last executing test programs: 12m45.416342014s ago: executing program 3 (id=117): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mbind(&(0x7f0000007000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000240)=0x100000001, 0x9, 0x0) get_mempolicy(0x0, 0x0, 0x2, &(0x7f0000198000/0x3000)=nil, 0x2) 12m44.05302974s ago: executing program 3 (id=121): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x4c94d1e) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYRES64=r0], 0x14}}, 0x8000) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000140)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000600)={@flat=@binder={0x73622a85, 0xb}, @fd, @fda={0x66646185, 0x6, 0x1, 0x28}}, &(0x7f00000001c0)={0x0, 0x18, 0x30}}}], 0x0, 0x0, &(0x7f00000002c0)}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="ac0000002100010026bd7000fedbdf2564010102000000000000000000000000fc0000000088c35b39378f86d42400004e21ffff0200a0a03a0000007a65425d1c83e6e6d868fa5e02bc26542cb316ea380442bab00272dbc39886febbf38fdf6b3744de22701d687f8c74b189979adb4c0ca26aa77cbf069710b4d005", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="b36b6e00010000000a00100000000000000000005000110000000000000000000000000000000000ac1414aa000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000000000000032010000023500000a000200"], 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x20000084) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x400c0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYRES32=r1, @ANYBLOB="00000000000200001800128008000100736974000c00028008000100", @ANYRES32=r4, @ANYRES64, @ANYRES8=r1, @ANYBLOB="4976d600000000000000b7fb506cc6034f5d8e37cb57b9bf7843160d99daf2480d3e582171d3b496679a3f6300cc7c4e9ffe"], 0x40}, 0x1, 0xd, 0x0, 0x4c000}, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'ip6tnl0\x00', 0x1000}) socket$kcm(0x2, 0xa, 0x2) r5 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_STOP(r5, 0x6f2a) 12m43.859032696s ago: executing program 3 (id=123): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$btrfs(&(0x7f00000003c0), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000080)={[{@usebackuproot}, {@nodatasum}, {@ssd_spread}, {@user_subvol_rm}, {@flushoncommit}, {@datasum}, {@acl}, {@nodiscard}]}, 0xfb, 0x50f9, &(0x7f0000005140)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000540), 0x44800, 0x0) sendfile(r0, r1, 0x0, 0xfffe82) ioctl$FITRIM(r1, 0xc4009420, &(0x7f0000000100)={0x3, 0x9}) syz_usb_connect$uac3(0x5, 0x0, 0x0, &(0x7f00000009c0)={0xa, &(0x7f00000007c0)={0xa, 0x6, 0x200, 0x40, 0x9, 0xfb, 0x40}, 0x16e, &(0x7f0000000800)=ANY=[], 0x1, [{0x0, 0x0}]}) r2 = syz_open_dev$loop(&(0x7f0000000640), 0x0, 0x22400) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendfile(0xffffffffffffffff, r2, 0x0, 0x80000002) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x181242, 0x0) syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000200), 0x1, 0x168, &(0x7f0000000240)="$eJzs29tKOlEUx/HfqP9/ZudzdBUU1E2Op4Lu8lFEJ5PGkuxGCaJH6cl6Ab3oBZpolKnZBE2CDun3A7LXEhZr74vtLC9GAGbWhSRLltKSPM97vDq0tB/3pgBMhDdc3zwAsyfJ1QdmVL+c9J//LUkvrw/V3vCTjjg/9MsJf/34H9H7Uj8ftf7J8te9VLg+I2khyvzyPKg/Mvov/rJ/xqhfilw/OP/xQbh+WdKKpFVJa5LWJW1I2pS09U3/mtF/N2J/AAAAAACisJQ189AXCV02XCcX5P/8PB/k//28YOTFIJ/z82z11q2N6wgARpT44f4njfufMu4/gL+r3eleV1zXuSMgICAIgrh/mQCMm33fbNntTvek0azUnbpzUyidnpWK+fNcwfYnfzs8/wOYHp8P/bh3AgAAAAAAAAAAAAAARrUtaSfuTQAAAACYiEm8ThT3GQEAAAAAAAAAAAAAmHbvAQAA///oFUsF") 12m41.564188218s ago: executing program 3 (id=130): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/wireless\x00') r4 = openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0x5, &(0x7f0000000100)=0x20d8, 0x4) preadv(r3, &(0x7f00000026c0)=[{&(0x7f0000002700)=""/4088, 0xff8}], 0x1, 0x15c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000004200)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r5, 0xffffffff80000800, 0x0, &(0x7f0000004180)={0x1, 0x6, 0x0, 0x0, 0x3, 0x3, 0x0, 0x6, 0x1}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(0x0, r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)={0x28, r7, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSCATLST={0x4}]}, 0x28}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) mount(&(0x7f0000000180)=@nullb, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000040)='vfat\x00', 0x800041, &(0x7f00000001c0)='discard') syz_emit_ethernet(0x46, &(0x7f0000000280)={@multicast, @local, @val={@void, {0x8100, 0x1, 0x0, 0x1}}, {@ipv4={0x800, @udp={{0x7, 0x4, 0x3, 0x0, 0x34, 0x0, 0x0, 0x2, 0x4, 0x0, @empty, @multicast1, {[@generic={0x4af3dca665480ba0, 0x4, ';m'}, @noop, @generic={0x0, 0x2}]}}, {0x4e22, 0x4e22, 0x18, 0x0, @wg=@data={0x4, 0xffffffff}}}}}}, 0x0) 12m39.051255075s ago: executing program 3 (id=135): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xb18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f0000000640)='.\x00', 0x0, 0xdd) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x1010408, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 12m38.796186222s ago: executing program 3 (id=141): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2d, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x4}, 0x50) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240)='//\xf2/\x06\b\xa30\\\x00\x00\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas\x9d\x14\xe3\v\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7Gl\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000340)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f00000000c0)={0x3, 0x60000000, 0x2}) ioctl$FS_IOC_SETFLAGS(r0, 0x40046602, &(0x7f0000000240)=0x400) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r4, 0x100000) 12m18.173653699s ago: executing program 1 (id=216): r0 = semget$private(0x0, 0x7, 0x191) semop(r0, &(0x7f0000000240)=[{0x4, 0x6, 0x800}, {0x3, 0xfffb}], 0x2) semop(r0, &(0x7f0000000180)=[{0x3, 0x5, 0x3000}], 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) semctl$GETNCNT(r0, 0x0, 0xe, &(0x7f00000003c0)=""/153) r3 = socket$unix(0x1, 0x1, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2340, 0x0) close(r4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000000) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd24, 0x1, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x8, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8004}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) 12m13.220008413s ago: executing program 1 (id=226): syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x10201) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = add_key$user(0x0, &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r1, r1, r1}, 0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)={'md5\x00'}}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, r3, {0x7, 0x1f, 0x1000001, 0x5069f481, 0xfffe, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000041c0)="412e450a2a7b9586d1e6e9de257afc4fd60c8de430c0d6348b2cf1db8d070a539de9c1e91a178f9240dbcfe303566018f6c20c55d643a2ed46aaacf49ca491ee2f06184bdb548778a2c56e56f6b40b994419428bbbb9dfa5f9593511ca8ae1c088fb0ee5da72f505000000000000002c04754204f194ae6ceff4570d44496eeffe619998eafc7167d22e1c6aa73e89ad19224e35130a37cf68d5c41ccafe59b4b753a26e06c4306d31d78de6cede97c06e3ca2cc4af66b7548268efa91621ffca2655d2c8f1a9bb019b88fa729cb3d32f72c098c44898d42c42f39feb4faead93980726c236129acdf31c01f1cabb5ca3ec4e45eb5e6e59912792b4976e3f2b560c861d49b539d8e1870040a8cf190a8a767ec067a8048aac53336b44669d3d425843ae80681a7c02a5d5a3d90f355fd4a6ac277e75230d558f0df20cb323cc65e9b5a258cdd669c8a9534e4aff09a8fe89b124748c9e756c28789c2152a5142bc0bb205e339d43bb980b3f04a3c1a424a2a093966b20600a5410e0528fb35937c998eea19f01eaf2f39e16d85563a6737ddab3213ca1832f0afdf891e34a582f6a4ac81fda70ebc3fedac2fb3a492fdb40b91021e5d371d990064cd1f7c2c1a6472dec7505f9a4940057a3e57fd53aa3cd2eb914e073a19b6e925f8553e6875c093c7d19de25861fd9640f0eca4cda0467f12126daa2e0c6df7d4e4babe5a6e59e8391be7700790315b6b8a8aa74cd6d3f054aceaeda79430676b67fe25c9029e0894b413377fc4d8300d9f9338fadd07e4c80cac08113df8971a868458c47c06fff0c1c4bfd48ea583e9e76ef103d42c233b6de10b30612cdbeb6b60a6a4dbbe2da63cc2dd4fb93cac65af3c1279274f4af0e2c5b96e6068aa5b41f7548fb72b0c142351f64446db7425115b89132b5589ee642ebbde655adb2d7d1117456a6e4f2886879b42baf85e05d53e2aceea9c3830673bdc4d081675fe76b994651af9c3f16b7513834fce4654f84558a8308fa677d05bffcc893d9813bf87c5ec520cd66ad58dc06f0c47d253cd36dfec82980fc8dbdcd4b1c037c2b30bef455984f3e8ed19d69e185fe4fbdda2c2517ec9abfbb4841252e650b6bf56fdeca9a4ee3c311de3c6859ec14cc00e95323c57c02fa894d83ea17944f3112fc19a7e11335d7951ec6dd5b4f06fb9b637313a230341ea5da6a7a959e707d0cd5fca60a6649c8df8d6c17e9a49d230e5775df14e4b43aa3420bd0b8814ec7360ab1910e69fab8932f7646d7998bdc2e8ec354c52da21ed83fb7582cb9d37bb95f144974f72c7b0ae7b42945768fa8ec0dd6daba72d05809670506ef10542a2201b00906c8af64e3e13a10f180688c96549b2d3d6b04403fd571e7b132891dd4b7cf37aec25ca1e9190c17aaefbc31e059915c12c232fb7097e9fa6f35fbb265c7102db62e2264590c583ea90f1aee3f166af81430d9084eb0c760ebbb16049c9fd1fee6ce33c8ac205e3ac9c275531feadfa4054e0c027c26beb009f54aa72b864d39bb11753f77931bb960276db33021c65671e57b3708bbf979be222e8439d71f58ca87cec7a054517af398a42731b580717377a54f139e2c46813cbb03d98e49c26f4ed54d75e48573cd06145f913f4e313eeee837496dfff75aa722fd8486c45f9c959da12ae48ba4a10712120a203e2476c7b96031d8f8773f68344e6fa21831287655aabbd594e9f272eb1a7315d2d79b8bcd5e63004cd106f80b1e40a5d9e428a01bc58264f4d63c2ee9db6efa70607a642aeb883bf4b9fe009d7f09c16b05a2c9b73573e9019e161ebbdc1fc9b9cd0c5fe1b57adcba2d0f3a767ad59aafa159b3dd181f0601