ 262.557205][ T6745] ? usb_submit_urb+0x1074/0x18c0 [ 262.557226][ T6745] __report_bug+0x339/0x540 [ 262.557266][ T6745] ? usb_submit_urb+0x1074/0x18c0 [ 262.557285][ T6745] ? __pfx___report_bug+0x10/0x10 [ 262.557311][ T6745] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 262.557347][ T6745] report_bug_entry+0x19a/0x290 [ 262.557368][ T6745] ? usb_submit_urb+0x1122/0x18c0 [ 262.557385][ T6745] ? usb_submit_urb+0x1127/0x18c0 [ 262.557402][ T6745] handle_bug+0xce/0x200 [ 262.557422][ T6745] exc_invalid_op+0x1a/0x50 [ 262.557443][ T6745] asm_exc_invalid_op+0x1a/0x20 [ 262.557461][ T6745] RIP: 0010:usb_submit_urb+0x1122/0x18c0 [ 262.557479][ T6745] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 b4 f2 ff ff 89 e9 [ 262.557494][ T6745] RSP: 0018:ffffc9001bba6d48 EFLAGS: 00010246 [ 262.557510][ T6745] RAX: 0000000000000000 RBX: ffff8880322d6d00 RCX: 0000000080001b80 [ 262.557522][ T6745] RDX: ffff88802a9090e0 RSI: ffffffff8bf0a080 RDI: ffffffff8f988780 [ 262.557536][ T6745] RBP: 1ffff1100bdc144a R08: 0000000000000020 R09: 0000000000000000 [ 262.557547][ T6745] R10: dffffc0000000000 R11: fffffbfff1f17d7f R12: ffff888060e5e100 [ 262.557561][ T6745] R13: ffff88805ee0a250 R14: 0000000080001b80 R15: ffff88802a9090e0 [ 262.557588][ T6745] ? usb_submit_urb+0x10b1/0x18c0 [ 262.557611][ T6745] ? swiotlb_dev_init+0xd/0x50 [ 262.557635][ T6745] igorplugusb_probe+0x812/0xc70 [ 262.557666][ T6745] usb_probe_interface+0x659/0xc70 [ 262.557703][ T6745] ? __pfx_usb_probe_interface+0x10/0x10 [ 262.557726][ T6745] really_probe+0x267/0xaf0 [ 262.557754][ T6745] __driver_probe_device+0x1e2/0x350 [ 262.557777][ T6745] driver_probe_device+0x4f/0x240 [ 262.557800][ T6745] __device_attach_driver+0x270/0x410 [ 262.557825][ T6745] bus_for_each_drv+0x25b/0x2f0 [ 262.557849][ T6745] ? __pfx___device_attach_driver+0x10/0x10 [ 262.557869][ T6745] ? __pfx_bus_for_each_drv+0x10/0x10 [ 262.557893][ T6745] ? rt_spin_unlock+0x160/0x200 [ 262.557924][ T6745] __device_attach+0x2c8/0x450 [ 262.557946][ T6745] ? __pfx___device_attach+0x10/0x10 [ 262.557966][ T6745] ? rt_spin_unlock+0x160/0x200 [ 262.557996][ T6745] device_initial_probe+0xa1/0xd0 [ 262.558017][ T6745] bus_probe_device+0x12d/0x220 [ 262.558045][ T6745] device_add+0x7ec/0xb90 [ 262.558075][ T6745] usb_set_configuration+0x1a87/0x2110 [ 262.558127][ T6745] usb_generic_driver_probe+0x8d/0x150 [ 262.558153][ T6745] usb_probe_device+0x1c4/0x3b0 [ 262.558180][ T6745] ? __pfx_usb_probe_device+0x10/0x10 [ 262.558202][ T6745] really_probe+0x267/0xaf0 [ 262.558229][ T6745] __driver_probe_device+0x1e2/0x350 [ 262.558259][ T6745] driver_probe_device+0x4f/0x240 [ 262.558283][ T6745] __device_attach_driver+0x270/0x410 [ 262.558307][ T6745] bus_for_each_drv+0x25b/0x2f0 [ 262.558332][ T6745] ? __pfx___device_attach_driver+0x10/0x10 [ 262.558353][ T6745] ? __pfx_bus_for_each_drv+0x10/0x10 [ 262.558377][ T6745] ? rt_spin_unlock+0x160/0x200 [ 262.558409][ T6745] __device_attach+0x2c8/0x450 [ 262.558431][ T6745] ? __pfx___device_attach+0x10/0x10 [ 262.558451][ T6745] ? rt_spin_unlock+0x160/0x200 [ 262.558482][ T6745] device_initial_probe+0xa1/0xd0 [ 262.558504][ T6745] bus_probe_device+0x12d/0x220 [ 262.558530][ T6745] device_add+0x7ec/0xb90 [ 262.558556][ T6745] usb_new_device+0x9f8/0x16e0 [ 262.558583][ T6745] ? __pfx_usb_new_device+0x10/0x10 [ 262.558611][ T6745] hub_event+0x2a49/0x4f60 [ 262.558681][ T6745] ? __pfx_hub_event+0x10/0x10 [ 262.558702][ T6745] ? process_one_work+0x8be/0x1630 [ 262.558741][ T6745] ? process_one_work+0x8be/0x1630 [ 262.558766][ T6745] process_one_work+0x98b/0x1630 [ 262.558809][ T6745] ? __pfx_process_one_work+0x10/0x10 [ 262.558832][ T6745] ? do_raw_spin_lock+0x12b/0x2f0 [ 262.558869][ T6745] worker_thread+0xb49/0x1140 [ 262.558897][ T6745] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 262.558931][ T6745] kthread+0x388/0x470 [ 262.558954][ T6745] ? __pfx_worker_thread+0x10/0x10 [ 262.558970][ T6745] ? __pfx_kthread+0x10/0x10 [ 262.558992][ T6745] ret_from_fork+0x514/0xb70 [ 262.559018][ T6745] ? __pfx_ret_from_fork+0x10/0x10 [ 262.559041][ T6745] ? __switch_to+0xc79/0x1410 [ 262.559065][ T6745] ? __pfx_kthread+0x10/0x10 [ 262.559088][ T6745] ret_from_fork_asm+0x1a/0x30 [ 262.559130][ T6745] [ 262.559293][ T6745] Kernel Offset: disabled