last executing test programs: 21m5.63380569s ago: executing program 2 (id=2325): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000c00)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48840}}, {{&(0x7f0000000700)=@abs={0x1, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x20000001}}], 0x2, 0x40) 21m5.544923942s ago: executing program 2 (id=2327): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x40000000, {{@in, @in=@private=0xa010102, 0x4000, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x3}, 0x40000000, 0x0, 0x1, 0x0, 0x0, 0x3}, [@offload={0xc, 0x1c, {0x0, 0x1}}]}, 0xc4}}, 0x0) 21m5.330169068s ago: executing program 2 (id=2331): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x25dfdbfc, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {}]}, [{}, {}, {}, {}, {}, {0x448eade7, 0x0, 0x0, 0xfffffffc}, {0x0, 0x6, 0x80000000}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x0, 0x20000000, 0x0, 0xffffffff, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {0x0, 0xfffffffe}, {0xfffffffc, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x4, 0x0, 0x0, 0x0, 0xc759}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x9}, {0x0, 0x0, 0x800000}, {}, {}, {0x0, 0x40}, {}, {0x0, 0x0, 0x1}, {0xfffffffe}, {}, {0xd5}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x10}, {0x80000000}, {0x8eb9, 0x0, 0x80000001}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x4, 0x0, 0x7ee}, {}, {}, {0x2}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x5}, {}, {}, {}, {0x9}, {0x0, 0x0, 0x0, 0x0, 0x4000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, {}, {0x3}, {}, {0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {}, {0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x0, 0x0, 0x3ff}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x10}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x4}, {}, {}, {0xfffffffc}, {0x0, 0x0, 0x0, 0x4, 0x2}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x80000000, 0x5}, {}, {0x10000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x800000}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x10001}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x7, 0x0, 0x0, 0xb}], [{0x3}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {0x1}, {}, {0x0, 0x1}, {0x7}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x2}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x5, 0x1}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) 21m5.012609935s ago: executing program 2 (id=2337): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)=@newlink={0x38, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x2}]}}}]}, 0x38}}, 0x0) 21m4.652894934s ago: executing program 2 (id=2342): r0 = syz_open_dev$sg(&(0x7f0000000000), 0xffff0000, 0x2842) ioctl$FIBMAP(r0, 0x227f, &(0x7f0000000040)=0x5) 21m4.395210437s ago: executing program 2 (id=2348): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0xe1, &(0x7f00000004c0)={0x20, 0x1, 0x14, 0x2}, 0x8, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0}) 20m49.231784255s ago: executing program 32 (id=2348): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0xe1, &(0x7f00000004c0)={0x20, 0x1, 0x14, 0x2}, 0x8, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0}) 8m31.070680109s ago: executing program 1 (id=13280): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x200000, {0x1, 0xf0, 0x4}}, 0x18) sendmmsg(r0, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0xf5) 8m30.884715878s ago: executing program 1 (id=13285): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000140)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000080)={0x5, 0x830, 0x0, {0x77359400}, {}, {0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x2b, 0x0, 0x0, 0x0, "f33d8e7b847ec8b36f1107e036dd98fc469107485e371bcf5c6b77db54f3d984795c49eca9b92241dc9fc39f976ad52e581942d9fc2178681e6866aa6ef10d06"}}, 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) 8m30.640522824s ago: executing program 1 (id=13291): syz_open_dev$sndctrl(&(0x7f0000000300), 0xfffffffc, 0x0) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0xca72, 0x10000, 0xfffffffe, 0x4e}, &(0x7f0000000840)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 8m30.165957165s ago: executing program 1 (id=13295): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f0000000300)='./file0/../file0\x00') 8m29.994677879s ago: executing program 1 (id=13298): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$CLEAR(r0, 0x3b88, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x2, 0x1) 8m29.401723689s ago: executing program 1 (id=13307): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @local}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4008811) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x4, &(0x7f00000000c0)=""/206, &(0x7f0000000080)=0xce) 8m14.271727173s ago: executing program 33 (id=13307): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @local}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4008811) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x4, &(0x7f00000000c0)=""/206, &(0x7f0000000080)=0xce) 2m46.084208519s ago: executing program 4 (id=17636): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x1, 0x0, &(0x7f0000000200)=""/51, 0x0, 0x70000}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r2}) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 2m45.621912696s ago: executing program 4 (id=17641): pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) shutdown(r1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x200, @local}, 0x10) sendto$inet(r1, &(0x7f0000000200)="e111", 0x2, 0x20000850, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x5, 0xa) 2m45.382931118s ago: executing program 4 (id=17646): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x1, 0xfffffffb}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r0, 0x0, 0x0) 2m45.174237471s ago: executing program 4 (id=17650): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x10000, 0x0, 0x8, 0x2ea473, 0x2eb80c}) socket$igmp6(0xa, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) userfaultfd(0x80001) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 2m45.01365244s ago: executing program 4 (id=17654): write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) setgroups(0x2d5b, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0]) 2m43.64643154s ago: executing program 4 (id=17660): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x4, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) ioctl$BTRFS_IOC_SNAP_DESTROY(r2, 0x40305828, &(0x7f0000000200)={{r0}, "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"}) 2m28.558962112s ago: executing program 34 (id=17660): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x4, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) ioctl$BTRFS_IOC_SNAP_DESTROY(r2, 0x40305828, &(0x7f0000000200)={{r0}, "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"}) 1m33.706056299s ago: executing program 7 (id=18248): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2000000000000013, &(0x7f0000000440)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 1m32.413903134s ago: executing program 7 (id=18266): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f00000000c0)=0x20) write$binfmt_elf32(r2, 0x0, 0x4cd) 1m30.898138939s ago: executing program 7 (id=18272): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8c0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d058050639", 0x99}, {&(0x7f0000000780)}, {&(0x7f0000000800)}, {&(0x7f00000000c0)}], 0x5}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)}], 0x2, &(0x7f0000000cc0)=[@timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x30}}], 0x2, 0x20000044) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1m30.610955237s ago: executing program 7 (id=18276): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000540)='./file0/../file0\x00', 0x0, 0x20000, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 1m30.338246825s ago: executing program 7 (id=18280): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f0000000000)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x0) 1m26.399887722s ago: executing program 7 (id=18305): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) fsopen(0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, 0x0, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0xc8080) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000000)=0x639) readv(r2, &(0x7f0000000180)=[{&(0x7f0000000200)=""/147, 0x93}], 0x1) 1m24.499397597s ago: executing program 35 (id=18305): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) fsopen(0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, 0x0, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0xc8080) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000000)=0x639) readv(r2, &(0x7f0000000180)=[{&(0x7f0000000200)=""/147, 0x93}], 0x1) 13.687600314s ago: executing program 5 (id=18641): bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000500)=@generic={0x0}, 0x18) 13.389725691s ago: executing program 5 (id=18643): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x0, &(0x7f00000004c0)}) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x54, 0x0, &(0x7f0000001300)="b461802305624431ed33730100010446b20aed0200000000000000d5fe00c6fc6ef8eef9757a601bee936390009c5bbd000000003632b69f0eb2062818f298ed60abbc5f6322cbfac4973cf2bef7c0b4452e43e6", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffd}, 0x50) r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x200c2) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) set_mempolicy(0x3, &(0x7f0000000040)=0xe3, 0x8) io_uring_setup(0x1b0e, &(0x7f0000000200)={0x0, 0x9d0, 0x1000, 0x3, 0x19c}) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fe07124081173809499b010203010902240001000000000904"], 0x0) connect$inet6(r1, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x8, 0x0, 0x7ffc0002}]}) rename(0x0, 0x0) request_key(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000540)={'syz', 0x3}, &(0x7f0000000500)='\xbc50\xf4\xc4Fv:\xc0\xe3\x97\x8cL\x85\xf0\x9bhq\xa9', 0x0) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 12.646191048s ago: executing program 0 (id=18645): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) gettid() timer_create(0x2, &(0x7f0000000080)={0x0, 0x21, 0x0, @thr={&(0x7f0000000000)="e81db0aeb38f127e60712f62f74e274e34", &(0x7f0000000380)}}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) msgget$private(0x0, 0x1c0) r4 = msgget$private(0x0, 0x184) msgsnd(r4, 0x0, 0xfd1, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3) 12.628350398s ago: executing program 6 (id=18646): syz_open_dev$loop(&(0x7f0000000240), 0x75f, 0xa8182) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8e, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb3209000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(0xffffffffffffffff, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x800) inotify_add_watch(r0, &(0x7f00000006c0)='.\x00', 0xaa) connect$unix(0xffffffffffffffff, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) set_mempolicy(0x3, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x8) fallocate(r1, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x200000c, 0x13, r1, 0x2000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 11.305542512s ago: executing program 5 (id=18655): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000a3b370086d04ae08581101020301090212000d000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000004c0)={0x84, &(0x7f0000000140)={0x40, 0x11}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000840)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000001c0)={0xc, &(0x7f0000000000)={0x40, 0x3, 0x2, {0x2, 0x7}}, 0x0}, &(0x7f0000000700)={0x10, &(0x7f0000000540)={0x40, 0x11}, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000d40)={0x1c, &(0x7f0000000740)={0x0, 0x0, 0x35, "3d83abe1f1935e95dbe72c86ef4a988748bbc4650ec3074e91829238d900ff0a1410b3d4934fed67c53aaa3482aab0e573b95ec3dd"}, 0x0, &(0x7f0000000d00)={0x21, 0x0, 0x2, '03'}}) syz_usb_control_io(r0, 0x0, 0x0) 11.208008554s ago: executing program 6 (id=18656): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_create(0x1, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000040)='binder\x00', 0x320081a, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') pread64(r4, &(0x7f0000002240)=""/237, 0xed, 0x4eb) 9.461919526s ago: executing program 6 (id=18660): mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="28000000030601080000"], 0x28}, 0x1, 0x0, 0x0, 0x400c050}, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) close(0x3) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={{0x14}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) listen(0xffffffffffffffff, 0x0) 8.941239859s ago: executing program 6 (id=18662): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmsg$IPCTNL_MSG_CT_NEW(r4, 0x0, 0x8000) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/88, 0x58}, {&(0x7f0000000740)=""/105, 0xfffffe0b}], 0x2}, 0x0) 7.769043486s ago: executing program 0 (id=18663): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) userfaultfd(0x800) r3 = socket(0x840000000002, 0x3, 0xff) connect$inet(r3, &(0x7f0000000540)={0x2, 0x4e60, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) 7.561613036s ago: executing program 6 (id=18665): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c", 0x70}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2b", 0x22}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb558492", 0x41}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 6.543817807s ago: executing program 6 (id=18668): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x80000a, 0x31, 0xffffffffffffffff, 0xd0fb8000) syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r0, 0x0, 0x0, 0x40004, &(0x7f0000000180)={0xa, 0x4e62, 0xfffffffc, @local, 0xfffffffa}, 0x6) unshare(0x2a020400) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x4004000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x4054) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x7a, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}}, 0x90) 6.442845895s ago: executing program 0 (id=18669): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps_rollup\x00') r4 = fsopen(&(0x7f0000000000)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x1aa) getdents64(r6, &(0x7f0000004440)=""/4096, 0x1000) read$FUSE(r3, &(0x7f0000002400)={0x2020}, 0x2020) 5.463854478s ago: executing program 5 (id=18672): syz_open_dev$sg(&(0x7f00000001c0), 0x508d48d4, 0x40902) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b", 0xe3}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c9af6f1b0bc00510c"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968", 0x79}, {&(0x7f0000000ac0)="3fe4c8a3288f09", 0x7}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc", 0x2a}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0", 0x9e}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9", 0xc6}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a", 0xac}], 0x6, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x12, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x5}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, @jmp={0x5, 0x1, 0x4, 0x0, 0x9, 0xfffffffffffffff8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x3}, 0x94) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4.560520716s ago: executing program 0 (id=18675): r0 = syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r1 = syz_open_procfs(0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc0686611, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000700)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x1c, &(0x7f0000000040)={0x40, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x44, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000900)={0x34, &(0x7f0000000100)={0x40, 0x13}, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.624406125s ago: executing program 5 (id=18676): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x8c0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x48}}], 0x1, 0x20000044) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 3.162417229s ago: executing program 5 (id=18682): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) fchownat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0, r1, 0x1000) writev(0xffffffffffffffff, &(0x7f0000001500)=[{0x0}, {0x0}, {&(0x7f0000001340)="3e3591e03d3ef3dcb59c8126d4c916d1c98ebd381bb24889917ef4752341eb133e0626aada4d97f5552aecd289d1510ec9e7b00ecd20001fa30afa386196dd90a02577088321e7c0bd94716347ed389a02fd434150007933003bf66586a53cff1e6d7a59d877b3ed79902bff2a6175bf0594e32a80e3604a87147766e1eb1893231a20b8c93116bf6d90953e385fd8d55167872511fe5651f7a1d191ac40bf726e0fb3029d618ce15f72d8ae37", 0xad}, {0x0}, {&(0x7f00000014c0)}], 0x5) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102400, 0x19000) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) 2.962259565s ago: executing program 3 (id=18683): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x40002, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, 0x0, &(0x7f0000000300)) pipe2(&(0x7f0000000040), 0x0) memfd_create(0x0, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 2.634980201s ago: executing program 3 (id=18684): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r3, &(0x7f0000000180), &(0x7f0000000280), 0x1}, 0x20) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) 1.85868141s ago: executing program 3 (id=18685): clock_gettime(0x4, &(0x7f0000000080)={0x0, 0x0}) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000000)) r2 = socket(0x2, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x13, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0xe000, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, 0x0, 0x8010) io_getevents(0x0, 0x2, 0x0, 0x0, &(0x7f0000000900)={r0, r1+60000000}) openat(0xffffffffffffff9c, 0x0, 0x18000, 0x120) clock_gettime(0x0, &(0x7f0000000180)) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001800dd8d000000000000000002000004fe0000060000"], 0x1c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r6, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @private}}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0xf, 0x0, {0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2900}}, 0x1c}}, 0x8c0) 1.596621472s ago: executing