last executing test programs: 4m8.285371352s ago: executing program 1 (id=92): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x140) (async) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000000)={0x210a, r0}, 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84080) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x24, 0x1, 0x4, 0x5, 0x0, 0x0, {0xa}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x5}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x24}}, 0x2000004) r4 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r4, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10) (async) splice(r4, 0x0, r2, 0x0, 0x3, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x81) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x15, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x793f3b5a}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @generic={0xc4, 0xe, 0xe, 0x401, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='syzkaller\x00', 0x4, 0x1000, &(0x7f0000000440)=""/4096, 0x41100, 0x53, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x5, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0xd, 0x2bd, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x10, 0xf6fc}, 0x94) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000ac0)=ANY=[], 0xfc}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r10, r8, 0x25, 0x0, @void}, 0x10) (async) syz_emit_ethernet(0xfdef, &(0x7f0000000100)=ANY=[], 0x0) (async) socket$inet6(0xa, 0x800000000000002, 0x0) 4m8.19581729s ago: executing program 1 (id=93): openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) r0 = socket(0xa, 0x3, 0xff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18) syz_mount_image$squashfs(&(0x7f000001f880), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f00000004c0)=ANY=[], 0x1, 0x18f, &(0x7f000001f8c0)="$eJzsVb1OKkEU/mZ3Wbg3Nze3vjGxkCgUwrKosdPK0Nj5ABJYkbj4w5IohGKpeA8bXsPCd7CQ2GBhTCiwN2tm5uwyPABBk/mS2e/8zDlzZjJ75jy4CdIAPmf9Gg4hYOIvnhmDBWCdSdtRWvK7LblA+pslOU/2e+IxcdDtXVR932svUZhLg+UvpgWvHdClCFdfzxirPw0tfFdhrh4MDEzFtX2a9WtcOAUQRVHEbXU5mIHp8R+aYwJ4VOb8t8RgJqIkD29+XNkCUOy0rotBt7fdbFUbXsO7dN3ynrPjOLtu8azpe478MqUMQ/5G4JwHwHvqL8WfAvBCDfY3FsGU0sjP1Fhbac65jcVYQ4mNmeEhiaXeDn4EJ9hEBsBtyBRrVmSxILZUAYNJSslS6pNrZYSjULvy60MwsDhsBCvJUZogBUMU5nuuVKSnvB/GZQ+Js8QV4hHxhDh+s+K3yBIZXknLhYCNu2qn0y5xk5QSm5vY3H+hemB81Q97cXNraWhoaGhoaGho/DB8BQAA//8w0l7e") munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r2 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r6 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSBRKP(r6, 0x5425, 0x36) add_key(&(0x7f0000000000)='big_key\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r7 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r7, 0x10e, 0x8, &(0x7f0000000000)=0x2bfde7a0, 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000008500000029000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r8, 0x0, 0xe, 0x0, &(0x7f0000000180)="e4e647c9d9b8e9a2f2ab30da5800", 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$inet6(r0, &(0x7f0000000740)={0xa, 0xce20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001880)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000080)="5e54e574da93883e8c628a600b17cbe584d2e73c68141965f3fbcf0e16db6e759d420151c6c57504", 0x28}, {&(0x7f0000000300)="eece676d514ac9b0926efb8892ad8c876b2b97d4dd840c8b34a00b72348ace5d9e1af5132bcf941004eb317c71a1d4808bb68307314905298100327957ee9262ba03e786345cd40217f1d42a0a4ec50549e47a", 0x53}, {&(0x7f00000007c0)="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", 0x1000}, {&(0x7f0000000380)="7370d5b70451dc3dd77ac47113e42a08e29b3973da2f14b31624d7fc6dbb9e2ad0d02446", 0x24}], 0x4}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000000500)={0xa, 0x4e24, 0x2, @empty, 0x5}, 0x1c, &(0x7f00000017c0)=[{&(0x7f0000000540)="e8dc34a89de0f1a6b6c2bcd3f8bb845a51ab6e7a096acf847de6a0a6a8da75ed8bd819a4abff08", 0x27}, {&(0x7f0000000580)="857388787411b53c8e83a8ab72eab82f5c23a69504565f429407778ac31efd46138cc5d7659299b0bd42a37bc1e43987915b4c44c2d95e584d7ac65fe7e75235ec30f3e3717a8753a90f0412beda41976684b55aedeb938134944aa92c2f9c47d10adbb1cfbd6c29f10f65d106fb58480cc520d87454010dba0844c92e8d1715da1de606cc6dcd8f39da8a5151f11acd6fe181ba35b97cd8e285f8e9d7ceafc39a920b862ed805d70537fca89f98eafbd7d3c49257bcd3ca3af4d8218af28ff111952b6274c580f1a0cc86e4979172dc412188cf43372ec76b", 0xd9}, {&(0x7f0000000680)="57ff115634682190768e976350a0c8b31b834ab187f672e786b46551e4854b38acf10cd28dded1460b9195f11dba8f33582c0133bc1854a7964cca29f3fea1cc5505d3ff3075828174647aef42726acc0e741ac59a5ee53cdf0e7f656195ba39e574d87dcc141366b9222e6bcc73cb37ffc311412990c33f352f5bfe6e640d6b59cfc19a31b3ccfb8408a1fe01c42ffc5e6355ce8a231033e5adb0682e1f3c0de894", 0xa2}], 0x3, &(0x7f0000001800)=ANY=[@ANYBLOB="580000000000000029000000390000001108010800000000ff0200000000000000000000000000012d6700000000000000000000000000bb00000000000000000000ffffe0000001fe8000000000000000000000000000aa"], 0x58}}], 0x3, 0x4000010) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x109000, 0x0) ioctl$FS_IOC_GETFLAGS(r9, 0x5437, 0x0) 4m6.689407174s ago: executing program 1 (id=98): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000680)=[{{&(0x7f00000001c0)={0xa, 0x4e24, 0x8000, @local, 0x6}, 0x1c, 0x0}}], 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x4, @empty, 0x4}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x4000845, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f00000001c0)=""/246, &(0x7f0000000040)=0xf6) (fail_nth: 3) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 4m5.653279456s ago: executing program 1 (id=105): r0 = shmget$private(0x0, 0x2000, 0x100, &(0x7f0000ffe000/0x2000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f00000007c0)=""/238) syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000a80)='./file0\x00', 0x2800810, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x3, 0x185, &(0x7f00000003c0)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) (async) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) getpgrp(0x0) (async) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) (async) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$bt_hci(r6, &(0x7f0000000200)=ANY=[], 0x6) (async) write$bt_hci(r6, &(0x7f0000000200)=ANY=[], 0x6) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000004940)=[{{&(0x7f0000000280)=@in6, 0x80, &(0x7f00000035c0), 0x0, &(0x7f0000000080)=""/23, 0x17}, 0x8}, {{&(0x7f0000003640)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, 0x0}, 0x4}], 0x2, 0x20, &(0x7f00000049c0)) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='sched_switch\x00', r7, 0x0, 0x1}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='sched_switch\x00', r7, 0x0, 0x1}, 0x18) getpid() bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[], 0x0, 0x4e}, 0x28) fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) (async) fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r8 = open(&(0x7f0000000480)='./file2\x00', 0x4000, 0x90) preadv2(r8, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) (async) preadv2(r8, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) 4m4.643813135s ago: executing program 1 (id=109): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000001c0)="d8df7e23b3b9ce000000b807000000ba000000000f301b8154fea900b9b60a000080320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000000b9a6080000b800000100ba000000000f300f300fc79d53bf0000c4b9e16dc301012202", 0x62}], 0x1, 0x10, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000001c0)="d8df7e23b3b9ce000000b807000000ba000000000f301b8154fea900b9b60a000080320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000000b9a6080000b800000100ba000000000f300f300fc79d53bf0000c4b9e16dc301012202", 0x62}], 0x1, 0x10, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000900)=[@text16={0x10, 0x0}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000580)={0x20, 0x5, 0x5}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x3, 0x8, 0x1000000000000002, 0x8, 0x800, 0x5, 0x4f, 0x0, 0x80, 0xffffffffffffffff, 0x80, 0xa, 0x7f, 0x8, 0x5fbe, 0x7ff], 0x4, 0x200c02}) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="120100006e383a10d00701415cec0102030109022400010000000009042300020070400009058a03"], 0x0) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="120100006e383a10d00701415cec0102030109022400010000000009042300020070400009058a03"], 0x0) 4m3.751033385s ago: executing program 1 (id=114): r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="60005080110001004abee339084eeef16f162471f4000000080003000cac0f000500020007"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 4m2.249954078s ago: executing program 32 (id=114): r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="60005080110001004abee339084eeef16f162471f4000000080003000cac0f000500020007"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 4.756324977s ago: executing program 0 (id=1018): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x8) 4.121361373s ago: executing program 4 (id=1023): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='task\x00') getdents64(r0, &(0x7f0000000100)=""/50, 0x32) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES32, @ANYRES16], 0x20) 4.120937633s ago: executing program 4 (id=1024): syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080), 0x482, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) r2 = eventfd2(0x80000000, 0x80000) io_submit(r1, 0x1, &(0x7f00000013c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x8aa0, r0, 0x0, 0x0, 0x400, 0x0, 0x1, r2}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0xc) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b00), r8) sendmsg$ETHTOOL_MSG_FEATURES_GET(r8, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000000)={0x2c, r9, 0x101, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x20008020) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x14, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x89b1, &(0x7f0000000040)={'macvlan1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x44e3763ac5239ba7}}) r11 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages(r11, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0) 3.656110985s ago: executing program 0 (id=1026): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010100000000000000002b00000008000300", @ANYRES32=r2, @ANYBLOB="050034006e000000080026008a09000008009f0006"], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4800) 3.585228021s ago: executing program 2 (id=1027): move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x8080, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmmsg$inet(r0, &(0x7f0000003100)=[{{&(0x7f0000000100)={0x2, 0x4e21, @empty}, 0x10, 0x0}}, {{&(0x7f0000000d00)={0x2, 0x4e21, @empty}, 0x10, 0x0}}], 0x2, 0x927c408517621174) 3.529519076s ago: executing program 0 (id=1028): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f00000004c0)="9186", 0x2, 0x4008052, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0x2}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000000)={0x0, 0x5}, 0x8) 3.456866033s ago: executing program 0 (id=1029): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) unshare(0x20000400) getsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, 0x0, 0x0) 3.343713162s ago: executing program 0 (id=1030): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x2c, r2, 0x1, 0x0, 0x8000000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4810}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') preadv(r4, &(0x7f00000001c0), 0x0, 0xc9, 0x1) syz_usb_connect(0x2, 0x2d, &(0x7f00000007c0)={{0x12, 0x1, 0x0, 0x9e, 0xc4, 0x5e, 0x20, 0x9fb, 0xebbe, 0x395d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0xd, 0xa0, 0x0, [{{0x9, 0x4, 0xb1, 0x0, 0x1, 0x55, 0xf8, 0x6, 0xff, [], [{{0x9, 0x5, 0x1, 0xc, 0x8, 0x3, 0x1}}]}}]}}]}}, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f00000003c0)={0x2c, 0xa, 0x3, "4a6535dffaa9779c16cc07f4e70156e42a022ece000000005000"}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040), 0x492492492492539, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000800)=[{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000540)="7d7a68e25d38566c61856d6817441a9caa9b23557af3d00f974cd91d1b33a9d6e17fd477051346d814913f8a3ef2e1a781a2bbfc8d55dca693d39139f04047784190d93b5301b4abe27c9242396d40a5c2b7789629214281c8e09a6c1f1e0db5d1e74e1f27a89b2c25c2316fcddc9ff2a71eceb3094ba465389e", 0x7a}, {&(0x7f0000000080)="ce2ede98d4bde439a7931c4e260090a647151bacb721146be7ef4494578b05c18fc56c1571aa57d0f79d3c", 0x2b}, {&(0x7f0000000600)="5fec9dec1e9d48e2b3a02e29dcaadb6d242c08b8b6e2a34dd08e48e3d32aa2bf0bd42348d6bf39fd7dac80fedaaab8ff4258ecbc4e025305fab94303f773d083bb47da241fe082c8f8602308cd2f7dc846c93e62a8d53d22fcabce", 0x5b}], 0x3, 0x0, 0x0, 0x2400c0a0}], 0x1, 0x48800) r9 = syz_open_dev$radio(&(0x7f0000000140), 0x0, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r9, 0xc0205647, &(0x7f0000000100)={0xf010004, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90d, 0x0, '\x00', @value64=0xfffffffffffffffe}}) r10 = socket$vsock_stream(0x28, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r11 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x200000, 0x0) ioctl$FICLONERANGE(r10, 0x4020940d, &(0x7f0000000240)={{r11}, 0x6, 0x7a6, 0x7fffffff}) getsockopt$inet_mreqsrc(r8, 0x0, 0x27, &(0x7f00000001c0)={@empty, @private, @multicast1}, &(0x7f0000000200)=0xc) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000480)=""/5, 0x5}, {&(0x7f0000000b00)=""/249, 0xf9}, {&(0x7f0000000c00)=""/11, 0xb}], 0x3}, 0x0) 3.272003829s ago: executing program 2 (id=1031): sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="020e000010"], 0x80}}, 0x4814) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f0000000180), 0x229ffa1c4ce5369, 0x0) 3.25155715s ago: executing program 3 (id=1032): ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = syz_open_dev$I2C(0x0, 0x1, 0x2603) ioctl$I2C_RDWR(r2, 0x707, &(0x7f00000001c0)={&(0x7f0000000180)=[{0x1, 0x8000, 0x0, &(0x7f0000000100)}], 0x1}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x87, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x8001, 0x0, 0xaf, 0x0, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, 0x0, &(0x7f00000000c0)=""/83, 0x53, 0x0) bpf$BPF_LINK_CREATE(0x8, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff, 0x1f, 0x0, @val=@netfilter={0x3, 0x0, 0x10000}}, 0x20) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x15, 0x3, 'sh\x00', 0x28, 0x5, 0x72}, 0x2c) r4 = socket$kcm(0xa, 0x2, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e24, 0x3, 'lc\x00', 0x15, 0x0, 0x68}, {@remote, 0x4e21, 0x10000, 0x0, 0x2}}, 0x44) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6(0xa, 0x80002, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a5c000000060a0b04000000000000000002000000300004802c0001800900010068617368000000001c0002800800044000000003080002400000001208000740000000010900010073797a30000000000900220073797a3200000000140000001100010000000000000000000000000a"], 0x84}}, 0x0) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6}]}, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c0000001000010027bd700481dcdf2500000000", @ANYRES32=r9, @ANYBLOB="104e0600016a03001c0016801800018014000b00feffff7f000000000002000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x400c080}, 0x8002) 3.125157782s ago: executing program 2 (id=1033): socket$inet6(0xa, 0x3, 0x5) socket$nl_generic(0x11, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) socket$inet(0x2, 0x3, 0x33) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$nl_generic(0x10, 0x3, 0x10) socket$xdp(0x2c, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a00010000"], 0x64}}, 0x0) 3.03393821s ago: executing program 4 (id=1034): ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454c9, 0x1) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0xffff030c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x28) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000180)={'veth0_virt_wifi\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x22020600) r3 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r3, 0xc0205648, &(0x7f0000000080)={0xf010000, 0x0, 0x4, 0x110821, 0x0, {0x77359400}, {0x5, 0x8, 0x0, 0x0, 0x0, 0xd, "3acfa8ee"}}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) unshare(0x24020400) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r4, &(0x7f0000000040)={&(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7f}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x40}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) personality(0x619641b6fb4b8591) uname(&(0x7f0000000180)=""/224) 2.935872689s ago: executing program 2 (id=1035): unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x856dd000) gettid() r0 = socket$inet(0xa, 0x801, 0x84) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000040)={'nat\x00', 0x0, [0x7, 0xfffffffe, 0x3ff, 0x10000, 0x8]}, &(0x7f0000000000)=0x54) 1.513352445s ago: executing program 2 (id=1036): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000300)={0x23, 0xffffffffffffff20, &(0x7f0000000280)="31377055175a919147"}) ioctl$EVIOCGABS20(r0, 0x80184560, 0x0) 1.406774334s ago: executing program 3 (id=1037): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb99", 0x5d}], 0x1}}], 0x1, 0x2090) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000240)=0xdf9, 0x4) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000180)=0x40) 1.276040186s ago: executing program 4 (id=1038): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000a40)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4$alg(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000001000)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="8305", 0x2}, {&(0x7f0000000080)="ef5d97bb976a7c393204384eebde", 0xe}], 0x2, 0x0, 0x0, 0x44011}], 0x1, 0x40) io_setup(0xff, &(0x7f0000000380)=0x0) io_submit(r2, 0x2000000000000225, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0xfffb, r1, &(0x7f0000000340), 