ff95e8af8b5410e56c81ffb8ab35b1e04af35dabf69f08572e69260b72bfd502c5a0de627fd3fee44bf1d4a261bd356056c5739398e3ff161beec1240a089625daffbc61dc5e660c274565477a0ff1797fefff04a98704802ab0674ab72d400686229608cbfd2ca20f4e62495e8b09de9d180c47375bbad72f4474b67d56104b4b466192be60f7aa668fd0a4338b856f114311842ee806d6488ab09098ed9de0e21bcc8b42a5d5713d15eca108fcc7a65d6b414a112524a6e1418644508dd957147a92d4399d13faaf01cacef40549cd11900f9aa32a8333f55796ef25d33c554a308da9797cd0ac25888311b0ac88eff0be7a36ddedcfc2b095abb4d5a6a4edbbad67b70cdf60c7ed0c5e040ced90edb3322ef684332358942ede9191b431c99b3abf8f9c50206479f0ac118c0a99df61fb9c90d846f41caa6a2448fb7e15640965e051c2af4ee72a5cc7c962bacff7019615c10e6c3054e2e5792df3aa6e2c33425552148466a88568cc79b6edebf0107b7d3d24423a665d20c3a1c0f1a6b34eb475bf875912115914cfabcf394f8a096d64e5dc95705074fe5e985497dcf052b9f748b9d4688859c0200fa43719e4722ed6c064c0efa7e07beb2a26fd724b63537fa0eb506365d5c029cd8dce7dd0a1cb9d9058c061739734af6be9e880fe7e28a211a4c368a7babd1107110ecbb384b274cc092b9511c4abde2ddd863162e2739984a9f3c0a76e3c530a27d5e385f4a3b87607b2a944e09d28239661d27719e22c0a657ea383c30859ca29cdb8fbc79bc83e995dcb361743a7e195650c37e570b768a0a1f0b118fa5be9b3c838326343ec5b376d5ee040ee29dfd868cccf9cfa4591151f519cd6e2ae1453a58aa92f90ee5be11ceb8511ab743f399be0a190eeddfd112336866831c3255ef6520d88b2581ea3767f3df01a38d9b4656f2a89c5df41443291a795da45c8a846015cd041bea0dfbe648348b10ae73ce43d9017182792cd9172eee642c549a530cc1f537f9aa70ca63792ba4a86a713ae09b917136e5bf1506ad7f367d8d2f77f47a2318facd109bba9b1327b5db9e4aeffbdcf414db761eeacc227a15cd72aa52c8ede33bdbab9de9aa1e8f470a388013d07f08777e2131bbd4856ab5c1c38d03ef407197ccf24e8b2a8db69e78f9d6623033c453541bb79f9e0be9a55588e2e54fce65fb785467064a146c4bf218068b5e3efdafaf93a98253becaef226cd79468ff1bbe0c9d43877f5cbb5844fd8957f15d3ef208aac11816585cdccf039c36b429d3d7fb634054fd0f09c8abea3746a6b7379142abde26d998ac7e39b94746c60c09f86ddbd7497849d1ef839730672449f35a3c3253666e9fc053ac1c518e44e0b84555be507f7c00fa9e4864b4bf40ac3d93f12001eb780a779e655d0633803268c094ae161a0efd652003d6ac47f9a6c28d866b56233f371627b01e0fe9361dca611a28841968d4e12cb73d49ce08fe25de4a90b2d34607202b20e71f5e1eed38e17d0a2748f548cf61735f4c9cead1cb93b11929d906d65fc60f88e6919b7b5a1014e6d408bce9c8cc832eecf9147708fe451891717d2ed99dee70773feaa97985102abd3dd05c904c28898afe060621db6564887bc4afe158fbe1d819136a1ac1dc9d8674798a93daf5255460b50c34496205834c668db4c764e76ebb6cdaf5fc44b881cc2ae87b4a7cc045143f96b1620abfd0f116e673b335beefdafa1e58d9194e010cb78956044646da5ba853ce981667f2b8e5001c2df437c9d597ccd2be7d2887f5cb7aad0539abb3f9db1c8f5cd4d7d831946ba1c1aa8737c114fec1ac9a82519f57cb48c49b7f62e9eaa89f448df33fb307cd0036c70b490ac340f7d04e14f32bfeebb08a9d5bc7bbef8f231ea09311d4c82cc55c90eb53c6c003cc98a34dd3c4ec2d8b3a655a78e16e908f368733d0a02b36fe963e2d80b5e6f7b2e3aae3013c900c76e4d56e8348bef221f8a642e692c23b12520fb68c793e789eeeceb4efb2097a4d5952d144094cd7be6edc933d257f6230e962d70ba42e1b07ad9eca0ccd60d3d9a6e06b73ccf96a8aa490ed3bd58bf4d79db65355ae145b54be004e464f4dd23fb8b1bf15e13838116083da67186513652608e37c8f847b2bcafb57bcefc7efc8c8182c7d708cce5d14695b4e618e77f8e7be81f27a05e415fd37ac21507a665b2558daee5c0b0859fedfede8c03f181ef5e0ec0da6caa3edf402dd73bcb4026c489a7cca8ab700d3e9f050006c32768a16e8a48e48ed5750b8cdb7ad1fd12d4cc8333d324d6c83905303fa7013fc02553b587544affe38f1a95e0c4c39740d63b6d387fc89b30bd5fd745cb64844b13897ccf5cca135f7d39e03ce8adcda919d86b25b52764b0a0c4f07f88df68868415de13863df84a7e8d355b09cf90e482eb4174fd01f1b371a4dc52f3c89fc3a70c71657aa5d7573ef9acf4d2b0b321c41ff2640515bb43637ba2288ca0bff2e2a3a998ad8294c52f9edfe0a4ee0a3f8ed5b4b5c43319bb9c58dd07ea3237d7bb62cb086e7ea4a81cba2cdeb28794a09c275a704963110b64720bd089e3737ee1a91e348b5e97b63e1724de1fa9f49961d653bbb47b6fa993b035cf59659bcd0306180645162568abf51127845cbe6c19b9d69657db4258fa5e8428a73eff6506bff474c2e302ad5559ac8de44c6f0baba5e2e579e7d7f9d9ebf540674432ac11d92bfc9abdc24126888b533f43bd6f293b0bc315915743114a35308a0ee2e710522137918a2b09ddbbc7a2313a2a6b85a1ad26f14dd70072651c8300ddf6de29704b716ce1bc431c66ccc96731f46359a9f6850976c96dcb5e0ee47446f50b6b3ba90d45224066e123ad3854d877c0cdd9325000ac0d6813c30cd43d3e150335601724ca3666458dc4c04f6562296982353e155d5255c9008c0b46d21a678c8fcb3aa8d6574476e0458eb0a76a6cb50f929ed218cc4654cb4f95fb3afbc2548b74acc312563375a19e55d488599488dfed4dd31b39f29ad61dad343dfca3b45b316a34e7a7bebd2b0f562a9e69848d13fc80a4fa52d0f17bd15d9e1fd39a7dcc86128d14493805d105a745673bddea68ca74ac09d95cc7412d5be2cbd0a247a81dc9e148111e22cdf3375805469226ca3538f960a6ba6aa0eeeb87c784ffb1bfc09180a61be3c7c535fc6d593c3b3f4de21b8c3eccc9021e80fb07dce0aeb3b023bd55f24356f646791ba80e5ca21ac092a069ae0a22cfefc08c23cc7aa69b570bd17cce9de15871d363f167288f99f04761caa67f12c949466493f661d39ee4280c955446ff5a9bb14f2d1ae21cdb91a5868e0c52097cf380f571935b140562922763f1b79c3709b949c57a00b08828ce9e685f6b234b5fe3c62d9feb249ce75e81f5efd556c14d5da24dc0554723fdbe52659969a39f470e82c50c4777c908628436e31177af1125d5f70ff627462247e5bc20c47ef75f369174586d43d42f7eefdd47fefa745badebca2a881ccc018ea411cc8a7a0881422bee8704bb98e6bea9fbec63441fb45d7ccfd436909b57a2b60b788e15bda3ca7663b19bd84d0879deb639f10def9a99d42a4b9a4fd7fecbf6d2e7598678307ba9a5b6f143c27cf1ca41e3c904007bb762cd5df6e63c4cf422c2ba959e53bd8e5664cf5df6a91a4bc8cebc52b22f30060fcbc5ead53d38eabd160c1da4cab8aa95c3640ffd78074aa2cbb05cb8ea90a0c95a4a1b2be1ee94f238000f1faffa069d87039f13f5f84ff368aec5a0b10020232b9fc954a6c22573ef48459e574d48a4845837e1d6ef386738ccedd093d4d5bf3a3f790c875ba7449d03397642feb71100f2c25ab2cadf0b0802544a2095a51b19cdece623b17d420b173a99c081f8e229b6de3c680d6bb39bb98b479517d77cca581b81cf856753a44ebd64cff111fb8ca37ea45d217a3fca44a083e6c35b0fed9f8f7631178d15e88f86c85f1ce68c900afdd1f7e5b8bd4ef3f58c447b77d3befc49180df7a5eb2ae8ae33b4ef573f3a425da8a60cde84d8eeae6d6399b9fbbfa0fa8d448b25c7f79b7554d0b02b0decbc74ae8560f630af596313fb33d442a410061ace0aa7a440d5e31ca8bb2cc495c4f0b672edb011b0c5f16781836df7f4af8329143d5a1a99d7b18ef9f774c4199d635848cedebac82637a03a189c65bf667503737c75b6639ac65ad424ca475285437e6f19830b36549f607ffc387c8b11a34a838159376a6335afaa045bd2bb04e279dd72436331d07dfbd72e2436b27f0df23a266fd15cf56d1a9e93aaac8901cfe49a3219ae36c5c65c75e5c708fb82cac4d6a50726509ec3a7d32d54cf584ae353a5bff75a6de77a0b240cf8a0a72817c9d37699ca89c96e0e0d96a7665ac3a7d1febca1a1d79e2cbde8025c271360e2f90048b2d9fd56f45c013e001dad4b7785be69dc01f8a954ef7a84455986fc5c9d5167d91808efdb4476ed79f99563d887cfd4e99809d9e388501dea228cbb3cf3770082dc566455251fd9c2c742963c33500618c6ec99e0bef007408a0462a081237be4c6e5db0258d4be5fc9cf63fd1ace1f4166c053b0fb84fe24917da1255cf40bbb1b45644f6a7699cf802a35a932c374b1d62013e6afca3787627469994c02f622ab877ed5491fc2a89eea60e4e1628da89e3ad600ff6442e4ebf20e47304176b6a1703c094b3cf6d7fbbddd8d8fa5a00f28b4d8f43d88487e9d4531071512f2027198714a8d1cef126775547fc74f2a35840510f325e50361be76557767560055e084f2ecaefa0dd8ca8215301a7a887d2eaddaeb1f5c3dfdbd2cc1ba5f02d4426b98c0f861c5f724405758f442560ea6cd1d953456cc4aac6642ad61c03dbaffc2364d8ec2ef9f483c70355139d1fbd9617ab3c7eedf0b8963c1cfdab769180db43c416a90d9fdf3fd0eb2f81187642b4e2a09d6462d27527fdfda31f7b262501749dcfc6c184983f9923424131d05cc811cacf5c2c87e8e6f135349e68cde0e8997bf1dde248e5124d5dca2681abdbe58d327a8edd585821f03fdd4515728f1336495ba25c9bba56a3f706d60c35cbd0b40d0ac0583a981f9af08510ed8ed0a726e5472f8995af3837fbf1e89587633d2ef944868a153919165778e963710872af12faf96c0919c638e5affa97104471ba6e178d27602f96b9546ebe52190d91be245be08742b96389080676a566d3229e593e4f56a76ae4c58113c6adc1088703b1b92dafe32a5600e14ac1e71df829dfef425911f16a2b91f693599ecabf93065c6c4f5fefca8d4ed095599113529f65d9120d5252f577af95b404979508c343df54e4d239720e7d3a861f1dcabfa69e12d655c8a026c10a4df279b139fd222e561d205ac9b45c1054f8699eca594fb23886e0de565186597766dd5e40f74a423d5708dac254f4172f1089270988fb18715813f13ee4d131b64dd517c7e77f27f804b229f5339ac2f483b14739ac33a9645044d3010bd77ed18fb117f7b11bb51c4ed683b59e28bf25a58f123dfbeb1f0f21f03d9b57d8e61d59b311037a5b757b03ca5c95e0eb73922c6918530c99de4d6733640f2b8d13bebce31d4f5e27aab201101e48cde23a0d7e87b9511949d812e3187ee5ff11bc5858c022ed7b00790eba32f9ef7e134ce5f73a01269ca971b40e62133eca9d596a768686d6390b2c74602f6dc597faec3ed9d9658102d99c9624c1a97d00d63853578afaccc7e30a77fe054ebc23eec45f608f996fd015cd6bd50a111360f0790eff6ffb1ea59d13c8e29480bd96217188f97e53a1f5d9eae0a2badb4fea52f2bb4f8cb04d0afd99e7371a978a7d7ef473f77ea6738ff84af655313a12db24cff692ec7e282245ae9a42338db814593448f7115df3dc3f4e2faa2c2fdbd68f679d6aba01a15031347bb17d8bf8f1fad0ecf365e9dcd32e69803c5c05f4b47adbf8a21af7e9fb327f267df1c914486389a9820edf0a03bde6ef388c255761e439b2f7e1f9c1c3c95bd30c502197ab37f76b52f0d0675f366e919be19329853767bba34a540fb75bcdcc9596a4cda254a660e11bed5af9d8646ac4b7d6d7aa5d7c0005879b6d08058a56c3d3a4d3d401b883153fa7f2f6a6d34dd010f6b9e7b4e457b9ff5a5802d7723abb35f9dca0afc10f6791824dbe0a7725d534e7753445b7268d90145b6438b93fc475f44d5d678d79da6c5770f3a9106f3cffbabe4b88cbe7eda9b8a495be4f6717b0fbee6fec78c86031b6d878d47e357b2089de3e6dd19a265552553d1f7da53884ef84d0eebe782791c48a9c68a28d8ea3bb70c922b01dc20b2cd05cfb276e326651398f766f5faaea54a41da597cf6b50f3d5ebc634185b99069126b8d935c6bc42c47f2109de42091ef4ade3d87cc44aeb78709255501e64f34ac2d4b2725cf7777315f8ca9424bc9d61a896a93500faa6cf5a5aee1fb888e17b47a38a667be2ffa3bae46afa88bfd8b5b6e1186d6e41b9a4e490591043372c23f36fb48d80caff74cc349adc92bb25f701738c809ccf74c47afa193795ee67bc58ea7fd85542fa7e70218490fff212163401cfde016df2f42496bae403d5391e53fe200f758bbcdead0fe72c77861889b9632a257229c35bdfe8fa78375b4f5c768b9c60cafbde1f00aff6ca1879f6472f28001f5f13d4d9d6c