program 3 (id=18686): r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x5, 0x1cb, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) syz_io_uring_setup(0x2f4b, &(0x7f0000000200)={0x0, 0xabff, 0x1000, 0x4000002, 0x32a}, 0x0, 0x0, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c0000001400010025bd7000fddbdf2501"], 0x4c}, 0x1, 0x0, 0x0, 0x404c0c8}, 0x4040000) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$sierra_net(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000300)={0x0, 0x16, 0x97, "1702465f261cfbf84f0e080838ae96f46e1b9644abe8cc40bec0eb4839f96a07834e322b8c72b09f68fcad00c0e0778168a10f25853b0363e9bc5f6e99a2d614afeeed86ebb93e522bb982c3f40e9a024c075359c0b4ad56606cd30ad271ba557edd1617295d08447705763158798c1a80deb7b69be9edcc8ac61eae3bf736e897a7ecfcf215ab4c6bd67fab704b830891699dbe7a371f"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0xfb}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000440)={0x20, 0x80, 0x1c, {0xfffe, 0x8, 0x1, 0x4, 0x101, 0x8, 0xa9, 0x5, 0xfff, 0x8, 0x4, 0xcf6}}, &(0x7f0000000480)={0x20, 0x85, 0x4, 0x8001}, &(0x7f00000004c0)={0x20, 0x83, 0x2}, &(0x7f0000000500)={0x20, 0x87, 0x2, 0xc612}, &(0x7f0000000540)={0x20, 0x89, 0x2, 0x1}}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000840)={0x2c, &(0x7f0000000680)={0x20, 0x0, 0x4, "0c8ac451"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000c00)={0x84, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x20, 0x0, 0x4, {0x3, 0x6}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.389153482s ago: executing program 0 (id=18687): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f00000002c0)={0x10000, 0x1, 0x0, 0x0, 0x0, 0x8fc0, 0x65f40}) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2505000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0500f000000000000000010000000900010073797a300000000048000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174003c000000060a01"], 0xcc}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r5 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r5, 0xffff) 1.345552563s ago: executing program 3 (id=18688): openat$sysfs(0xffffffffffffff9c, 0x0, 0xa0442, 0x11) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000001010500000400000000000007000004"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000020000103000000000400000002000000000000d54a308a000c000c400000000000000003"], 0x44}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x134}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}, @restrict={0x0, 0x0, 0x0, 0xb, 0x3}]}}, 0x0, 0x66}, 0x20) 29.809591ms ago: executing program 3 (id=18689): mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x24, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000200)) shmctl$IPC_RMID(0x0, 0x0) unlinkat(0xffffffffffffff9c, 0x0, 0x200) ioctl$AUTOFS_IOC_EXPIRE_MULTI(0xffffffffffffffff, 0x40049366, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) syz_emit_ethernet(0x4a, &(0x7f0000001340)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x14, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x19}, {0x3}]}}}}}}, 0x0) unshare(0x20040600) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x13, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180200002020702500000000002020207b0af8ff00000000bda100000000000026010000f8ffffffb702000008000000b703000000000000850000004b00000095"], &(0x7f0000000280)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x6d, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 0 (id=18690): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x100) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x20201) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x40485404, &(0x7f00000000c0)={{0x1, 0x2, 0x5, 0x3}, 0x51, 0x4}) socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x8891}, 0x2000880) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@delchain={0x24, 0x64, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0xffff}, {0x10, 0xffff}, {0xffff}}}, 0x24}}, 0xd4) sendmsg$NFC_CMD_SE_IO(0xffffffffffffffff, 0x0, 0x2000084) pread64(r1, &(0x7f0000000200)=""/151, 0x97, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r4, 0xd1bd17c4b9ef5e5b, 0x70bd26, 0x25dfdbff, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x90) kernel console output (not intermixed with test programs): ead [ 1252.955615][ T5985] usb 5-1: USB disconnect, device number 2 [ 1254.064284][ T5290] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14907'. [ 1254.290753][T27948] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 1254.440850][T27948] usb 6-1: Using ep0 maxpacket: 8 [ 1254.443674][T27948] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1254.443695][T27948] usb 6-1: config 0 has no interfaces? [ 1254.447347][T27948] usb 6-1: New USB device found, idVendor=17a1, idProduct=0128, bcdDevice= 5.f6 [ 1254.447380][T27948] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1254.447403][T27948] usb 6-1: Product: syz [ 1254.447522][T27948] usb 6-1: Manufacturer: syz [ 1254.447540][T27948] usb 6-1: SerialNumber: syz [ 1254.515286][T27948] usb 6-1: config 0 descriptor?? [ 1254.771493][ T3020] kernel read not supported for file /input/mouse0 (pid: 3020 comm: kworker/1:1) [ 1254.903500][T27948] usb 6-1: USB disconnect, device number 65 [ 1258.198335][ T5453] netlink: 12 bytes leftover after parsing attributes in process `syz.6.14952'. [ 1258.198383][ T5453] netlink: 12 bytes leftover after parsing attributes in process `syz.6.14952'. [ 1258.198409][ T5453] netlink: 20 bytes leftover after parsing attributes in process `syz.6.14952'. [ 1259.439519][ T5506] syzkaller1: entered promiscuous mode [ 1259.439547][ T5506] syzkaller1: entered allmulticast mode [ 1259.450262][ T11] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 1259.606048][ T11] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1259.606081][ T11] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1259.637874][ T11] usb 6-1: config 0 descriptor?? [ 1259.707855][ T11] cp210x 6-1:0.0: cp210x converter detected [ 1260.269054][ T11] cp210x 6-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 1260.269110][ T11] cp210x 6-1:0.0: GPIO initialisation failed: -71 [ 1260.331299][ T11] usb 6-1: cp210x converter now attached to ttyUSB0 [ 1260.335890][ T11] usb 6-1: USB disconnect, device number 66 [ 1260.374826][ T11] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1260.375351][ T11] cp210x 6-1:0.0: device disconnected [ 1261.122030][ T5545] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14995'. [ 1261.755605][ T5564] loop9: detected capacity change from 0 to 7 [ 1261.893293][ T5564] Dev loop9: unable to read RDB block 7 [ 1261.893346][ T5564] loop9: unable to read partition table [ 1261.893552][ T5564] loop9: partition table beyond EOD, truncated [ 1261.921610][ T5564] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 1267.303049][ T37] kauditd_printk_skb: 14 callbacks suppressed [ 1267.303074][ T37] audit: type=1800 audit(1267.193:705): pid=5784 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.15067" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1268.174761][ T37] audit: type=1326 audit(1268.173:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5821 comm="syz.4.15082" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ba3b6ce59 code=0x7ffc0000 [ 1268.175380][ T37] audit: type=1326 audit(1268.173:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5821 comm="syz.4.15082" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ba3b6ce59 code=0x7ffc0000 [ 1268.175532][ T37] audit: type=1326 audit(1268.173:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5821 comm="syz.4.15082" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ba3b6ce59 code=0x7ffc0000 [ 1268.176431][ T37] audit: type=1326 audit(1268.173:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5821 comm="syz.4.15082" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2ba3b6ce59 code=0x7ffc0000 [ 1268.176596][ T37] audit: type=1326 audit(1268.173:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5821 comm="syz.4.15082" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ba3b6ce59 code=0x7ffc0000 [ 1268.176939][ T37] audit: type=1326 audit(1268.173:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5821 comm="syz.4.15082" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ba3b6ce59 code=0x7ffc0000 [ 1268.177054][ T37] audit: type=1326 audit(1268.173:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5821 comm="syz.4.15082" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ba3b6ce59 code=0x7ffc0000 [ 1268.177243][ T37] audit: type=1326 audit(1268.173:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5821 comm="syz.4.15082" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f2ba3b6ce59 code=0x7ffc0000 [ 1268.177767][ T37] audit: type=1326 audit(1268.173:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5821 comm="syz.4.15082" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ba3b6ce59 code=0x7ffc0000 [ 1272.879358][ T5980] Process accounting resumed [ 1273.639021][ T5978] wg0 speed is unknown, defaulting to 1000 [ 1273.652432][ T5978] virt_wifi0 speed is unknown, defaulting to 1000 [ 1274.787236][ T5982] netlink: 'syz.0.15141': attribute type 21 has an invalid length. [ 1274.787262][ T5982] netlink: 'syz.0.15141': attribute type 7 has an invalid length. [ 1276.567383][ T6074] lo: entered allmulticast mode [ 1276.569006][ T6073] lo: left allmulticast mode [ 1276.771094][ T5610] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 1276.920819][ T5610] usb 6-1: Using ep0 maxpacket: 8 [ 1276.923278][ T5610] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1276.926237][ T5610] usb 6-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1276.926269][ T5610] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1276.926290][ T5610] usb 6-1: Product: syz [ 1276.926306][ T5610] usb 6-1: Manufacturer: syz [ 1276.926321][ T5610] usb 6-1: SerialNumber: syz [ 1276.993614][ T5610] usb 6-1: config 0 descriptor?? [ 1277.026356][ T5610] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1277.823192][ T5610] gspca_zc3xx: reg_w_i err -71 [ 1278.410905][ T5610] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1278.411019][ T5610] gspca_zc3xx 6-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1278.438776][ T5610] usb 6-1: USB disconnect, device number 67 [ 1279.249161][ T6153] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1279.539941][ T37] kauditd_printk_skb: 7 callbacks suppressed [ 1279.539961][ T37] audit: type=1326 audit(1279.533:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6161 comm="syz.5.15219" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f004ddcce59 code=0x0 [ 1281.931593][ T6231] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1282.939791][ T6271] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1283.468735][ T6289] input: syz0 as /devices/virtual/input/input69 [ 1286.359633][ T6393] could not open pipe file descriptor [ 1286.684548][ T6405] netlink: 12 bytes leftover after parsing attributes in process `syz.5.15330'. [ 1287.079722][ T6409] wg0 speed is unknown, defaulting to 1000 [ 1287.089063][ T6409] virt_wifi0 speed is unknown, defaulting to 1000 [ 1287.820776][ T5985] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 1288.002527][ T5985] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1288.002562][ T5985] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1288.002584][ T5985] usb 6-1: Product: syz [ 1288.002601][ T5985] usb 6-1: Manufacturer: syz [ 1288.002619][ T5985] usb 6-1: SerialNumber: syz [ 1288.074223][ T5985] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1288.237203][ T3020] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1288.896712][ T11] usb 6-1: USB disconnect, device number 68 [ 1289.600185][ T3020] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1289.660911][ T3020] ath9k_htc: Failed to initialize the device [ 1289.663081][ T11] usb 6-1: ath9k_htc: USB layer deinitialized [ 1290.138895][ T6517] vcan0: tx drop: invalid sa for name 0x00000000000000f0 [ 1291.090824][ T11] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1291.256039][ T11] usb 5-1: Using ep0 maxpacket: 8 [ 1291.266330][ T11] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1291.266367][ T11] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1291.266395][ T11] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1291.266433][ T11] usb 5-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 1291.266457][ T11] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1291.332495][ T11] usb 5-1: config 0 descriptor?? [ 1291.569552][ T11] usbhid 5-1:0.0: can't add hid device: -71 [ 1291.569689][ T11] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1291.733436][ T11] usb 5-1: USB disconnect, device number 3 [ 1293.125069][T31258] Bluetooth: hci4: command 0x1003 tx timeout [ 1293.169517][ T59] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1294.399915][ T6674] loop5: detected capacity change from 0 to 7 [ 1294.625457][ T6676] loop5: detected capacity change from 7 to 0 [ 1294.628717][ C0] blk_print_req_error: 5 callbacks suppressed [ 1294.628737][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1294.628813][ C0] buffer_io_error: 5 callbacks suppressed [ 1294.628826][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 1294.628966][ T6674] ldm_validate_partition_table(): Disk read failed. [ 1294.628996][ T6674] Dev loop5: unable to read RDB block 0 [ 1294.629027][ T6674] loop5: unable to read partition table [ 1294.629234][ T6674] loop5: partition table beyond EOD, truncated [ 1294.629268][ T6674] loop_reread_partitions: partition scan of loop5 (ɍn/C>|n˨,l-"@Iy}c9sGQaG%x?) failed (rc=-5) [ 1295.590696][ T5985] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1295.620800][ T37] audit: type=1326 audit(1295.623:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6717 comm="syz.0.15473" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24ba8ce59 code=0x7ffc0000 [ 1295.621692][ T37] audit: type=1326 audit(1295.623:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6717 comm="syz.0.15473" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24ba8ce59 code=0x7ffc0000 [ 1295.624643][ T37] audit: type=1326 audit(1295.623:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6717 comm="syz.0.15473" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24ba8ce59 code=0x7ffc0000 [ 1295.625051][ T37] audit: type=1326 audit(1295.623:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6717 comm="syz.0.15473" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7fd24ba8ce59 code=0x7ffc0000 [ 1295.625759][ T37] audit: type=1326 audit(1295.623:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6717 comm="syz.0.15473" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24ba8ce59 code=0x7ffc0000 [ 1295.625811][ T37] audit: type=1326 audit(1295.623:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6717 comm="syz.0.15473" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24ba8ce59 code=0x7ffc0000 [ 1295.627238][ T37] audit: type=1326 audit(1295.623:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6717 comm="syz.0.15473" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24ba8ce59 code=0x7ffc0000 [ 1295.627575][ T37] audit: type=1326 audit(1295.623:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6717 comm="syz.0.15473" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24ba8ce59 code=0x7ffc0000 [ 1295.628001][ T37] audit: type=1326 audit(1295.623:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6717 comm="syz.0.15473" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24ba8ce59 code=0x7ffc0000 [ 1295.628531][ T37] audit: type=1326 audit(1295.623:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6717 comm="syz.0.15473" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fd24ba8ce59 code=0x7ffc0000 [ 1295.762129][ T5985] usb 5-1: Using ep0 maxpacket: 16 [ 1295.899766][ T5985] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1295.914170][ T5985] usb 5-1: config 250 has an invalid interface number: 59 but max is 0 [ 1295.914202][ T5985] usb 5-1: config 250 has no interface number 0 [ 1295.914236][ T5985] usb 5-1: config 250 interface 59 has no altsetting 0 [ 1295.930744][ T5985] usb 5-1: string descriptor 0 read error: -22 [ 1295.931535][ T5985] usb 5-1: New USB device found, idVendor=9c01, idProduct=e8d8, bcdDevice=b6.a6 [ 1295.931609][ T5985] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1296.010355][ T5985] usb-storage 5-1:250.59: USB Mass Storage device detected [ 1296.238933][ T2284] usb 5-1: USB disconnect, device number 4 [ 1296.794445][ T59] Bluetooth: hci1: unexpected event 0x2f length: 1017 > 260 [ 1297.309943][ T6762] lapbether: lapb_data_request error - 4 [ 1297.638783][ T6772] sg_write: data in/out 425984/136 bytes for SCSI command 0x0-- guessing data in; [ 1297.638783][ T6772] program syz.5.15498 not setting count and/or reply_len properly [ 1299.203515][ T6821] net_ratelimit: 1528 callbacks suppressed [ 1299.203537][ T6821] TCP: tcp_parse_options: Illegal window scaling value 112 > 14 received [ 1299.203555][ T6821] TCP: tcp_parse_options: Illegal window scaling value 128 > 14 received [ 1299.258079][ T6814] loop9: detected capacity change from 0 to 255852544 [ 1299.644990][ T5985] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 1299.796512][ T5985] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1299.796545][ T5985] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1299.858060][ T5985] usb 5-1: config 0 descriptor?? [ 1299.889685][ T5985] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1300.198860][ T5985] gp8psk: usb in 128 operation failed. [ 1300.401190][ T5985] gp8psk: usb in 146 operation failed. [ 1300.401211][ T5985] gp8psk: failed to get FW version [ 1300.402366][ T5985] gp8psk: FPGA Version = 169 [ 1300.719425][ T5985] gp8psk: usb in 138 operation failed. [ 1300.719448][ T5985] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1300.719490][ T5985] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1300.768027][ T5985] usb 5-1: USB disconnect, device number 5 [ 1301.351357][ T6868] netlink: 44 bytes leftover after parsing attributes in process `syz.4.15543'. [ 1301.608400][ T6874] loop5: detected capacity change from 0 to 7 [ 1301.676415][ T6874] Dev loop5: unable to read RDB