0x2d}]) 1.205021782s ago: executing program 0 (id=1039): syz_clone(0x30081091, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e24}, 0x3a) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2000003, 0x4008032, r0, 0x1dfbd000) chown(0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth1_virt_wifi\x00', 0x2}, 0x18) r3 = socket$packet(0x11, 0x3, 0x300) fcntl$getownex(r1, 0x10, &(0x7f0000000040)={0x0, 0x0}) rt_sigqueueinfo(r4, 0x5, &(0x7f0000000240)={0x3, 0x2, 0x1}) setsockopt$packet_add_memb(r3, 0x107, 0x1, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000500)=[@in6={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x2b}, 0x4}, @in6={0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, '\x00', 0x15}, 0x76}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xd}}, @in={0x2, 0x4e20, @private=0xa010101}, @in={0x2, 0x4e24, @local}], 0x68) r6 = socket$packet(0x11, 0x3, 0x300) r7 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KIOCSOUND(r7, 0x4b2f, 0x2) r8 = syz_open_dev$vim2m(0x0, 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r8, 0xc0405602, &(0x7f0000000000)={0x25, 0x2, 0x3, "a677c17a5a000000000000000000000000000000000000000000004000", 0x31324d59}) ioctl$TCSETS(r7, 0x5402, &(0x7f0000000100)={0x6, 0x6f, 0x2, 0x0, 0x10, "88bd91aa28528000000000007500000400"}) write$UHID_INPUT(r7, &(0x7f0000001980)={0x9, {"a2e3ad214fc752f91b5b09094bf70e0dd038e7ff7fc6e5539b324c078b089b3438076d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b32310d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e01000000138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12d3099dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f6dc7bcbf2a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509301815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827466cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d951061ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153bdf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033095563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db87195358bfee2916580dacae008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2df086dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36ffffffff00000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817b97c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d00000f4ff000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x1, 0x6, @remote}, 0x10) 1.035560487s ago: executing program 4 (id=1040): connect$unix(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x401, 0x2, 0x3}, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) 863.421122ms ago: executing program 4 (id=1041): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, &(0x7f0000000040)={0x0, 0x9be9, 0x800, 0x0, 0x25a}, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, &(0x7f0000002280)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) r2 = userfaultfd(0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x2a3}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48090}, 0xc001) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) r5 = socket$kcm(0xa, 0x2, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x640100ff, 0x4e20, 0x3, 'lblc\x00', 0x1, 0xa7e, 0x70}, 0x2c) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r7 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r7, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r7, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x191, 0x1, 0x0, 0xdd9f83, 0x1, 0x2f, 0xf3, 0x2, 0x5, 0x722, 0x13, 0x7, 0x7f, 0x3f, 0x0, {0x0, 0x6fd8e84b}, 0x3, 0xed}}) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0205647, &(0x7f0000000200)={0x0, 0x101, 0x9, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x9a0914, 0x8, '\x00', @p_u8=&(0x7f0000000180)=0x3}}) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x2) 693.244238ms ago: executing program 2 (id=1042): socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x88842, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mq_open(&(0x7f0000000240)='/dev/video#\x00', 0x40, 0x80, &(0x7f0000000300)={0xfffffffffffffffb, 0x4, 0x3ff, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_io_uring_setup(0x12e, &(0x7f0000000340)={0x0, 0x5cb1, 0x2, 0x3, 0xfffffffd}, &(0x7f0000000140)=0x0, &(0x7f0000000280)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r4, 0xc4c85513, &(0x7f0000000b80)={0x7, 0x0, 0x2008, 0x7, 'syz1\x00', 0x900005}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) io_uring_enter(r2, 0x1e76, 0xf728, 0x5, 0x0, 0x0) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffa000/0x1000)=nil) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000007, 0x40032, 0xffffffffffffffff, 0x40000000) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r6, 0x4004743d, 0x110e22ffe6) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES8=r6], 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000100)={0x0, 0x1, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r9, 0xc0303e03, &(0x7f0000000180)={"1b4f1a59a9be35e8c11ef87e413d94cf520833949160593561e114fb09b8a485"}) ptrace$poke(0x4, r8, &(0x7f0000002040), 0x8000400000000006) 450.048769ms ago: executing program 3 (id=1043): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x8, @loopback}], 0x10) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)) sendmsg$inet(r0, &(0x7f00000041c0)={&(0x7f0000003980)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10, &(0x7f0000003dc0)=[{&(0x7f00000039c0)='|', 0x1}], 0x1}, 0x40000) 325.6074ms ago: executing program 3 (id=1044): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0xa000032a) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/256, 0x10}], 0x2) 85.357902ms ago: executing program 3 (id=1045): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@bridge_setlink={0x34, 0x13, 0xa2f, 0x70bd2b, 0x25cfdbfd, {0x7, 0x0, 0x68, r1, 0x16318, 0x40020}, [@IFLA_LINKINFO={0x14, 0x1a, 0x0, 0x1, @vlan={{0x9}, {0x4, 0x4}}}]}, 0x34}}, 0x8004) 0s ago: executing program 3 (id=1046): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="10797fcd6cd957d2b903c6bf46b4abf3629ff075475e4bd6e43be1712bf8b4dc", 0x20) r1 = accept$alg(r0, 0x0, 0x0) readv(r1, &(0x7f0000000640)=[{&(0x7f0000000280)=""/112, 0x70}, {&(0x7f0000000140)=""/31, 0x1f}], 0x2) sendmmsg$alg(r1, &(0x7f0000000840)=[{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="600acf5a9bd524eb24b587d669ec230e195f47b0027345a5c5549147e0e0eb421cf5516f15825f1123dbd8d9fe13ee446b8d0010000083c210f701d90618f567027058453b612dc5fe6c1b5f7c2d02dd75f74572e04a275f9b31d3e3c1cd02000000e16372e3b9c6f8affae3a33a6f8c189ee4a39faa25e3f6149280b711b11211", 0x81}], 0x1, 0x0, 0x0, 0x2804c855}], 0x1, 0x4) kernel console output (not intermixed with test programs): or 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 125.553817][ T5876] Buffer I/O error on dev nbd0, logical block 0, async page read [ 125.561740][ T5876] Buffer I/O error on dev nbd0, logical block 1, async page read [ 125.569858][ T5876] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 125.579334][ T5876] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 125.590590][ T5876] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 125.600078][ T5876] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 125.609573][ T5760] ldm_validate_partition_table(): Disk read failed. [ 125.668421][ T5760] Dev nbd0: unable to read RDB block 0 [ 125.739201][ T5760] nbd0: unable to read partition table [ 125.774805][ T5760] ldm_validate_partition_table(): Disk read failed. [ 125.807619][ T5760] Dev nbd0: unable to read RDB block 0 [ 125.822698][ T5760] nbd0: unable to read partition table [ 125.979673][ T5784] udevd[5784]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 125.992840][ T6182] udevd[6182]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 126.010250][ T6768] loop3: detected capacity change from 0 to 1024 [ 126.013747][ T5760] udevd[5760]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 126.028274][ T6768] ext2: Unknown parameter 'noacl' [ 126.113949][ T5785] udevd[5785]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 126.123367][ T6182] udevd[6182]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 126.134749][ T5760] udevd[5760]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 126.205948][ T6773] netlink: 20 bytes leftover after parsing attributes in process `syz.2.185'. [ 126.230861][ T6775] loop4: detected capacity change from 0 to 256 [ 126.249284][ T5774] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 126.343587][ T6775] FAT-fs (loop4): Directory bread(block 64) failed [ 126.377721][ T6775] FAT-fs (loop4): Directory bread(block 65) failed [ 126.399259][ T6775] FAT-fs (loop4): Directory bread(block 66) failed [ 126.406036][ T6775] FAT-fs (loop4): Directory bread(block 67) failed [ 126.423760][ T6775] FAT-fs (loop4): Directory bread(block 68) failed [ 126.432867][ T6775] FAT-fs (loop4): Directory bread(block 69) failed [ 126.444085][ T6775] FAT-fs (loop4): Directory bread(block 70) failed [ 126.454586][ T6775] FAT-fs (loop4): Directory bread(block 71) failed [ 126.469137][ T5774] usb 1-1: Using ep0 maxpacket: 32 [ 126.492522][ T6775] FAT-fs (loop4): Directory bread(block 72) failed [ 126.497095][ T5774] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 126.512181][ T6775] FAT-fs (loop4): Directory bread(block 73) failed [ 126.527917][ T5774] usb 1-1: config 0 has no interface number 0 [ 126.547094][ T5774] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 126.579129][ T5774] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.597554][ T5774] usb 1-1: Product: syz [ 126.604084][ T5774] usb 1-1: Manufacturer: syz [ 126.616883][ T5774] usb 1-1: SerialNumber: syz [ 126.670715][ T5774] usb 1-1: config 0 descriptor?? [ 126.699880][ T5774] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 126.839854][ T6781] loop2: detected capacity change from 0 to 8192 [ 126.899617][ T5774] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 126.940943][ T5774] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 126.968378][ T6785] loop4: detected capacity change from 0 to 4096 [ 127.087235][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 114 [ 127.280707][ T6790] netlink: 20 bytes leftover after parsing attributes in process `syz.2.189'. [ 127.297467][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 127.305487][ T5774] usb 1-1: USB disconnect, device number 8 [ 127.341179][ T5774] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 127.397721][ T5774] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 127.441763][ T5774] quatech2 1-1:0.51: device disconnected [ 127.454598][ T6778] loop3: detected capacity change from 0 to 32768 [ 127.456222][ T6785] ntfs3: Cannot use different iocharset when remounting! [ 127.499560][ T6785] sctp: [Deprecated]: syz.4.188 (pid 6785) Use of int in max_burst socket option deprecated. [ 127.499560][ T6785] Use struct sctp_assoc_value instead [ 127.584978][ T6778] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 128.961665][ T6778] netlink: 12 bytes leftover after parsing attributes in process `syz.3.186'. [ 129.014892][ T6778] netlink: 8 bytes leftover after parsing attributes in process `syz.3.186'. [ 129.363428][ T5769] ocfs2: Unmounting device (7,3) on (node local) [ 129.672443][ T6813] loop4: detected capacity change from 0 to 32768 [ 129.723632][ T6813] [ 129.723632][ T6813] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 129.723632][ T6813] [ 129.769189][ T6813] [ 129.769189][ T6813] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 129.769189][ T6813] [ 129.780970][ T6813] [ 129.780970][ T6813] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 129.780970][ T6813] [ 129.791778][ T6813] [ 129.791778][ T6813] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 129.791778][ T6813] [ 129.802555][ T6813] [ 129.802555][ T6813] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 129.802555][ T6813] [ 129.810855][ T28] kauditd_printk_skb: 58 callbacks suppressed [ 129.810869][ T28] audit: type=1326 audit(2000000014.798:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6812 comm="syz.4.192" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f42c7b8f749 code=0x0 [ 129.847748][ T6813] [ 129.847748][ T6813] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 129.847748][ T6813] [ 129.868605][ T6813] [ 129.868605][ T6813] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 129.868605][ T6813] [ 129.876559][ T6822] netlink: 20 bytes leftover after parsing attributes in process `syz.3.195'. [ 129.879774][ T6813] [ 129.879774][ T6813] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 129.879774][ T6813] [ 129.899433][ T6813] [ 129.899433][ T6813] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 129.899433][ T6813] [ 129.925132][ T6813] [ 129.925132][ T6813] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 129.925132][ T6813] [ 130.511442][ T6826] loop3: detected capacity change from 0 to 32768 [ 132.011490][ T6826] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 132.143622][ T6393] [ 132.143622][ T6393] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 132.143622][ T6393] [ 132.220495][ T6393] [ 132.220495][ T6393] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 132.220495][ T6393] [ 132.259617][ T6826] XFS (loop3): Ending clean mount [ 132.332557][ T6826] XFS (loop3): Quotacheck needed: Please wait. [ 132.509724][ T6826] XFS (loop3): Quotacheck: Done. [ 132.737416][ T5769] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 133.069256][ T6847] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 133.119730][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.126089][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.447830][ T6856] netlink: 20 bytes leftover after parsing attributes in process `syz.2.198'. [ 133.684279][ T6864] netlink: 48 bytes leftover after parsing attributes in process `syz.0.199'. [ 134.279377][ T6863] netlink: 20 bytes leftover after parsing attributes in process `syz.3.204'. [ 134.450967][ T6878] netlink: 16 bytes leftover after parsing attributes in process `syz.2.206'. [ 134.941943][ T6857] ufs: You didn't specify the type of your ufs filesystem [ 134.941943][ T6857] [ 134.941943][ T6857] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 134.941943][ T6857] [ 134.941943][ T6857] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 134.945364][ T6887] loop2: detected capacity change from 0 to 512 [ 134.975825][ T6881] loop3: detected capacity change from 0 to 32768 [ 134.991136][ T6857] ufs: ufstype=old is supported read-only [ 135.037176][ T6887] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2822: inode #11: comm syz.2.209: corrupted xattr block 95: invalid header [ 135.079591][ T6857] syz.4.203: attempt to access beyond end of device [ 135.079591][ T6857] nbd4: rw=0, sector=16, nr_sectors = 2 limit=0 [ 135.138267][ T6887] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2872: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 135.140020][ T6873] loop0: detected capacity change from 0 to 32768 [ 135.167935][ T6873] gfs2: fsid=norgrplvb: Trying to join cluster "lock_nolock", "norgrplvb" [ 135.177400][ T6873] gfs2: fsid=norgrplvb: Now mounting FS (format 0)... [ 135.199915][ T6887] EXT4-fs error (device loop2): ext4_validate_block_bitmap:430: comm syz.2.209: bg 0: block 7: invalid block bitmap [ 135.209700][ T6881] UFO tlock:0xffffc9000284a090 [ 135.265048][ T6881] MetaData crosses page boundary!! [ 135.274591][ T6881] lblock = 6300000010, size = -820051968 [ 135.281233][ T6881] CPU: 1 PID: 6881 Comm: syz.3.207 Not tainted syzkaller #0 [ 135.282732][ T6873] gfs2: fsid=norgrplvb.s: journal 0 mapped with 5 extents in 0ms [ 135.288545][ T6881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 135.306547][ T6881] Call Trace: [ 135.309845][ T6881] [ 135.312802][ T6881] dump_stack_lvl+0x16c/0x230 [ 135.317636][ T6881] ? __wake_up_bit+0x1e0/0x1e0 [ 135.322442][ T6881] ? show_regs_print_info+0x20/0x20 [ 135.327686][ T6881] ? load_image+0x3b0/0x3b0 [ 135.332238][ T6881] ? folio_unlock+0x118/0x2e0 [ 135.336707][ T6887] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6637: Corrupt filesystem [ 135.336944][ T6881] __get_metapage+0xaac/0xfa0 [ 135.350699][ T6881] dtReadFirst+0xd5/0x920 [ 135.355092][ T6881] jfs_readdir+0x8d4/0x3a90 [ 135.359677][ T6881] ? dtInitRoot+0x670/0x670 [ 135.364511][ T6881] ? __up_read+0x280/0x670 [ 135.369055][ T6881] ? down_write+0x162/0x1f0 [ 135.373851][ T6881] ? down_read_killable+0x340/0x340 [ 135.379085][ T6881] ? end_current_label_crit_section+0x149/0x170 [ 135.385462][ T6881] ? dtInitRoot+0x670/0x670 [ 135.390022][ T6881] wrap_directory_iterator+0x92/0xd0 [ 135.395909][ T6881] iterate_dir+0x1c2/0x580 [ 135.400601][ T6881] __se_sys_getdents+0xe9/0x260 [ 135.405507][ T6881] ? __x64_sys_getdents+0x80/0x80 [ 135.410641][ T6881] ? fillonedir+0x430/0x430 [ 135.415358][ T6881] ? lockdep_hardirqs_on+0x98/0x150 [ 135.421181][ T6881] do_syscall_64+0x55/0xb0 [ 135.425615][ T6881] ? clear_bhb_loop+0x40/0x90 [ 135.430315][ T6881] ? clear_bhb_loop+0x40/0x90 [ 135.434992][ T6881] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 135.440914][ T6881] RIP: 0033:0x7f6e1858f749 [ 135.445457][ T6881] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.465438][ T6881] RSP: 002b:00007f6e193cd038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 135.474673][ T6881] RAX: ffffffffffffffda RBX: 00007f6e187e5fa0 RCX: 00007f6e1858f749 [ 135.482773][ T6881] RDX: 0000000000000030 RSI: 0000200000000000 RDI: 0000000000000004 [ 135.491031][ T6881] RBP: 00007f6e18613f91 R08: 0000000000000000 R09: 0000000000000000 [ 135.499327][ T6881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.507365][ T6881] R13: 00007f6e187e6038 R14: 00007f6e187e5fa0 R15: 00007ffddbbfee38 [ 135.515426][ T6881] [ 135.539942][ T6881] bread failed! [ 135.543637][ T6881] jfs_readdir: unexpected rc = -5 from dtReadNext [ 135.564032][ T6887] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2988: inode #11: comm syz.2.209: corrupted xattr block 95: invalid header [ 135.645729][ T6887] EXT4-fs warning (device loop2): ext4_evict_inode:272: xattr delete (err -117) [ 135.661231][ T6887] EXT4-fs (loop2): 1 orphan inode deleted [ 135.668317][ T6887] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.680018][ T6873] gfs2: fsid=norgrplvb.s: first mount done, others may mount [ 135.788808][ T6873] netlink: 'syz.0.205': attribute type 1 has an invalid length. [ 135.797006][ T6873] netlink: 88 bytes leftover after parsing attributes in process `syz.0.205'. [ 135.900603][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.288703][ T6904] netlink: 20 bytes leftover after parsing attributes in process `syz.0.213'. [ 136.308880][ T6902] netlink: 20 bytes leftover after parsing attributes in process `syz.2.214'. [ 136.422721][ T6908] netlink: 20 bytes leftover after parsing attributes in process `syz.0.215'. [ 136.834440][ T6916] loop0: detected capacity change from 0 to 2048 [ 136.844297][ T6916] EXT4-fs: Ignoring removed mblk_io_submit option [ 136.905557][ T5760] blk_print_req_error: 68 callbacks suppressed [ 136.905575][ T5760] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 137.035500][ T8] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 137.219226][ T5774] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 137.233911][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 137.261077][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.282802][ T8] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 137.338860][ T8] usb 5-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 137.368477][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.398952][ T5774] usb 1-1: device descriptor read/64, error -71 [ 137.399993][ T8] usb 5-1: config 0 descriptor?? [ 137.622996][ T6915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.669857][ T6915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.690386][ T5774] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 137.703591][ T6915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.721189][ T6915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.750004][ T6915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.767045][ T6919] loop2: detected capacity change from 0 to 32768 [ 137.774153][ T6915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.797133][ T6915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.859540][ T6915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.903587][ T6915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.946545][ T6915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.952674][ T6919] UFO tlock:0xffffc9000284a0d8 [ 137.955086][ T5774] usb 1-1: device descriptor read/64, error -71 [ 138.037715][ T6919] MetaData crosses page boundary!! [ 138.068014][ T8] hid-rmi 0003:06CB:81A7.0001: unknown main item tag 0x0 [ 138.082707][ T6919] lblock = 6300000010, size = -820051968 [ 138.102867][ T6919] CPU: 0 PID: 6919 Comm: syz.2.219 Not tainted syzkaller #0 [ 138.109473][ T5774] usb usb1-port1: attempt power cycle [ 138.110287][ T6919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 138.110299][ T6919] Call Trace: [ 138.110308][ T6919] [ 138.110316][ T6919] dump_stack_lvl+0x16c/0x230 [ 138.137188][ T6919] ? __wake_up_bit+0x1e0/0x1e0 [ 138.142101][ T6919] ? show_regs_print_info+0x20/0x20 [ 138.147331][ T6919] ? load_image+0x3b0/0x3b0 [ 138.151853][ T6919] ? folio_unlock+0x118/0x2e0 [ 138.156658][ T6919] __get_metapage+0xaac/0xfa0 [ 138.161446][ T6919] dtReadFirst+0xd5/0x920 [ 138.165839][ T6919] jfs_readdir+0x8d4/0x3a90 [ 138.170543][ T6919] ? aa_file_perm+0x120/0xec0 [ 138.175281][ T6919] ? dtInitRoot+0x670/0x670 [ 138.179831][ T6919] ? __up_read+0x280/0x670 [ 138.184269][ T6919] ? down_write+0x162/0x1f0 [ 138.188855][ T6919] ? down_read_killable+0x340/0x340 [ 138.194312][ T6919] ? end_current_label_crit_section+0x149/0x170 [ 138.200559][ T6919] ? dtInitRoot+0x670/0x670 [ 138.205070][ T6919] wrap_directory_iterator+0x92/0xd0 [ 138.210363][ T6919] iterate_dir+0x1c2/0x580 [ 138.214897][ T6919] __se_sys_getdents+0xe9/0x260 [ 138.219801][ T6919] ? __x64_sys_getdents+0x80/0x80 [ 138.224835][ T6919] ? fillonedir+0x430/0x430 [ 138.229527][ T6919] ? lockdep_hardirqs_on+0x98/0x150 [ 138.234765][ T6919] do_syscall_64+0x55/0xb0 [ 138.239467][ T6919] ? clear_bhb_loop+0x40/0x90 [ 138.244185][ T6919] ? clear_bhb_loop+0x40/0x90 [ 138.248882][ T6919] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 138.254865][ T6919] RIP: 0033:0x7f976278f749 [ 138.259477][ T6919] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.279207][ T6919] RSP: 002b:00007f976354c038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 138.287746][ T6919] RAX: ffffffffffffffda RBX: 00007f97629e5fa0 RCX: 00007f976278f749 [ 138.295835][ T6919] RDX: 0000000000000030 RSI: 0000200000000000 RDI: 0000000000000004 [ 138.303831][ T6919] RBP: 00007f9762813f91 R08: 0000000000000000 R09: 0000000000000000 [ 138.311928][ T6919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 138.319924][ T6919] R13: 00007f97629e6038 R14: 00007f97629e5fa0 R15: 00007ffe8eeae608 [ 138.327936][ T6919] [ 138.340198][ T8] hid-rmi 0003:06CB:81A7.0001: unknown main item tag 0x0 [ 138.347342][ T8] hid-rmi 0003:06CB:81A7.0001: unknown main item tag 0x0 [ 138.372453][ T6933] netlink: 48 bytes leftover after parsing attributes in process `syz.3.220'. [ 138.385536][ T6919] bread failed! [ 138.395681][ T6919] jfs_readdir: unexpected rc = -5 from dtReadNext [ 138.419541][ T6932] netlink: 48 bytes leftover after parsing attributes in process `syz.3.220'. [ 138.422773][ T8] hid-rmi 0003:06CB:81A7.0001: hidraw0: USB HID v0.00 Device [HID 06cb:81a7] on usb-dummy_hcd.4-1/input0 [ 138.538250][ T6936] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.749131][ T5774] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 138.800117][ T5774] usb 1-1: device descriptor read/8, error -71 [ 139.079204][ T5774] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 139.139854][ T5774] usb 1-1: device descriptor read/8, error -71 [ 139.279943][ T5774] usb usb1-port1: unable to enumerate USB device [ 139.355296][ T6942] loop3: detected capacity change from 0 to 8192 [ 139.427459][ T6942] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 139.491245][ T6942] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 139.501847][ T6942] REISERFS (device loop3): using ordered data mode [ 139.508583][ T6942] reiserfs: using flush barriers [ 139.526082][ T6942] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 139.568612][ T6942] REISERFS (device loop3): checking transaction log (loop3) [ 139.632421][ T6942] REISERFS (device loop3): Using rupasov hash to sort names [ 139.689266][ T6942] REISERFS (device loop3): using 3.5.x disk format [ 139.696273][ T6942] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 139.719309][ T6963] netlink: 20 bytes leftover after parsing attributes in process `syz.2.224'. [ 139.797848][ T23] usb 5-1: USB disconnect, device number 2 [ 139.801423][ T6942] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 139.991752][ T6942] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 140.043671][ T6967] netlink: 20 bytes leftover after parsing attributes in process `syz.4.226'. [ 140.068609][ T6971] netlink: 8 bytes leftover after parsing attributes in process `syz.2.227'. [ 140.081411][ T6942] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 140.098551][ T6942] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 142.923328][ T6991] netlink: 48 bytes leftover after parsing attributes in process `syz.2.230'. [ 143.663980][ T6998] netlink: 44 bytes leftover after parsing attributes in process `syz.2.232'. [ 144.145400][ T7010] loop3: detected capacity change from 0 to 512 [ 144.223784][ T7010] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 144.578930][ T7010] EXT4-fs (loop3): failed to open journal device unknown-block(0,0) -6 [ 144.978552][ T6994] loop0: detected capacity change from 0 to 40427 [ 145.069246][ T5760] I/O error, dev loop0, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 145.157458][ T7009] bridge0: port 3(bond0) entered disabled state [ 145.164332][ T7009] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.173344][ T7009] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.189864][ T5857] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 145.429510][ T5857] usb 4-1: Using ep0 maxpacket: 16 [ 145.467301][ T5857] usb 4-1: config 1 has an invalid interface number: 118 but max is 0 [ 145.496204][ T5857] usb 4-1: config 1 has no interface number 0 [ 145.518640][ T5857] usb 4-1: config 1 interface 118 has no altsetting 0 [ 145.568537][ T5857] usb 4-1: string descriptor 0 read error: -71 [ 145.589892][ T5857] usb 4-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice=e2.32 [ 145.616049][ T5857] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.635238][ T5857] usb 4-1: rejected 1 configuration due to insufficient available bus power [ 145.658548][ T5857] usb 4-1: no configuration chosen from 1 choice [ 145.686931][ T5857] usb 4-1: USB disconnect, device number 7 [ 145.977030][ T7020] loop4: detected capacity change from 0 to 32768 [ 145.987615][ T7020] (syz.4.233,7020,0):ocfs2_initialize_super:2075 ERROR: Invalid number of node slots (0) [ 146.010899][ T7020] (syz.4.233,7020,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 146.043936][ T7009] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.129933][ T7009] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.456511][ T7009] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.466101][ T7009] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.481799][ T7009] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.494718][ T7009] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.967887][ T7046] loop3: detected capacity change from 0 to 1024 [ 147.026367][ T7043] loop0: detected capacity change from 0 to 8192 [ 147.096858][ T28] audit: type=1326 audit(2000000032.078:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7047 comm="syz.2.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f976278f749 code=0x7ffc0000 [ 147.339375][ T5760] I/O error, dev loop0, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 147.381562][ T28] audit: type=1326 audit(2000000032.108:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7047 comm="syz.2.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7f976278f749 code=0x7ffc0000 [ 147.499139][ T28] audit: type=1326 audit(2000000032.108:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7047 comm="syz.2.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f976278f749 code=0x7ffc0000 [ 147.603849][ T28] audit: type=1326 audit(2000000032.108:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7047 comm="syz.2.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f976278f749 code=0x7ffc0000 [ 147.682313][ T28] audit: type=1326 audit(2000000032.108:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7047 comm="syz.2.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f976278f749 code=0x7ffc0000 [ 147.741779][ T7057] loop4: detected capacity change from 0 to 2048 [ 147.813723][ T7057] EXT4-fs: Ignoring removed i_version option [ 147.819130][ T28] audit: type=1326 audit(2000000032.158:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7047 comm="syz.2.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f976278f749 code=0x7ffc0000 [ 147.849498][ T8] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 147.909526][ T28] audit: type=1326 audit(2000000032.158:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7047 comm="syz.2.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f976278f749 code=0x7ffc0000 [ 147.944627][ T7057] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.079478][ T28] audit: type=1800 audit(2000000032.438:87): pid=7046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.241" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 148.144126][ T8] usb 4-1: too many configurations: 239, using maximum allowed: 8 [ 148.207797][ T8] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 148.259237][ T8] usb 4-1: can't read configurations, error -61 [ 148.356947][ T7057] syzkaller0: entered promiscuous mode [ 148.369385][ T7057] syzkaller0: entered allmulticast mode [ 148.419218][ T8] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 148.429421][ T7037] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 148.619298][ T7037] usb 1-1: device descriptor read/64, error -71 [ 148.626080][ T7056] loop2: detected capacity change from 0 to 32768 [ 148.633949][ T8] usb 4-1: too many configurations: 239, using maximum allowed: 8 [ 148.644456][ T6393] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.659168][ T8] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 148.666886][ T8] usb 4-1: can't read configurations, error -61 [ 148.710623][ T8] usb usb4-port1: attempt power cycle [ 148.910117][ T7037] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 149.000587][ T7082] devtmpfs: Too few inodes for current use [ 149.089545][ T7037] usb 1-1: device descriptor read/64, error -71 [ 149.103300][ T7086] capability: warning: `syz.2.246' uses deprecated v2 capabilities in a way that may be insecure [ 149.139353][ T8] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 149.153517][ T7082] netlink: 100 bytes leftover after parsing attributes in process `syz.2.246'. [ 149.203490][ T8] usb 4-1: too many configurations: 239, using maximum allowed: 8 [ 149.216135][ T8] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 149.229525][ T7037] usb usb1-port1: attempt power cycle [ 149.242420][ T8] usb 4-1: can't read configurations, error -61 [ 149.399246][ T8] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 149.440601][ T8] usb 4-1: too many configurations: 239, using maximum allowed: 8 [ 149.462174][ T8] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 149.483212][ T8] usb 4-1: can't read configurations, error -61 [ 149.498104][ T8] usb usb4-port1: unable to enumerate USB device [ 149.530005][ T7077] loop4: detected capacity change from 0 to 40427 [ 149.546221][ T7077] F2FS-fs (loop4): build fault injection attr: rate: 19, type: 0x7ffff [ 149.554906][ T7077] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0xeffa [ 149.583966][ T7077] F2FS-fs (loop4): invalid crc value [ 149.615769][ T7077] F2FS-fs (loop4): inject kvmalloc in f2fs_kvmalloc of f2fs_build_segment_manager+0x30ee/0x4730 [ 149.641992][ T7077] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-12) [ 149.669215][ T7037] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 149.710141][ T7037] usb 1-1: device descriptor read/8, error -71 [ 149.979248][ T7037] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 150.042802][ T7037] usb 1-1: device descriptor read/8, error -71 [ 150.183953][ T7037] usb usb1-port1: unable to enumerate USB device [ 152.110961][ T8] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x4 [ 152.125153][ T8] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x2 [ 152.147464][ T8] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x3 [ 152.209819][ T8] hid-generic 0000:3000000:0000.0002: hidraw0: HID v0.00 Device [sy] on syz0 [ 152.382182][ T7147] fido_id[7147]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 153.078867][ T7165] netlink: 20 bytes leftover after parsing attributes in process `syz.4.259'. [ 153.188107][ T7148] loop3: detected capacity change from 0 to 40427 [ 153.240617][ T7148] F2FS-fs (loop3): build fault injection attr: rate: 19, type: 0x7ffff [ 153.276532][ T7148] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0xeffa [ 153.324636][ T7148] F2FS-fs (loop3): invalid crc value [ 153.374611][ T7148] F2FS-fs (loop3): inject kvmalloc in f2fs_kvmalloc of f2fs_build_segment_manager+0x30ee/0x4730 [ 153.385977][ T7174] random: crng reseeded on system resumption [ 153.431516][ T7148] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-12) [ 153.521099][ T5760] I/O error, dev loop3, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 153.822069][ T7191] loop2: detected capacity change from 0 to 64 [ 154.150148][ T5782] Bluetooth: hci3: command tx timeout [ 154.379015][ T7191] netlink: 'syz.2.263': attribute type 10 has an invalid length. [ 154.397492][ T7191] team0: Port device dummy0 added [ 154.749307][ T1187] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 155.006951][ T1187] usb 1-1: config 0 has an invalid interface number: 11 but max is 0 [ 155.035356][ T1187] usb 1-1: config 0 has no interface number 0 [ 155.042373][ T1187] usb 1-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 155.055016][ T1187] usb 1-1: config 0 interface 11 altsetting 253 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 155.066709][ T1187] usb 1-1: config 0 interface 11 has no altsetting 0 [ 155.073809][ T1187] usb 1-1: New USB device found, idVendor=06cd, idProduct=012a, bcdDevice=d5.1b [ 155.084616][ T1187] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.096988][ T1187] usb 1-1: config 0 descriptor?? [ 155.117959][ T7183] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 155.134810][ T1187] keyspan 1-1:0.11: Keyspan 4 port adapter converter detected [ 155.156557][ T7037] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 155.177251][ T1187] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 81 [ 155.186850][ T1187] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 1 [ 155.198937][ T1187] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 155.226028][ T1187] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 82 [ 155.247229][ T1187] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 2 [ 155.265381][ T1187] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 155.291589][ T1187] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 83 [ 155.308002][ T1187] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 3 [ 155.338558][ T1187] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 155.370080][ T1187] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 84 [ 155.378282][ T1187] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 4 [ 155.386540][ T7037] usb 4-1: Using ep0 maxpacket: 32 [ 155.401327][ T7183] syz.0.261 uses obsolete (PF_INET,SOCK_PACKET) [ 155.430928][ T1187] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 155.452025][ T7037] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 155.465441][ T7037] usb 4-1: config 0 has no interface number 0 [ 155.479302][ T7037] usb 4-1: config 0 interface 12 has no altsetting 0 [ 155.493684][ T7037] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 155.509119][ T7037] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.537212][ T7037] usb 4-1: Product: syz [ 155.563297][ T7037] usb 4-1: Manufacturer: syz [ 155.578599][ T7037] usb 4-1: SerialNumber: syz [ 155.626711][ T7037] usb 4-1: config 0 descriptor?? [ 155.899606][ T7034] usb 1-1: USB disconnect, device number 17 [ 155.960515][ T7034] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 156.005224][ T7034] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 156.038333][ T7034] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 156.098649][ T7034] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 156.114770][ T7034] keyspan 1-1:0.11: device disconnected [ 156.469915][ T7037] f81534 4-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 156.515218][ T7037] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 156.540612][ T7037] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 156.564740][ T7037] f81534: probe of 4-1:0.12 failed with error -71 [ 156.575723][ T7215] vlan2: entered promiscuous mode [ 156.595585][ T7037] usb 4-1: USB disconnect, device number 12 [ 156.604985][ T7215] vlan2: entered allmulticast mode [ 156.715145][ T7220] loop2: detected capacity change from 0 to 164 [ 156.790967][ T7220] rock: directory entry would overflow storage [ 156.797180][ T7220] rock: sig=0x66, size=4, remaining=3 [ 156.849746][ T7220] rock: directory entry would overflow storage [ 156.883243][ T7220] rock: sig=0x66, size=4, remaining=3 [ 158.185693][ T7246] loop3: detected capacity change from 0 to 131072 [ 158.239301][ T7246] F2FS-fs (loop3): invalid crc value [ 158.248608][ T7246] F2FS-fs (loop3): Found nat_bits in checkpoint [ 158.307228][ T7246] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 158.409123][ T28] audit: type=1800 audit(2000000043.368:88): pid=7246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.278" name="file1" dev="loop3" ino=7 res=0 errno=0 [ 158.661611][ T7255] loop2: detected capacity change from 0 to 256 [ 158.678435][ T7255] exfat: Deprecated parameter 'namecase' [ 158.697639][ T7255] exfat: Deprecated parameter 'utf8' [ 158.790119][ T7255] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 158.914990][ T7254] netlink: 20 bytes leftover after parsing attributes in process `syz.2.280'. [ 158.955186][ T7254] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 159.243693][ T7261] loop2: detected capacity change from 0 to 1024 [ 159.290284][ T7261] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 159.390797][ T7265] loop0: detected capacity change from 0 to 2048 [ 159.450331][ T5760] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 160.030948][ T7265] loop0: detected capacity change from 0 to 512 [ 160.720014][ T7290] netlink: 56 bytes leftover after parsing attributes in process `syz.4.293'. [ 160.976473][ T7294] netlink: 56 bytes leftover after parsing attributes in process `syz.0.294'. [ 160.987647][ T7296] netlink: 24 bytes leftover after parsing attributes in process `syz.4.295'. [ 161.534218][ T7321] loop2: detected capacity change from 0 to 512 [ 161.606295][ T7319] loop4: detected capacity change from 0 to 2048 [ 161.639202][ T5760] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 161.670534][ T7319] NILFS (loop4): unrecognized mount option " уЮФ& аю@ [ 161.670534][ T7319] ФUЫ„ЎxGЩq'tw„ц €(™JјЖ…КмЗy2ВЦТфŒ8AЄCYХ љGŸ>L%" [ 161.718263][ T7318] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 161.922680][ T7323] loop0: detected capacity change from 0 to 1024 [ 162.026548][ T6182] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 162.085244][ T7323] loop0: detected capacity change from 0 to 512 [ 162.092183][ T6182] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 162.123994][ T6182] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 162.166527][ T6182] buffer_io_error: 138 callbacks suppressed [ 162.166541][ T6182] Buffer I/O error on dev loop0, logical block 0, async page read [ 162.382951][ T7330] netlink: 56 bytes leftover after parsing attributes in process `syz.3.303'. [ 162.620327][ T7333] netlink: 56 bytes leftover after parsing attributes in process `syz.3.304'. [ 163.477757][ T7352] loop4: detected capacity change from 0 to 4096 [ 164.793228][ T7352] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 164.847936][ T7352] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 164.906465][ T7352] ntfs: (device loop4): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 164.930269][ T7352] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 164.958639][ T7352] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 164.996079][ T7352] ntfs: volume version 3.1. [ 165.005387][ T7352] ntfs: (device loop4): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 165.021907][ T7352] ntfs: (device loop4): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 165.037875][ T7352] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 165.053617][ T7352] ntfs: (device loop4): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 165.092598][ T7352] ntfs: (device loop4): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 165.255224][ T7363] loop0: detected capacity change from 0 to 512 [ 165.457606][ T6182] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 165.780857][ T7371] loop4: detected capacity change from 0 to 128 [ 165.858436][ T7371] binder: Bad value for 'max' [ 165.880412][ T7373] netlink: 56 bytes leftover after parsing attributes in process `syz.3.312'. [ 165.931550][ T5760] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 169.315646][ T7410] loop4: detected capacity change from 0 to 512 [ 169.362683][ T7410] EXT4-fs: Ignoring removed i_version option [ 169.568235][ T7417] netlink: 56 bytes leftover after parsing attributes in process `syz.0.326'. [ 169.589165][ T7410] EXT4-fs: Mount option(s) incompatible with ext2 [ 170.994772][ T7426] netlink: 56 bytes leftover after parsing attributes in process `syz.0.328'. [ 171.198930][ T7428] netlink: 24 bytes leftover after parsing attributes in process `syz.0.329'. [ 173.968274][ T7430] loop3: detected capacity change from 0 to 32768 [ 174.032795][ T7430] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 174.049580][ T8] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 174.231185][ T7430] XFS (loop3): Ending clean mount [ 174.258479][ T7430] XFS (loop3): Quotacheck needed: Please wait. [ 174.266575][ T8] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 174.307769][ T8] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 174.350885][ T8] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 174.363035][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.363479][ T7430] XFS (loop3): Quotacheck: Done. [ 174.371862][ T8] usb 5-1: Product: syz [ 174.381205][ T8] usb 5-1: Manufacturer: syz [ 174.385916][ T8] usb 5-1: SerialNumber: syz [ 174.432280][ T5769] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 174.885131][ T7465] loop2: detected capacity change from 0 to 32768 [ 175.019663][ T7465] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 175.040502][ T7470] netlink: 56 bytes leftover after parsing attributes in process `syz.3.338'. [ 175.373490][ T7475] netlink: 'syz.3.339': attribute type 3 has an invalid length. [ 175.435060][ T5768] ocfs2: Unmounting device (7,2) on (node local) [ 175.682798][ T7446] loop4: detected capacity change from 0 to 32768 [ 177.402857][ T8] usb 5-1: 0:2 : does not exist [ 177.487408][ T7487] netlink: 8 bytes leftover after parsing attributes in process `syz.4.343'. [ 177.502831][ T7487] ipvlan2: entered promiscuous mode [ 177.540743][ T7487] ipvlan2: entered allmulticast mode [ 177.739405][ T7487] dummy0: entered allmulticast mode [ 178.077542][ T6182] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by udevd (6182) [ 178.146047][ T8] usb 5-1: USB disconnect, device number 3 [ 178.692219][ T7495] loop2: detected capacity change from 0 to 1024 [ 178.723746][ T7495] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 178.752806][ T7495] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 178.783254][ T7495] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 178.807513][ T7497] netlink: 56 bytes leftover after parsing attributes in process `syz.4.347'. [ 179.127777][ T7507] ALSA: seq fatal error: cannot create timer (-22) [ 179.194386][ T7034] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 179.757939][ T7512] loop4: detected capacity change from 0 to 256 [ 179.806529][ T7512] exfat: Deprecated parameter 'namecase' [ 179.991536][ T7034] usb 3-1: Using ep0 maxpacket: 32 [ 181.173818][ T7512] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 181.249940][ T7034] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 181.261185][ T7034] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.275092][ T7034] usb 3-1: Product: syz [ 181.279749][ T7034] usb 3-1: Manufacturer: syz [ 181.284803][ T7034] usb 3-1: SerialNumber: syz [ 181.306574][ T7034] usb 3-1: config 0 descriptor?? [ 181.323172][ T7034] cdc_ether 3-1:0.0: More than one union descriptor, skipping ... [ 181.472915][ T7034] usb 3-1: bad CDC descriptors [ 181.478288][ T7034] usb 3-1: unsupported MDLM descriptors [ 181.526005][ T7034] usb 3-1: USB disconnect, device number 10 [ 182.330525][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.388815][ T7524] netlink: 56 bytes leftover after parsing attributes in process `syz.4.354'. [ 182.467461][ T7526] loop4: detected capacity change from 0 to 2048 [ 182.495457][ T7526] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 182.538664][ T7530] loop2: detected capacity change from 0 to 47 [ 182.779425][ T7037] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 182.989147][ T7037] usb 4-1: Using ep0 maxpacket: 32 [ 182.998476][ T7037] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 184.241517][ T7037] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 184.271412][ T7037] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 184.281217][ T7037] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.299121][ T7037] usb 4-1: Product: syz [ 184.309113][ T7037] usb 4-1: Manufacturer: syz [ 184.324585][ T7037] usb 4-1: SerialNumber: syz [ 184.348315][ T7037] usb 4-1: config 0 descriptor?? [ 184.372526][ T7037] input: KB Gear Tablet as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input8 [ 184.473387][ T7541] loop0: detected capacity change from 0 to 1024 [ 184.529841][ T5784] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 184.733703][ T7546] loop0: detected capacity change from 0 to 1764 [ 185.039456][ T7037] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 185.175383][ T7528] loop3: detected capacity change from 0 to 32768 [ 185.212778][ T7528] JBD2: Ignoring recovery information on journal [ 185.282131][ T7037] usb 1-1: config 0 interface 0 altsetting 60 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 185.293645][ T7037] usb 1-1: config 0 interface 0 altsetting 60 endpoint 0xD has invalid wMaxPacketSize 0 [ 185.319104][ T7037] usb 1-1: config 0 interface 0 has no altsetting 0 [ 185.330020][ T7037] usb 1-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=ae.ad [ 185.339948][ T7037] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.350286][ T7037] usb 1-1: config 0 descriptor?? [ 185.372683][ T7528] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 185.435280][ T7528] (syz.3.356,7528,1):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 185.456075][ T7528] (syz.3.356,7528,1):ocfs2_group_add:495 ERROR: Can't read the group descriptor # 262144 from the device. [ 185.466845][ T1187] usb 4-1: USB disconnect, device number 13 [ 185.562153][ T7546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.579778][ T7546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.607863][ T7037] usb 1-1: string descriptor 0 read error: -71 [ 185.635217][ T7037] usb 1-1: ucan: probing device on interface #0 [ 185.705682][ T7037] usb 1-1: ucan: invalid endpoint configuration [ 185.712589][ T7037] usb 1-1: ucan: probe failed; try to update the device firmware [ 185.734349][ T7037] usb 1-1: USB disconnect, device number 18 [ 186.412341][ T5769] ocfs2: Unmounting device (7,3) on (node local) [ 186.493279][ T7568] netlink: 56 bytes leftover after parsing attributes in process `syz.4.367'. [ 187.967114][ T7578] loop0: detected capacity change from 0 to 2048 [ 188.088460][ T5760] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 188.201492][ T7582] IPv6: Can't replace route, no match found [ 188.359304][ T8] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 188.571042][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.604794][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.656025][ T8] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 188.671904][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.694093][ T8] usb 4-1: config 0 descriptor?? [ 188.983698][ T7588] loop4: detected capacity change from 0 to 8192 [ 189.026045][ T8] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 189.028422][ T7588] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 189.042664][ T8] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 189.053174][ T8] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 189.060381][ T8] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 189.067451][ T8] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x2 [ 189.086435][ T7588] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 189.096150][ T7588] REISERFS (device loop4): using ordered data mode [ 189.102782][ T7588] reiserfs: using flush barriers [ 189.120075][ T7588] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 190.106400][ T7593] raw_sendmsg: syz.2.369 forgot to set AF_INET. Fix it! [ 190.198166][ T7588] REISERFS (device loop4): checking transaction log (loop4) [ 190.469685][ T7588] REISERFS (device loop4): Using r5 hash to sort names [ 190.506662][ T7588] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 190.678758][ T8] cp2112 0003:10C4:EA90.0003: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 190.774129][ T8] cp2112 0003:10C4:EA90.0003: error requesting version [ 190.835947][ T8] cp2112: probe of 0003:10C4:EA90.0003 failed with error -71 [ 190.985271][ T8] usb 4-1: USB disconnect, device number 14 [ 192.397958][ T7618] netlink: 56 bytes leftover after parsing attributes in process `syz.4.376'. [ 192.474369][ T5780] Bluetooth: hci1: command 0x0406 tx timeout [ 192.480953][ T5083] Bluetooth: hci0: command 0x0406 tx timeout [ 192.480975][ T5776] Bluetooth: hci2: command 0x0406 tx timeout [ 192.719774][ T7622] netlink: 56 bytes leftover after parsing attributes in process `syz.4.379'. [ 192.957421][ T7611] loop0: detected capacity change from 0 to 32768 [ 193.293103][ T7630] loop3: detected capacity change from 0 to 256 [ 193.300923][ T7630] exfat: Deprecated parameter 'namecase' [ 193.719124][ T7630] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 195.215389][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.222959][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.646060][ T7635] sched: RT throttling activated [ 199.203759][ T7645] loop3: detected capacity change from 0 to 512 [ 200.479128][ T7645] EXT4-fs: Ignoring removed bh option [ 200.559953][ T7645] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 200.609597][ T7645] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 200.693654][ T7645] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 200.809363][ T7645] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 200.840842][ T7645] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.448308][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.659409][ T7667] capability: warning: `syz.3.390' uses 32-bit capabilities (legacy support in use) [ 202.731125][ T7668] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.385'. [ 203.058617][ T7676] loop0: detected capacity change from 0 to 512 [ 203.149131][ T5760] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 203.459297][ T7678] loop3: detected capacity change from 0 to 2 [ 203.466886][ T7678] jffs2: Bad value for 'compr' [ 203.565566][ T7690] xt_addrtype: ipv6 does not support BROADCAST matching [ 203.681653][ T7678] loop3: detected capacity change from 0 to 4096 [ 203.704428][ T7678] EXT4-fs: Ignoring removed bh option [ 203.730964][ T7678] EXT4-fs (loop3): Test dummy encryption mode enabled [ 203.757696][ T7678] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 203.770866][ T7678] System zones: 0-5 [ 203.791379][ T7678] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.869427][ T5836] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 203.994715][ T7678] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 204.064386][ T5836] usb 1-1: device descriptor read/64, error -71 [ 204.114640][ T7698] loop4: detected capacity change from 0 to 1764 [ 204.339164][ T5836] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 204.509178][ T5836] usb 1-1: device descriptor read/64, error -71 [ 204.649438][ T5836] usb usb1-port1: attempt power cycle [ 206.099599][ T5836] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 206.155088][ T5836] usb 1-1: device descriptor read/8, error -71 [ 206.469696][ T5836] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 206.482495][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.589203][ T5836] usb 1-1: device descriptor read/8, error -71 [ 206.747137][ T7717] netlink: 'syz.4.401': attribute type 7 has an invalid length. [ 206.755893][ T7717] netlink: 'syz.4.401': attribute type 8 has an invalid length. [ 207.448484][ T5836] usb usb1-port1: unable to enumerate USB device [ 207.737631][ T7728] xt_l2tp: v2 doesn't support IP mode [ 207.820106][ T7731] veth0: entered promiscuous mode [ 207.846698][ T7733] veth0_to_hsr: entered promiscuous mode [ 207.852713][ T5836] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 207.933347][ T7733] veth0_to_hsr: left promiscuous mode [ 207.951988][ T7733] veth0: left promiscuous mode [ 208.101173][ T5836] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 209.404159][ T5836] usb 1-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 209.413456][ T5836] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.422265][ T5836] usb 1-1: Product: syz [ 209.426672][ T5836] usb 1-1: Manufacturer: syz [ 209.432540][ T5836] usb 1-1: SerialNumber: syz [ 209.441079][ T5836] usb 1-1: config 0 descriptor?? [ 209.458553][ T5836] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 209.479759][ T5836] dvb-usb: bulk message failed: -22 (3/0) [ 209.562245][ T5836] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 209.581040][ T5836] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 209.609163][ T5836] usb 1-1: media controller created [ 209.639512][ T5836] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 209.656011][ T7715] loop0: detected capacity change from 0 to 512 [ 209.685308][ T5836] dvb-usb: bulk message failed: -22 (6/0) [ 209.700094][ T7715] EXT4-fs: Ignoring removed orlov option [ 209.719744][ T5836] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 209.763023][ T5836] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input9 [ 209.779711][ T6182] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 209.782558][ T7715] dvb-usb: bulk message failed: -22 (2/0) [ 209.800754][ T5836] dvb-usb: schedule remote query interval to 150 msecs. [ 209.851075][ T5836] dvb-usb: bulk message failed: -22 (3/0) [ 209.881474][ T5836] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 209.956698][ T5836] usb 1-1: USB disconnect, device number 23 [ 209.972586][ T7728] loop4: detected capacity change from 0 to 32768 [ 210.087208][ T7728] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 210.164783][ T5836] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 210.197109][ T7034] IPVS: starting estimator thread 0... [ 210.303931][ T7728] XFS (loop4): Ending clean mount [ 210.319337][ T7763] IPVS: using max 25 ests per chain, 60000 per kthread [ 210.350761][ T7728] XFS (loop4): Quotacheck needed: Please wait. [ 210.462399][ T7766] loop0: detected capacity change from 0 to 1024 [ 210.483700][ T7728] XFS (loop4): Quotacheck: Done. [ 210.591082][ T7771] loop3: detected capacity change from 0 to 1024 [ 210.763904][ T6393] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 212.238380][ T5836] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 212.263405][ T7783] loop3: detected capacity change from 0 to 1024 [ 212.493658][ T5836] usb 3-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=22.4e [ 212.515603][ T5836] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.530947][ T5836] usb 3-1: Product: syz [ 212.535188][ T5836] usb 3-1: Manufacturer: syz [ 212.540209][ T5836] usb 3-1: SerialNumber: syz [ 212.550269][ T5836] usb 3-1: config 0 descriptor?? [ 212.651905][ T5836] peak_usb 3-1:0.0 can0: sending cmd f=0x6 n=0x1 failure: -22 [ 212.675158][ T5836] peak_usb 3-1:0.0: unable to read PCAN-USB serial number (err -22) [ 212.743843][ T5836] peak_usb: probe of 3-1:0.0 failed with error -22 [ 212.750681][ T7783] hfsplus: xattr searching failed [ 212.771118][ T7783] hfsplus: xattr searching failed [ 212.810435][ T7777] loop2: detected capacity change from 0 to 2048 [ 212.868068][ T7777] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.945085][ T7777] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 213.194347][ T7795] loop4: detected capacity change from 0 to 8192 [ 213.224545][ T7795] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 213.243150][ T7795] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 213.255701][ T7795] REISERFS (device loop4): using ordered data mode [ 213.262749][ T7795] reiserfs: using flush barriers [ 213.305184][ T7795] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 213.410418][ T7795] REISERFS (device loop4): checking transaction log (loop4) [ 213.420409][ T7795] REISERFS (device loop4): Using r5 hash to sort names [ 213.438403][ T7795] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 213.462659][ T7795] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 213.694629][ T7806] fuse: Bad value for 'fd' [ 214.126913][ T7830] loop4: detected capacity change from 0 to 8 [ 214.135995][ T7830] cramfs: Unknown parameter 'еFMŸЇHХпpz>SzNwiї_Лš“ё]r+žЫ~сrўc!(ЦДЕЮfЗsVЦВђћeTЪ_о:ˆ^Р‘лпьїBŒ†%3бх [ 214.135995][ T7830] \+ш*шЙљєЩ0`6И§АыБРbJ'Ъ' [ 219.183836][ T7797] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 219.383398][ T7037] usb 3-1: USB disconnect, device number 11 [ 219.432561][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.748174][ T5836] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 219.798179][ T7848] loop2: detected capacity change from 0 to 512 [ 219.821096][ T7850] loop0: detected capacity change from 0 to 64 [ 219.829629][ T7848] EXT4-fs (loop2): Test dummy encryption mode enabled [ 219.836462][ T7848] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 219.882878][ T6182] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 219.893204][ T7851] loop0: detected capacity change from 0 to 512 [ 219.916276][ T6182] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 219.926972][ T7848] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.433: bad orphan inode 131083 [ 219.965256][ T5836] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 219.979070][ T6182] Buffer I/O error on dev loop0, logical block 0, async page read [ 220.001750][ T5836] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 220.016182][ T7848] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.079705][ T5836] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 220.088979][ T5836] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 220.141230][ T5836] usb 5-1: SerialNumber: syz [ 220.383196][ T5836] usb 5-1: 0:2 : does not exist [ 220.422614][ T7848] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 220.431378][ T5836] usb 5-1: USB disconnect, device number 4 [ 221.763114][ T5760] udevd[5760]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 221.812654][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.257756][ T7881] netlink: 'syz.2.440': attribute type 10 has an invalid length. [ 222.278054][ T7883] ptrace attach of "./syz-executor exec"[6393] was attempted by ""[7883] [ 222.303100][ T7884] ptrace attach of "./syz-executor exec"[6393] was attempted by ""[7884] [ 222.338067][ T7873] loop3: detected capacity change from 0 to 32768 [ 222.358502][ T7873] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.437 (7873) [ 222.435138][ T7873] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 222.473825][ T7873] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 222.502707][ T7873] BTRFS info (device loop3): using free space tree [ 222.673370][ T7873] BTRFS info (device loop3): enabling ssd optimizations [ 222.699396][ T7873] BTRFS info (device loop3): auto enabling async discard [ 222.813755][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 222.813770][ T28] audit: type=1800 audit(2000000107.798:89): pid=7873 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.437" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 223.065193][ T7909] tipc: Started in network mode [ 223.066759][ T5769] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 223.075641][ T7909] tipc: Node identity 0000000000000000ffffffffffffffff, cluster identity 4711 [ 223.169521][ T7886] loop2: detected capacity change from 0 to 32768 [ 223.391816][ T7886] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 224.224343][ T7886] XFS (loop2): Ending clean mount [ 224.262735][ T7886] XFS (loop2): Quotacheck needed: Please wait. [ 225.768042][ T7886] XFS (loop2): Quotacheck: Done. [ 225.838855][ T5768] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 226.584564][ T7942] loop2: detected capacity change from 0 to 256 [ 226.607052][ T7942] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 226.789541][ T7035] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 226.837648][ T7946] netlink: 136 bytes leftover after parsing attributes in process `syz.0.448'. [ 226.978833][ T7035] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 226.999827][ T7035] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.019177][ T7035] usb 5-1: Product: syz [ 227.025700][ T7035] usb 5-1: Manufacturer: syz [ 227.032393][ T7035] usb 5-1: SerialNumber: syz [ 227.049806][ T7035] usb 5-1: config 0 descriptor?? [ 228.969598][ T7958] overlayfs: missing 'workdir' [ 230.184582][ T7940] loop4: detected capacity change from 0 to 262144 [ 230.233649][ T7035] usb-storage 5-1:0.0: USB Mass Storage device detected [ 230.298385][ T7037] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 230.345379][ T6182] I/O error, dev loop4, sector 262016 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 230.580126][ T7035] usb 5-1: USB disconnect, device number 5 [ 230.598583][ T7966] loop3: detected capacity change from 0 to 8 [ 230.702656][ T7966] SQUASHFS error: Failed to read block 0x1ec: -5 [ 230.720786][ T7966] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 230.741246][ T7964] loop0: detected capacity change from 0 to 128 [ 233.389127][ T7028] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 233.426742][ T7988] loop0: detected capacity change from 0 to 512 [ 233.438283][ T7988] EXT4-fs: Ignoring removed nobh option [ 233.509180][ T7037] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 233.702900][ T7037] usb 4-1: config 0 has no interfaces? [ 233.711278][ T7037] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 233.721310][ T7037] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.732830][ T7037] usb 4-1: Product: syz [ 233.739430][ T7028] usb 3-1: Using ep0 maxpacket: 32 [ 233.742382][ T7037] usb 4-1: Manufacturer: syz [ 233.758479][ T7037] usb 4-1: SerialNumber: syz [ 233.763423][ T7028] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 233.775668][ T7028] usb 3-1: can't read configurations, error -22 [ 233.778099][ T7037] r8152-cfgselector 4-1: config 0 descriptor?? [ 233.949216][ T7028] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 233.991218][ T28] audit: type=1326 audit(2000000118.978:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7996 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f42c7b8f749 code=0x7ffc0000 [ 234.022774][ T28] audit: type=1326 audit(2000000118.978:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7996 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f42c7b8f749 code=0x7ffc0000 [ 234.045565][ T28] audit: type=1326 audit(2000000118.978:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7996 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f42c7b8f749 code=0x7ffc0000 [ 234.068665][ T28] audit: type=1326 audit(2000000118.978:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7996 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f42c7b8f749 code=0x7ffc0000 [ 234.098931][ T28] audit: type=1326 audit(2000000118.978:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7996 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f42c7b8f749 code=0x7ffc0000 [ 234.122905][ T28] audit: type=1326 audit(2000000118.978:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7996 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f42c7b8f749 code=0x7ffc0000 [ 234.145064][ T28] audit: type=1326 audit(2000000118.978:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7996 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f42c7b8f749 code=0x7ffc0000 [ 234.166848][ T7028] usb 3-1: Using ep0 maxpacket: 32 [ 234.175212][ T28] audit: type=1326 audit(2000000118.978:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7996 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f42c7b8f749 code=0x7ffc0000 [ 234.197222][ T7028] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 234.207151][ T7028] usb 3-1: can't read configurations, error -22 [ 234.218877][ T7028] usb usb3-port1: attempt power cycle [ 234.224958][ T28] audit: type=1326 audit(2000000118.978:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7996 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f42c7b8f749 code=0x7ffc0000 [ 234.256213][ T28] audit: type=1326 audit(2000000118.978:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7996 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f42c7b8f749 code=0x7ffc0000 [ 234.548624][ T8005] loop4: detected capacity change from 0 to 2048 [ 234.557545][ T8005] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 234.603051][ T5760] udevd[5760]: incorrect nilfs2 checksum on /dev/loop4 [ 234.609108][ T8006] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 234.649187][ T7028] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 234.689946][ T7028] usb 3-1: Using ep0 maxpacket: 32 [ 234.705121][ T7028] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 234.713717][ T7028] usb 3-1: can't read configurations, error -22 [ 234.729149][ T8] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 234.869235][ T7028] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 234.919134][ T7028] usb 3-1: Using ep0 maxpacket: 32 [ 234.924396][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 234.931964][ T7028] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 234.940685][ T7028] usb 3-1: can't read configurations, error -22 [ 234.948089][ T7028] usb usb3-port1: unable to enumerate USB device [ 234.948212][ T8] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 234.972491][ T8] usb 1-1: config 0 has no interface number 0 [ 234.978666][ T8] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 234.991395][ T8] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 235.001616][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.009858][ T8] usb 1-1: Product: syz [ 235.014063][ T8] usb 1-1: Manufacturer: syz [ 235.018694][ T8] usb 1-1: SerialNumber: syz [ 235.025906][ T8] usb 1-1: config 0 descriptor?? [ 235.036766][ T8] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 235.048826][ T8] em28xx 1-1:0.132: Video interface 132 found: [ 235.174944][ T8013] loop4: detected capacity change from 0 to 32768 [ 235.244654][ T8013] netlink: 60 bytes leftover after parsing attributes in process `syz.4.471'. [ 235.443686][ T8] em28xx 1-1:0.132: chip ID is em2874 [ 235.777112][ T7037] r8152-cfgselector 4-1: Unknown version 0x0000 [ 237.220880][ T8] em28xx 1-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 237.229083][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 237.237604][ T8] em28xx 1-1:0.132: board has no eeprom [ 237.258171][ T7037] r8152-cfgselector 4-1: USB disconnect, device number 15 [ 237.329092][ T8] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 237.343476][ T8] em28xx 1-1:0.132: analog set to bulk mode. [ 237.372049][ T5836] em28xx 1-1:0.132: Registering V4L2 extension [ 237.475503][ T8003] usb usb7: usbfs: process 8003 (syz.0.468) did not claim interface 0 before use [ 237.507706][ T5836] em28xx 1-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 237.507742][ T7035] usb 1-1: USB disconnect, device number 25 [ 237.528006][ T7035] em28xx 1-1:0.132: Disconnecting em28xx [ 237.731739][ T5836] usb 1-1: Decoder not found [ 237.736889][ T5836] em28xx 1-1:0.132: failed to create media graph [ 237.777441][ T5836] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 237.819888][ T5836] em28xx 1-1:0.132: Remote control support is not available for this card. [ 237.867282][ T7035] em28xx 1-1:0.132: Closing input extension [ 237.951429][ T7035] em28xx 1-1:0.132: Freeing device [ 238.160509][ T8046] loop0: detected capacity change from 0 to 256 [ 238.201439][ T8047] warning: `syz.0.480' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 238.251681][ T5760] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 238.566973][ T8059] tipc: Enabled bearer , priority 10 [ 238.594111][ T8060] netlink: 104 bytes leftover after parsing attributes in process `syz.0.481'. [ 238.870911][ T8073] loop4: detected capacity change from 0 to 1024 [ 240.160325][ T8073] EXT4-fs: inline encryption not supported [ 240.176616][ T8073] ext2: Unknown parameter 'appraise' [ 240.177159][ T8] tipc: Node number set to 4294967295 [ 240.326617][ T5815] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 241.420422][ T5815] usb 1-1: New USB device found, idVendor=046d, idProduct=08b6, bcdDevice=ca.8e [ 241.449108][ T5815] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.511746][ T5815] pwc: Logitech/Cisco VT Camera webcam detected. [ 241.861361][ T8084] loop4: detected capacity change from 0 to 32768 [ 241.900747][ T8084] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.491 (8084) [ 241.961854][ T8084] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 241.989267][ T8084] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 242.008927][ T8084] BTRFS info (device loop4): turning off barriers [ 242.030064][ T8084] BTRFS info (device loop4): setting nodatasum [ 242.036311][ T8084] BTRFS info (device loop4): use zlib compression, level 3 [ 242.079259][ T8084] BTRFS info (device loop4): using free space tree [ 242.355458][ T5815] pwc: Failed to set LED on/off time (-71) [ 242.394544][ T5815] pwc: send_video_command error -71 [ 242.409322][ T5815] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 242.450704][ T5815] Philips webcam: probe of 1-1:127.0 failed with error -71 [ 242.486047][ T5815] usb 1-1: USB disconnect, device number 26 [ 242.997225][ T6393] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 244.777029][ T8124] loop0: detected capacity change from 0 to 32768 [ 245.272553][ T8131] netlink: 'syz.4.497': attribute type 10 has an invalid length. [ 245.299196][ T8131] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 245.320707][ T8139] fuse: Bad value for 'rootmode' [ 245.328424][ T8131] team0: Port device virt_wifi0 added [ 245.635603][ T8150] loop4: detected capacity change from 0 to 128 [ 245.746810][ T8150] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 245.801920][ T8158] netlink: 'syz.0.507': attribute type 30 has an invalid length. [ 245.841915][ T8150] ext4 filesystem being mounted at /88/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 245.906294][ T8157] loop3: detected capacity change from 0 to 4096 [ 246.245704][ T8170] program syz.2.510 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 246.349324][ T7037] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 246.493433][ T8178] input: syz0 as /devices/virtual/input/input10 [ 246.540407][ T7037] usb 5-1: Using ep0 maxpacket: 16 [ 246.559463][ T7037] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=29.00 [ 246.572275][ T7037] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.586665][ T7037] usb 5-1: Product: syz [ 246.603343][ T7037] usb 5-1: Manufacturer: syz [ 246.608123][ T7037] usb 5-1: SerialNumber: syz [ 246.627382][ T7037] usb 5-1: config 0 descriptor?? [ 246.646148][ T7037] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 246.665143][ T7037] usb 5-1: Detected FT4233HP [ 246.902357][ T8182] kvm: Disabled LAPIC found during irq injection [ 246.930955][ T8191] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 247.044426][ T7037] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 247.054830][ T7037] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 247.080932][ T7037] usb 5-1: USB disconnect, device number 6 [ 247.106242][ T7037] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 247.131737][ T7037] ftdi_sio 5-1:0.0: device disconnected [ 247.613826][ T8218] syzkaller1: entered promiscuous mode [ 247.619603][ T8218] syzkaller1: entered allmulticast mode [ 247.632953][ T6393] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 252.722312][ T8284] input: syz1 as /devices/virtual/input/input12 [ 252.967485][ T8284] netlink: 'syz.3.552': attribute type 1 has an invalid length. [ 253.084084][ T8285] gretap1: entered allmulticast mode [ 253.162172][ T8285] bond1: (slave gretap1): making interface the new active one [ 253.282407][ T8285] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 253.555132][ T8292] syzkaller0: entered promiscuous mode [ 253.619072][ T8292] syzkaller0: entered allmulticast mode [ 254.149495][ T12] wlan0: Trigger new scan to find an IBSS to join [ 256.004119][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.011491][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.649376][ T7035] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 258.996534][ T7035] usb 1-1: config index 0 descriptor too short (expected 28277, got 36) [ 259.029084][ T7035] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 259.051321][ T7035] usb 1-1: config 0 has no interfaces? [ 259.065818][ T7035] usb 1-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 259.086246][ T7035] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.115104][ T7035] usb 1-1: config 0 descriptor?? [ 259.195973][ T11] wlan0: Trigger new scan to find an IBSS to join [ 259.519180][ T7037] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 259.721138][ T7037] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 259.749486][ T7037] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 259.835588][ T7037] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 259.858107][ T7037] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.979447][ T7037] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 260.015246][ T7037] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 260.079434][ T7037] usb 3-1: Product: syz [ 260.096404][ T7037] usb 3-1: Manufacturer: syz [ 260.174138][ T8363] input: syz1 as /devices/virtual/input/input13 [ 260.193072][ T7037] cdc_wdm 3-1:1.0: skipping garbage [ 260.213988][ T7037] cdc_wdm 3-1:1.0: skipping garbage [ 260.244768][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.252599][ T7037] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 260.289107][ T7037] cdc_wdm 3-1:1.0: Unknown control protocol [ 260.982419][ T7035] usb 3-1: USB disconnect, device number 16 [ 261.478880][ T5815] usb 1-1: USB disconnect, device number 27 [ 261.700602][ T8373] netlink: 8 bytes leftover after parsing attributes in process `syz.0.580'. [ 262.145231][ T8380] vxcan1: entered promiscuous mode [ 262.423237][ T8384] syz.3.583 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 263.055158][ T8401] syzkaller1: entered promiscuous mode [ 263.062452][ T8401] syzkaller1: entered allmulticast mode [ 263.334548][ T28] kauditd_printk_skb: 226 callbacks suppressed [ 263.334562][ T28] audit: type=1326 audit(2000000148.318:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8404 comm="syz.2.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f976278f749 code=0x7ffc0000 [ 263.399765][ T28] audit: type=1326 audit(2000000148.358:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8404 comm="syz.2.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f976278f749 code=0x7ffc0000 [ 263.423669][ T8407] futex_wake_op: syz.2.590 tries to shift op by 32; fix this program [ 263.475042][ T28] audit: type=1326 audit(2000000148.358:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8404 comm="syz.2.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f976278f749 code=0x7ffc0000 [ 263.548625][ T28] audit: type=1326 audit(2000000148.358:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8404 comm="syz.2.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f976278f749 code=0x7ffc0000 [ 263.584211][ T28] audit: type=1326 audit(2000000148.358:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8404 comm="syz.2.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f976278f749 code=0x7ffc0000 [ 263.622059][ T28] audit: type=1326 audit(2000000148.358:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8404 comm="syz.2.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f976278f749 code=0x7ffc0000 [ 263.650852][ T28] audit: type=1326 audit(2000000148.358:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8404 comm="syz.2.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f976278f749 code=0x7ffc0000 [ 263.750902][ T28] audit: type=1326 audit(2000000148.358:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8404 comm="syz.2.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f976278f749 code=0x7ffc0000 [ 263.930443][ T8415] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 263.957049][ T8415] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 263.973284][ T28] audit: type=1326 audit(2000000148.358:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8404 comm="syz.2.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f976278f749 code=0x7ffc0000 [ 263.973330][ T28] audit: type=1326 audit(2000000148.368:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8404 comm="syz.2.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f976278f749 code=0x7ffc0000 [ 265.129269][ T5815] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 265.349420][ T5815] usb 1-1: Using ep0 maxpacket: 32 [ 265.366897][ T5815] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.402315][ T5815] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 265.422842][ T5815] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 265.440082][ T5815] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.473497][ T5815] usb 1-1: config 0 descriptor?? [ 268.062668][ T8464] cifs: Unknown parameter 'ђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџ [ 268.460544][ T28] kauditd_printk_skb: 58 callbacks suppressed [ 268.460558][ T28] audit: type=1326 audit(2000000153.448:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8465 comm="syz.4.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f42c7b8f749 code=0x7ffc0000 [ 268.551947][ C0] vkms_vblank_simulate: vblank timer overrun [ 268.781060][ T28] audit: type=1326 audit(2000000153.448:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8465 comm="syz.4.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42c7b8f749 code=0x7ffc0000 [ 268.803325][ C0] vkms_vblank_simulate: vblank timer overrun [ 268.809879][ T28] audit: type=1326 audit(2000000153.448:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8465 comm="syz.4.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42c7b8f749 code=0x7ffc0000 [ 268.832818][ T28] audit: type=1326 audit(2000000153.718:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8465 comm="syz.4.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f42c7b8f749 code=0x7ffc0000 [ 268.856003][ T28] audit: type=1326 audit(2000000153.728:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8465 comm="syz.4.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42c7b8f749 code=0x7ffc0000 [ 268.879104][ T28] audit: type=1326 audit(2000000153.728:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8465 comm="syz.4.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42c7b8f749 code=0x7ffc0000 [ 268.901263][ C0] vkms_vblank_simulate: vblank timer overrun [ 268.909144][ T28] audit: type=1326 audit(2000000153.738:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8465 comm="syz.4.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f42c7b8f749 code=0x7ffc0000 [ 268.947579][ T28] audit: type=1326 audit(2000000153.738:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8465 comm="syz.4.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42c7b8f749 code=0x7ffc0000 [ 268.969989][ C0] vkms_vblank_simulate: vblank timer overrun [ 269.041027][ T28] audit: type=1326 audit(2000000153.738:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8465 comm="syz.4.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42c7b8f749 code=0x7ffc0000 [ 269.373651][ T5815] usbhid 1-1:0.0: can't add hid device: -71 [ 269.405987][ T5815] usbhid: probe of 1-1:0.0 failed with error -71 [ 269.443512][ T5815] usb 1-1: USB disconnect, device number 28 [ 269.486726][ T8482] tmpfs: Unknown parameter '' [ 270.031034][ T8494] syzkaller1: entered promiscuous mode [ 270.058911][ T8494] syzkaller1: entered allmulticast mode [ 271.729112][ T5837] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 271.938030][ T5837] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 271.959446][ T5837] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.982887][ T5837] usb 3-1: Product: syz [ 271.987140][ T5837] usb 3-1: Manufacturer: syz [ 272.039069][ T5837] usb 3-1: SerialNumber: syz [ 272.059793][ T5837] usb 3-1: config 0 descriptor?? [ 272.673394][ T8532] tipc: Started in network mode [ 272.684356][ T8532] tipc: Node identity 42e75a88b629, cluster identity 4711 [ 272.709901][ T8532] tipc: Enabled bearer , priority 0 [ 272.736991][ T8532] syzkaller0: entered promiscuous mode [ 272.762518][ T8532] syzkaller0: entered allmulticast mode [ 272.790321][ T5837] usb-storage 3-1:0.0: USB Mass Storage device detected [ 272.835397][ T8532] tipc: Resetting bearer [ 272.858543][ T8531] tipc: Resetting bearer [ 272.912544][ T8531] tipc: Disabling bearer [ 272.937134][ T5837] usb 3-1: USB disconnect, device number 17 [ 273.789274][ T5837] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 274.039100][ T5837] usb 3-1: Using ep0 maxpacket: 32 [ 274.046397][ T5837] usb 3-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 274.062327][ T5837] usb 3-1: config 0 interface 0 has no altsetting 0 [ 274.069882][ T5837] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 274.084680][ T5837] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.096729][ T5837] usb 3-1: config 0 descriptor?? [ 274.115905][ T8546] netlink: 12 bytes leftover after parsing attributes in process `syz.4.634'. [ 274.160295][ T8546] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 274.178093][ T8546] 8021q: adding VLAN 0 to HW filter on device bond1 [ 274.320083][ T5837] usbhid 3-1:0.0: can't add hid device: -71 [ 274.344323][ T5837] usbhid: probe of 3-1:0.0 failed with error -71 [ 274.377094][ T5837] usb 3-1: USB disconnect, device number 18 [ 274.654431][ T8555] syz_tun: entered allmulticast mode [ 275.100713][ T8] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 275.352230][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.411550][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.447951][ T8] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 8.00 [ 275.459386][ T8] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 275.478364][ T8] usb 5-1: Product: syz [ 275.489822][ T8] usb 5-1: config 0 descriptor?? [ 276.007102][ T8] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 276.073484][ T8] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 276.087251][ T8] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0D8C:0022.0004/input/input14 [ 276.153789][ T8] cm6533_jd 0003:0D8C:0022.0004: input,hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 276.214474][ T8] usb 5-1: USB disconnect, device number 7 [ 276.405000][ T8577] fido_id[8577]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 277.489155][ T5837] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 277.687804][ T8611] syz_tun: entered allmulticast mode [ 277.713024][ T5837] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 277.759510][ T5837] usb 1-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 277.768546][ T5837] usb 1-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 277.856751][ T5837] usb 1-1: config 64 interface 0 has no altsetting 0 [ 277.876297][ T5837] usb 1-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 277.886658][ T5837] usb 1-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 277.900776][ T5837] usb 1-1: config 64 interface 0 has no altsetting 0 [ 277.915417][ T5837] usb 1-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 277.926503][ T5837] usb 1-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 277.947937][ T5837] usb 1-1: config 64 interface 0 has no altsetting 0 [ 277.964064][ T5837] usb 1-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 277.981484][ T5837] usb 1-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 278.001701][ T5837] usb 1-1: config 64 interface 0 has no altsetting 0 [ 278.046966][ T5837] usb 1-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 278.080598][ T8619] xt_connbytes: Forcing CT accounting to be enabled [ 278.098913][ T5837] usb 1-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 278.154815][ T5837] usb 1-1: config 64 interface 0 has no altsetting 0 [ 278.186408][ T5837] usb 1-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 278.229978][ T5837] usb 1-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 278.280356][ T5837] usb 1-1: config 64 interface 0 has no altsetting 0 [ 278.317103][ T5837] usb 1-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 278.372637][ T8606] block device autoloading is deprecated and will be removed. [ 278.399227][ T5837] usb 1-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 278.460301][ T5837] usb 1-1: config 64 interface 0 has no altsetting 0 [ 278.514548][ T5837] usb 1-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 278.542081][ T5837] usb 1-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 278.564133][ T5782] Bluetooth: hci3: command 0x0406 tx timeout [ 278.605120][ T5837] usb 1-1: config 64 interface 0 has no altsetting 0 [ 278.649576][ T5837] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 278.671080][ T5837] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 278.682354][ T5837] usb 1-1: Product: syz [ 278.686528][ T5837] usb 1-1: Manufacturer: syz [ 278.697828][ T5837] usb 1-1: SerialNumber: syz [ 278.716055][ T5837] yurex 1-1:64.0: USB YUREX device now attached to Yurex #0 [ 279.025413][ C1] usb 1-1: yurex_control_callback - control failed: -71 [ 279.034721][ T5837] usb 1-1: USB disconnect, device number 29 [ 279.049979][ T5837] yurex 1-1:64.0: USB YUREX #0 now disconnected [ 279.900958][ T8656] dvmrp0: entered allmulticast mode [ 280.688667][ T8682] netlink: 8 bytes leftover after parsing attributes in process `syz.0.681'. [ 281.254610][ T8688] netlink: 'syz.4.683': attribute type 30 has an invalid length. [ 282.879688][ T8] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 282.949243][ T7037] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 283.069188][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 283.078255][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 283.102892][ T8] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 283.122646][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.138327][ T8] usb 1-1: config 0 descriptor?? [ 283.182622][ T7037] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 283.195482][ T7037] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x94, skipping [ 283.230695][ T7037] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 283.253887][ T7037] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 283.322495][ T7037] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.349473][ T7037] usb 5-1: Product: syz [ 283.378691][ T7037] usb 5-1: Manufacturer: syz [ 283.395766][ T7037] usb 5-1: SerialNumber: syz [ 283.441095][ T7037] usb 5-1: config 0 descriptor?? [ 283.452329][ T8717] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 283.566579][ T8] mcp2221 0003:04D8:00DD.0005: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 