3a90e04d8df09873550daa8262d39efbe96a79c697fbcc9a7f27c9f6d782d5d5f6d024b291376e9cc40d902f809072e1f0f2c2ab88ce3d074e88461f5971853e7be749943ab6e25e25e8afa5042dd73407f49b50841c7782c54eece62ec2beef1f16caf1ca5989427bd2726ca0fee33e303702e9892e4382e92c3f3a03a6188f39762db81819c7e12b424be8fd964dcdbfbac00139e8c5a6200506f13f484ac34ef3d26e7cadd53cf402117419c1618205bfa5382486094bd55448f2b1aa4dbec2289189b601b1bbf5792b2a641c6f5dd19cf24abc72fc5264cf11f6b44a4929267a02cd1de1b602b9de65a6c06640aa0f76109baa90d66eeb17295b1711365b7d6835a2dd55b7fe868c59453613240643c847a5b48d27897a58dda63e579c1bba58350550e147b190f0a2c9a5ce719d627ce3302028b4b6801bbfa8cd74874ffba35817c0eca034d19210950796807125fe6065dcd47d7c870ed2db5c00cff235e4154e2d89ec2a09a87551f9b7ca25d519b5603c0c33d2cf72878199ffab567fc5e093529b89d1163587f3564ba8291d2d96cf9762e7f568e786ea90849f6312c1a10f45d61600cd45c48e6870a7d76c913f9c4497374fc04401cbd11f7710740148234fe8f041f24d0278fcfd48846e6aa49f05016fc332dc5d46b4a26574fed5c0751cebb9f7ab4cdbc1ee011d82d6ef95c52c9df8eedac3ab5cf30805f23d88d4f707601f8e6c606b58f2fe234e948d6756d430a5c4ec76a33874886c8fb484059b47a9bd198a61a1896419288a9e81d0969dec778a53e8233f0f63bd0134e5f29825e7817e7c8ccb7d9acd8f86ac9d3af78c43df3036d7934dd294f2bb12063bee52c547d27a218145befb0ca96cbfaabd39fa245b51c39f4cd4cf8db105f9dc46a7aaa8f7d06fa208120ce1ac49326179618fa2c8596c44e174eb7a141056b1d17689c10dee089c8b0867b8a757ae12251bbd68db5fba2be341275fb6ee379309f5cde9b31242b0b2bac44da74776fac141936bd96e3177161f057c820a8c22cca8cce29b158eb55aed0260253fbee70a6dd281d9fca23e0b0a38d46c76a95e1262f1cafcf0fc37b52e649a1ba1e2c0f97d10bbf4d2b5632cf340bce56736071d5885ec9b4e179100a0000000000000021e43fc21e89c6865d3ad424ef4a14efe8843ff3168c99ee395400dcc8755719d290c567c95a5e7d28ec1190ceee240084d444265cc801cd960f69b368359bbf06b8a4ec23b47c7bf9d4b16c701a1c4fb9e81abb55bf49d450b566ce03de939fc6f5c51291380086f8c995cdd4fa15a325601c4846a69f15c77f55c900270bc9ea5f406480cb0e3e89bc869fe8b7cec4fbef7e76283d50c25ab1b4d34d093a7df062990a925a9c44aa2661abd7d381a4d6cdb64821ef624dd51b72e99af914bca2f80c25b82ac6945df7c7582e6d0ce2cd073e35f1fc120a68ba210410db64592a9aa319b30f2b818c495750e1cea0610e27d52be31e52e501a3bd51b501bc51c2ec8592f679b6e55b9aa58d513fd2bebadc83ba76eb45e5676f130193e9a666b8c8132c9f5141681fbab324b555c5c890d488ac2dd00feead0a20fbd8a46391438e3193edc6fb89161cd864fca98f4f39a2893c933dcd13bc8c5d5a548d24862e8161c0fad7f33aca8c86791d620815fe3f0daddb5defd933d0c10097a7a98e67625420b6c0db7c3e17ab07ea64e6f0f53fdc670799e06a2e3a871d6be363a2639e35339361311e0f528cc433eacea4f79bf217108c7b1d657840253ffdea18bdd1f93cdee63e7a9b8dbcb4ee06162b253e09ea0641f2771bd9823dd210905e9ea495f43194bb471cdeb690e8890b03b50835d53dde1b572dd123ccc8507bb57a45e46c0efb8fb3d5596bddf9782d86dd911636eae2cf64b5829cf8893faf789be3fa22859accf688f5b5da6c29cacc96d477e23b63cc934f685b6e42e1655c9a9b94d6d78402de22b8d9776e3915391aa258e57467d770d65480ba2f6a94b0337965a8c659c42b4e90a14da4697d0c0a6d74774c94c52d8ecb694eee747bdaa6c3a6d60739db18c6446090eebba72e62ab88b0e8b88e728ba8cb133d8524eda89a2bff1c8414da3edfa6f83788331c8a7e5a8af2dd3682d4752190a3c689949abdad8350111373e7fb46151f54a10f79d91940e37efb05f9f157bddcfacf018b65a38ab614807c34a2786af4a1d48c4d1c1abd31815715f9d1b103992207fc664f12c82fd923c57d8e7cfb9f4af55182318d055c704865cf484206d60e34cf7fe9b6ce60b1772c5c7cdacb6695227d80da18ec1f98a434b1aaf9edb6d082f5663aed2bf267e559dca6b93d3ce34273846fc677f529690482df0a8f782b8ad7269f344f5f2b4d320a7ce2d2fa02284f8db634dc930c3e2b9a629245364acf35d41e9a14c88efde4e742ef1ea4b43d0caf2e70d4a617278823e6403934524debbd933e7676e441a48f630dc83cccd55d9032d6bf3dea97d1669c39fb865b0e619eeb3f5461e517000f5aee3ef2abdb87d3a76b88e140eb4644a9fbddbdc9e20972cdfacf00bffa3a1ca5f84122c2ebc54067cdaa23967eaeb7bbbfe44e5843382b834fae1f62a066688595e4ee67c7ff9858672355abf7893ebeb4bcf88a62b2237c6e6cec9aebe3f28bfc310ced3a590e88d4bd0f53289206deb9addbf6f3c02115ce4980dadfc112683ae250c2d438fd9c0f2a090dbf122a0072828db798bdb868dcd47384dd3f5eeebc0307a5b268683cd51f312e8f02b5a7746b11a97ac43287d9b9765f03c720503cfe6e0117660a4c00d67895224c4d42b032000a10d7a743054758a8f54941fd5eaf72498b678d1579b3de4e5518f90f1e3d32517d09d7f5da9d180215e66218e9dd64036819cf12638ce82712a6cc79a9ddb36e86814b797d72c2bc58b18ba439e99965f745b4fb7de2878e3186e3e7b835c746b0935f6c67e92e3770bd8d5eb4f66d8175ceb7850e418c55e574db891639aa77fc62bc45dcb734681ede8484d4d4109a9adb8c3d00", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r5, 0x20, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r4, &(0x7f00000000c0)='!', 0xb7f40, 0x407f0b00}]) dup3(r4, r2, 0x0) 12m8.847492551s ago: executing program 1 (id=235): r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) fstatfs(r0, &(0x7f0000000040)=""/17) 12m8.51894075s ago: executing program 1 (id=239): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$igmp(0x2, 0x3, 0x2) r1 = syz_open_dev$vcsa(&(0x7f0000000340), 0x2, 0x200) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, &(0x7f00000003c0)) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x2}}, 0x7, 0x9}, &(0x7f00000004c0)=0x90) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000000)={@empty, @empty, 0x1, "daf86eed51d59c3b227a93fc4bdb574c6a7264db425e9d015e14f17c0900497e", 0x7, 0x6, 0xffffff9d, 0xffffe6df}, 0x3c) syz_emit_ethernet(0x9d, &(0x7f00000008c0)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558, 0x0, 0x0, [0x7]}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x4, 0x0], "f4d8e8d21c240b99bb3e04ef080582ab69c6b142f504b93c9aa1b7e3b7c3197e140b153b6d8f000021b51f"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x6, 0x1, 0x9]}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x1, 0xfffe}}}, {0x8, 0x6558, 0x4}}}}}}, 0x0) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000080)={[{@usebackuproot}, {@nodatasum}, {@ssd_spread}, {@user_subvol_rm}, {@flushoncommit}, {@compress_force}, {@acl}, {@nodiscard}]}, 0xfb, 0x50f9, &(0x7f0000005140)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000540), 0x44800, 0x0) sendfile(r2, r3, 0x0, 0xfffe82) r4 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) ioctl$FITRIM(r4, 0xc4009420, &(0x7f0000000180)={0x5, 0x10000}) syz_usb_connect$uac3(0x5, 0xfb, &(0x7f0000000680)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1235, 0x8212, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe9, 0x3, 0x1, 0x5, 0x90, 0x5, {0x8, 0xb, 0x2, 0x2, 0x1, 0x0, 0x30, 0x4}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x48, 0x4}, [@output_terminal={0x13, 0x24, 0x3, 0x6, 0x300, 0x2, 0x6, 0x2, 0xe, 0x8, 0x2, 0x1}, @source_unit={0xc, 0x24, 0xb, 0x7, 0x0, 0xfb6, 0xe, 0xffd2}, @cluster_info_segment={0x6, 0x20, 0x2, 0xa5, 0xff}, @feature_unit={0x19, 0x24, 0x7, 0x1, 0x4, [0x1, 0xf, 0x5, 0x10, 0xb]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x2, 0x1, 0x7, 0x2, "957f"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x1, 0xf, 0xe, 0x6, 0x2}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x2, 0x4, 0x5, 0x31, "6d965a"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x6, 0xf8, 0x8, {0xa, 0x25, 0x25, 0x80000000, 0x68, 0xfffa}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x2, 0x4, 0x6, 0x3, "798848c6"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x5, 0x0, 0x80, 0x8}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x6, 0x9, 0x81, 0x3, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x2, 0x8, 0x8, {0xa, 0x25, 0x25, 0x7, 0x4e, 0xfff}}}}}}}}]}}, &(0x7f00000009c0)={0xa, &(0x7f00000007c0)={0xa, 0x6, 0x200, 0x40, 0x9, 0xfb, 0x40}, 0x16e, &(0x7f0000000800)=ANY=[], 0x1, [{0x0, 0x0}]}) syz_open_dev$loop(&(0x7f0000000640), 0x0, 0x22400) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x6042, 0x126) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000100)=0x10) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) sendmsg$NFC_CMD_ACTIVATE_TARGET(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x2c, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x7}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x6}, @NFC_ATTR_TARGET_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x805}, 0x20000844) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x181242, 0x0) request_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='*!:\x00', 0xfffffffffffffffb) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000540)={0x32957, 0x0, 0x0, 0x68245b64, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) write$FUSE_NOTIFY_RESEND(r4, &(0x7f0000000200)={0x14}, 0x14) 12m4.231435766s ago: executing program 1 (id=250): r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x1214040, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000340)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f00000000c0)={0x3, 0x60000000, 0x2}) ioctl$FS_IOC_SETFLAGS(r0, 0x40046602, &(0x7f0000000240)=0x400) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r4, 0x100000) 11m59.143530513s ago: executing program 5 (id=196): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ptrace(0x10, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) write$sysctl(r1, 0x0, 0x0) r5 = memfd_create(0x0, 0x6) ftruncate(r5, 0x2000000) fcntl$addseals(r5, 0x409, 0x7) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r5, 0x1f, 0x0, 0x1000000}) 11m57.612066425s ago: executing program 5 (id=264): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74) 11m57.390058081s ago: executing program 5 (id=266): socket$kcm(0x10, 0x2, 0x0) capset(&(0x7f00000002c0)={0x20080522}, &(0x7f0000000080)={0xffffffff, 0x0, 0x0, 0x0, 0x1, 0x4}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea3, 0x10, @loopback, 0x3}, 