block 7 [ 1301.676458][ T6874] loop5: AHDI p1 p2 p3 p4 [ 1301.676477][ T6874] loop5: partition table partially beyond EOD, truncated [ 1301.676818][ T6874] loop5: p1 start 1601398130 is beyond EOD, truncated [ 1301.676835][ T6874] loop5: p2 start 1702059890 is beyond EOD, truncated [ 1301.676849][ T6874] loop5: p3 start 65533 is beyond EOD, truncated [ 1302.314761][ T6888] wg0 speed is unknown, defaulting to 1000 [ 1302.319819][ T6888] virt_wifi0 speed is unknown, defaulting to 1000 [ 1302.353864][ T6891] syzkaller1: entered promiscuous mode [ 1302.353893][ T6891] syzkaller1: entered allmulticast mode [ 1303.098282][ T6906] Process accounting paused [ 1304.760612][ T11] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1304.923519][ T11] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 1304.923550][ T11] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1304.923571][ T11] usb 5-1: config 220 has no interface number 2 [ 1304.923642][ T11] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1304.923671][ T11] usb 5-1: config 220 interface 0 has no altsetting 0 [ 1304.923691][ T11] usb 5-1: config 220 interface 76 has no altsetting 0 [ 1304.923710][ T11] usb 5-1: config 220 interface 1 has no altsetting 0 [ 1304.928204][ T11] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1304.928235][ T11] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1304.928256][ T11] usb 5-1: Product: syz [ 1304.928271][ T11] usb 5-1: Manufacturer: syz [ 1304.928286][ T11] usb 5-1: SerialNumber: syz [ 1305.286781][ T11] usb 5-1: selecting invalid altsetting 0 [ 1305.357331][ T11] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1305.357368][ T11] uvcvideo 5-1:220.0: No valid video chain found. [ 1305.401033][ T11] usb 5-1: selecting invalid altsetting 0 [ 1305.401074][ T11] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 1305.422565][ T11] usb 5-1: USB disconnect, device number 6 [ 1306.727867][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 1308.728374][ T7085] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1309.360838][ T11] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1309.528630][ T11] usb 5-1: Using ep0 maxpacket: 32 [ 1309.536747][ T11] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 1309.536776][ T11] usb 5-1: config 0 has no interface number 0 [ 1309.536840][ T11] usb 5-1: config 0 interface 12 has no altsetting 0 [ 1309.539830][ T11] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1309.539866][ T11] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1309.539887][ T11] usb 5-1: Product: syz [ 1309.539903][ T11] usb 5-1: Manufacturer: syz [ 1309.539917][ T11] usb 5-1: SerialNumber: syz [ 1309.611262][ T11] usb 5-1: config 0 descriptor?? [ 1310.450949][ T11] f81534 5-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 1310.451014][ T11] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 1310.451047][ T11] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1310.451145][ T11] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 1310.546562][ T11] usb 5-1: USB disconnect, device number 7 [ 1311.175608][ T7149] input: syz1 as /devices/virtual/input/input70 [ 1311.819618][ T7175] gretap0: left promiscuous mode [ 1311.827665][ T7175] erspan0: entered promiscuous mode [ 1311.838235][ T7175] syz_tun: left promiscuous mode [ 1312.059425][ T7175] team0: left promiscuous mode [ 1312.059456][ T7175] netdevsim netdevsim4 netdevsim1: left promiscuous mode [ 1312.078878][ T7175] 8021q: adding VLAN 0 to HW filter on device team0 [ 1312.297587][ T7175] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1312.366097][ T7175] bridge_slave_0: left promiscuous mode [ 1312.717411][ T7175] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 1312.734545][ T7175] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1312.752780][ T11] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 1312.823505][ T7175] syz.4.15684 (7175) used greatest stack depth: 18424 bytes left [ 1312.961047][ T11] usb 6-1: Using ep0 maxpacket: 16 [ 1312.963511][ T11] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1312.963536][ T11] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1312.968086][ T11] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1312.968117][ T11] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1312.968138][ T11] usb 6-1: Product: syz [ 1312.968154][ T11] usb 6-1: Manufacturer: syz [ 1312.968171][ T11] usb 6-1: SerialNumber: syz [ 1313.091696][ T11] usb 6-1: 0:2 : does not exist [ 1313.294822][ T11] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 1313.526857][ T11] usb 6-1: USB disconnect, device number 69 [ 1313.665368][ T2412] udevd[2412]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1314.860883][ T5610] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1315.013502][ T5610] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1315.013531][ T5610] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1315.015038][ T5610] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1315.015066][ T5610] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1315.015087][ T5610] usb 5-1: SerialNumber: syz [ 1315.370846][ T5610] usb 5-1: 0:2 : does not exist [ 1315.578131][ T5610] usb 5-1: USB disconnect, device number 8 [ 1315.769588][ T2412] udevd[2412]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1315.969836][ T7269] Invalid argument reading file caps for ./file0 [ 1316.340162][ T5985] usb 6-1: new full-speed USB device number 70 using dummy_hcd [ 1316.515387][ T5985] usb 6-1: too many configurations: 255, using maximum allowed: 8 [ 1316.516564][ T5985] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1316.516590][ T5985] usb 6-1: config 0 has no interfaces? [ 1316.517766][ T5985] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1316.517791][ T5985] usb 6-1: config 0 has no interfaces? [ 1316.519084][ T5985] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1316.519108][ T5985] usb 6-1: config 0 has no interfaces? [ 1316.530352][ T5985] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1316.530381][ T5985] usb 6-1: config 0 has no interfaces? [ 1316.535498][ T5985] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1316.535526][ T5985] usb 6-1: config 0 has no interfaces? [ 1316.537009][ T5985] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1316.537035][ T5985] usb 6-1: config 0 has no interfaces? [ 1316.590648][ T5985] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1316.590678][ T5985] usb 6-1: config 0 has no interfaces? [ 1316.594642][ T5985] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1316.594669][ T5985] usb 6-1: config 0 has no interfaces? [ 1316.678986][ T5985] usb 6-1: New USB device found, idVendor=046d, idProduct=a9db, bcdDevice=59.aa [ 1316.679019][ T5985] usb 6-1: New USB device strings: Mfr=40, Product=154, SerialNumber=107 [ 1316.679041][ T5985] usb 6-1: Product: syz [ 1316.679056][ T5985] usb 6-1: Manufacturer: syz [ 1316.679071][ T5985] usb 6-1: SerialNumber: syz [ 1316.725009][ T5985] usb 6-1: config 0 descriptor?? [ 1316.996421][ T11] usb 6-1: USB disconnect, device number 70 [ 1320.854723][ T7443] loop9: detected capacity change from 0 to 255852544 [ 1321.920447][ T2284] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 1322.081827][ T2284] usb 6-1: Using ep0 maxpacket: 16 [ 1322.088408][ T2284] usb 6-1: config index 0 descriptor too short (expected 16456, got 72) [ 1322.088437][ T2284] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 1322.088460][ T2284] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 1322.088480][ T2284] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 1322.088500][ T2284] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1322.088521][ T2284] usb 6-1: config 0 has no interface number 0 [ 1322.088568][ T2284] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1322.088597][ T2284] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1322.088620][ T2284] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1322.088658][ T2284] usb 6-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1322.088687][ T2284] usb 6-1: config 0 interface 125 has no altsetting 0 [ 1322.088707][ T2284] usb 6-1: config 0 interface 125 has no altsetting 2 [ 1322.118454][ T2284] usb 6-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1322.118488][ T2284] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1322.118510][ T2284] usb 6-1: Product: syz [ 1322.118527][ T2284] usb 6-1: Manufacturer: syz [ 1322.118542][ T2284] usb 6-1: SerialNumber: syz [ 1322.252035][ T2284] usb 6-1: config 0 descriptor?? [ 1322.309690][ T2284] usb 6-1: selecting invalid altsetting 2 [ 1323.392627][ T2284] usb 6-1: USB disconnect, device number 71 [ 1325.095620][ T7565] overlayfs: invalid origin (00000079007a6b616c6c657231000000000000328c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 1325.191992][ T59] Bluetooth: hci5: ISO packet too small [ 1325.524187][ T7573] netlink: 116 bytes leftover after parsing attributes in process `syz.5.15865'. [ 1327.300865][ T11] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1327.467878][ T11] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1327.467917][ T11] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1327.467960][ T11] usb 5-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.ba [ 1327.467984][ T11] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1327.492628][ T11] usb 5-1: config 0 descriptor?? [ 1328.015991][ T11] hid_parser_main: 7 callbacks suppressed [ 1328.016015][ T11] stadia 0003:18D1:9400.0024: unknown main item tag 0x7 [ 1328.016045][ T11] stadia 0003:18D1:9400.0024: item fetching failed at offset 1/5 [ 1328.016790][ T11] stadia 0003:18D1:9400.0024: parse failed [ 1328.016865][ T11] stadia 0003:18D1:9400.0024: probe with driver stadia failed with error -22 [ 1328.228671][ T2284] usb 5-1: USB disconnect, device number 9 [ 1328.898373][ T7692] binder: 7691:7692 ioctl c0306201 2000000001c0 returned -14 [ 1329.149711][ T7700] dvmrp8: left allmulticast mode [ 1329.507808][ T7714] syzkaller1: entered promiscuous mode [ 1329.507837][ T7714] syzkaller1: entered allmulticast mode [ 1330.548221][ T7755] netlink: 256 bytes leftover after parsing attributes in process `syz.4.15955'. [ 1330.548252][ T7755] netlink: 256 bytes leftover after parsing attributes in process `syz.4.15955'. [ 1331.837149][ T7800] netlink: 64 bytes leftover after parsing attributes in process `syz.0.15975'. [ 1331.839041][ T7800] netlink: 64 bytes leftover after parsing attributes in process `syz.0.15975'. [ 1332.008464][ T7809] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1332.603094][ T37] kauditd_printk_skb: 77 callbacks suppressed [ 1332.603114][ T37] audit: type=1326 audit(1332.603:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7797 comm="syz.4.15974" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ba3b6ce59 code=0x7fc00000 [ 1332.603168][ T37] audit: type=1326 audit(1332.603:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7797 comm="syz.4.15974" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2ba3b6ce59 code=0x7fc00000 [ 1332.603217][ T37] audit: type=1326 audit(1332.603:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7797 comm="syz.4.15974" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ba3b6ce59 code=0x7fc00000 [ 1332.603265][ T37] audit: type=1326 audit(1332.603:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7797 comm="syz.4.15974" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ba3b6ce59 code=0x7fc00000 [ 1332.603313][ T37] audit: type=1326 audit(1332.603:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7797 comm="syz.4.15974" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ba3b6ce59 code=0x7fc00000 [ 1332.603403][ T37] audit: type=1326 audit(1332.603:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7797 comm="syz.4.15974" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ba3b6ce59 code=0x7fc00000 [ 1332.603460][ T37] audit: type=1326 audit(1332.603:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7797 comm="syz.4.15974" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ba3b6ce59 code=0x7fc00000 [ 1332.603507][ T37] audit: type=1326 audit(1332.603:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7797 comm="syz.4.15974" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ba3b6ce59 code=0x7fc00000 [ 1332.603551][ T37] audit: type=1326 audit(1332.603:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7797 comm="syz.4.15974" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ba3b6ce59 code=0x7fc00000 [ 1332.603597][ T37] audit: type=1326 audit(1332.603:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7797 comm="syz.4.15974" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ba3b6ce59 code=0x7fc00000 [ 1333.111354][ T7837] Process accounting resumed [ 1334.477072][ T7896] netlink: 762 bytes leftover after parsing attributes in process `syz.0.16021'. [ 1334.650949][ T11] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 1334.787788][ T7905] GUP no longer grows the stack in syz.0.16025 (7905): 200000004000-200000006000 (200000002000) [ 1334.787830][ T7905] CPU: 0 UID: 0 PID: 7905 Comm: syz.0.16025 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1334.787862][ T7905] Tainted: [L]=SOFTLOCKUP [ 1334.787871][ T7905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1334.787888][ T7905] Call Trace: [ 1334.787897][ T7905] [ 1334.787907][ T7905] dump_stack_lvl+0xe8/0x150 [ 1334.787944][ T7905] __get_user_pages+0x21e9/0x2590 [ 1334.788099][ T7905] ? mtree_load+0x12a/0x780 [ 1334.788158][ T7905] get_user_pages_remote+0x307/0xb10 [ 1334.788187][ T7905] ? __pfx_mtree_load+0x10/0x10 [ 1334.788224][ T7905] ? __pfx_get_user_pages_remote+0x10/0x10 [ 1334.788255][ T7905] ? __access_remote_vm+0x42c/0x6f0 [ 1334.788346][ T7905] __access_remote_vm+0x222/0x6f0 [ 1334.788387][ T7905] ? __pfx___access_remote_vm+0x10/0x10 [ 1334.788414][ T7905] ? __kmalloc_cache_noprof+0x3d2/0x6b0 [ 1334.788452][ T7905] ? proc_pid_cmdline_read+0x41f/0x900 [ 1334.788509][ T7905] ? proc_pid_cmdline_read+0x41f/0x900 [ 1334.788544][ T7905] proc_pid_cmdline_read+0x46e/0x900 [ 1334.788574][ T7905] ? __asan_memset+0x22/0x50 [ 1334.788609][ T7905] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 1334.788642][ T7905] ? rw_verify_area+0x250/0x4d0 [ 1334.788731][ T7905] vfs_readv+0x588/0x850 [ 1334.788760][ T7905] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 1334.788793][ T7905] ? __pfx_vfs_readv+0x10/0x10 [ 1334.788836][ T7905] ? __fget_files+0x2a/0x420 [ 1334.788872][ T7905] ? __fget_files+0x3a8/0x420 [ 1334.788899][ T7905] ? __fget_files+0x2a/0x420 [ 1334.788947][ T7905] __x64_sys_preadv+0x19f/0x2c0 [ 1334.788975][ T7905] ? __pfx___x64_sys_preadv+0x10/0x10 [ 1334.789008][ T7905] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1334.789035][ T7905] do_syscall_64+0x174/0x580 [ 1334.789064][ T7905] ? trace_irq_disable+0x3b/0x140 [ 1334.789094][ T7905] ? clear_bhb_loop+0x40/0x90 [ 1334.789124][ T7905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1334.789149][ T7905] RIP: 0033:0x7fd24ba8ce59 [ 1334.789173][ T7905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1334.789195][ T7905] RSP: 002b:00007fd249cde028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1334.789223][ T7905] RAX: ffffffffffffffda RBX: 00007fd24bd05fa0 RCX: 00007fd24ba8ce59 [ 1334.789244][ T7905] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000003 [ 1334.789259][ T7905] RBP: 00007fd24bb22e6f R08: 00000000fffffff9 R09: 0000000000000000 [ 1334.789274][ T7905] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000000 [ 1334.789288][ T7905] R13: 00007fd24bd06038 R14: 00007fd24bd05fa0 R15: 00007fffdb07c608 [ 1334.789325][ T7905] [ 1335.103827][ T11] usb 6-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 1335.103860][ T11] usb 6-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 1335.103882][ T11] usb 6-1: Product: syz [ 1335.164998][ T11] usb 6-1: config 0 descriptor?? [ 1335.225104][ T11] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 1335.248503][ T11] usb 6-1: Detected FT232H [ 1335.406707][ T11] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1335.834695][ T11] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1336.016523][ T2284] usb 6-1: USB disconnect, device number 72 [ 1336.350995][ T2284] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1336.351874][ T2284] ftdi_sio 6-1:0.0: device disconnected [ 1337.205981][ T7976] netlink: 144 bytes leftover after parsing attributes in process `syz.0.16059'. [ 1337.460986][ T11] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 1337.623433][ T11] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1337.623495][ T11] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1337.623520][ T11] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1337.675424][ T11] usb 6-1: config 0 descriptor?? [ 1337.739405][ T11] pwc: Askey VC010 type 2 USB webcam detected. [ 1338.097908][ T11] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1338.101535][ T11] pwc: recv_control_msg error -32 req 02 val 2700 [ 1338.319039][ T11] pwc: recv_control_msg error -71 req 04 val 1000 [ 1338.319573][ T11] pwc: recv_control_msg error -71 req 04 val 1300 [ 1338.326918][ T11] pwc: recv_control_msg error -71 req 04 val 1400 [ 1338.344851][ T11] pwc: recv_control_msg error -71 req 02 val 2000 [ 1338.348147][ T11] pwc: recv_control_msg error -71 req 02 val 2100 [ 1338.368260][ T11] pwc: recv_control_msg error -71 req 04 val 1500 [ 1338.369520][ T11] pwc: recv_control_msg error -71 req 02 val 2500 [ 1338.377227][ T11] pwc: recv_control_msg error -71 req 02 val 2400 [ 1338.392010][ T11] pwc: recv_control_msg error -71 req 02 val 2600 [ 1338.393766][ T11] pwc: recv_control_msg error -71 req 02 val 2900 [ 1338.395982][ T11] pwc: recv_control_msg error -71 req 02 val 2800 [ 1338.398449][ T11] pwc: recv_control_msg error -71 req 04 val 1100 [ 1338.421493][ T11] pwc: recv_control_msg error -71 req 04 val 1200 [ 1338.772403][ T11] pwc: Registered as video103. [ 1338.775871][ T11] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input71 [ 1338.943969][ T11] usb 6-1: USB disconnect, device number 73 [ 1339.484537][ T2284] kernel read not supported for file /6171/net/xfrm_stat (pid: 2284 comm: kworker/1:0) [ 1339.749736][ T8044] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1339.814121][ T8044] bond2 (unregistering): Released all slaves [ 1340.270513][ T3020] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1340.423639][ T3020] usb 5-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 1340.423674][ T3020] usb 5-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 1340.423701][ T3020] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1340.427963][ T3020] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 1340.427995][ T3020] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1340.428016][ T3020] usb 5-1: Product: syz [ 1340.428031][ T3020] usb 5-1: Manufacturer: syz [ 1340.428046][ T3020] usb 5-1: SerialNumber: syz [ 1340.510940][ T8054] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1340.511081][ T8054] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1340.536621][ T8068] netlink: 180 bytes leftover after parsing attributes in process `syz.0.16097'. [ 1341.537560][ T3020] (unnamed net_device) (uninitialized): Assigned a random MAC address: aa:63:bf:ed:fc:52 [ 1341.635191][ T3020] rtl8150 5-1:1.0: eth9: rtl8150 is detected [ 1341.663557][ T3020] usb 5-1: USB disconnect, device number 10 [ 1341.985047][ T8099] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1342.593280][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1343.066470][ T8111] block nbd0: server does not support multiple connections per device. [ 1343.181634][ T8111] block nbd0: shutting down sockets [ 1343.308510][ T8106] syz.6.16116 (8106) used greatest stack depth: 17384 bytes left [ 1344.552218][ T8160] libceph: resolve '4' (ret=-3): failed [ 1346.250994][ T8204] netlink: 8 bytes leftover after parsing attributes in process `syz.5.16159'. [ 1346.271886][ T8204] gtp3: entered promiscuous mode [ 1346.271915][ T8204] gtp3: entered allmulticast mode [ 1346.946177][ T8219] tipc: Enabled bearer , priority 10 [ 1347.940618][ T3020] tipc: Node number set to 4269801488 [ 1348.901488][ T5610] usb 5-1: new low-speed USB device number 11 using dummy_hcd [ 1349.084087][ T5610] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1349.084116][ T5610] usb 5-1: config 0 has no interface number 0 [ 1349.084163][ T5610] usb 5-1: config 0 interface 1 altsetting 19 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1349.084192][ T5610] usb 5-1: config 0 interface 1 altsetting 19 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1349.084216][ T5610] usb 5-1: config 0 interface 1 has no altsetting 0 [ 1349.084252][ T5610] usb 5-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 1349.084278][ T5610] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1349.156603][ T5610] usb 5-1: config 0 descriptor?? [ 1349.764745][ T5610] uclogic 0003:2179:0053.0025: pen parameters not found [ 1349.764773][ T5610] uclogic 0003:2179:0053.0025: interface is invalid, ignoring [ 1349.982227][ T5610] usb 5-1: USB disconnect, device number 11 [ 1351.090947][ T5610] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 1351.243432][ T5610] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1351.243471][ T5610] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1351.243506][ T5610] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1351.243532][ T5610] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1351.295580][ T5610] usb 5-1: config 0 descriptor?? [ 1351.367210][ T37] kauditd_printk_skb: 2 callbacks suppressed [ 1351.367231][ T37] audit: type=1326 audit(1351.363:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8357 comm="syz.6.16228" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa328d6ce59 code=0x7ffc0000 [ 1351.367374][ T37] audit: type=1326 audit(1351.363:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8357 comm="syz.6.16228" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa328d6ce59 code=0x7ffc0000 [ 1351.445544][ T37] audit: type=1326 audit(1351.363:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8357 comm="syz.6.16228" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa328d6ce59 code=0x7ffc0000 [ 1351.445603][ T37] audit: type=1326 audit(1351.443:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8357 comm="syz.6.16228" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa328d6ce59 code=0x7ffc0000 [ 1351.445723][ T37] audit: type=1326 audit(1351.443:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8357 comm="syz.6.16228" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa328d6ce59 code=0x7ffc0000 [ 1351.445772][ T37] audit: type=1326 audit(1351.443:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8357 comm="syz.6.16228" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa328d6ce59 code=0x7ffc0000 [ 1351.445855][ T37] audit: type=1326 audit(1351.443:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8357 comm="syz.6.16228" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa328d6ce59 code=0x7ffc0000 [ 1351.445893][ T37] audit: type=1326 audit(1351.443:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8357 comm="syz.6.16228" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa328d6ce59 code=0x7ffc0000 [ 1351.445928][ T37] audit: type=1326 audit(1351.443:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8357 comm="syz.6.16228" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fa328d6ce59 code=0x7ffc0000 [ 1351.446006][ T37] audit: type=1326 audit(1351.443:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8357 comm="syz.6.16228" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa328d6ce59 code=0x7ffc0000 [ 1352.008973][ T5610] prodikeys 0003:041E:2801.0026: unknown main item tag 0x0 [ 1352.009009][ T5610] prodikeys 0003:041E:2801.0026: unknown main item tag 0x0 [ 1352.009034][ T5610] prodikeys 0003:041E:2801.0026: unknown main item tag 0x0 [ 1352.009060][ T5610] prodikeys 0003:041E:2801.0026: unknown main item tag 0x0 [ 1352.009087][ T5610] prodikeys 0003:041E:2801.0026: unknown main item tag 0x0 [ 1352.009115][ T5610] prodikeys 0003:041E:2801.0026: unknown main item tag 0x0 [ 1352.009141][ T5610] prodikeys 0003:041E:2801.0026: unknown main item tag 0x2 [ 1352.009166][ T5610] prodikeys 0003:041E:2801.0026: unknown main item tag 0x0 [ 1352.009194][ T5610] prodikeys 0003:041E:2801.0026: unknown main item tag 0x7 [ 1352.009220][ T5610] prodikeys 0003:041E:2801.0026: unknown main item tag 0x7 [ 1352.009306][ T5610] prodikeys 0003:041E:2801.0026: item fetching failed at offset 34/40 [ 1352.017365][ T5610] prodikeys 0003:041E:2801.0026: hid parse failed [ 1352.017734][ T5610] prodikeys 0003:041E:2801.0026: probe with driver prodikeys failed with error -22 [ 1352.363753][ T5610] usb 5-1: USB disconnect, device number 12 [ 1352.556190][ T8373] netlink: 51 bytes leftover after parsing attributes in process `syz.5.16234'. [ 1353.340617][ T8394] af_packet: tpacket_rcv: packet too big, clamped from 2 to 4294967272. macoff=96 [ 1354.700163][ T2284] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1354.851443][ T2284] usb 5-1: Using ep0 maxpacket: 16 [ 1354.854085][ T2284] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 1354.854115][ T2284] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 1354.854136][ T2284] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 1354.854157][ T2284] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 1354.854177][ T2284] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1354.854197][ T2284] usb 5-1: config 0 has no interface number 0 [ 1354.854247][ T2284] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1354.854284][ T2284] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1354.854307][ T2284] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1354.854343][ T2284] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1354.854372][ T2284] usb 5-1: config 0 interface 125 has no altsetting 0 [ 1354.854392][ T2284] usb 5-1: config 0 interface 125 has no altsetting 2 [ 1354.859494][ T2284] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1354.859529][ T2284] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1354.859552][ T2284] usb 5-1: Product: syz [ 1354.859569][ T2284] usb 5-1: Manufacturer: syz [ 1354.859585][ T2284] usb 5-1: SerialNumber: syz [ 1355.014744][ T2284] usb 5-1: config 0 descriptor?? [ 1355.026964][ T2284] usb 5-1: selecting invalid altsetting 2 [ 1355.192263][ T8440] sg_write: data in/out 498016/136 bytes for SCSI command 0x0-- guessing data in; [ 1355.192263][ T8440] program syz.6.16263 not setting count and/or reply_len properly [ 1356.121736][ T11] usb 5-1: USB disconnect, device number 13 [ 1358.266018][ T8539] netlink: 51 bytes leftover after parsing attributes in process `syz.4.16311'. [ 1359.307151][ T8583] netlink: 'syz.6.16328': attribute type 4 has an invalid length. [ 1359.373008][ T8587] netlink: 'syz.6.16328': attribute type 4 has an invalid length. [ 1359.833038][ T8606] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16339'. [ 1360.282044][ T8625] erspan0: entered promiscuous mode [ 1360.296531][ T8625] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16347'. [ 1360.346312][T27948] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 1360.398259][ T8631] netlink: 4 bytes leftover after parsing attributes in process `syz.6.16350'. [ 1360.490757][T27948] usb 6-1: Using ep0 maxpacket: 32 [ 1360.499678][T27948] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 1360.499707][T27948] usb 6-1: config 0 has no interface number 0 [ 1360.499752][T27948] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1360.499781][T27948] usb 6-1: config 0 interface 85 has no altsetting 0 [ 1360.516116][T27948] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1360.516206][T27948] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1360.516261][T27948] usb 6-1: Product: syz [ 1360.516303][T27948] usb 6-1: Manufacturer: syz [ 1360.516346][T27948] usb 6-1: SerialNumber: syz [ 1360.656677][T27948] usb 6-1: config 0 descriptor?? [ 1361.307483][T27948] appletouch 6-1:0.85: Geyser mode initialized. [ 1361.312524][T27948] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.85/input/input72 [ 1361.509739][T27948] usb 6-1: USB disconnect, device number 74 [ 1361.782064][T27948] appletouch 6-1:0.85: input: appletouch disconnected [ 1362.907170][ T8678] netlink: 20 bytes leftover after parsing attributes in process `syz.0.16369'. [ 1363.188033][ T8689] Process accounting paused [ 1364.354518][ T8725] sg_write: data in/out 491484/136 bytes for SCSI command 0x0-- guessing data in; [ 1364.354518][ T8725] program syz.4.16393 not setting count and/or reply_len properly [ 1364.835222][ T59] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 1364.835284][ T59] Bluetooth: hci2: Malformed LE Event: 0x0d [ 1365.065548][ T5610] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 1365.213950][ T5610] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1365.235508][ T5610] usb 6-1: New USB device found, idVendor=16c0, idProduct=05e1, bcdDevice= 0.40 [ 1365.235542][ T5610] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1365.235565][ T5610] usb 6-1: Product: syz [ 1365.235581][ T5610] usb 6-1: Manufacturer: syz [ 1365.235595][ T5610] usb 6-1: SerialNumber: syz [ 1365.515494][ T8743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1365.522416][ T8743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1365.645715][ T5610] usbhid 6-1:1.0: can't add hid device: -71 [ 1365.645852][ T5610] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 1365.677285][ T5610] usb 6-1: USB disconnect, device number 75 [ 1366.178047][ T8788] bridge_slave_0: default FDB implementation only supports local addresses [ 1366.179004][ T8788] bridge_slave_0: default FDB implementation only supports local addresses [ 1366.650862][ T5985] usb 6-1: new full-speed USB device number 76 using dummy_hcd [ 1366.816897][ T5985] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1366.816956][ T5985] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1366.816991][ T5985] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1366.817019][ T5985] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1366.817042][ T5985] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1366.883934][ T5985] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1366.883974][ T5985] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1366.883996][ T5985] usb 6-1: Product: syz [ 1366.884012][ T5985] usb 6-1: Manufacturer: syz [ 1366.884028][ T5985] usb 6-1: SerialNumber: syz [ 1366.924059][ T5985] usb 6-1: config 0 descriptor?? [ 1367.145669][ T5985] radio-si470x 6-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1367.145697][ T5985] radio-si470x 6-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1367.347658][ T5985] radio-si470x 6-1:0.0: software version 0, hardware version 0 [ 1367.347685][ T5985] radio-si470x 6-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 1367.347707][ T5985] radio-si470x 6-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 1367.549204][ T5985] radio-si470x 6-1:0.0: submitting int urb failed (-90) [ 1367.758325][ T8739] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1368.176013][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 1368.188872][ T5985] radio-si470x 6-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 1368.189200][ T5985] radio-si470x 6-1:0.0: probe with driver radio-si470x failed with error -22 [ 1368.227126][ T5985] usb 6-1: USB disconnect, device number 76 [ 1371.977214][ T8975] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16507'. [ 1371.977244][ T8975] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16507'. [ 1371.979010][ T8975] netlink: 'syz.6.16507': attribute type 2 has an invalid length. [ 1371.979034][ T8975] netlink: 8824 bytes leftover after parsing attributes in process `syz.6.16507'. [ 1371.979054][ T8975] netlink: 'syz.6.16507': attribute type 2 has an invalid length. [ 1372.736633][ T9003] netlink: 208 bytes leftover after parsing attributes in process `syz.6.16519'. [ 1373.622140][ T9034] binder: 9032:9034 ioctl c0306201 200000000040 returned -22 [ 1374.132843][ T9052] vivid-000: disconnect [ 1374.191681][ T9055] vivid-000: reconnect [ 1375.614698][ T9089] wg0 speed is unknown, defaulting to 1000 [ 1375.712916][ T9089] virt_wifi0 speed is unknown, defaulting to 1000 [ 1377.566173][ T9124] netlink: 388 bytes leftover after parsing attributes in process `syz.5.16573'. [ 1377.909911][ T9131] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 1378.600493][ T5985] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1378.753537][ T5985] usb 5-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1378.753578][ T5985] usb 5-1: config 36 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1378.753607][ T5985] usb 5-1: config 36 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1378.798692][ T5985] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 1378.798729][ T5985] usb 5-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 1378.798754][ T5985] usb 5-1: Manufacturer: syz [ 1378.798774][ T5985] usb 5-1: SerialNumber: syz [ 1379.113493][ T5985] yealink 5-1:36.0: invalid payload size 0, expected 16 [ 1379.118703][ T5985] input: Yealink usb-p1k as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:36.0/input/input73 [ 1379.182358][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1379.182619][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1379.182858][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1379.186676][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1379.186923][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1379.187154][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1379.187383][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1379.187619][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1379.187645][ C1] yealink 5-1:36.0: urb_ctl_callback - usb_submit_urb failed -90 [ 1379.279554][ T5985] usb 5-1: USB disconnect, device number 14 [ 1379.392754][ T2393] udevd[2393]: setting mode of /dev/bus/usb/005/014 to 020664 failed: No such file or directory [ 1379.392934][ T2393] udevd[2393]: setting owner of /dev/bus/usb/005/014 to uid=0, gid=0 failed: No such file or directory [ 1382.760741][ T3020] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1382.931991][ T3020] usb 5-1: Using ep0 maxpacket: 8 [ 1382.934599][ T3020] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1382.934660][ T3020] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1382.934686][ T3020] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1382.995989][ T3020] usb 5-1: config 0 descriptor?? [ 1383.012651][ T3020] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1383.829036][ T3020] gspca_vc032x: reg_w err -71 [ 1383.829148][ T3020] vc032x 5-1:0.0: probe with driver vc032x failed with error -71 [ 1383.858920][ T3020] usb 5-1: USB disconnect, device number 15 [ 1384.550691][ T9280] netlink: 'syz.5.16642': attribute type 19 has an invalid length. [ 1385.605369][ T9316] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16657'. [ 1386.031641][ T9333] netlink: 'syz.4.16665': attribute type 11 has an invalid length. [ 1387.137587][ T5610] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 1387.293746][ T5610] usb 6-1: Using ep0 maxpacket: 32 [ 1387.309438][ T5610] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1387.314172][ T5610] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1387.314252][ T5610] usb 6-1: can't read configurations, error -71 [ 1388.926393][ T9437] IPVS: dh: TCP 172.20.20.170:0 - no destination available [ 1390.611934][ T9487] netlink: 'syz.0.16733': attribute type 6 has an invalid length. [ 1393.231315][ T9570] Process accounting resumed [ 1393.374710][ T9582] loop3: detected capacity change from 0 to 7 [ 1393.449527][ T9582] Dev loop3: unable to read RDB block 7 [ 1393.449581][ T9582] loop3: unable to read partition table [ 1393.449808][ T9582] loop3: partition table beyond EOD, truncated [ 1393.449852][ T9582] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 1394.638934][ T3020] kernel write not supported for file /relabel-self (pid: 3020 comm: kworker/1:1) [ 1396.438015][ T9678] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16819'. [ 1399.374604][ T9759] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16855'. [ 1399.970785][ T5610] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 1400.124492][ T5610] usb 6-1: config 0 has too many interfaces: 