283.671349][ T7037] usb 5-1: USB disconnect, device number 8 [ 283.855044][ T8713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.881215][ T8713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.129788][ T8] usb 1-1: USB disconnect, device number 30 [ 284.693375][ T7034] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 284.899167][ T7034] usb 4-1: Using ep0 maxpacket: 16 [ 284.907259][ T7034] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.934448][ T7034] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 284.959138][ T7034] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 285.001693][ T7034] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b23, bcdDevice= 0.00 [ 285.029551][ T7034] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.051880][ T7034] usb 4-1: config 0 descriptor?? [ 285.192902][ T8755] program syz.4.704 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 285.280841][ T7034] usb 4-1: string descriptor 0 read error: -71 [ 285.310233][ T7034] usbhid 4-1:0.0: can't add hid device: -71 [ 285.323529][ T7034] usbhid: probe of 4-1:0.0 failed with error -71 [ 285.335699][ T7034] usb 4-1: USB disconnect, device number 16 [ 287.228919][ T8779] sock: sock_set_timeout: `syz.2.713' (pid 8779) tries to set negative timeout [ 287.671585][ T8795] netlink: 'syz.3.719': attribute type 3 has an invalid length. [ 287.689297][ T8795] netlink: 4 bytes leftover after parsing attributes in process `syz.3.719'. [ 287.709284][ T8795] netlink: 'syz.3.719': attribute type 3 has an invalid length. [ 287.733315][ T8795] netlink: 4 bytes leftover after parsing attributes in process `syz.3.719'. [ 287.757690][ T8795] netlink: 'syz.3.719': attribute type 3 has an invalid length. [ 287.778849][ T8795] netlink: 4 bytes leftover after parsing attributes in process `syz.3.719'. [ 287.797194][ T8795] netlink: 'syz.3.719': attribute type 3 has an invalid length. [ 287.813154][ T8795] netlink: 4 bytes leftover after parsing attributes in process `syz.3.719'. [ 287.835977][ T8795] netlink: 'syz.3.719': attribute type 3 has an invalid length. [ 287.854109][ T8795] netlink: 4 bytes leftover after parsing attributes in process `syz.3.719'. [ 287.873944][ T8795] netlink: 'syz.3.719': attribute type 3 has an invalid length. [ 287.892244][ T8795] netlink: 4 bytes leftover after parsing attributes in process `syz.3.719'. [ 287.932882][ T8795] netlink: 'syz.3.719': attribute type 3 has an invalid length. [ 287.969231][ T8795] netlink: 4 bytes leftover after parsing attributes in process `syz.3.719'. [ 288.030731][ T8795] netlink: 'syz.3.719': attribute type 3 has an invalid length. [ 288.052040][ T8795] netlink: 4 bytes leftover after parsing attributes in process `syz.3.719'. [ 288.110103][ T8795] netlink: 'syz.3.719': attribute type 3 has an invalid length. [ 288.119289][ T8795] netlink: 4 bytes leftover after parsing attributes in process `syz.3.719'. [ 288.164643][ T8795] netlink: 'syz.3.719': attribute type 3 has an invalid length. [ 288.210781][ T8795] netlink: 4 bytes leftover after parsing attributes in process `syz.3.719'. [ 288.333376][ T8795] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.342874][ T8795] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.976861][ T8795] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 289.014952][ T8795] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 289.572825][ T8795] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.583807][ T8795] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.603720][ T8795] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.169281][ T7035] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 290.369068][ T7035] usb 5-1: Using ep0 maxpacket: 8 [ 290.380966][ T7035] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 290.404961][ T7035] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 290.436731][ T7035] usb 5-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 290.463865][ T7035] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 290.476267][ T7035] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 290.489189][ T7035] usb 5-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 290.503966][ T7035] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 290.514778][ T7035] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 290.527287][ T7035] usb 5-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 290.547347][ T7035] usb 5-1: string descriptor 0 read error: -22 [ 290.557037][ T7035] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 290.566337][ T7035] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.582314][ T7035] adutux 5-1:168.0: interrupt endpoints not found [ 290.792829][ T8819] fuse: Unknown parameter 'user_id00000000000000000000' [ 290.920680][ T8] usb 5-1: USB disconnect, device number 9 [ 292.480012][ T1119] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 292.829245][ T8] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 293.019093][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 293.026285][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 293.068601][ T8] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 293.102499][ T8] usb 3-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 293.139319][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.147374][ T8] usb 3-1: Product: syz [ 293.175087][ T8] usb 3-1: Manufacturer: syz [ 293.185559][ T8] usb 3-1: SerialNumber: syz [ 293.221661][ T8] usb 3-1: config 0 descriptor?? [ 293.465003][ T8] usb 3-1: USB disconnect, device number 19 [ 294.677167][ T8899] validate_nla: 65 callbacks suppressed [ 294.677180][ T8899] netlink: 'syz.2.752': attribute type 1 has an invalid length. [ 297.943674][ T8962] __nla_validate_parse: 65 callbacks suppressed [ 297.943690][ T8962] netlink: 8 bytes leftover after parsing attributes in process `syz.0.775'. [ 297.993100][ T8964] loop2: detected capacity change from 0 to 7 [ 297.994725][ T8962] netlink: 7 bytes leftover after parsing attributes in process `syz.0.775'. [ 298.005193][ T5760] Dev loop2: unable to read RDB block 7 [ 298.019183][ T5760] loop2: unable to read partition table [ 298.036414][ T5760] loop2: partition table beyond EOD, truncated [ 298.051415][ T8964] Dev loop2: unable to read RDB block 7 [ 298.059163][ T8964] loop2: unable to read partition table [ 298.075649][ T8964] loop2: partition table beyond EOD, truncated [ 298.086725][ T8964] loop_reread_partitions: partition scan of loop2 (ўшЂЋxќ—Ÿбр– ) failed (rc=-5) [ 298.498001][ T8982] loop9: detected capacity change from 0 to 7 [ 298.510110][ T8982] Dev loop9: unable to read RDB block 7 [ 298.539154][ T8982] loop9: unable to read partition table [ 298.546674][ T8982] loop9: partition table beyond EOD, truncated [ 298.585691][ T8982] loop_reread_partitions: partition scan of loop9 (ўшЂЋxќ—Ÿбр– ) failed (rc=-5) [ 298.632329][ T8] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 298.654094][ T28] audit: type=1326 audit(2000000183.638:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8984 comm="syz.2.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f976278f749 code=0x7ffc0000 [ 298.736022][ T28] audit: type=1326 audit(2000000183.638:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8984 comm="syz.2.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f976278f749 code=0x7ffc0000 [ 298.790355][ T28] audit: type=1326 audit(2000000183.638:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8984 comm="syz.2.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f976278f749 code=0x7ffc0000 [ 298.849105][ T28] audit: type=1326 audit(2000000183.638:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8984 comm="syz.2.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f976278f749 code=0x7ffc0000 [ 298.882446][ T8] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 298.902583][ T8] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 298.918276][ T28] audit: type=1326 audit(2000000183.668:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8984 comm="syz.2.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f976278f749 code=0x7ffc0000 [ 298.943658][ T8] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 298.988364][ T8] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 299.001337][ T28] audit: type=1326 audit(2000000183.668:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8984 comm="syz.2.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f976278f749 code=0x7ffc0000 [ 299.023934][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.048134][ T8] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 299.065892][ T28] audit: type=1326 audit(2000000183.668:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8984 comm="syz.2.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f976278f749 code=0x7ffc0000 [ 299.097725][ T8] usb 1-1: invalid MIDI out EP 0 [ 299.138123][ T28] audit: type=1326 audit(2000000183.668:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8984 comm="syz.2.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f976278f749 code=0x7ffc0000 [ 299.227036][ T28] audit: type=1326 audit(2000000183.758:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8984 comm="syz.2.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f976278f749 code=0x7ffc0000 [ 299.332831][ T28] audit: type=1326 audit(2000000183.758:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8984 comm="syz.2.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f976278f749 code=0x7ffc0000 [ 299.377614][ T8] snd-usb-audio: probe of 1-1:27.0 failed with error -22 [ 299.636837][ T9009] netlink: 16 bytes leftover after parsing attributes in process `syz.2.794'. [ 299.688813][ T9009] ipvlan1: entered promiscuous mode [ 299.703947][ T9009] ipvlan1: left promiscuous mode [ 300.134016][ T9020] syzkaller1: entered promiscuous mode [ 300.145886][ T9020] syzkaller1: entered allmulticast mode [ 300.824680][ T9040] kvm: kvm [9037]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0xb32a [ 301.393902][ T7035] usb 1-1: USB disconnect, device number 31 [ 301.541477][ T9049] netlink: 480 bytes leftover after parsing attributes in process `syz.0.812'. [ 303.726624][ T9089] input: syz1 as /devices/virtual/input/input15 [ 303.864637][ T9089] netlink: 8 bytes leftover after parsing attributes in process `syz.3.823'. [ 303.875842][ T9089] netlink: 8 bytes leftover after parsing attributes in process `syz.3.823'. [ 303.920970][ T9089] gretap2: entered allmulticast mode [ 304.229176][ T7035] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 304.449071][ T7035] usb 5-1: Using ep0 maxpacket: 32 [ 304.473203][ T7035] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 304.495418][ T7035] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.535099][ T7035] usb 5-1: config 0 descriptor?? [ 304.790551][ T7035] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 304.859275][ T7035] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 304.908821][ T7035] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 304.920521][ T7035] usb 5-1: media controller created [ 304.974249][ T7035] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 305.078321][ T7035] az6027: usb out operation failed. (-71) [ 305.108265][ T7035] az6027: usb out operation failed. (-71) [ 305.141585][ T7035] stb0899_attach: Driver disabled by Kconfig [ 305.172043][ T7035] az6027: no front-end attached [ 305.172043][ T7035] [ 305.198740][ T7035] az6027: usb out operation failed. (-71) [ 305.226205][ T7035] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 305.272652][ T7035] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input16 [ 305.287847][ T7035] dvb-usb: schedule remote query interval to 400 msecs. [ 305.295172][ T7035] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 305.318595][ T7035] usb 5-1: USB disconnect, device number 10 [ 305.470334][ T7035] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 306.414436][ T9135] syzkaller0: entered promiscuous mode [ 306.428546][ T9135] syzkaller0: entered allmulticast mode [ 307.757746][ T9148] IPVS: Error connecting to the multicast addr [ 308.632097][ T9171] netlink: 'syz.3.846': attribute type 8 has an invalid length. [ 309.216029][ T9182] syzkaller1: entered promiscuous mode [ 309.386734][ T9182] syzkaller1: entered allmulticast mode [ 309.962091][ T9201] syzkaller1: entered promiscuous mode [ 309.978047][ T9201] syzkaller1: entered allmulticast mode [ 310.009394][ T7035] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 310.289068][ T7035] usb 1-1: Using ep0 maxpacket: 16 [ 310.359873][ T7035] usb 1-1: config index 0 descriptor too short (expected 14385, got 18) [ 310.395099][ T9205] ipip0: entered promiscuous mode [ 310.404601][ T9205] ipip0: entered allmulticast mode [ 310.447264][ T7035] usb 1-1: config 52 has too many interfaces: 52, using maximum allowed: 32 [ 310.472357][ T7035] usb 1-1: config 52 has an invalid descriptor of length 52, skipping remainder of the config [ 310.504656][ T7035] usb 1-1: config 52 has 0 interfaces, different from the descriptor's value: 52 [ 310.532738][ T9208] netlink: 40 bytes leftover after parsing attributes in process `syz.2.858'. [ 310.552188][ T9208] netlink: 80 bytes leftover after parsing attributes in process `syz.2.858'. [ 310.564218][ T7035] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 310.580145][ T7035] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 310.601732][ T9208] netlink: 40 bytes leftover after parsing attributes in process `syz.2.858'. [ 310.622182][ T9208] netlink: 80 bytes leftover after parsing attributes in process `syz.2.858'. [ 310.657936][ T7035] usb 1-1: Product: syz [ 310.684759][ T7035] usb 1-1: Manufacturer: syz [ 310.697986][ T7035] usb 1-1: SerialNumber: syz [ 311.048518][ T9217] syzkaller1: entered promiscuous mode [ 311.054354][ T9217] syzkaller1: entered allmulticast mode [ 311.209071][ T8] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 311.413537][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 311.489171][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 311.505920][ T8] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 311.528251][ T8] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 311.567302][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.626558][ T8] usb 5-1: config 0 descriptor?? [ 311.988928][ T9219] tipc: Enabled bearer , priority 10 [ 312.090763][ T8] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 312.098751][ T8] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 312.138880][ T9221] netlink: 'syz.3.864': attribute type 4 has an invalid length. [ 312.175451][ T8] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 312.225489][ T8] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 312.279078][ T8] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 312.286628][ T8] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 312.331756][ T8] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 312.383985][ T8] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 312.404261][ T8] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 312.438483][ T8] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 312.476019][ T8] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 312.485310][ T7035] usb 1-1: USB disconnect, device number 32 [ 312.529168][ T8] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 312.536621][ T8] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 312.619137][ T8] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 312.626590][ T8] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 312.653981][ T5837] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 312.695498][ T8] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 312.697431][ T5837] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 312.764942][ T8] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 312.861809][ T8] usb 5-1: USB disconnect, device number 11 [ 313.029905][ T9232] fido_id[9232]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 313.101032][ T5837] tipc: Node number set to 4107164296 [ 313.258710][ T9238] macvlan2: entered promiscuous mode [ 313.289120][ T9238] macvlan2: entered allmulticast mode [ 313.495322][ T9246] trusted_key: encrypted_key: insufficient parameters specified [ 313.789794][ T9253] tipc: Started in network mode [ 313.795293][ T9253] tipc: Node identity fa5505b45383, cluster identity 4711 [ 313.804028][ T9253] tipc: Enabled bearer , priority 0 [ 313.813010][ T9253] syzkaller0: entered promiscuous mode [ 313.820853][ T9253] syzkaller0: entered allmulticast mode [ 313.848675][ T9253] tipc: Resetting bearer [ 313.864070][ T9252] tipc: Resetting bearer [ 313.894596][ T9255] netlink: 8 bytes leftover after parsing attributes in process `syz.3.877'. [ 313.908118][ T9252] tipc: Disabling bearer [ 316.401359][ T9297] input: syz1 as /devices/virtual/input/input17 [ 316.579492][ T9297] netlink: 'syz.4.891': attribute type 1 has an invalid length. [ 316.818050][ T9298] gretap1: entered allmulticast mode [ 316.854936][ T9298] bond2: (slave gretap1): making interface the new active one [ 316.867619][ T9298] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 317.006415][ T9308] gtp0: entered promiscuous mode [ 317.025404][ T9308] gtp0: entered allmulticast mode [ 317.433254][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.439838][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.576287][ T9314] fuse: Bad value for 'fd' [ 319.489163][ T5837] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 319.839055][ T5837] usb 1-1: Using ep0 maxpacket: 32 [ 319.870648][ T5837] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 319.897492][ T5837] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 319.912468][ T5837] usb 1-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 319.922312][ T5837] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.949310][ T5837] usb 1-1: Product: syz [ 319.953590][ T5837] usb 1-1: Manufacturer: syz [ 319.958205][ T5837] usb 1-1: SerialNumber: syz [ 320.033905][ T5837] usb 1-1: config 0 descriptor?? [ 320.306371][ T5837] usb 1-1: USB disconnect, device number 33 [ 322.799239][ T7034] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 323.069851][ T7034] usb 4-1: config index 0 descriptor too short (expected 28277, got 36) [ 323.091398][ T7034] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 323.129284][ T7034] usb 4-1: config 0 has no interfaces? [ 323.143766][ T7034] usb 4-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 323.177874][ T7034] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.209733][ T9438] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 323.256798][ T7034] usb 4-1: config 0 descriptor?? [ 323.271515][ T9438] batadv_slave_0: entered promiscuous mode [ 324.285337][ T7028] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 324.469540][ T7028] usb 3-1: Using ep0 maxpacket: 32 [ 324.477116][ T60] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 324.489181][ T7028] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 324.519443][ T7028] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 324.530054][ T7028] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 324.553407][ T7028] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.577715][ T7028] usb 3-1: config 0 descriptor?? [ 325.331739][ T7028] usbhid 3-1:0.0: can't add hid device: -71 [ 325.337972][ T7028] usbhid: probe of 3-1:0.0 failed with error -71 [ 325.363216][ T7028] usb 3-1: USB disconnect, device number 20 [ 325.945379][ T7028] usb 4-1: USB disconnect, device number 17 [ 327.883547][ T9491] netlink: 8 bytes leftover after parsing attributes in process `syz.3.946'. [ 329.281033][ T9517] ipip0: entered promiscuous mode [ 329.288822][ T9517] ipip0: entered allmulticast mode [ 329.472495][ T9513] No such timeout policy "syz1" [ 330.565531][ T9539] xt_TPROXY: Can be used only with -p tcp or -p udp [ 331.562254][ T9557] TCP: tcp_parse_options: Illegal window scaling value 250 > 14 received [ 332.084236][ T5876] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 332.093898][ T5876] Buffer I/O error on dev nbd0, logical block 0, async page read [ 332.112953][ T24] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 332.123316][ T24] Buffer I/O error on dev nbd0, logical block 1, async page read [ 332.132428][ T24] Buffer I/O error on dev nbd0, logical block 2, async page read [ 332.140304][ T24] Buffer I/O error on dev nbd0, logical block 3, async page read [ 332.180292][ T5876] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 332.191778][ T5876] Buffer I/O error on dev nbd0, logical block 0, async page read [ 332.200880][ T5876] Buffer I/O error on dev nbd0, logical block 1, async page read [ 332.218900][ T5876] Buffer I/O error on dev nbd0, logical block 2, async page read [ 332.226743][ T5876] Buffer I/O error on dev nbd0, logical block 3, async page read [ 332.246281][ T9576] mmap: syz.3.968 (9576) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 332.349171][ T24] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 332.358312][ T24] Buffer I/O error on dev nbd0, logical block 0, async page read [ 332.366337][ T24] Buffer I/O error on dev nbd0, logical block 1, async page read [ 332.405641][ T5876] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 332.444129][ T5876] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 332.454780][ T5876] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 332.477486][ T5876] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 332.579135][ T5876] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 332.591786][ T5876] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 332.603998][ T9565] ldm_validate_partition_table(): Disk read failed. [ 332.613900][ T9565] Dev nbd0: unable to read RDB block 0 [ 332.623852][ T9565] nbd0: unable to read partition table [ 333.939063][ T5837] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 334.213275][ T5837] usb 1-1: Using ep0 maxpacket: 8 [ 334.223927][ T5837] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 334.259049][ T5837] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 334.289913][ T5837] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 334.327029][ T5837] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 334.372418][ T5837] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 334.403500][ T5837] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.647690][ T5837] usb 1-1: GET_CAPABILITIES returned 0 [ 334.663427][ T5837] usbtmc 1-1:16.0: can't read capabilities [ 334.923080][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 334.976553][ T5837] usb 1-1: USB disconnect, device number 34 [ 335.321036][ T9614] binder: 9613:9614 ioctl c00c6211 ffffffffffffffff returned -14 [ 335.729595][ T9621] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0 [ 335.741546][ T9621] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0 [ 335.769068][ T9621] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0 [ 335.801396][ T9621] geneve2: entered allmulticast mode [ 335.943815][ T9628] syzkaller0: entered promiscuous mode [ 335.967723][ T9628] syzkaller0: entered allmulticast mode [ 336.724253][ T9637] binder: 9633:9637 unknown command 1074553619 [ 336.744316][ T9637] binder: 9633:9637 ioctl c0306201 200000000040 returned -22 [ 336.769678][ T9637] binder: 9633:9637 unknown command 1074553620 [ 336.789252][ T9637] binder: 9633:9637 ioctl c0306201 200000000640 returned -22 [ 337.139105][ T5836] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 337.319152][ T5836] usb 5-1: Using ep0 maxpacket: 8 [ 337.332099][ T5836] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 337.343091][ T5836] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 337.352666][ T5836] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.360954][ T5836] usb 5-1: Product: syz [ 337.365149][ T5836] usb 5-1: Manufacturer: syz [ 337.371136][ T5836] usb 5-1: SerialNumber: syz [ 337.402600][ T5836] usb 5-1: config 0 descriptor?? [ 337.421459][ T5836] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 337.431779][ T5836] usb 5-1: setting power ON [ 337.461222][ T5836] dvb-usb: bulk message failed: -22 (2/0) [ 337.499370][ T5836] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 337.538472][ T5836] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 337.552505][ T5836] usb 5-1: media controller created [ 337.604210][ T5836] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 337.675032][ T9641] dvb-usb: bulk message failed: -22 (3/0) [ 337.697035][ T9641] dvb-usb: bulk message failed: -22 (5/0) [ 337.726451][ T5836] usb 5-1: selecting invalid altsetting 6 [ 337.733398][ T5836] usb 5-1: digital interface selection failed (-22) [ 337.745503][ T5836] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 337.749692][ T9641] dvb-usb: bulk message failed: -22 (3/0) [ 337.756402][ T5836] usb 5-1: setting power OFF [ 337.768925][ T5836] dvb-usb: bulk message failed: -22 (2/0) [ 337.789874][ T5836] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 337.800047][ T5836] (NULL device *): no alternate interface [ 337.834853][ T5836] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 337.878168][ T5836] usb 5-1: USB disconnect, device number 12 [ 341.244537][ T9674] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1000'. [ 341.397658][ T9683] syz_tun: entered allmulticast mode [ 341.679074][ T7034] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 341.796460][ T9702] kAFS: unable to lookup cell 'о({^њ@' [ 341.916489][ T7034] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 341.928430][ T7034] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.939097][ T5836] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 341.999387][ T7034] usb 3-1: Product: syz [ 342.003576][ T7034] usb 3-1: Manufacturer: syz [ 342.027808][ T7034] usb 3-1: SerialNumber: syz [ 342.121143][ T5836] usb 4-1: config index 0 descriptor too short (expected 28277, got 36) [ 342.241756][ T5836] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 342.278062][ T5836] usb 4-1: config 0 has no interfaces? [ 342.287878][ T5836] usb 4-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 342.352805][ T5836] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.377583][ T5836] usb 4-1: config 0 descriptor?? [ 342.462870][ T7034] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 343.151969][ T7034] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -32 [ 343.189078][ T7034] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 343.220255][ T7034] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 343.289362][ T7034] lan78xx: probe of 3-1:1.0 failed with error -32 [ 343.880722][ T9725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.907392][ T9725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.012901][ T9725] syz_tun: left allmulticast mode [ 344.630008][ T9742] xt_CT: You must specify a L4 protocol and not use inversions on it [ 345.079238][ T5836] usb 3-1: USB disconnect, device number 21 [ 345.250889][ T9755] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1026'. [ 345.540613][ T5837] usb 4-1: USB disconnect, device number 18 [ 345.727149][ T9769] vlan2: entered promiscuous mode [ 345.741172][ T7034] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 345.805215][ T5836] IPVS: starting estimator thread 0... [ 345.842157][ T9770] IPVS: sh: FWM 3 0x00000003 - no destination available [ 345.861254][ T9770] IPVS: sh: FWM 3 0x00000003 - no destination available [ 345.920322][ T9771] IPVS: using max 36 ests per chain, 86400 per kthread [ 345.952540][ T7034] usb 1-1: config 0 has an invalid interface number: 177 but max is 0 [ 345.985980][ T7034] usb 1-1: config 0 has no interface number 0 [ 346.036933][ T7034] usb 1-1: New USB device found, idVendor=09fb, idProduct=ebbe, bcdDevice=39.5d [ 346.073248][ T7034] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.108935][ T7034] usb 1-1: Product: syz [ 346.145608][ T7034] usb 1-1: Manufacturer: syz [ 346.174125][ T7034] usb 1-1: SerialNumber: syz [ 346.215616][ T7034] usb 1-1: config 0 descriptor?? [ 347.470711][ T7034] usb 1-1: USB disconnect, device number 35 [ 348.211894][ T9810] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 348.234638][ T5837] IPVS: starting estimator thread 0... [ 348.339329][ T9812] IPVS: using max 36 ests per chain, 86400 per kthread [ 348.604383][ T9818] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1042'. [ 349.109202][ T12] wlan1: Trigger new scan to find an IBSS to join [ 349.170328][ T6114] ------------[ cut here ]------------ [ 349.176558][ T6114] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0xffffffff with flags 0x20 [ 349.187532][ T6114] WARNING: CPU: 0 PID: 6114 at net/mac80211/rate.c:385 __rate_control_send_low+0x635/0x880 [ 349.197572][ T6114] Modules linked in: [ 349.201535][ T6114] CPU: 0 PID: 6114 Comm: kworker/u4:12 Not tainted syzkaller #0 [ 349.209203][ T6114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 349.219409][ T6114] Workqueue: events_unbound cfg80211_wiphy_work [ 349.225731][ T6114] RIP: 0010:__rate_control_send_low+0x635/0x880 [ 349.232037][ T6114] Code: 30 42 0f b6 04 28 84 c0 0f 85 e6 01 00 00 41 8b 0e 48 c7 c7 80 54 be 8b 48 8b 74 24 10 44 8b 44 24 1c 45 89 e1 e8 3b a9 70 f7 <0f> 0b e9 78 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 03 fa ff [ 349.251707][ T6114] RSP: 0018:ffffc900055bf380 EFLAGS: 00010246 [ 349.257887][ T6114] RAX: ce7d5b327250fe00 RBX: 000000000000000c RCX: ffff88802dc65a00 [ 349.265898][ T6114] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 349.273901][ T6114] RBP: 0000000000000084 R08: ffffc900055bef87 R09: 1ffff92000ab7df0 [ 349.281921][ T6114] R10: dffffc0000000000 R11: fffff52000ab7df1 R12: 0000000000000020 [ 349.289930][ T6114] R13: dffffc0000000000 R14: ffff88801e773358 R15: ffff88805d2598e8 [ 349.297903][ T6114] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 349.306878][ T6114] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 349.313485][ T6114] CR2: 0000200000404030 CR3: 000000004332b000 CR4: 00000000003506f0 [ 349.321475][ T6114] Call Trace: [ 349.324767][ T6114] [ 349.327704][ T6114] rate_control_send_low+0x194/0x790 [ 349.333018][ T6114] rate_control_get_rate+0x20b/0x5c0 [ 349.338312][ T6114] ieee80211_tx_h_rate_ctrl+0xb2d/0x1770 [ 349.343976][ T6114] ? ieee80211_tx_h_select_key+0x19e0/0x19e0 [ 349.349966][ T6114] ? __lock_acquire+0x1260/0x7c80 [ 349.354981][ T6114] ? ieee80211_is_bufferable_mmpdu+0xfb/0x1f0 [ 349.361075][ T6114] invoke_tx_handlers_late+0xb6/0x1810 [ 349.366535][ T6114] ? invoke_tx_handlers_early+0xa11/0x1cf0 [ 349.372360][ T6114] ieee80211_tx+0x2ad/0x420 [ 349.376861][ T6114] ? ieee80211_skb_resize+0x630/0x630 [ 349.382257][ T6114] ? ieee80211_set_qos_hdr+0x1ca/0x510 [ 349.387715][ T6114] ? __bpf_trace_tasklet+0x140/0x140 [ 349.393012][ T6114] ? ieee80211_xmit+0x310/0x3f0 [ 349.397877][ T6114] ? __ieee80211_tx_skb_tid_band+0x490/0x610 [ 349.403885][ T6114] __ieee80211_tx_skb_tid_band+0x4d5/0x610 [ 349.409712][ T6114] ? ieee80211_scan_state_send_probe+0x4b4/0x930 [ 349.416027][ T6114] ieee80211_scan_state_send_probe+0x560/0x930 [ 349.422225][ T6114] ieee80211_scan_work+0x4e8/0x1c30 [ 349.427441][ T6114] cfg80211_wiphy_work+0x225/0x260 [ 349.432571][ T6114] ? process_scheduled_works+0x957/0x15b0 [ 349.438289][ T6114] process_scheduled_works+0xa45/0x15b0 [ 349.443964][ T6114] ? assign_work+0x400/0x400 [ 349.448557][ T6114] ? assign_work+0x39e/0x400 [ 349.453166][ T6114] worker_thread+0xa55/0xfc0 [ 349.457745][ T6114] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 349.463653][ T6114] ? _raw_spin_unlock+0x40/0x40 [ 349.468527][ T6114] kthread+0x2fa/0x390 [ 349.472646][ T6114] ? pr_cont_work+0x560/0x560 [ 349.477316][ T6114] ? kthread_blkcg+0xd0/0xd0 [ 349.481919][ T6114] ret_from_fork+0x48/0x80 [ 349.486422][ T6114] ? kthread_blkcg+0xd0/0xd0 [ 349.491043][ T6114] ret_from_fork_asm+0x11/0x20 [ 349.495803][ T6114] [ 349.498893][ T6114] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 349.506158][ T6114] CPU: 0 PID: 6114 Comm: kworker/u4:12 Not tainted syzkaller #0 [ 349.513801][ T6114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 349.523839][ T6114] Workqueue: events_unbound cfg80211_wiphy_work [ 349.530184][ T6114] Call Trace: [ 349.533453][ T6114] [ 349.536367][ T6114] dump_stack_lvl+0x16c/0x230 [ 349.541040][ T6114] ? show_regs_print_info+0x20/0x20 [ 349.546232][ T6114] ? load_image+0x3b0/0x3b0 [ 349.550816][ T6114] panic+0x2c0/0x710 [ 349.554695][ T6114] ? bpf_jit_dump+0xd0/0xd0 [ 349.559183][ T6114] ? ret_from_fork_asm+0x11/0x20 [ 349.564104][ T6114] __warn+0x2e0/0x470 [ 349.568063][ T6114] ? __rate_control_send_low+0x635/0x880 [ 349.573683][ T6114] ? __rate_control_send_low+0x635/0x880 [ 349.579306][ T6114] report_bug+0x2be/0x4f0 [ 349.583617][ T6114] ? __rate_control_send_low+0x635/0x880 [ 349.589238][ T6114] ? __rate_control_send_low+0x635/0x880 [ 349.594864][ T6114] ? __rate_control_send_low+0x637/0x880 [ 349.600517][ T6114] handle_bug+0xcf/0x120 [ 349.604748][ T6114] exc_invalid_op+0x1a/0x50 [ 349.609237][ T6114] asm_exc_invalid_op+0x1a/0x20 [ 349.614074][ T6114] RIP: 0010:__rate_control_send_low+0x635/0x880 [ 349.620385][ T6114] Code: 30 42 0f b6 04 28 84 c0 0f 85 e6 01 00 00 41 8b 0e 48 c7 c7 80 54 be 8b 48 8b 74 24 10 44 8b 44 24 1c 45 89 e1 e8 3b a9 70 f7 <0f> 0b e9 78 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 03 fa ff [ 349.639973][ T6114] RSP: 0018:ffffc900055bf380 EFLAGS: 00010246 [ 349.646030][ T6114] RAX: ce7d5b327250fe00 RBX: 000000000000000c RCX: ffff88802dc65a00 [ 349.654071][ T6114] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 349.662050][ T6114] RBP: 0000000000000084 R08: ffffc900055bef87 R09: 1ffff92000ab7df0 [ 349.670028][ T6114] R10: dffffc0000000000 R11: fffff52000ab7df1 R12: 0000000000000020 [ 349.677994][ T6114] R13: dffffc0000000000 R14: ffff88801e773358 R15: ffff88805d2598e8 [ 349.686011][ T6114] rate_control_send_low+0x194/0x790 [ 349.691295][ T6114] rate_control_get_rate+0x20b/0x5c0 [ 349.696573][ T6114] ieee80211_tx_h_rate_ctrl+0xb2d/0x1770 [ 349.702200][ T6114] ? ieee80211_tx_h_select_key+0x19e0/0x19e0 [ 349.708189][ T6114] ? __lock_acquire+0x1260/0x7c80 [ 349.713218][ T6114] ? ieee80211_is_bufferable_mmpdu+0xfb/0x1f0 [ 349.719274][ T6114] invoke_tx_handlers_late+0xb6/0x1810 [ 349.724721][ T6114] ? invoke_tx_handlers_early+0xa11/0x1cf0 [ 349.730522][ T6114] ieee80211_tx+0x2ad/0x420 [ 349.735024][ T6114] ? ieee80211_skb_resize+0x630/0x630 [ 349.740384][ T6114] ? ieee80211_set_qos_hdr+0x1ca/0x510 [ 349.745911][ T6114] ? __bpf_trace_tasklet+0x140/0x140 [ 349.751453][ T6114] ? ieee80211_xmit+0x310/0x3f0 [ 349.756287][ T6114] ? __ieee80211_tx_skb_tid_band+0x490/0x610 [ 349.762248][ T6114] __ieee80211_tx_skb_tid_band+0x4d5/0x610 [ 349.768048][ T6114] ? ieee80211_scan_state_send_probe+0x4b4/0x930 [ 349.774356][ T6114] ieee80211_scan_state_send_probe+0x560/0x930 [ 349.780499][ T6114] ieee80211_scan_work+0x4e8/0x1c30 [ 349.785692][ T6114] cfg80211_wiphy_work+0x225/0x260 [ 349.790812][ T6114] ? process_scheduled_works+0x957/0x15b0 [ 349.796538][ T6114] process_scheduled_works+0xa45/0x15b0 [ 349.802093][ T6114] ? assign_work+0x400/0x400 [ 349.806688][ T6114] ? assign_work+0x39e/0x400 [ 349.811282][ T6114] worker_thread+0xa55/0xfc0 [ 349.815947][ T6114] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 349.821826][ T6114] ? _raw_spin_unlock+0x40/0x40 [ 349.826690][ T6114] kthread+0x2fa/0x390 [ 349.830806][ T6114] ? pr_cont_work+0x560/0x560 [ 349.835491][ T6114] ? kthread_blkcg+0xd0/0xd0 [ 349.840086][ T6114] ret_from_fork+0x48/0x80 [ 349.844500][ T6114] ? kthread_blkcg+0xd0/0xd0 [ 349.849084][ T6114] ret_from_fork_asm+0x11/0x20 [ 349.853856][ T6114] [ 349.857208][ T6114] Kernel Offset: disabled [ 349.861677][ T6114] Rebooting in 86400 seconds..