0x1c) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9584, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x101e01, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000080)=@req3={0x7, 0xcae, 0x6, 0x1b, 0x7, 0x3420df9d, 0xfffffffc}, 0x1c) r3 = getpid() r4 = syz_open_procfs(r3, &(0x7f0000000100)='fd\x00') r5 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0xfff9, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}, {0xa, 0x2, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0xffffffffffffffff, 0x40099d}}, 0x48) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="28000000010401016c0c3f1900000000050000030a000200000000000200000005000100011f36231474f016481ba06538c991948d0000"], 0x28}, 0x1, 0x0, 0x0, 0x20008081}, 0x4) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r7, r5, 0x2) syz_init_net_socket$x25(0x9, 0x5, 0x0) getdents64(r4, 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000180)=0x40) socket$netlink(0x10, 0x3, 0x0) 11m48.951570249s ago: executing program 33 (id=250): r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x1214040, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000340)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f00000000c0)={0x3, 0x60000000, 0x2}) ioctl$FS_IOC_SETFLAGS(r0, 0x40046602, &(0x7f0000000240)=0x400) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r4, 0x100000) 11m41.790812672s ago: executing program 34 (id=266): socket$kcm(0x10, 0x2, 0x0) capset(&(0x7f00000002c0)={0x20080522}, &(0x7f0000000080)={0xffffffff, 0x0, 0x0, 0x0, 0x1, 0x4}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea3, 0x10, @loopback, 0x3}, 0x1c) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9584, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x101e01, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000080)=@req3={0x7, 0xcae, 0x6, 0x1b, 0x7, 0x3420df9d, 0xfffffffc}, 0x1c) r3 = getpid() r4 = syz_open_procfs(r3, &(0x7f0000000100)='fd\x00') r5 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0xfff9, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}, {0xa, 0x2, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0xffffffffffffffff, 0x40099d}}, 0x48) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="28000000010401016c0c3f1900000000050000030a000200000000000200000005000100011f36231474f016481ba06538c991948d0000"], 0x28}, 0x1, 0x0, 0x0, 0x20008081}, 0x4) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r7, r5, 0x2) syz_init_net_socket$x25(0x9, 0x5, 0x0) getdents64(r4, 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000180)=0x40) socket$netlink(0x10, 0x3, 0x0) 11m2.453898924s ago: executing program 4 (id=359): r0 = socket$qrtr(0x2a, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bind$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0x1}, 0xc) 11m1.269528236s ago: executing program 4 (id=362): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xb2, &(0x7f0000000140)=""/178, 0x1f00, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb5}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$inet6_sctp(0xa, 0x1, 0x84) openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x2002, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xb, 0x0, &(0x7f0000000140)) openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) 11m0.134770987s ago: executing program 4 (id=364): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xe0, 0x8, 0x7fff7ffc}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000180)={0x1f, 0x0, 0x1}, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1a, 0x4, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYRES16=r0, @ANYRES64=r1, @ANYRESDEC=r2], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x0, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) 10m59.781340187s ago: executing program 4 (id=365): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth0_to_bond\x00'}) truncate(&(0x7f0000000340)='./file0\x00', 0xb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000280)=0x6) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000140)={0x1, 0x16, &(0x7f0000000ac0)="e2868f4aefac7a67561422c516dc175845e997f81698"}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xc8b93000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) r4 = gettid() sched_setaffinity(r4, 0x8, &(0x7f0000000540)=0x8) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) chdir(&(0x7f0000000300)='./file0\x00') r5 = socket$nl_xfrm(0x10, 0x3, 0x6) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) r6 = fsopen(&(0x7f0000000100)='squashfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000006700), 0x2200, 0x0) read$FUSE(r7, &(0x7f0000002b00)={0x2020}, 0x2020) read$FUSE(r7, &(0x7f0000006740)={0x2020}, 0x2020) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000001a00010028bd70000000000002201000000000070000000008000300", @ANYRES16=r1, @ANYRESDEC=r5], 0x2c}, 0x1, 0x0, 0x0, 0x93d742ab929b3387}, 0xea5bc50b6199d77e) bpf$OBJ_GET_MAP(0x7, &(0x7f00000004c0)=@o_path={&(0x7f0000000480)='./file0\x00', 0x0, 0x4010, r0}, 0x18) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000440), 0xc) 10m58.675738726s ago: executing program 4 (id=366): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$btrfs(&(0x7f00000003c0), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000080)={[{@usebackuproot}, {@nodatasum}, {@ssd_spread}, {@user_subvol_rm}, {@flushoncommit}, {@datasum}, {@acl}, {@nodiscard}]}, 0xfb, 0x50f9, &(0x7f0000005140)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000540), 0x44800, 0x0) sendfile(r0, r1, 0x0, 0xfffe82) syz_usb_connect$uac3(0x5, 0x0, 0x0, &(0x7f00000009c0)={0xa, &(0x7f00000007c0)={0xa, 0x6, 0x200, 0x40, 0x9, 0xfb, 0x40}, 0x16e, &(0x7f0000000800)=ANY=[], 0x1, [{0x0, 0x0}]}) r2 = syz_open_dev$loop(&(0x7f0000000640), 0x0, 0x22400) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x6042, 0x126) sendfile(r3, r2, 0x0, 0x80000002) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x181242, 0x0) syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000200), 0x1, 0x168, &(0x7f0000000240)="$eJzs29tKOlEUx/HfqP9/ZudzdBUU1E2Op4Lu8lFEJ5PGkuxGCaJH6cl6Ab3oBZpolKnZBE2CDun3A7LXEhZr74vtLC9GAGbWhSRLltKSPM97vDq0tB/3pgBMhDdc3zwAsyfJ1QdmVL+c9J//LUkvrw/V3vCTjjg/9MsJf/34H9H7Uj8ftf7J8te9VLg+I2khyvzyPKg/Mvov/rJ/xqhfilw/OP/xQbh+WdKKpFVJa5LWJW1I2pS09U3/mtF/N2J/AAAAAACisJQ189AXCV02XCcX5P/8PB/k//28YOTFIJ/z82z11q2N6wgARpT44f4njfufMu4/gL+r3eleV1zXuSMgICAIgrh/mQCMm33fbNntTvek0azUnbpzUyidnpWK+fNcwfYnfzs8/wOYHp8P/bh3AgAAAAAAAAAAAAAARrUtaSfuTQAAAACYiEm8ThT3GQEAAAAAAAAAAAAAmHbvAQAA///oFUsF") 10m54.86590926s ago: executing program 4 (id=373): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xb2, &(0x7f0000000140)=""/178, 0x1f00, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb5}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$inet6_sctp(0xa, 0x1, 0x84) openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x2002, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, 0x0, &(0x7f0000000140)) openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) 10m39.226182702s ago: executing program 35 (id=373): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xb2, &(0x7f0000000140)=""/178, 0x1f00, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb5}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$inet6_sctp(0xa, 0x1, 0x84) openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x2002, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, 0x0, &(0x7f0000000140)) openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) 7.246790218s ago: executing program 6 (id=2104): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="240000001e006bcd9e3fe3dc6e08000007000000000000007ea60864160af36504005425", 0x24}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg(r0, &(0x7f0000003b80)={0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000002980)=""/4096, 0x1000}], 0x1, &(0x7f0000003a80)=""/247, 0xf7}, 0x80) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x102) 7.223137139s ago: executing program 0 (id=2105): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x4c314356, 0x3, @stepwise={0x1, 0x2, 0x4, 0x1, 0xbd5, 0x4}}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0xa, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_sctp(0xa, 0x5, 0x84) socket$kcm(0x29, 0x5, 0x0) dup(r1) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @loopback}, 0x63) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f0000000100)=0x5, 0x4) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x20102, 0x0) 6.771495771s ago: executing program 6 (id=2107): r0 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) r1 = syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0xbf7ecaf90944b16) ioctl$BLKGETDISKSEQ(r1, 0x80081280, &(0x7f0000000140)) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x162281) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, 0x0) r6 = dup2(r0, r0) ioctl$VIDIOC_LOG_STATUS(r6, 0x5646, 0x0) 6.362185712s ago: executing program 2 (id=2108): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x4c94d1e) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYRES64=r0], 0x14}}, 0x8000) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000140)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000600)={@flat=@binder={0x73622a85, 0xb}, @fd, @fda={0x66646185, 0x6, 0x1, 0x28}}, 0x0}}], 0x0, 