90, using maximum allowed: 32 [ 1400.124522][ T5610] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 90 [ 1400.124576][ T5610] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1400.124605][ T5610] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1400.124644][ T5610] usb 6-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 1400.124669][ T5610] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1400.208289][ T5610] usb 6-1: config 0 descriptor?? [ 1400.627327][ T5610] hid (null): invalid report_count 12610 [ 1400.649261][ T5610] hid_parser_main: 6 callbacks suppressed [ 1400.649290][ T5610] logitech-hidpp-device 0003:046D:C086.0027: unknown main item tag 0x0 [ 1400.649322][ T5610] logitech-hidpp-device 0003:046D:C086.0027: unknown main item tag 0x0 [ 1400.649350][ T5610] logitech-hidpp-device 0003:046D:C086.0027: unknown main item tag 0x0 [ 1400.649378][ T5610] logitech-hidpp-device 0003:046D:C086.0027: unknown main item tag 0x0 [ 1400.649406][ T5610] logitech-hidpp-device 0003:046D:C086.0027: unknown main item tag 0x0 [ 1400.649433][ T5610] logitech-hidpp-device 0003:046D:C086.0027: unknown main item tag 0x0 [ 1400.649461][ T5610] logitech-hidpp-device 0003:046D:C086.0027: invalid report_count 12610 [ 1400.649479][ T5610] logitech-hidpp-device 0003:046D:C086.0027: item 0 2 1 9 parsing failed [ 1400.673042][ T5610] logitech-hidpp-device 0003:046D:C086.0027: hidpp_probe:parse failed [ 1400.673165][ T5610] logitech-hidpp-device 0003:046D:C086.0027: probe with driver logitech-hidpp-device failed with error -22 [ 1400.840077][ T2284] usb 6-1: USB disconnect, device number 79 [ 1401.121050][ T5610] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1401.275172][ T5610] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1401.275226][ T5610] usb 5-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 1401.275251][ T5610] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1401.330926][ T5610] usb 5-1: config 0 descriptor?? [ 1401.331935][ T9801] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1401.742729][ T5610] hid (null): unknown global tag 0xe [ 1401.742757][ T5610] hid (null): unknown global tag 0x11 [ 1401.767451][ T5610] uclogic 0003:5543:0064.0028: unknown main item tag 0x0 [ 1401.767494][ T5610] uclogic 0003:5543:0064.0028: unknown main item tag 0x0 [ 1401.767522][ T5610] uclogic 0003:5543:0064.0028: unknown main item tag 0x0 [ 1401.767549][ T5610] uclogic 0003:5543:0064.0028: unknown main item tag 0x0 [ 1401.767609][ T5610] uclogic 0003:5543:0064.0028: unknown global tag 0xe [ 1401.767627][ T5610] uclogic 0003:5543:0064.0028: item 0 1 1 14 parsing failed [ 1401.768387][ T5610] uclogic 0003:5543:0064.0028: parse failed [ 1401.768500][ T5610] uclogic 0003:5543:0064.0028: probe with driver uclogic failed with error -22 [ 1401.956639][ T2284] usb 5-1: USB disconnect, device number 16 [ 1402.090859][ T9825] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1402.128853][ T9828] loop3: detected capacity change from 0 to 7 [ 1402.141961][ T9828] Dev loop3: unable to read RDB block 7 [ 1402.142011][ T9828] loop3: unable to read partition table [ 1402.142196][ T9828] loop3: partition table beyond EOD, truncated [ 1402.142246][ T9828] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 1402.807622][ T2284] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 1402.950268][ T2284] usb 6-1: Using ep0 maxpacket: 32 [ 1402.953044][ T2284] usb 6-1: config 0 has an invalid interface number: 196 but max is 0 [ 1402.953074][ T2284] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1402.953095][ T2284] usb 6-1: config 0 has no interface number 0 [ 1402.953142][ T2284] usb 6-1: config 0 interface 196 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1402.953166][ T2284] usb 6-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 0 [ 1402.953190][ T2284] usb 6-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1402.953219][ T2284] usb 6-1: config 0 interface 196 has no altsetting 0 [ 1402.959071][ T2284] usb 6-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 1402.959102][ T2284] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1402.959123][ T2284] usb 6-1: Product: syz [ 1402.959139][ T2284] usb 6-1: Manufacturer: syz [ 1402.959154][ T2284] usb 6-1: SerialNumber: syz [ 1403.078862][ T2284] usb 6-1: config 0 descriptor?? [ 1403.324837][ T2284] ipheth 6-1:0.196: Unable to find endpoints [ 1403.345752][ T2284] usb 6-1: USB disconnect, device number 80 [ 1403.385508][ T5610] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1403.540828][ T5610] usb 5-1: Using ep0 maxpacket: 16 [ 1403.544091][ T5610] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1403.544128][ T5610] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1403.544153][ T5610] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1403.544198][ T5610] usb 5-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 1403.544223][ T5610] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1403.589495][ T5610] usb 5-1: config 0 descriptor?? [ 1404.094895][ T5610] waterforce 0003:1044:7A4D.0029: item fetching failed at offset 40/41 [ 1404.097122][ T5610] waterforce 0003:1044:7A4D.0029: hid parse failed with -22 [ 1404.097240][ T5610] waterforce 0003:1044:7A4D.0029: probe with driver waterforce failed with error -22 [ 1404.296730][ T2284] usb 5-1: USB disconnect, device number 17 [ 1405.279599][ T9913] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16926'. [ 1405.923533][ T9937] netlink: 20 bytes leftover after parsing attributes in process `syz.0.16940'. [ 1407.370821][ T5610] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 1407.371035][T27948] usb 6-1: new full-speed USB device number 81 using dummy_hcd [ 1407.525892][T27948] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1407.525919][T27948] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1407.525939][T27948] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1407.527779][T27948] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1407.527803][T27948] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1407.546076][ T5610] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1407.546162][ T5610] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1407.546223][ T5610] usb 5-1: Product: syz [ 1407.546266][ T5610] usb 5-1: Manufacturer: syz [ 1407.546309][ T5610] usb 5-1: SerialNumber: syz [ 1407.627742][T27948] usb 6-1: config 0 descriptor?? [ 1407.648433][ T5610] usb 5-1: config 0 descriptor?? [ 1407.682660][ T5610] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1407.686311][ T9980] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1408.235783][T27948] hid_parser_main: 19 callbacks suppressed [ 1408.235809][T27948] elan 0003:04F3:0755.002A: unknown main item tag 0x0 [ 1408.235843][T27948] elan 0003:04F3:0755.002A: unknown main item tag 0x0 [ 1408.235990][T27948] elan 0003:04F3:0755.002A: unknown main item tag 0x0 [ 1408.236079][T27948] elan 0003:04F3:0755.002A: unknown main item tag 0x0 [ 1408.236110][T27948] elan 0003:04F3:0755.002A: unknown main item tag 0x0 [ 1408.236138][T27948] elan 0003:04F3:0755.002A: unknown main item tag 0x0 [ 1408.236166][T27948] elan 0003:04F3:0755.002A: unknown main item tag 0x0 [ 1408.236249][T27948] elan 0003:04F3:0755.002A: unknown main item tag 0x0 [ 1408.236278][T27948] elan 0003:04F3:0755.002A: unknown main item tag 0x0 [ 1408.236306][T27948] elan 0003:04F3:0755.002A: unknown main item tag 0x0 [ 1408.565024][T27948] elan 0003:04F3:0755.002A: hidraw0: USB HID v0.03 Device [HID 04f3:0755] on usb-dummy_hcd.5-1/input0 [ 1408.583730][T27948] usb 6-1: USB disconnect, device number 81 [ 1408.720543][T10007] fido_id[10007]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 1408.902599][ T5610] gspca_stk1135: reg_w 0xd err -71 [ 1408.903652][ T5610] gspca_stk1135: serial bus timeout: status=0x00 [ 1408.903668][ T5610] gspca_stk1135: Sensor write failed [ 1408.903707][ T5610] gspca_stk1135: serial bus timeout: status=0x00 [ 1408.903718][ T5610] gspca_stk1135: Sensor write failed [ 1408.903767][ T5610] gspca_stk1135: serial bus timeout: status=0x00 [ 1408.903779][ T5610] gspca_stk1135: Sensor read failed [ 1408.903833][ T5610] gspca_stk1135: serial bus timeout: status=0x00 [ 1408.903844][ T5610] gspca_stk1135: Sensor read failed [ 1408.903853][ T5610] gspca_stk1135: Detected sensor type unknown (0x0) [ 1408.903894][ T5610] gspca_stk1135: serial bus timeout: status=0x00 [ 1408.903905][ T5610] gspca_stk1135: Sensor read failed [ 1408.903942][ T5610] gspca_stk1135: serial bus timeout: status=0x00 [ 1408.903954][ T5610] gspca_stk1135: Sensor read failed [ 1408.903992][ T5610] gspca_stk1135: serial bus timeout: status=0x00 [ 1408.904002][ T5610] gspca_stk1135: Sensor write failed [ 1408.904039][ T5610] gspca_stk1135: serial bus timeout: status=0x00 [ 1408.904050][ T5610] gspca_stk1135: Sensor write failed [ 1408.904139][ T5610] stk1135 5-1:0.0: probe with driver stk1135 failed with error -71 [ 1409.028864][ T5610] usb 5-1: USB disconnect, device number 18 [ 1410.280763][T27948] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 1410.440827][T27948] usb 6-1: Using ep0 maxpacket: 32 [ 1410.443293][T27948] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1410.443359][T27948] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1410.443389][T27948] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1410.443418][T27948] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1410.446451][T27948] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1410.446485][T27948] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1410.446507][T27948] usb 6-1: Product: syz [ 1410.446523][T27948] usb 6-1: Manufacturer: syz [ 1410.446539][T27948] usb 6-1: SerialNumber: syz [ 1410.799149][ C0] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1411.436385][T10034] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1411.436412][T10034] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1411.596637][T27948] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/input/input75 [ 1412.474409][T10059] wg0 speed is unknown, defaulting to 1000 [ 1412.593433][T10059] virt_wifi0 speed is unknown, defaulting to 1000 [ 1413.247693][T27948] imon:send_packet: packet tx failed (-71) [ 1413.266095][T27948] imon 6-1:155.0: panel buttons/knobs setup failed [ 1413.266193][T27948] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1413.266208][T27948] (id 0x00) [ 1413.401697][T10091] input: syz0 as /devices/virtual/input/input77 [ 1413.607280][T10095] sg_write: data in/out 478684/136 bytes for SCSI command 0x0-- guessing data in; [ 1413.607280][T10095] program syz.5.17007 not setting count and/or reply_len properly [ 1413.703881][T27948] rc_core: IR keymap rc-imon-pad not found [ 1413.703906][T27948] Registered IR keymap rc-empty [ 1413.704069][T27948] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1413.704091][T27948] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1413.704456][T27948] imon:send_packet: packet tx failed (-71) [ 1413.723132][T27948] imon 6-1:155.0: remote input dev register failed [ 1413.844278][T27948] imon 6-1:155.0: imon_init_intf0: rc device setup failed [ 1413.869317][T10101] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17010'. [ 1414.563917][T10108] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1414.843154][T10101] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1415.958804][T27948] imon 6-1:155.0: unable to initialize intf0, err 0 [ 1415.958831][T27948] imon:imon_probe: failed to initialize context! [ 1415.958845][T27948] imon 6-1:155.0: unable to register, err -19 [ 1415.988184][T27948] usb 6-1: USB disconnect, device number 82 [ 1416.390879][T27948] usb 6-1: new full-speed USB device number 83 using dummy_hcd [ 1416.546108][T27948] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1416.546145][T27948] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1416.546172][T27948] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1416.546208][T27948] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1416.546232][T27948] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1416.601955][T27948] usb 6-1: config 0 descriptor?? [ 1416.604627][T10148] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1417.041264][T27948] hid_parser_main: 30 callbacks suppressed [ 1417.041290][T27948] elan 0003:04F3:0755.002B: unknown main item tag 0x0 [ 1417.041323][T27948] elan 0003:04F3:0755.002B: unknown main item tag 0x0 [ 1417.041352][T27948] elan 0003:04F3:0755.002B: unknown main item tag 0x0 [ 1417.043330][T27948] elan 0003:04F3:0755.002B: unknown main item tag 0x0 [ 1417.043365][T27948] elan 0003:04F3:0755.002B: unknown main item tag 0x0 [ 1417.043394][T27948] elan 0003:04F3:0755.002B: unknown main item tag 0x0 [ 1417.043422][T27948] elan 0003:04F3:0755.002B: unknown main item tag 0x0 [ 1417.043539][T27948] elan 0003:04F3:0755.002B: unknown main item tag 0x0 [ 1417.043567][T27948] elan 0003:04F3:0755.002B: unknown main item tag 0x0 [ 1417.043595][T27948] elan 0003:04F3:0755.002B: unknown main item tag 0x0 [ 1417.167186][T27948] elan 0003:04F3:0755.002B: hidraw0: USB HID v0.03 Device [HID 04f3:0755] on usb-dummy_hcd.5-1/input0 [ 1417.260232][ T3020] usb 6-1: USB disconnect, device number 83 [ 1417.525776][T10181] fido_id[10181]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1417.590598][ T2284] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1417.613725][T10192] binder: 10191:10192 ioctl c0306201 200000000080 returned -14 [ 1417.758838][ T2284] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1417.758890][ T2284] usb 5-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 1417.758915][ T2284] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1417.809619][ T2284] usb 5-1: config 0 descriptor?? [ 1417.815515][T10184] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1418.053017][T10184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1418.058768][T10184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1418.089394][T10184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1418.096079][T10184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1418.291980][ T3020] usb 6-1: new full-speed USB device number 84 using dummy_hcd [ 1418.297660][T10204] loop5: detected capacity change from 0 to 7 [ 1418.383735][ T2284] uclogic 0003:5543:0064.002C: hidraw0: USB HID v7b.fd Device [HID 5543:0064] on usb-dummy_hcd.4-1/input0 [ 1418.438052][T10204] Dev loop5: unable to read RDB block 7 [ 1418.438084][T10204] loop5: AHDI p2 p3 [ 1418.438105][T10204] loop5: partition table partially beyond EOD, truncated [ 1418.461786][ T3020] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1418.461846][ T3020] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1418.461869][ T3020] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1418.461902][ T3020] usb 6-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1418.461933][ T3020] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1418.461971][ T3020] usb 6-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1418.465223][ T3020] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1418.465253][ T3020] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1418.465271][ T3020] usb 6-1: Product: syz [ 1418.465384][ T3020] usb 6-1: Manufacturer: syz [ 1418.465401][ T3020] usb 6-1: SerialNumber: syz [ 1418.637420][T27948] usb 5-1: USB disconnect, device number 19 [ 1418.653276][T10204] loop5: p3 start 335544320 is beyond EOD, truncated [ 1418.668599][T10201] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1418.898870][T10201] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1418.987415][T10218] fido_id[10218]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1419.517262][T10201] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1419.720118][ T3020] cdc_ncm 6-1:1.0: bind() failure [ 1419.762793][ T3020] cdc_ncm 6-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1419.763790][ T3020] cdc_mbim 6-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1419.767018][ T3020] usbtest 6-1:1.1: probe with driver usbtest failed with error -71 [ 1419.812538][ T3020] usb 6-1: USB disconnect, device number 84 [ 1420.158884][T10254] netlink: 'syz.4.17075': attribute type 1 has an invalid length. [ 1420.497537][T10258] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1420.606877][T10258] bond1: (slave bond2): making interface the new active one [ 1420.659077][T10258] bond1: (slave bond2): Enslaving as an active interface with an up link [ 1422.822645][T10340] IPVS: dh: TCP 172.20.20.170:0 - no destination available [ 1423.283307][T10350] Process accounting paused [ 1424.463136][T10379] netlink: 'syz.4.17127': attribute type 4 has an invalid length. [ 1424.569538][T10382] netlink: 'syz.4.17127': attribute type 4 has an invalid length. [ 1426.103033][T10398] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17134'. [ 1426.900914][ T3020] usb 6-1: new full-speed USB device number 85 using dummy_hcd [ 1427.090137][ T3020] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1427.090171][ T3020] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1427.090192][ T3020] usb 6-1: Product: syz [ 1427.090208][ T3020] usb 6-1: Manufacturer: syz [ 1427.090225][ T3020] usb 6-1: SerialNumber: syz [ 1427.168642][ T3020] usb 6-1: config 0 descriptor?? [ 1427.191915][ T3020] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1428.389146][ T3020] gspca_stk1135: reg_w 0xd err -71 [ 1428.395370][ T3020] gspca_stk1135: serial bus timeout: status=0x00 [ 1428.395388][ T3020] gspca_stk1135: Sensor write failed [ 1428.395425][ T3020] gspca_stk1135: serial bus timeout: status=0x00 [ 1428.395437][ T3020] gspca_stk1135: Sensor write failed [ 1428.395474][ T3020] gspca_stk1135: serial bus timeout: status=0x00 [ 1428.395486][ T3020] gspca_stk1135: Sensor read failed [ 1428.395520][ T3020] gspca_stk1135: serial bus timeout: status=0x00 [ 1428.395531][ T3020] gspca_stk1135: Sensor read failed [ 1428.395538][ T3020] gspca_stk1135: Detected sensor type unknown (0x0) [ 1428.395579][ T3020] gspca_stk1135: serial bus timeout: status=0x00 [ 1428.395589][ T3020] gspca_stk1135: Sensor read failed [ 1428.395625][ T3020] gspca_stk1135: serial bus timeout: status=0x00 [ 1428.395637][ T3020] gspca_stk1135: Sensor read failed [ 1428.395675][ T3020] gspca_stk1135: serial bus timeout: status=0x00 [ 1428.395694][ T3020] gspca_stk1135: Sensor write failed [ 1428.395732][ T3020] gspca_stk1135: serial bus timeout: status=0x00 [ 1428.395743][ T3020] gspca_stk1135: Sensor write failed [ 1428.395838][ T3020] stk1135 6-1:0.0: probe with driver stk1135 failed with error -71 [ 1428.524740][ T3020] usb 6-1: USB disconnect, device number 85 [ 1429.648471][T10491] trusted_key: syz.4.17174 sent an empty control message without MSG_MORE. [ 1430.204156][T10510] netlink: 40 bytes leftover after parsing attributes in process `syz.0.17186'. [ 1437.234924][T10699] "syz.0.17274" (10699) uses obsolete ecb(arc4) skcipher [ 1438.600431][ T5985] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 1438.770094][ T5985] usb 6-1: Using ep0 maxpacket: 32 [ 1438.772402][ T5985] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 1438.772434][ T5985] usb 6-1: config 0 has no interface number 0 [ 1438.772505][ T5985] usb 6-1: config 0 interface 184 has no altsetting 0 [ 1438.807620][ T5985] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1438.807653][ T5985] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1438.807675][ T5985] usb 6-1: Product: syz [ 1438.807689][ T5985] usb 6-1: Manufacturer: syz [ 1438.807704][ T5985] usb 6-1: SerialNumber: syz [ 1438.874978][ T5985] usb 6-1: config 0 descriptor?? [ 1439.929990][ T5985] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1439.930023][ T5985] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1440.134276][ T5985] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1440.134314][ T5985] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1440.134336][ T5985] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1440.134355][ T5985] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1440.202707][ T5985] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 1440.221603][ T5985] usb 6-1: USB disconnect, device number 86 [ 1440.315059][ T2412] udevd[2412]: setting mode of /dev/bus/usb/006/086 to 020664 failed: No such file or directory [ 1440.385655][ T2412] udevd[2412]: setting owner of /dev/bus/usb/006/086 to uid=0, gid=0 failed: No such file or directory [ 1441.310606][ T5985] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 1441.462691][ T5985] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 1441.462722][ T5985] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1441.462742][ T5985] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1441.462763][ T5985] usb 6-1: config 220 has no interface number 2 [ 1441.536965][ T5985] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1441.537005][ T5985] usb 6-1: config 220 interface 0 has no altsetting 0 [ 1441.537025][ T5985] usb 6-1: config 220 interface 76 has no altsetting 0 [ 1441.537044][ T5985] usb 6-1: config 220 interface 1 has no altsetting 0 [ 1441.576511][ T5985] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1441.576541][ T5985] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1441.576563][ T5985] usb 6-1: Product: syz [ 1441.576579][ T5985] usb 6-1: Manufacturer: syz [ 1441.576594][ T5985] usb 6-1: SerialNumber: syz [ 1441.862226][ T5985] usb 6-1: selecting invalid altsetting 0 [ 1441.928698][ T5985] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1441.928748][ T5985] uvcvideo 6-1:220.0: No valid video chain found. [ 1441.940537][ T5985] usb 6-1: selecting invalid altsetting 0 [ 1441.940578][ T5985] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 1441.965916][ T5985] usb 6-1: USB disconnect, device number 87 [ 1442.824810][T10823] : renamed from dummy0 (while UP) [ 1443.650543][ T3020] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 1444.253275][ T3020] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1444.276234][ T3020] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1444.276270][ T3020] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1444.276292][ T3020] usb 6-1: Product: syz [ 1444.276308][ T3020] usb 6-1: Manufacturer: syz [ 1444.276324][ T3020] usb 6-1: SerialNumber: syz [ 1444.500848][ T2284] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1444.554665][ T3020] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 88 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1444.670149][ T2284] usb 5-1: Using ep0 maxpacket: 8 [ 1444.673573][ T2284] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 130, using maximum allowed: 30 [ 1444.673639][ T2284] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1444.673668][ T2284] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1444.673690][ T2284] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 130 [ 1444.673735][ T2284] usb 5-1: New USB device found, idVendor=0c70, idProduct=f00e, bcdDevice= 0.00 [ 1444.673761][ T2284] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1444.774828][ T2284] usb 5-1: config 0 descriptor?? [ 1445.116964][ T5330] usb 6-1: USB disconnect, device number 88 [ 1445.156744][ T5330] usblp0: removed [ 1445.244419][ T2284] hid_parser_main: 387 callbacks suppressed [ 1445.244446][ T2284] aquacomputer_d5next 0003:0C70:F00E.002D: unknown main item tag 0x0 [ 1445.244480][ T2284] aquacomputer_d5next 0003:0C70:F00E.002D: unknown main item tag 0x0 [ 1445.244509][ T2284] aquacomputer_d5next 0003:0C70:F00E.002D: unknown main item tag 0x0 [ 1445.244538][ T2284] aquacomputer_d5next 0003:0C70:F00E.002D: unknown main item tag 0x0 [ 1445.244567][ T2284] aquacomputer_d5next 0003:0C70:F00E.002D: unknown main item tag 0x0 [ 1445.244595][ T2284] aquacomputer_d5next 0003:0C70:F00E.002D: unknown main item tag 0x0 [ 1445.244623][ T2284] aquacomputer_d5next 0003:0C70:F00E.002D: unknown main item tag 0x0 [ 1445.244659][ T2284] aquacomputer_d5next 0003:0C70:F00E.002D: unknown main item tag 0x0 [ 1445.244688][ T2284] aquacomputer_d5next 0003:0C70:F00E.002D: unknown main item tag 0x0 [ 1445.244723][ T2284] aquacomputer_d5next 0003:0C70:F00E.002D: unknown main item tag 0x0 [ 1445.247303][ T2284] aquacomputer_d5next 0003:0C70:F00E.002D: item fetching failed at offset 233/235 [ 1445.248469][ T2284] aquacomputer_d5next 0003:0C70:F00E.002D: probe with driver aquacomputer_d5next failed with error -22 [ 1445.502405][ T5330] usb 5-1: USB disconnect, device number 20 [ 1447.291753][T10931] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17376'. [ 1447.292922][T10931] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17376'. [ 1447.485725][T10937] netlink: 4 bytes leftover after parsing attributes in process `syz.5.17379'. [ 1447.572792][T10937] 8021q: adding VLAN 0 to HW filter on device team1 [ 1447.710459][ T5985] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1447.801332][T10945] wg0 speed is unknown, defaulting to 1000 [ 1447.805042][T10945] virt_wifi0 speed is unknown, defaulting to 1000 [ 1447.864543][ T5985] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1447.864624][ T5985] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1447.864650][ T5985] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1447.928926][ T5985] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1448.967173][ T5985] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 1448.967191][ T5985] stv0680 5-1:4.0: STV(e): camera ping failed!! [ 1448.967969][ T5985] stv0680 5-1:4.0: last error: 167, command = 0x5e [ 1449.179262][ T5985] usb 5-1: USB disconnect, device number 21 [ 1450.619539][T11031] netlink: 'syz.6.17422': attribute type 4 has an invalid length. [ 1453.251192][ T5330] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 1453.365689][T11115] Process accounting resumed [ 1453.402368][ T5330] usb 6-1: Using ep0 maxpacket: 16 [ 1453.405916][ T5330] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1453.405944][ T5330] usb 6-1: config 0 has no interface number 0 [ 1453.408983][ T5330] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1453.409013][ T5330] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1453.409037][ T5330] usb 6-1: Product: syz [ 1453.409053][ T5330] usb 6-1: Manufacturer: syz [ 1453.409069][ T5330] usb 6-1: SerialNumber: syz [ 1453.485120][ T5330] usb 6-1: config 0 descriptor?? [ 1453.511192][ T5330] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1454.291025][T11116] syz.0.17465 (11116) used greatest stack depth: 15368 bytes left [ 1454.489801][T11148] netlink: 'syz.4.17479': attribute type 2 has an invalid length. [ 1454.489834][T11148] netlink: 'syz.4.17479': attribute type 1 has an invalid length. [ 1454.489846][T11148] netlink: 'syz.4.17479': attribute type 8 has an invalid length. [ 1454.489858][T11148] netlink: 88 bytes leftover after parsing attributes in process `syz.4.17479'. [ 1454.538978][ T5330] gspca_spca1528: reg_w err -71 [ 1454.539094][ T5330] spca1528 6-1:0.1: probe with driver spca1528 failed with error -71 [ 1454.574289][ T5330] usb 6-1: USB disconnect, device number 89 [ 1454.981995][ T5985] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1455.142444][ T5985] usb 5-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 1455.142478][ T5985] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1455.142499][ T5985] usb 5-1: Product: syz [ 1455.142515][ T5985] usb 5-1: Manufacturer: syz [ 1455.142531][ T5985] usb 5-1: SerialNumber: syz [ 1455.185440][ T5985] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1455.185465][ T5985] r8152-cfgselector 5-1: config 0 descriptor?? [ 1455.635674][ T2284] r8152-cfgselector 5-1: USB disconnect, device number 22 [ 1459.499642][T11294] loop2: detected capacity change from 0 to 7 [ 1459.619175][T11294] Dev loop2: unable to read RDB block 7 [ 1459.619217][T11294] loop2: AHDI p1 p2 p3 [ 1459.619240][T11294] loop2: partition table partially beyond EOD, truncated [ 1459.619502][T11294] loop2: p1 start 1818582900 is beyond EOD, truncated [ 1459.619524][T11294] loop2: p3 start 335544320 is beyond EOD, truncated [ 1460.990982][T11336] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1462.478045][T11361] netlink: 4 bytes leftover after parsing attributes in process `syz.6.17561'. [ 1462.775967][T11361] team1: entered promiscuous mode [ 1462.776092][T11361] team1: entered allmulticast mode [ 1462.776712][T11361] 8021q: adding VLAN 0 to HW filter on device team1 [ 1462.911104][ T5330] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 1463.061031][ T5330] usb 6-1: Using ep0 maxpacket: 8 [ 1463.066266][ T5330] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1463.066298][ T5330] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1463.066320][ T5330] usb 6-1: Product: syz [ 1463.066335][ T5330] usb 6-1: Manufacturer: syz [ 1463.066351][ T5330] usb 6-1: SerialNumber: syz [ 1463.118999][ T5330] usb 6-1: config 0 descriptor?? [ 1463.371402][ T5330] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1463.900064][ T2284] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1464.050099][ T2284] usb 5-1: Using ep0 maxpacket: 16 [ 1464.052615][ T2284] usb 5-1: config 3 has an invalid interface number: 20 but max is 0 [ 1464.052644][ T2284] usb 5-1: config 3 has no interface number 0 [ 1464.052678][ T2284] usb 5-1: config 3 interface 20 has no altsetting 0 [ 1464.055641][ T2284] usb 5-1: New USB device found, idVendor=05ac, idProduct=0246, bcdDevice=27.b1 [ 1464.055671][ T2284] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1464.055692][ T2284] usb 5-1: Product: syz [ 1464.055708][ T2284] usb 5-1: Manufacturer: syz [ 1464.055725][ T2284] usb 5-1: SerialNumber: syz [ 1464.186920][ T5330] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1464.244960][ T5330] usb 6-1: USB disconnect, device number 90 [ 1464.379299][T11387] loop5: detected capacity change from 0 to 7 [ 1464.426884][T11387] Dev loop5: unable to read RDB block 7 [ 1464.426930][T11387] loop5: unable to read partition table [ 1464.427283][T11387] loop5: partition table beyond EOD, truncated [ 1464.427317][T11387] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1464.514812][ T2284] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:3.20/input/input80 [ 1464.533448][ T4949] bcm5974 5-1:3.20: could not read from device [ 1464.571855][ T2284] usb 5-1: USB disconnect, device number 23 [ 1465.339429][T11427] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17590'. [ 1466.539068][T11474] netlink: 48 bytes leftover after parsing attributes in process `syz.6.17605'. [ 1468.172502][T11539] netlink: 'syz.0.17629': attribute type 3 has an invalid length. [ 1477.398043][T11810] netlink: 12 bytes leftover after parsing attributes in process `syz.5.17744'. [ 1477.472052][T11810] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1477.505074][T11810] netlink: 'syz.5.17744': attribute type 10 has an invalid length. [ 1477.505100][T11810] netlink: 40 bytes leftover after parsing attributes in process `syz.5.17744'. [ 1477.505205][T11810] : entered promiscuous mode [ 1479.101381][T11840] netlink: 12 bytes leftover after parsing attributes in process `syz.5.17756'. [ 1479.172432][T11840] ipvlan2: entered allmulticast mode [ 1479.172458][T11840] syz_tun: entered allmulticast mode [ 1480.701580][T11881] tipc: Started in network mode [ 1480.701616][T11881] tipc: Node identity ac1414aa, cluster identity 4711 [ 1480.712177][T11881] tipc: Enabled bearer , priority 10 [ 1481.831248][ T5330] tipc: Node number set to 2886997162 [ 1482.516125][ T37] kauditd_printk_skb: 16 callbacks suppressed [ 1482.516145][ T37] audit: type=1326 audit(1482.513:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11926 comm="syz.6.17792" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa328d6ce59 code=0x0 [ 1483.413325][T11938] Process accounting paused [ 1483.747070][T11944] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 1483.747100][T11944] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1483.747229][T11944] vhci_hcd vhci_hcd.0: Device attached [ 1483.781379][T11948] vhci_hcd: connection closed [ 1483.788788][T11503] vhci_hcd vhci_hcd.5: stop threads [ 1483.788816][T11503] vhci_hcd vhci_hcd.5: release socket [ 1483.788858][T11503] vhci_hcd vhci_hcd.5: disconnect device [ 1484.257846][T11966] IPVS: dh: TCP 172.20.20.170:0 - no destination available [ 1485.304099][T12004] IPVS: dh: TCP 172.20.20.170:0 - no destination available [ 1486.607587][T31258] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1486.708122][T31258] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1486.729051][T31258] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1486.743418][T31258] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1486.745088][T31258] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1486.938760][T12041] IPVS: dh: TCP 172.20.20.170:0 - no destination available [ 1487.944749][T12075] IPVS: dh: TCP 172.20.20.170:0 - no destination available [ 1488.249514][T12035] wg0 speed is unknown, defaulting to 1000 [ 1488.266968][T12035] virt_wifi0 speed is unknown, defaulting to 1000 [ 1489.140649][ T59] Bluetooth: hci4: command tx timeout [ 1489.416440][T12120] IPVS: dh: TCP 172.20.20.170:0 - no destination available [ 1489.509291][T12035] bridge0: port 1(bridge_slave_0) entered blocking state [ 1489.530219][T12035] bridge0: port 1(bridge_slave_0) entered disabled state [ 1489.530862][T12035] bridge_slave_0: entered allmulticast mode [ 1489.533974][T12035] bridge_slave_0: entered promiscuous mode [ 1489.537730][T12035] bridge0: port 2(bridge_slave_1) entered blocking state [ 1489.538013][T12035] bridge0: port 2(bridge_slave_1) entered disabled state [ 1489.538246][T12035] bridge_slave_1: entered allmulticast mode [ 1489.583307][T12035] bridge_slave_1: entered promiscuous mode [ 1489.759279][T12035] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1489.773571][T12035] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1489.859057][T12035] team0: Port device team_slave_0 added [ 1489.869027][T12035] team0: Port device team_slave_1 added [ 1489.936503][T12035] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1489.936519][T12035] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1489.936541][T12035] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1489.938462][T12035] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1489.938488][T12035] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1489.938510][T12035] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1490.179716][T12035] hsr_slave_0: entered promiscuous mode [ 1490.209690][T12035] hsr_slave_1: entered promiscuous mode [ 1490.218948][T12035] debugfs: 'hsr0' already exists in 'hsr' [ 1490.218976][T12035] Cannot create hsr debugfs directory [ 1491.200200][ T59] Bluetooth: hci4: command tx timeout [ 1493.280235][ T59] Bluetooth: hci4: command tx timeout [ 1494.071633][T12035] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1494.111368][T12035] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1494.114982][T12035] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1494.168103][T12035] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1494.177807][T12035] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1494.404654][T12035] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1494.417596][T12035] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1494.675349][T12035] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1494.707225][T12248] random: crng reseeded on system resumption [ 1494.989928][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1495.009947][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1495.029943][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1495.039931][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1495.049932][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1495.059944][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1495.070004][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1495.079950][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1495.089939][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1495.099944][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1495.823183][ T59] Bluetooth: hci4: command tx timeout [ 1496.190420][T12035] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1496.241903][T12035] 8021q: adding VLAN 0 to HW filter on device team0 [ 1496.258530][T11498] bridge0: port 1(bridge_slave_0) entered blocking state [ 1496.258837][T11498] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1496.351713][T11498] bridge0: port 2(bridge_slave_1) entered blocking