0x0, &(0x7f00000002c0)}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="ac0000002100010026bd7000fedbdf2564010102000000000000000000000000fc0000000088c35b39378f86d42400004e21ffff0200a0a03a0000007a65425d1c83e6e6d868fa5e02bc26542cb316ea380442bab00272dbc39886febbf38fdf6b3744de22701d687f8c74b189979adb4c0ca26aa77cbf069710b4d005", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="b36b6e00010000000a00100000000000000000005000110000000000000000000000000000000000ac1414aa000000000000000000000000ac1414bb00"/88], 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x20000084) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x400c0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYRES32=r1, @ANYBLOB="00000000000200001800128008000100736974000c00028008000100", @ANYRES32=r4, @ANYRES64, @ANYRES8=r1, @ANYBLOB="4976d600000000000000b7fb506cc6034f5d8e37cb57b9bf7843160d99daf2480d3e582171d3b496679a3f6300cc7c4e9ffe"], 0x40}, 0x1, 0xd, 0x0, 0x4c000}, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'ip6tnl0\x00', 0x1000}) socket$kcm(0x2, 0xa, 0x2) r5 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_STOP(r5, 0x6f2a) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'pimreg\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getpriority(0x0, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) 5.317560619s ago: executing program 2 (id=2110): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000c80)=ANY=[@ANYBLOB="bc000000210001000000000000000000fc020000000000000000000000000000fc02000000000000000000000000000100000000000000000200002000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000500011"], 0xbc}}, 0x0) 5.172141673s ago: executing program 0 (id=2111): r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_DSP_RESET(r0, 0x80044dff, 0x1000000000000) r1 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, &(0x7f0000000240)={0x40, 0x8, 0x2b, {0x2b, 0x31, "f70ba381030000000000000000cb4fdca0560fb30d54f365c5b1d43ee44fbf6fc93f0808251f559626"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) rt_sigtimedwait(0x0, &(0x7f0000005c80), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_usb_connect(0x3, 0x36, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x4, &(0x7f0000000080)=ANY=[]) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x70) ioctl$TCSETAW(r3, 0x5407, 0x0) 5.144099964s ago: executing program 2 (id=2112): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000005c0)=[@in6={0xa, 0x4e23, 0x0, @remote, 0x3}], 0x1c) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0xfffff7ff, @loopback, 0xd4c9}, 0x1c) 5.083842875s ago: executing program 2 (id=2113): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x20, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x4, 0x0, 0x300}}, 0x20}, 0x1, 0x0, 0x0, 0x40084}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x401c2103, &(0x7f00000001c0)={0x0, 0x0, 0xffffffffffffffff, 0x4, 0x4000000}) 4.973744378s ago: executing program 2 (id=2114): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) ioctl$FBIOPAN_DISPLAY(r2, 0x4606, &(0x7f0000000200)={0x190, 0x640, 0x3c0, 0x280, 0x0, 0xc0e4, 0x8, 0x1, {0x5, 0x8001}, {0x0, 0x7}, {0xb, 0x2000}, {0x29, 0x10001}, 0x1, 0x80, 0x7e, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x6, 0x8, 0xd, 0x7fff, 0x0, 0x0, 0x3, 0x5}) r3 = inotify_init1(0x800) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) r5 = openat$sw_sync(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f00000001c0)={0xbf48ce7, "1803c80300000000000000ffff94d4ff000000000000d63175a60600"}) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000000)={0x2, "fa02c80a3a1e9d4b9aaf000000008d674fe69b5b7638dd031dd7504fe5809639", 0xffffffffffffffff}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r8, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @loopback, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, '\x00', "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "74016aff130000fd"}, 0x38) sendmsg$DEVLINK_CMD_TRAP_SET(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRESDEC=r3, @ANYRESOCT=r3], 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x8000) sendmsg$inet(r8, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="e400000000000000000000000700000094040000865400000003051005c3e45b3e088e6f722b0df22b3c00126eacb1ceb7f260dab33486c73af20b59020788c2fdffc9060c47629611bad4427b49310104076002042a03051106b63d39a9a516678325f283800b5d83237b00000000ac1414aaac1414bbe0000002ffffffff00000000ac14142de0000002890327440c7b302e7dc6a00000000807174bac1414aae00000027f0000017f000001ac1e10018317eaac1e0101ac1414aaffffffff64010101e0000001831b0b640101017f00000164010102ffffffffac1414aae0000001000000000014000000000000001a01000001"], 0x100}, 0x0) ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000240)={"0e337b42cc00d331ff0007000000000000001a00"}) setsockopt$inet_int(r4, 0x0, 0x17, 0x0, 0x0) inotify_rm_watch(r3, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r9, 0x8, 0x1) syz_open_procfs(0xffffffffffffffff, 0x0) 4.763297174s ago: executing program 7 (id=2116): socket(0x1, 0x80802, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x24000810) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r2, 0x8010500c, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000001800090000000000000000001c140000fe000001000000000800010000000900562df27baa757c520188240ceb2df49a91ee799ca4e8afa3e0b2831107eb85ea37da737d10c48811180185ac81bd43e2cf0c1ab72ee5efa9015cbb5a35be762bbb4281032a039a95b16ea5a9ac185925d8"], 0x24}}, 0x4) add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) 4.695506025s ago: executing program 8 (id=2117): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a70000000060a0b0400000000000000000200000044000480400001800a000100696e6e65720000003000028008000440000000180800034000000007080004400000000f140005800e000100696d6d6564696174650000000900010073797a30000000000900020073797a32"], 0x98}}, 0x0) 4.492129231s ago: executing program 8 (id=2118): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xab402) socket$nl_route(0x10, 0x3, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) socket$packet(0x11, 0x2, 0x300) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) socket(0x40000000015, 0x5, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0x10, 0x803, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x1, @local}, {0x2, 0x4e23, @local}, 0x1d7, 0x0, 0x0, 0x0, 0xdd71, 0x0, 0xc, 0x6, 0x4000}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 4.179575639s ago: executing program 6 (id=2119): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth0_to_bond\x00'}) truncate(&(0x7f0000000340)='./file0\x00', 0xb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000140)={0x1, 0x16, &(0x7f0000000ac0)="e2868f4aefac7a67561422c516dc175845e997f81698"}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xc8b93000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) r4 = gettid() sched_setaffinity(r4, 0x8, &(0x7f0000000540)=0x8) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r5 = socket$nl_xfrm(0x10, 0x3, 0x6) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) r6 = fsopen(&(0x7f0000000100)='squashfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000006700), 0x2200, 0x0) read$FUSE(r7, &(0x7f0000002b00)={0x2020}, 0x2020) read$FUSE(r7, &(0x7f0000006740)={0x2020}, 0x2020) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000001a00010028bd70000000000002201000000000070000000008000300", @ANYRES16=r1, @ANYRESDEC=r5], 0x2c}, 0x1, 0x0, 0x0, 0x93d742ab929b3387}, 0xea5bc50b6199d77e) bpf$OBJ_GET_MAP(0x7, &(0x7f00000004c0)=@o_path={&(0x7f0000000480)='./file0\x00', 0x0, 0x4010, r0}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{0x1, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000440)={0xffffffffffffffff, r8}, 0xc) 4.1640297s ago: executing program 8 (id=2120): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x4c94d1e) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYRES64=r0], 0x14}}, 0x8000) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000140)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000600)={@flat=@binder={0x73622a85, 0xb}, @fd, @fda={0x66646185, 0x6, 0x1, 0x28}}, 0x0}}], 0x0, 0x0, &(0x7f00000002c0)}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="ac0000002100010026bd7000fedbdf2564010102000000000000000000000000fc0000000088c35b39378f86d42400004e21ffff0200a0a03a0000007a65425d1c83e6e6d868fa5e02bc26542cb316ea380442bab00272dbc39886febbf38fdf6b3744de22701d687f8c74b189979adb4c0ca26aa77cbf069710b4d005", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="b36b6e00010000000a00100000000000000000005000110000000000000000000000000000000000ac1414aa000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000320100000235"], 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x20000084) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x400c0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYRES32=r1, @ANYBLOB="00000000000200001800128008000100736974000c00028008000100", @ANYRES32=r4, @ANYRES64, @ANYRES8=r1, @ANYBLOB="4976d600000000000000b7fb506cc6034f5d8e37cb57b9bf7843160d99daf2480d3e582171d3b496679a3f6300cc7c4e9ffe"], 0x40}, 0x1, 0xd, 0x0, 0x4c000}, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'ip6tnl0\x00', 0x1000}) socket$kcm(0x2, 0xa, 0x2) r5 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_STOP(r5, 0x6f2a) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'pimreg\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getpriority(0x0, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) 3.228935104s ago: executing program 8 (id=2121): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d491009b3426c8928f3d97cb", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x8000) recvmsg$qrtr(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/161, 