state [ 1496.351943][T11498] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1496.421516][T12283] IPVS: dh: TCP 172.20.20.170:0 - no destination available [ 1497.917993][T12035] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1498.468458][T12351] 9p: Bad value for 'rfdno' [ 1498.955467][T12035] veth0_vlan: entered promiscuous mode [ 1499.120634][T12035] veth1_vlan: entered promiscuous mode [ 1499.123958][T12370] overlayfs: failed to clone upperpath [ 1499.259868][T12035] veth0_macvtap: entered promiscuous mode [ 1499.277571][T12035] veth1_macvtap: entered promiscuous mode [ 1499.482970][T12035] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1499.565300][T12035] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1499.664466][T11503] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1499.664770][T11503] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1499.664813][T11503] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1499.664851][T11503] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1501.568651][T12418] netlink: 8 bytes leftover after parsing attributes in process `syz.6.17983'. [ 1501.568676][T12418] netlink: 8 bytes leftover after parsing attributes in process `syz.6.17983'. [ 1502.079657][ T2544] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1502.079683][ T2544] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1502.953954][ T37] audit: type=1800 audit(1502.943:849): pid=12451 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.17998" name="file0" dev="overlay" ino=15198 res=0 errno=0 [ 1503.057127][ T2544] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1503.057150][ T2544] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1505.534147][T12513] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1505.630585][ T2284] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 1505.803233][ T2284] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1505.803266][ T2284] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1505.851244][ T2284] usb 6-1: config 0 descriptor?? [ 1507.903832][ T2284] usb 6-1: Cannot set autoneg [ 1507.904158][ T2284] MOSCHIP usb-ethernet driver 6-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1507.944886][ T2284] usb 6-1: USB disconnect, device number 91 [ 1509.164875][T12570] netlink: 96 bytes leftover after parsing attributes in process `syz.0.18045'. [ 1509.199639][T12574] netlink: 4 bytes leftover after parsing attributes in process `syz.6.18047'. [ 1509.245662][ T56] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1509.245965][ T56] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1509.246048][ T56] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1509.246089][ T56] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1509.321638][T12574] netlink: 4 bytes leftover after parsing attributes in process `syz.6.18047'. [ 1510.622606][T12596] IPVS: dh: TCP 172.20.20.170:0 - no destination available [ 1511.306337][T12610] binder: 12608:12610 ioctl c0306201 200000000080 returned -14 [ 1511.325320][T12610] binder: 12608:12610 ioctl c0306201 2000000003c0 returned -14 [ 1513.557767][T12636] Process accounting resumed [ 1516.494706][T12666] wg0 speed is unknown, defaulting to 1000 [ 1516.532296][T12666] virt_wifi0 speed is unknown, defaulting to 1000 [ 1516.958375][ T37] audit: type=1800 audit(1516.963:850): pid=12690 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.7.18092" name="file0" dev="overlay" ino=77 res=0 errno=0 [ 1517.022162][T12693] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18094'. [ 1518.286365][T12708] netlink: 52 bytes leftover after parsing attributes in process `syz.7.18095'. [ 1518.488518][T12713] netlink: 20 bytes leftover after parsing attributes in process `syz.5.18101'. [ 1518.488545][T12713] netlink: 4 bytes leftover after parsing attributes in process `syz.5.18101'. [ 1518.931221][T12708] bridge0: port 2(bridge_slave_1) entered disabled state [ 1518.941426][T12708] bridge0: port 1(bridge_slave_0) entered disabled state [ 1519.615044][ T11] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 1519.783868][ T11] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1519.783907][ T11] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 4 [ 1519.784010][ T11] usb 8-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 1519.784038][ T11] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1519.791030][ T11] usb 8-1: config 0 descriptor?? [ 1519.792380][T12733] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1521.103651][ T11] hid_parser_main: 207 callbacks suppressed [ 1521.103696][ T11] zeroplus 0003:0C12:0030.002E: unknown main item tag 0x0 [ 1521.103732][ T11] zeroplus 0003:0C12:0030.002E: unknown main item tag 0x0 [ 1521.103765][ T11] zeroplus 0003:0C12:0030.002E: unknown main item tag 0x0 [ 1521.103796][ T11] zeroplus 0003:0C12:0030.002E: unknown main item tag 0x0 [ 1521.103827][ T11] zeroplus 0003:0C12:0030.002E: unknown main item tag 0x0 [ 1521.103858][ T11] zeroplus 0003:0C12:0030.002E: unknown main item tag 0x0 [ 1521.103890][ T11] zeroplus 0003:0C12:0030.002E: unknown main item tag 0x0 [ 1521.103922][ T11] zeroplus 0003:0C12:0030.002E: unknown main item tag 0x0 [ 1521.103954][ T11] zeroplus 0003:0C12:0030.002E: unknown main item tag 0x0 [ 1521.103985][ T11] zeroplus 0003:0C12:0030.002E: unknown main item tag 0x0 [ 1521.213999][ T11] zeroplus 0003:0C12:0030.002E: hidraw0: USB HID v0.81 Device [HID 0c12:0030] on usb-dummy_hcd.7-1/input0 [ 1521.214038][ T11] zeroplus 0003:0C12:0030.002E: no inputs found [ 1521.245717][ T11] usb 8-1: USB disconnect, device number 2 [ 1521.493667][T12758] fido_id[12758]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 1521.869525][T21092] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1522.033078][T21092] usb 8-1: Using ep0 maxpacket: 16 [ 1522.035500][T21092] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1522.035527][T21092] usb 8-1: config 0 has no interface number 0 [ 1522.076186][T21092] usb 8-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1522.076220][T21092] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1522.076243][T21092] usb 8-1: Product: syz [ 1522.076259][T21092] usb 8-1: Manufacturer: syz [ 1522.076275][T21092] usb 8-1: SerialNumber: syz [ 1523.358634][T21092] usb 8-1: config 0 descriptor?? [ 1523.547630][T21092] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1524.276099][ T37] audit: type=1800 audit(1524.273:851): pid=12807 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.6.18136" name="nullb0" dev="tmpfs" ino=2441 res=0 errno=0 [ 1525.039448][T21092] gspca_spca1528: reg_w err -71 [ 1525.039553][T21092] spca1528 8-1:0.1: probe with driver spca1528 failed with error -71 [ 1525.066081][T21092] usb 8-1: USB disconnect, device number 3 [ 1528.120754][ T5330] usb 6-1: new full-speed USB device number 92 using dummy_hcd [ 1528.273060][ T5330] usb 6-1: config 1 interface 0 altsetting 242 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1528.273110][ T5330] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1528.277712][ T5330] usb 6-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1528.277744][ T5330] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1528.277765][ T5330] usb 6-1: Product: ᆪ뱛퐫ፕ蒓꛹䁮뚣㙠戧ᘍ㧥ҷ㐑훉ꉈ킻ᷭ퍟▖ᵒ❟鏆审᜽遊ﮐ夓冾№꟬瀴똇儬紽ꔙ臙ᢈ䮜馅諈▏淰铱蘛盽ﺌ섶 [ 1528.277791][ T5330] usb 6-1: Manufacturer: င [ 1528.277807][ T5330] usb 6-1: SerialNumber: 컵饑怇隑Ạ쑮…戇씮춘㰩ⓥॅ荟䯱ㅞ㖫໴骲僘ᮌ巇 [ 1528.546894][T12862] netlink: 32 bytes leftover after parsing attributes in process `syz.0.18159'. [ 1529.345813][T12856] netlink: 'syz.5.18157': attribute type 11 has an invalid length. [ 1530.246391][T21092] usb 6-1: USB disconnect, device number 92 [ 1533.313318][T12929] syzkaller0: entered promiscuous mode [ 1533.313340][T12929] syzkaller0: entered allmulticast mode [ 1533.576653][T12940] netlink: 28 bytes leftover after parsing attributes in process `syz.7.18188'. [ 1537.158011][T12985] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1537.403302][T12989] netlink: 48 bytes leftover after parsing attributes in process `syz.0.18205'. [ 1538.577381][T13033] netlink: 'syz.5.18222': attribute type 1 has an invalid length. [ 1538.577405][T13033] netlink: 'syz.5.18222': attribute type 4 has an invalid length. [ 1538.577420][T13033] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.18222'. [ 1539.391854][T13052] netlink: 20 bytes leftover after parsing attributes in process `syz.7.18229'. [ 1543.679225][T13153] Process accounting paused [ 1544.598857][T13182] veth3: entered promiscuous mode [ 1547.782950][ T37] audit: type=1326 audit(1547.773:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13222 comm="syz.6.18302" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa328d6ce59 code=0x7ffc0000 [ 1547.783008][ T37] audit: type=1326 audit(1547.783:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13222 comm="syz.6.18302" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa328d6ce59 code=0x7ffc0000 [ 1547.783058][ T37] audit: type=1326 audit(1547.783:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13222 comm="syz.6.18302" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa328d6ce59 code=0x7ffc0000 [ 1547.783105][ T37] audit: type=1326 audit(1547.783:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13222 comm="syz.6.18302" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fa328d6ce59 code=0x7ffc0000 [ 1547.892039][ T37] audit: type=1326 audit(1547.893:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13222 comm="syz.6.18302" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa328d2d68e code=0x7ffc0000 [ 1547.893342][ T37] audit: type=1326 audit(1547.893:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13222 comm="syz.6.18302" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa328d2d68e code=0x7ffc0000 [ 1547.930760][ T37] audit: type=1326 audit(1547.933:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13222 comm="syz.6.18302" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa328d2d68e code=0x7ffc0000 [ 1547.934376][ T37] audit: type=1326 audit(1547.933:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13222 comm="syz.6.18302" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa328d2d68e code=0x7ffc0000 [ 1548.011352][ T37] audit: type=1326 audit(1547.963:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13222 comm="syz.6.18302" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa328d2d68e code=0x7ffc0000 [ 1548.011402][ T37] audit: type=1326 audit(1547.983:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13222 comm="syz.6.18302" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa328d2d68e code=0x7ffc0000 [ 1551.329492][T13269] ALSA: mixer_oss: invalid OSS volume 'tKfE*ņ{N)~G{OC' [ 1551.329523][T13269] ALSA: mixer_oss: invalid OSS volume '0ap%bB-=UGo' [ 1551.329539][T13269] ALSA: mixer_oss: invalid OSS volume 'rf ! 4濟遷?‘߮0؃' [ 1551.329566][T13269] ALSA: mixer_oss: invalid OSS volume '9\+T;nSEP],(#OA2"' [ 1551.329582][T13269] ALSA: mixer_oss: invalid OSS volume 'VqZ'`){7 ' [ 1551.329644][T13269] ALSA: mixer_oss: invalid OSS volume '2jޖGN'qgH' [ 1551.348372][T13269] ALSA: mixer_oss: invalid OSS volume 'eM!hךy,@d9:~vB(' [ 1551.348412][T13269] ALSA: mixer_oss: invalid OSS volume '#AO/ aEv2h' [ 1551.348434][T13269] ALSA: mixer_oss: invalid OSS volume '3g67W2gEqIWC' [ 1551.348461][T13269] ALSA: mixer_oss: invalid OSS volume 'STTl7_ᑲH_{' [ 1551.348494][T13269] ALSA: mixer_oss: invalid OSS volume '^*"6lciLnjU"w4:L|' [ 1551.349990][T13269] ALSA: mixer_oss: invalid OSS volume '2gre_SKT' [ 1551.350024][T13269] ALSA: mixer_oss: invalid OSS volume 'c+г|<ѯjaʏ' [ 1551.350077][T13269] ALSA: mixer_oss: invalid OSS volume '!lN?1r*Nۗw䑚3' [ 1551.350092][T13269] ALSA: mixer_oss: invalid OSS volume '^:pxQ' [ 1551.350117][T13269] ALSA: mixer_oss: invalid OSS volume 'ꣃ߷R*AJʍ&jS' [ 1551.350134][T13269] ALSA: mixer_oss: invalid OSS volume 'x' [ 1551.350153][T13269] ALSA: mixer_oss: invalid OSS volume 'E츫/_˂cˆYV>KHaL%' [ 1551.350166][T13269] ALSA: mixer_oss: invalid OSS volume '' [ 1551.350183][T13269] ALSA: mixer_oss: invalid OSS volume '^͹~ڥEN~:D(' [ 1551.350257][T13269] ALSA: mixer_oss: invalid OSS volume '_1n`qvtZRxRu' [ 1551.350274][T13269] ALSA: mixer_oss: invalid OSS volume '〙hvw7R'֛c' [ 1551.350306][T13269] ALSA: mixer_oss: invalid OSS volume ';rArcdxV8ӊ' [ 1551.350326][T13269] ALSA: mixer_oss: invalid OSS volume 'Q-c֨:ᣕ~1"m' [ 1551.350342][T13269] ALSA: mixer_oss: invalid OSS volume ' x.V:' [ 1551.350358][T13269] ALSA: mixer_oss: invalid OSS volume 'ؘ.ܣ(Ltt=΃{o,4:' [ 1551.350381][T13269] ALSA: mixer_oss: invalid OSS volume ' }Z1m' [ 1551.350463][T13269] ALSA: mixer_oss: invalid OSS volume 'z8gqleѫw?1P' [ 1551.350479][T13269] ALSA: mixer_oss: invalid OSS volume ''`gYXu|o?7yWCG' [ 1551.350494][T13269] ALSA: mixer_oss: invalid OSS volume 'tåJ?k'j2' [ 1551.350543][T13269] ALSA: mixer_oss: invalid OSS volume '4]Ǩ:i5ţ' [ 1551.350575][T13269] ALSA: mixer_oss: invalid OSS volume 'd7cHQW,oJ!%%s' [ 1551.350601][T13269] ALSA: mixer_oss: invalid OSS volume 'i뢎THz)jo:dBw' [ 1551.350627][T13269] ALSA: mixer_oss: invalid OSS volume 'pЈ,@ή^wRudOߕ~'' [ 1551.350674][T13269] ALSA: mixer_oss: invalid OSS volume 'Á*5/L' [ 1551.350982][T13269] ALSA: mixer_oss: invalid OSS volume 'yŦD6n' [ 1551.351072][T13269] ALSA: mixer_oss: invalid OSS volume '1%[o' [ 1551.351185][T13269] ALSA: mixer_oss: invalid OSS volume 'CYy~4ufbdfN&9' [ 1551.351294][T13269] ALSA: mixer_oss: invalid OSS volume 'PP׈J͹MuqI\`-s' [ 1551.351357][T13269] ALSA: mixer_oss: invalid OSS volume 'iT>\^n96Gl^4$cMNX' [ 1551.609114][T31258] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1551.771474][T31258] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1551.853437][T31258] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1552.180635][T31258] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1552.242330][T31258] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1553.675878][ T12] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1554.908167][T31258] Bluetooth: hci4: command tx timeout [ 1555.833155][T13264] wg0 speed is unknown, defaulting to 1000 [ 1555.835973][T13264] virt_wifi0 speed is unknown, defaulting to 1000 [ 1557.370684][T31258] Bluetooth: hci4: command tx timeout [ 1557.668727][ T12] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1559.056749][T13394] netlink: 190972 bytes leftover after parsing attributes in process `syz.0.18359'. [ 1559.056788][T13394] openvswitch: netlink: ufid size 21390 bytes exceeds the range (1, 16) [ 1559.056910][T13394] openvswitch: netlink: Message has 4 unknown bytes. [ 1559.426916][T13403] Bluetooth: hci0: invalid length 0, exp 2 for type 10 [ 1559.442829][T31258] Bluetooth: hci4: command tx timeout [ 1559.493729][ T12] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1561.520812][T31258] Bluetooth: hci4: command tx timeout [ 1562.098996][ T12] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1562.603445][T13460] tipc: Enabling of bearer rejected, failed to enable media [ 1566.676757][T13264] bridge0: port 1(bridge_slave_0) entered blocking state [ 1566.676890][T13264] bridge0: port 1(bridge_slave_0) entered disabled state [ 1566.677206][T13264] bridge_slave_0: entered allmulticast mode [ 1566.679832][T13264] bridge_slave_0: entered promiscuous mode [ 1566.797122][T13264] bridge0: port 2(bridge_slave_1) entered blocking state [ 1566.797211][T13264] bridge0: port 2(bridge_slave_1) entered disabled state [ 1566.797417][T13264] bridge_slave_1: entered allmulticast mode [ 1566.821697][T13264] bridge_slave_1: entered promiscuous mode [ 1567.273875][T13264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1568.406164][T13264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1569.824800][ T12] bridge_slave_1: left allmulticast mode [ 1569.824829][ T12] bridge_slave_1: left promiscuous mode [ 1569.825027][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1569.981782][ T12] bridge_slave_0: left allmulticast mode [ 1569.981812][ T12] bridge_slave_0: left promiscuous mode [ 1569.982050][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1570.676891][T13558] futex_wake_op: syz.0.18412 tries to shift op by 144; fix this program [ 1573.912636][T13575] Process accounting resumed [ 1576.849074][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1577.071582][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1577.114315][ T12] bond0 (unregistering): Released all slaves [ 1577.325240][T13264] team0: Port device team_slave_0 added [ 1577.332497][ T5259] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1577.373053][T13264] team0: Port device team_slave_1 added [ 1577.733469][T13264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1577.733485][T13264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1577.733506][T13264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1577.739113][T13264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1577.739128][T13264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1577.739150][T13264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1578.107409][T13638] bridge0: port 4(macvlan2) entered blocking state [ 1578.107556][T13638] bridge0: port 4(macvlan2) entered disabled state [ 1578.108030][T13638] macvlan2: entered allmulticast mode [ 1578.108051][T13638] gretap0: entered allmulticast mode [ 1578.143252][T13638] macvlan2: entered promiscuous mode [ 1578.218575][T13638] bridge0: port 4(macvlan2) entered blocking state [ 1578.354617][T13638] bridge0: port 4(macvlan2) entered forwarding state [ 1580.535702][T13264] hsr_slave_0: entered promiscuous mode [ 1580.544050][T13264] hsr_slave_1: entered promiscuous mode [ 1580.548171][T13264] debugfs: 'hsr0' already exists in 'hsr' [ 1580.548201][T13264] Cannot create hsr debugfs directory [ 1580.958760][ T5259] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1581.610423][T13715] fuse: fd is not a fuse device [ 1583.527285][ T37] kauditd_printk_skb: 30 callbacks suppressed [ 1583.527305][ T37] audit: type=1326 audit(1583.533:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13750 comm="syz.5.18482" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f004ddcce59 code=0x0 [ 1585.394111][ T12] hsr_slave_0: left promiscuous mode [ 1585.504134][ T12] hsr_slave_1: left promiscuous mode [ 1585.505038][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1585.505059][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1585.605610][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1585.605641][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1586.521508][ T12] veth1_macvtap: left promiscuous mode [ 1586.521588][ T12] veth0_macvtap: left promiscuous mode [ 1587.643472][ T12] veth1_vlan: left promiscuous mode [ 1588.269459][ T12] veth0_vlan: left promiscuous mode [ 1591.883050][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1591.951977][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1592.670391][ T5259] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1593.090044][T27948] usb 6-1: new full-speed USB device number 93 using dummy_hcd [ 1593.266972][T27948] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1593.267012][T27948] usb 6-1: config 0 has no interfaces? [ 1593.434645][T27948] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1593.434700][T27948] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1593.434722][T27948] usb 6-1: Product: syz [ 1593.434737][T27948] usb 6-1: Manufacturer: syz [ 1593.434753][T27948] usb 6-1: SerialNumber: syz [ 1593.475173][T27948] usb 6-1: config 0 descriptor?? [ 1596.148897][T12750] usb 6-1: USB disconnect, device number 93 [ 1599.455776][ T5259] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1601.720714][T13972] hub 8-0:1.0: USB hub found [ 1601.730381][T13972] hub 8-0:1.0: 1 port detected [ 1602.703369][T13980] netlink: 'syz.5.18557': attribute type 10 has an invalid length. [ 1602.703392][T13980] netlink: 40 bytes leftover after parsing attributes in process `syz.5.18557'. [ 1603.416022][T13982] IPVS: dh: TCP 172.20.20.170:0 - no destination available [ 1603.527766][T13264] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1603.671866][T13264] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1603.674514][T13264] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1603.677040][T13987] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18558'. [ 1603.813742][T13264] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1603.837372][T13264] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1603.911858][T13989] Process accounting paused [ 1603.997036][T13264] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1604.062641][T13264] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1604.228867][T13264] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1607.022884][T13264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1607.322630][T13264] 8021q: adding VLAN 0 to HW filter on device team0 [ 1607.369693][T11495] bridge0: port 1(bridge_slave_0) entered blocking state [ 1607.480018][T11495] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1607.615860][T11495] bridge0: port 2(bridge_slave_1) entered blocking state [ 1607.664633][T11495] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1608.961848][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1612.617800][ T59] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1612.744397][ T59] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1612.782363][ T59] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1612.785689][ T59] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1612.795922][ T59] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1615.147618][T31258] Bluetooth: hci6: command tx timeout [ 1617.201316][T31258] Bluetooth: hci6: command tx timeout [ 1619.307429][T31258] Bluetooth: hci6: command tx timeout [ 1620.856355][T14112] wg0 speed is unknown, defaulting to 1000 [ 1620.873300][T14112] virt_wifi0 speed is unknown, defaulting to 1000 [ 1621.336684][T14255] program syz.5.18643 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1621.368216][T31258] Bluetooth: hci6: command tx timeout [ 1621.872949][ T11] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 1622.035077][ T11] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1622.039648][ T11] usb 6-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 1622.039681][ T11] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1622.039707][ T11] usb 6-1: Product: syz [ 1622.039722][ T11] usb 6-1: Manufacturer: syz [ 1622.039737][ T11] usb 6-1: SerialNumber: syz [ 1622.113975][ T11] usb 6-1: config 0 descriptor?? [ 1622.581989][ T11] usb 6-1: USB disconnect, device number 94 [ 1623.933344][T12427] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 1624.860024][T12427] usb 6-1: Using ep0 maxpacket: 8 [ 1624.862555][T12427] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1624.867357][T12427] usb 6-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1624.867388][T12427] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1624.867410][T12427] usb 6-1: Product: syz [ 1624.867425][T12427] usb 6-1: Manufacturer: syz [ 1624.867442][T12427] usb 6-1: SerialNumber: syz [ 1624.976541][T12427] usb 6-1: config 0 descriptor?? [ 1625.067092][T12427] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1625.183591][T14315] netlink: 20 bytes leftover after parsing attributes in process `syz.6.18660'. [ 1626.512552][T12427] gspca_zc3xx: reg_w_i err -110 [ 1627.979951][T12427] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1627.980060][T12427] gspca_zc3xx 6-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 1628.424813][ T5330] usb 6-1: USB disconnect, device number 95 [ 1632.705970][T14112] bridge0: port 1(bridge_slave_0) entered blocking state [ 1632.708471][T14112] bridge0: port 1(bridge_slave_0) entered disabled state [ 1632.708746][T14112] bridge_slave_0: entered allmulticast mode [ 1632.747023][T14112] bridge_slave_0: entered promiscuous mode [ 1632.808065][T14112] bridge0: port 2(bridge_slave_1) entered blocking state [ 1632.808307][T14112] bridge0: port 2(bridge_slave_1) entered disabled state [ 1632.808577][T14112] bridge_slave_1: entered allmulticast mode [ 1632.845444][T14112] bridge_slave_1: entered promiscuous mode [ 1633.463067][T14414] netlink: 40 bytes leftover after parsing attributes in process `syz.0.18687'. [ 1634.247381][T14411] Process accounting resumed [ 1634.559445][T14112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1634.582892][T14112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1635.696688][ T38] INFO: task syz.4.17660:11610 blocked for more than 143 seconds. [ 1635.696715][ T38] Tainted: G L syzkaller #0 [ 1635.696726][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1635.696734][ T38] task:syz.4.17660 state:D stack:24872 pid:11610 tgid:11610 ppid:5607 task_flags:0x400040 flags:0x00080003 [ 1635.696791][ T38] Call Trace: [ 1635.696798][ T38] [ 1635.696811][ T38] __schedule+0x16dc/0x5500 [ 1635.696844][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1635.696873][ T38] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 1635.696909][ T38] ? rt_spin_lock+0x1e0/0x400 [ 1635.696939][ T38] ? __pfx___schedule+0x10/0x10 [ 1635.696966][ T38] ? schedule+0x90/0x2b0 [ 1635.696989][ T38] schedule+0x164/0x2b0 [ 1635.697013][ T38] fuse_chan_send+0x1068/0x1ad0 [ 1635.697132][ T38] ? __pfx_fuse_chan_send+0x10/0x10 [ 1635.697158][ T38] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1635.697184][ T38] ? pid_nr_ns+0xcb/0x140 [ 1635.697242][ T38] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1635.697262][ T38] ? __lock_acquire+0x683/0x2ce0 [ 1635.697291][ T38] ? __fuse_simple_request+0x7a/0xb0 [ 1635.697369][ T38] fuse_flush+0x677/0x8b0 [ 1635.697402][ T38] ? __pfx_fuse_flush+0x10/0x10 [ 1635.697432][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1635.697467][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1635.697501][ T38] ? rt_spin_unlock+0x157/0x200 [ 1635.697529][ T38] ? __pfx_fuse_flush+0x10/0x10 [ 1635.697555][ T38] filp_flush+0xc0/0x190 [ 1635.697593][ T38] filp_close+0x1d/0x40 [ 1635.697616][ T38] __se_sys_close_range+0x3d6/0x910 [ 1635.697652][ T38] ? __pfx___se_sys_close_range+0x10/0x10 [ 1635.697686][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1635.697708][ T38] do_syscall_64+0x174/0x580 [ 1635.697732][ T38] ? clear_bhb_loop+0x40/0x90 [ 1635.697753][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1635.697772][ T38] RIP: 0033:0x7f2ba3b6ce59 [ 1635.697789][ T38] RSP: 002b:00007fff68fc11f8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1635.697809][ T38] RAX: ffffffffffffffda RBX: 00007f2ba3de7da0 RCX: 00007f2ba3b6ce59 [ 1635.697822][ T38] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1635.697833][ T38] RBP: 00007f2ba3de7da0 R08: 0000000000000006 R09: 0000000000000000 [ 1635.697844][ T38] R10: 00007f2ba3de7cb0 R11: 0000000000000246 R12: 00000000001670d2 [ 1635.697855][ T38] R13: 00007f2ba3de5fac R14: 0000000000166e71 R15: 00007fff68fc1300 [ 1635.697882][ T38] [ 1635.697936][ T38] [ 1635.697936][ T38] Showing all locks held in the system: [ 1635.698590][ T38] 4 locks held by kworker/0:1/11: [ 1635.698610][ T38] 6 locks held by kworker/u8:0/12: [ 1635.698621][ T38] 11 locks held by ktimers/0/16: [ 1635.698634][ T38] 1 lock held by khungtaskd/38: [ 1635.698642][ T38] #0: ffffffff8dfc2fc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1635.698730][ T38] 2 locks held by getty/5349: [ 1635.698740][ T38] #0: ffff888032c8e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1635.698881][ T38] #1: ffffc90003cc62e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 1635.698933][ T38] 4 locks held by syz-executor/11110: [ 1635.698950][ T38] 9 locks held by kworker/u8:2/2543: [ 1635.698963][ T38] 10 locks held by kworker/u8:10/5379: [ 1635.698974][ T38] 6 locks held by kworker/u8:20/5394: [ 1635.698986][ T38] 6 locks held by kworker/u8:26/11495: [ 1635.698996][ T38] 5 locks held by kworker/u8:30/11499: [ 1635.699009][ T38] 7 locks held by kworker/u8:41/13381: [ 1635.699020][ T38] 4 locks held by kworker/u8:47/13388: [ 1635.699030][ T38] 4 locks held by kworker/u8:48/13389: [ 1635.699040][ T38] #0: ffff88801a084138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1635.699127][ T38] #1: ffffc9000c57fc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1635.699178][ T38] #2: ffffffff8f3716b8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1635.699285][ T38] #3: ffffffff8dfc2fc0 (rcu_read_lock){....}-{1:3}, at: rt_mutex_slowlock_block+0x33a/0x680 [ 1635.699345][ T38] 3 locks held by syz-executor/14112: [ 1635.699356][ T38] 6 locks held by syz.6.18668/14345: [ 1635.699368][ T38] 1 lock held by syz.3.18689/14418: [ 1635.699380][ T38] [ 1635.699386][ T38] ============================================= [ 1635.699386][ T38] [ 1635.699395][ T38] NMI backtrace for cpu 1 [ 1635.699411][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1635.699435][ T38] Tainted: [L]=SOFTLOCKUP [ 1635.699441][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1635.699452][ T38] Call Trace: [ 1635.699466][ T38] [ 1635.699475][ T38] dump_stack_lvl+0xe8/0x150 [ 1635.699499][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 1635.699528][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1635.699598][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 1635.699629][ T38] sys_info+0x135/0x170 [ 1635.699653][ T38] watchdog+0xfd7/0x1030 [ 1635.699681][ T38] ? watchdog+0x1c7/0x1030 [ 1635.699707][ T38] kthread+0x388/0x470 [ 1635.699767][ T38] ? __pfx_watchdog+0x10/0x10 [ 1635.699786][ T38] ? __pfx_kthread+0x10/0x10 [ 1635.699813][ T38] ret_from_fork+0x514/0xb70 [ 1635.699869][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1635.699890][ T38] ? __switch_to+0xc89/0x1420 [ 1635.699934][ T38] ? __pfx_kthread+0x10/0x10 [ 1635.699954][ T38] ret_from_fork_asm+0x1a/0x30 [ 1635.699990][ T38] [ 1635.700058][ T38] Sending NMI from CPU 1 to CPUs 0: [ 1635.700091][ C0] NMI backtrace for cpu 0 [ 1635.700118][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1635.700144][ C0] Tainted: [L]=SOFTLOCKUP [ 1635.700151][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1635.700163][ C0] RIP: 0010:__lock_acquire+0x18fa/0x2ce0 [ 1635.700191][ C0] Code: 13 25 ff 0f 00 00 39 05 b0 d6 d7 11 73 06 89 05 a8 d6 d7 11 48 8b 02 48 89 df 4c 39 e8 0f 84 34 fe ff ff 4c 89 78 30 48 8b 00 <4c> 39 e8 75 f4 48 89 df e9 20 fe ff ff 48 89 fb 48 c7 c7 b0 02 e9 [ 1635.700209][ C0] RSP: 0000:ffffc90000157028 EFLAGS: 00000002 [ 1635.700225][ C0] RAX: ffffffff9609d548 RBX: 00000000000003cd RCX: 00000000000009a2 [ 1635.700239][ C0] RDX: ffffffff95fc8058 RSI: ffff88801ceb0dc0 RDI: 00000000000003cd [ 1635.700252][ C0] RBP: f87c699a372c8cc8 R08: ffffc90000156ff0 R09: 0000000000000020 [ 1635.700266][ C0] R10: 0000000000000000 R11: ffffffff81a124a0 R12: 00000000000009a1 [ 1635.700278][ C0] R13: ffffffff931a2778 R14: ffff88801ceb0000 R15: ffffffff96126e58 [ 1635.700293][ C0] FS: 0000000000000000(0000) GS:ffff888126111000(0000) knlGS:0000000000000000 [ 1635.700308][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1635.700321][ C0] CR2: 00007f52b6b474d9 CR3: 0000000071258000 CR4: 00000000003526f0 [ 1635.700339][ C0] Call Trace: [ 1635.700346][ C0] [ 1635.700357][ C0] ? __pfx_hlock_conflict+0x10/0x10 [ 1635.700443][ C0] ? ktime_expiry_to_cycles+0x4e/0x1e0 [ 1635.700467][ C0] lock_acquire+0x106/0x350 [ 1635.700491][ C0] ? ktime_expiry_to_cycles+0x4e/0x1e0 [ 1635.700519][ C0] ? ktime_expiry_to_cycles+0x4e/0x1e0 [ 1635.700541][ C0] seqcount_lockdep_reader_access+0x55/0x100 [ 1635.700564][ C0] ? ktime_expiry_to_cycles+0x4e/0x1e0 [ 1635.700587][ C0] ktime_expiry_to_cycles+0x4e/0x1e0 [ 1635.700613][ C0] clockevents_program_event+0x199/0x630 [ 1635.700682][ C0] ? __hrtimer_rearm_deferred+0x99/0x430 [ 1635.700702][ C0] ? __pfx_clockevents_program_event+0x10/0x10 [ 1635.700734][ C0] ? tick_program_event+0x8f/0x120 [ 1635.700759][ C0] __hrtimer_rearm_deferred+0x26f/0x430 [ 1635.700779][ C0] irqentry_exit+0x8b7/0x8f0 [ 1635.700813][ C0] ? trace_irq_disable+0x3b/0x140 [ 1635.700839][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1635.700860][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 1635.700883][ C0] Code: f7 e8 2d 71 76 f6 f7 c3 00 02 00 00 74 05 e8 90 65 a2 f6 9c 58 a9 00 02 00 00 75 27 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 74 90 68 f6 65 8b 05 ad ed 45 07 85 c0 74 18 5b 41 5e e9 51 3c [ 1635.700899][ C0] RSP: 0000:ffffc90000157488 EFLAGS: 00000206 [ 1635.700914][ C0] RAX: 0000000000000006 RBX: 0000000000000206 RCX: 0000000080000003 [ 1635.700926][ C0] RDX: 0000000000000002 RSI: ffffffff8d6401ff RDI: 0000000000000001 [ 1635.700939][ C0] RBP: dffffc0000000000 R08: ffffffff8f8afef7 R09: 1ffffffff1f15fde [ 1635.700953][ C0] R10: dffffc0000000000 R11: fffffbfff1f15fdf R12: ffff8880b883c7a0 [ 1635.700967][ C0] R13: 1ffff110171078f4 R14: ffff8880297da9e0 R15: ffff8880b883b908 [ 1635.700991][ C0] try_to_wake_up+0x81c/0x1430 [ 1635.701039][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1635.701063][ C0] rt_mutex_slowunlock+0x5ff/0xa20 [ 1635.701103][ C0] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1635.701138][ C0] ? rt_spin_lock+0x1e0/0x400 [ 1635.701169][ C0] ? crng_make_state+0x22f/0x5d0 [ 1635.701242][ C0] rt_spin_unlock+0x10d/0x200 [ 1635.701272][ C0] crng_make_state+0x22f/0x5d0 [ 1635.701298][ C0] _get_random_bytes+0xff/0x260 [ 1635.701322][ C0] ? __pfx__get_random_bytes+0x10/0x10 [ 1635.701348][ C0] ? rt_spin_lock+0x20e/0x400 [ 1635.701383][ C0] get_random_u32+0x2e8/0x860 [ 1635.701404][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1635.701429][ C0] ? __pfx_get_random_u32+0x10/0x10 [ 1635.701450][ C0] ? rt_write_lock+0x86/0x220 [ 1635.701467][ C0] ? rt_write_lock+0x86/0x220 [ 1635.701483][ C0] ? __pfx_rwbase_write_lock+0x10/0x10 [ 1635.701506][ C0] rfc3315_s14_backoff_update+0x14/0xc0 [ 1635.701533][ C0] addrconf_rs_timer+0x324/0x6c0 [ 1635.701558][ C0] ? call_timer_fn+0xd4/0x5e0 [ 1635.701588][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 1635.701613][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1635.701637][ C0] call_timer_fn+0x192/0x5e0 [ 1635.701664][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 1635.701688][ C0] ? call_timer_fn+0xd4/0x5e0 [ 1635.701714][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 1635.701746][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1635.701767][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 1635.701791][ C0] __run_timer_base+0x67b/0x9b0 [ 1635.701824][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 1635.701850][ C0] ? __local_bh_disable_ip+0x3c/0x420 [ 1635.701925][ C0] ? __local_bh_disable_ip+0x3c/0x420 [ 1635.701954][ C0] run_timer_softirq+0xb7/0x170 [ 1635.701980][ C0] handle_softirqs+0x1d9/0x6c0 [ 1635.702012][ C0] run_ktimerd+0x69/0x100 [ 1635.702031][ C0] smpboot_thread_fn+0x57c/0xa80 [ 1635.702079][ C0] ? smpboot_thread_fn+0x4e/0xa80 [ 1635.702101][ C0] kthread+0x388/0x470 [ 1635.702122][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1635.702140][ C0] ? __pfx_kthread+0x10/0x10 [ 1635.702160][ C0] ret_from_fork+0x514/0xb70 [ 1635.702184][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1635.702206][ C0] ? __switch_to+0xc89/0x1420 [ 1635.702224][ C0] ? __pfx_kthread+0x10/0x10 [ 1635.702244][ C0] ret_from_fork_asm+0x1a/0x30 [ 1635.702276][ C0] [ 1635.703186][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 1635.703210][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1635.703242][ T38] Tainted: [L]=SOFTLOCKUP [ 1635.703251][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1635.703264][ T38] Call Trace: [ 1635.703275][ T38] [ 1635.703285][ T38] vpanic+0x56c/0xa60 [ 1635.703318][ T38] ? __pfx___schedule+0x10/0x10 [ 1635.703343][ T38] ? __pfx_vpanic+0x10/0x10 [ 1635.703385][ T38] panic+0xc5/0xd0 [ 1635.703412][ T38] ? __pfx_panic+0x10/0x10 [ 1635.703439][ T38] ? preempt_schedule_common+0x82/0xd0 [ 1635.703466][ T38] ? preempt_schedule_thunk+0x16/0x40 [ 1635.703501][ T38] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 1635.703543][ T38] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 1635.703595][ T38] watchdog+0x1030/0x1030 [ 1635.703629][ T38] ? watchdog+0x1c7/0x1030 [ 1635.703662][ T38] kthread+0x388/0x470 [ 1635.703689][ T38] ? __pfx_watchdog+0x10/0x10 [ 1635.703714][ T38] ? __pfx_kthread+0x10/0x10 [ 1635.703745][ T38] ret_from_fork+0x514/0xb70 [ 1635.703776][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1635.703804][ T38] ? __switch_to+0xc89/0x1420 [ 1635.703830][ T38] ? __pfx_kthread+0x10/0x10 [ 1635.703858][ T38] ret_from_fork_asm+0x1a/0x30 [ 1635.703906][ T38] [ 1635.704513][ T38] Kernel Offset: disabled