0xa1}], 0x1, 0x0, 0x0, 0x2000}, 0x1c, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r1) 3.00098957s ago: executing program 7 (id=2122): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x14, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200002000000007020000f8ffffffb703000008000000b704000000000000850000108200000018010000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) socket$kcm(0xa, 0x2, 0x0) r4 = socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x6) ioctl$XFS_IOC_FSGROWFSRT(r4, 0x40105870, &(0x7f00000000c0)={0x9, 0x2}) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0xe20, 0x0, 0x8d, 0x2}}, 0x44) r8 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r8, &(0x7f00000031c0)={0x0, 0x0, 0x0}, 0x2000) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0xffdf, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) 2.292638329s ago: executing program 7 (id=2123): sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0x1a000}], 0x1}, 0x80d1) 2.208222591s ago: executing program 8 (id=2124): syz_usb_connect(0x2, 0x52, &(0x7f0000000000)=ANY=[@ANYBLOB="120100036ffa680863070120ff2c0102030109024000021109400c0904080601ff8bbd020a240107000d02010205240503"], &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) 2.150867323s ago: executing program 2 (id=2125): socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x180) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000440)={"0e000016", 0x0, 0x6, 0x2, 0x0, 0x1, "f70000000000000000deffffff00", "f2ffffff", "0300", "0001ffff", ["50d5c2a7c5ae5cace40000b6", "020088e2ff7d00", "0cdd42000000000000c20d00"]}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000080)={0x4, 0x10cba, 0x1, {0x6, @sliced={0x7, [0x5, 0x2, 0x5, 0xe93, 0xa5ee, 0x4cd, 0x6, 0x7, 0x7, 0x2003, 0xc, 0x57, 0x42d1, 0x6, 0x5, 0x101, 0x6, 0xfffd, 0x0, 0x3e7, 0x7, 0xffff, 0x6, 0x0, 0x1, 0x5, 0x7, 0x2, 0x32, 0xffff, 0x9a, 0xff, 0x3, 0xff5a, 0x9, 0x9, 0x4, 0x1f, 0x5, 0x5, 0xf, 0x8, 0xfa3e, 0xebf4, 0x7, 0x0, 0xce, 0xfff], 0xa}}, 0x40004}) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) socket$inet6(0xa, 0x805, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000480)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_create(0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, 0x0) socket(0x2, 0x2, 0x0) ioctl$HCIINQUIRY(r5, 0x400448ca, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) 2.110186704s ago: executing program 0 (id=2126): r0 = memfd_create(0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) ioctl$SNAPSHOT_S2RAM(r0, 0x330b) keyctl$dh_compute(0x17, &(0x7f0000000800), 0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)={'md5\x00'}}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, r2, {0x7, 0x1f, 0x1000001, 0x5069f481, 0xfffe, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, 0x0, 0x24c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r4, 0x20, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r3, &(0x7f00000000c0)='!', 0xb7f40, 0x407f0b00}]) dup3(r3, r1, 0x0) 2.103680884s ago: executing program 7 (id=2127): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@tracing={0x0, 0x5}}, 0x20) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, 0x0, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x6c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x10, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x38, 0x2, [@TCA_MATCHALL_ACT={0x34, 0x2, [@m_gact={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) 1.984812297s ago: executing program 7 (id=2128): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x100000005, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r0, 0xc040583f, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x2, 0x7, 0xfffffe0001000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r4, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007500)={0x20, 0x3e, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x33}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0xc040) landlock_restrict_self(r4, 0x4) r6 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x1ea1e2) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000000080)={r7, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0xa, 0xc, "faf98357e5a1149989fc8dbec3bd02b82a128bbad0099cebdc25f5abb534464c516bdd8a0f3500", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237641a8ccf162e43ac61f700000000009b4100", [0x9, 0xa]}}) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) flistxattr(r8, 0x0, 0x100000000) 1.5083417s ago: executing program 6 (id=2129): r0 = socket(0x40000000015, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'macsec0\x00', {}, 0x8001}) 1.353112384s ago: executing program 6 (id=2130): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xab402) socket$nl_route(0x10, 0x3, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) socket$packet(0x11, 0x2, 0x300) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) socket(0x40000000015, 0x5, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0x10, 0x803, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x1, @local}, {0x2, 0x4e23, @local}, 0x1d7, 0x0, 0x0, 0x0, 0xdd71, 0x0, 0xc, 0x6, 0x4000}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 1.142322289s ago: executing program 0 (id=2131): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0}, 0x20000000) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000200", @ANYRES32], 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x890b, &(0x7f0000000100)) 1.022232143s ago: executing program 6 (id=2132): socket(0x1, 0x80802, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x24000810) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r2, 0x8010500c, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000001800090000000000000000001c140000fe000001000000000800010000000900562df27baa757c520188240ceb2df49a91ee799ca4e8afa3e0b2831107eb85ea37da737d10c48811180185ac81bd43e2cf0c1ab72ee5efa9015cbb5a35be762bbb4281032a039a95b16ea5a9ac185925d8"], 0x24}}, 0x4) add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) 1.001190833s ago: executing program 0 (id=2133): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x14, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200002000000007020000f8ffffffb703000008000000b704000000000000850000108200000018010000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) socket$kcm(0xa, 0x2, 0x0) r4 = socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x6) ioctl$XFS_IOC_FSGROWFSRT(r4, 0x40105870, &(0x7f00000000c0)={0x9, 0x2}) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0xe20, 0x0, 0x8d, 0x2}}, 0x44) r8 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r8, &(0x7f00000031c0)={0x0, 0x0, 0x0}, 0x2000) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0xffdf, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) 342.60123ms ago: executing program 0 (id=2134): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000010000000000000000000000850000005300000085000000050000009500000000000000a94be0c51261be6a99fe3d0000a232d5e1f59f18f845f82e9a7bde9e8f4b9197701b547edf612a03f1737d95"], 0x0, 0x68b, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="fbe6bd8dfcdda5a210b8cfefbd66f459c7261b927d25d3cf74d2f7c97735eba47f606a290d18492592230700000000000000081fdbd921ed4db0e67c9d5ab1452445a1e0da5ac68b13f4afe2712eeaad350d07", 0x53}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="1e000300008c71ef28ff4b"], 0xffdd) 237.26µs ago: executing program 7 (id=2135): r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, 0x0) preadv2(r0, 0x0, 0x0, 0x8, 0x80, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x800000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x8000}) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ppoll(&(0x7f0000000100)=[{r5, 0x107}], 0x1, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000180)=@multiplanar_fd={0x1, 0x2, 0x4, 0x20, 0x10000, {0x77359400}, {0x3, 0x0, 0x5, 0x2, 0x4c, 0x81, "8519947e"}, 0x200, 0x4, {0x0}, 0xffffff80}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000140)={0xbf48ce7, "1803c80980000000080000000003000000d600", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f0000000100)={"6739669f274d13b691eb645b00e4f5b53e0ca34dd02ac6cdc67c5e3126628168", r6}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x27}, 0x74) clock_gettime(0x0, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 8 (id=2136): r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_DSP_RESET(r0, 0x80044dff, 0x1000000000000) r1 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, &(0x7f0000000240)={0x40, 0x8, 0x2b, {0x2b, 0x31, "f70ba381030000000000000000cb4fdca0560fb30d54f365c5b1d43ee44fbf6fc93f0808251f559626"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) rt_sigtimedwait(0x0, &(0x7f0000005c80), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_usb_connect(0x3, 0x36, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x4, &(0x7f0000000080)=ANY=[]) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x70) ioctl$TCSETAW(r3, 0x5407, 0x0) kernel console output (not intermixed with test programs): ) [ 467.802043][ T26] audit: type=1800 audit(1777390806.422:25): pid=8822 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.953" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 467.888594][ T26] audit: type=1800 audit(1777390806.512:26): pid=8868 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.953" name="bus" dev="loop2" ino=263 res=0 errno=0 [ 468.019761][ T5789] BTRFS warning: duplicate device /dev/loop7 devid 1 generation 8 scanned by udevd (5789) [ 468.650617][ T8885] fuse: Bad value for 'fd' [ 469.439336][ T8912] netlink: 92 bytes leftover after parsing attributes in process `syz.7.963'. [ 470.090927][ T8920] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.960'. [ 470.576483][ T8927] siw: device registration error -23 [ 472.505152][ T8936] loop8: detected capacity change from 0 to 32768 [ 472.634062][ T8936] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 scanned by syz.8.971 (8936) [ 472.693622][ T8936] BTRFS info (device loop8): using crc32c (crc32c-intel) checksum algorithm [ 472.723703][ T8936] BTRFS warning (device loop8): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 472.775087][ T8936] BTRFS info (device loop8): trying to use backup root at mount time [ 472.803818][ T8936] BTRFS info (device loop8): setting nodatasum [ 472.832332][ T8936] BTRFS info (device loop8): enabling ssd optimizations [ 472.859865][ T8936] BTRFS info (device loop8): using spread ssd allocation scheme [ 472.885999][ T8936] BTRFS info (device loop8): turning on flush-on-commit [ 472.911521][ T8936] BTRFS info (device loop8): setting datasum [ 472.928039][ T8936] BTRFS info (device loop8): using free space tree [ 472.964806][ T8936] BTRFS info (device loop8): has skinny extents [ 473.276092][ T26] audit: type=1800 audit(1777390811.902:27): pid=8936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.971" name="file1" dev="loop8" ino=260 res=0 errno=0 [ 473.415007][ T26] audit: type=1800 audit(1777390811.992:28): pid=8966 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.971" name="bus" dev="loop8" ino=263 res=0 errno=0 [ 473.856469][ T8973] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.976'. [ 474.084593][ T8977] netlink: 92 bytes leftover after parsing attributes in process `syz.0.978'. [ 474.256905][ T8965] loop2: detected capacity change from 0 to 32768 [ 474.304096][ T8965] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz.2.974 (8965) [ 474.410366][ T5730] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by udevd (5730) [ 474.506409][ T8983] siw: device registration error -23 [ 474.644836][ T4230] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 475.324055][ T5730] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by udevd (5730) [ 475.449408][ T4230] usb 3-1: Using ep0 maxpacket: 8 [ 475.975482][ T4230] usb 3-1: string descriptor 0 read error: -22 [ 475.982323][ T4230] usb 3-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 475.998483][ T4230] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.605073][ T4230] usb 3-1: can't set config #1, error -71 [ 476.615820][ T4230] usb 3-1: USB disconnect, device number 18 [ 478.256599][ T9018] netlink: 92 bytes leftover after parsing attributes in process `syz.0.991'. [ 479.923843][ T9032] loop0: detected capacity change from 0 to 32768 [ 479.978473][ T9032] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.994 (9032) [ 480.051899][ T9032] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 480.094914][ T9032] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 480.137146][ T9037] loop7: detected capacity change from 0 to 32768 [ 480.146929][ T9032] BTRFS info (device loop0): trying to use backup root at mount time [ 480.184267][ T9037] BTRFS warning: duplicate device /dev/loop7 devid 1 generation 8 scanned by syz.7.997 (9037) [ 480.205557][ T9032] BTRFS info (device loop0): setting nodatasum [ 480.211816][ T9032] BTRFS info (device loop0): enabling ssd optimizations [ 480.262332][ T9032] BTRFS info (device loop0): using spread ssd allocation scheme [ 480.287798][ T9032] BTRFS info (device loop0): turning on flush-on-commit [ 480.306049][ T5789] BTRFS warning: duplicate device /dev/loop7 devid 1 generation 8 scanned by udevd (5789) [ 480.318561][ T9032] BTRFS info (device loop0): setting datasum [ 480.331327][ T9032] BTRFS info (device loop0): using free space tree [ 480.353183][ T9032] BTRFS info (device loop0): has skinny extents [ 480.714282][ T26] audit: type=1800 audit(1777390819.332:29): pid=9032 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.994" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 481.704349][ T9077] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1004'. [ 482.223786][ T5789] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop0 scanned by udevd (5789) [ 482.372315][ T9085] siw: device registration error -23 [ 486.489762][ T9133] netlink: 92 bytes leftover after parsing attributes in process `syz.7.1019'. [ 486.624486][ T9117] loop0: detected capacity change from 0 to 32768 [ 486.702881][ T9117] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 486.718306][ T9117] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 486.742192][ T9117] BTRFS info (device loop0): trying to use backup root at mount time [ 486.764899][ T9117] BTRFS info (device loop0): setting nodatasum [ 486.781563][ T9117] BTRFS info (device loop0): enabling ssd optimizations [ 486.793771][ T9117] BTRFS info (device loop0): using spread ssd allocation scheme [ 486.832271][ T9117] BTRFS info (device loop0): turning on flush-on-commit [ 486.845425][ T9117] BTRFS info (device loop0): setting datasum [ 486.851485][ T9117] BTRFS info (device loop0): using free space tree [ 486.888691][ T9117] BTRFS info (device loop0): has skinny extents [ 486.982248][ T9131] loop8: detected capacity change from 0 to 32768 [ 487.065448][ T9131] BTRFS warning: duplicate device /dev/loop8 devid 1 generation 8 scanned by syz.8.1018 (9131) [ 487.213520][ T26] audit: type=1800 audit(1777390825.832:30): pid=9117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1016" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 487.290737][ T26] audit: type=1800 audit(1777390825.912:31): pid=9156 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1016" name="bus" dev="loop0" ino=263 res=0 errno=0 [ 487.315062][ T5789] BTRFS warning: duplicate device /dev/loop8 devid 1 generation 8 scanned by udevd (5789) [ 487.384823][ T23] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 488.314861][ T23] usb 9-1: Using ep0 maxpacket: 8 [ 488.831808][ T23] usb 9-1: string descriptor 0 read error: -22 [ 488.838735][ T23] usb 9-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 488.848222][ T23] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.616145][ T23] usb 9-1: Audio class v2/v3 interfaces need an interface association [ 489.664027][ T23] snd-usb-audio: probe of 9-1:1.0 failed with error -22 [ 489.715109][ T23] usb 9-1: USB disconnect, device number 6 [ 489.730729][ T5730] udevd[5730]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 489.924836][ T9189] netlink: 92 bytes leftover after parsing attributes in process `syz.8.1031'. [ 490.875942][ T9197] siw: device registration error -23 [ 491.114176][ T9198] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1035'. [ 493.369929][ T9200] loop8: detected capacity change from 0 to 32768 [ 493.411245][ T9200] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 scanned by syz.8.1034 (9200) [ 493.440708][ T9200] BTRFS info (device loop8): using crc32c (crc32c-intel) checksum algorithm [ 493.451609][ T9200] BTRFS warning (device loop8): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 493.465001][ T9200] BTRFS info (device loop8): trying to use backup root at mount time [ 493.473587][ T9200] BTRFS info (device loop8): setting nodatasum [ 493.480408][ T9200] BTRFS info (device loop8): enabling ssd optimizations [ 493.487842][ T9200] BTRFS info (device loop8): using spread ssd allocation scheme [ 493.496147][ T9200] BTRFS info (device loop8): turning on flush-on-commit [ 493.503574][ T9200] BTRFS info (device loop8): setting datasum [ 493.510532][ T9200] BTRFS info (device loop8): using free space tree [ 493.517772][ T9200] BTRFS info (device loop8): has skinny extents [ 493.967689][ T26] audit: type=1800 audit(1777390832.592:32): pid=9200 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1034" name="file1" dev="loop8" ino=260 res=0 errno=0 [ 494.071616][ T26] audit: type=1800 audit(1777390832.662:33): pid=9245 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1034" name="bus" dev="loop8" ino=263 res=0 errno=0 [ 495.008280][ T9254] netlink: 92 bytes leftover after parsing attributes in process `syz.6.1045'. [ 495.059475][ T9256] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1046'. [ 495.492938][ T9250] loop2: detected capacity change from 0 to 32768 [ 495.549619][ T9250] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1043 (9250) [ 495.782868][ T9250] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 495.810436][ T9250] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 495.859486][ T9250] BTRFS info (device loop2): trying to use backup root at mount time [ 495.885697][ T9250] BTRFS info (device loop2): setting nodatasum [ 495.899476][ T9250] BTRFS info (device loop2): enabling ssd optimizations [ 495.917903][ T9250] BTRFS info (device loop2): using spread ssd allocation scheme [ 495.964807][ T9250] BTRFS info (device loop2): turning on flush-on-commit [ 495.994879][ T9250] BTRFS info (device loop2): force zlib compression, level 3 [ 496.114976][ T9250] BTRFS info (device loop2): using free space tree [ 496.128447][ T9250] BTRFS info (device loop2): has skinny extents [ 497.024363][ T9282] siw: device registration error -23 [ 497.354497][ T26] audit: type=1800 audit(1777390835.972:34): pid=9250 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1043" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 497.814794][ T4173] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 497.853230][ T9250] BTRFS info (device loop2): balance: start -d -m [ 497.922318][ T9250] BTRFS info (device loop2): relocating block group 6881280 flags data|metadata [ 498.045991][ T9312] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1056'. [ 498.143750][ T9250] BTRFS info (device loop2): found 3 extents, stage: move data extents [ 498.154836][ T4173] usb 3-1: Using ep0 maxpacket: 8 [ 498.326944][ T9250] BTRFS info (device loop2): relocating block group 5242880 flags data|metadata [ 498.584436][ T9250] BTRFS info (device loop2): balance: canceled [ 498.605961][ T9324] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1058'. [ 499.363422][ T9326] netlink: 92 bytes leftover after parsing attributes in process `syz.6.1060'. [ 499.464952][ T4173] usb 3-1: string descriptor 0 read error: -71 [ 499.475967][ T4173] usb 3-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 499.496471][ T4173] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.524937][ T4173] usb 3-1: can't set config #1, error -71 [ 499.532607][ T4173] usb 3-1: USB disconnect, device number 19 [ 499.957133][ T9323] loop8: detected capacity change from 0 to 32768 [ 500.083973][ T9323] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 scanned by syz.8.1059 (9323) [ 500.346830][ T9323] BTRFS info (device loop8): using crc32c (crc32c-intel) checksum algorithm [ 500.403201][ T9323] BTRFS warning (device loop8): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 500.434398][ T9323] BTRFS info (device loop8): trying to use backup root at mount time [ 500.464473][ T9323] BTRFS info (device loop8): setting nodatasum [ 500.605000][ T9323] BTRFS info (device loop8): enabling ssd optimizations [ 500.623046][ T9323] BTRFS info (device loop8): using spread ssd allocation scheme [ 500.643556][ T9323] BTRFS info (device loop8): turning on flush-on-commit [ 501.394918][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.401575][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.414504][ T9323] BTRFS info (device loop8): setting datasum [ 501.464878][ T9323] BTRFS info (device loop8): using free space tree [ 501.485291][ T9323] BTRFS info (device loop8): has skinny extents [ 501.971396][ T9323] BTRFS error (device loop8): open_ctree failed: -12 [ 503.386247][ T9373] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1068'. [ 503.685822][ T9383] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1073'. [ 503.860290][ T9386] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1070'. [ 505.799048][ T9377] loop6: detected capacity change from 0 to 32768 [ 508.261279][ T5730] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by udevd (5730) [ 509.313709][ T9431] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1085'. [ 510.152493][ T9437] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1086'. [ 512.026868][ T9459] siw: device registration error -23 [ 513.884937][ T5912] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 514.574780][ T5912] usb 7-1: Using ep0 maxpacket: 8 [ 514.582622][ T9481] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1102'. [ 514.841876][ T5912] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 514.860608][ T5912] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 514.874106][ T5912] usb 7-1: New USB device found, idVendor=057e, idProduct=201e, bcdDevice= 0.00 [ 514.886545][ T5912] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.423436][ T5912] usb 7-1: config 0 descriptor?? [ 515.548994][ T9493] securityfs: Unknown parameter '' [ 515.899100][ T9467] udc-core: couldn't find an available UDC or it's busy [ 517.078447][ T9467] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 518.124837][ T5912] usbhid 7-1:0.0: can't add hid device: -71 [ 518.130876][ T5912] usbhid: probe of 7-1:0.0 failed with error -71 [ 518.190544][ T5912] usb 7-1: USB disconnect, device number 6 [ 518.295901][ T9513] siw: device registration error -23 [ 519.157353][ T9514] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.1109'. [ 519.624785][ T4235] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 520.440444][ T4235] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 520.454715][ T4235] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 520.495099][ T4235] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 520.541163][ T4235] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 520.570183][ T4173] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 520.577971][ T4235] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 521.337684][ T4235] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 521.347152][ T4235] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 521.355789][ T4235] usb 7-1: Product: syz [ 521.359994][ T4235] usb 7-1: Manufacturer: syz [ 521.484610][ T4173] usb 9-1: Using ep0 maxpacket: 8 [ 521.556053][ T4235] cdc_wdm 7-1:1.0: skipping garbage [ 521.561470][ T4235] cdc_wdm 7-1:1.0: skipping garbage [ 521.569018][ T4235] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 521.575000][ T4235] cdc_wdm 7-1:1.0: Unknown control protocol [ 521.684932][ T4173] usb 9-1: unable to get BOS descriptor or descriptor too short [ 521.812937][ T4173] usb 9-1: config 12 has an invalid interface number: 188 but max is 0 [ 522.216528][ T4173] usb 9-1: config 12 has no interface number 0 [ 522.223004][ T4173] usb 9-1: config 12 interface 188 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 8 [ 522.244609][ T4173] usb 9-1: config 12 interface 188 has no altsetting 0 [ 522.270596][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 522.270628][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 522.284726][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 522.291377][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 522.324738][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 522.331408][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 522.354742][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 522.361588][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 522.384722][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 522.391404][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 522.432944][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 522.439622][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 522.597548][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 522.604224][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 522.736694][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 522.743351][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 522.762013][ T4386] usb 7-1: USB disconnect, device number 7 [ 522.906626][ T9554] netlink: 1688 bytes leftover after parsing attributes in process `syz.7.1120'. [ 522.909013][ T9556] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1121'. [ 522.973021][ T9556] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1121'. [ 523.020482][ T4173] usb 9-1: New USB device found, idVendor=1164, idProduct=0602, bcdDevice=47.06 [ 523.071577][ T4173] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.091842][ T4173] usb 9-1: Product: syz [ 523.096671][ T4173] usb 9-1: Manufacturer: syz [ 523.101425][ T4173] usb 9-1: SerialNumber: syz [ 523.125404][ T9530] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 523.179408][ T9563] securityfs: Unknown parameter '' [ 525.936742][ T9575] netdevsim netdevsim8: loading /lib/firmware/. failed with error -22 [ 525.945534][ T9575] netdevsim netdevsim8: Direct firmware load for . failed with error -22 [ 525.954313][ T9575] netdevsim netdevsim8: Falling back to sysfs fallback for: . [ 526.187713][ T4173] pvrusb2: Hardware description: Gotview USB 2.0 DVD Deluxe [ 526.217254][ T4173] usb 9-1: selecting invalid altsetting 0 [ 526.246913][ T2425] pvrusb2: control-write URB failure, status=-71 [ 526.253507][ T2425] pvrusb2: Device being rendered inoperable [ 526.273152][ T4173] usb 9-1: USB disconnect, device number 7 [ 526.291415][ T2425] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 526.319718][ T2425] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 527.711920][ T4173] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 527.806847][ T9598] netlink: 1688 bytes leftover after parsing attributes in process `syz.8.1134'. [ 528.094963][ T4173] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 528.113313][ T4173] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 528.309168][ T4173] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 528.319036][ T4173] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 528.421624][ T4173] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 528.695549][ T4173] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 528.751290][ T9618] netdevsim netdevsim7: loading /lib/firmware/. failed with error -22 [ 528.759939][ T9618] netdevsim netdevsim7: Direct firmware load for . failed with error -22 [ 528.913447][ T9618] netdevsim netdevsim7: Falling back to sysfs fallback for: . [ 529.602629][ T4173] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 529.610804][ T4173] usb 7-1: Product: syz [ 529.615055][ T4173] usb 7-1: Manufacturer: syz [ 529.716169][ T4173] cdc_wdm 7-1:1.0: skipping garbage [ 529.750494][ T4173] cdc_wdm 7-1:1.0: skipping garbage [ 529.766460][ T4173] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 529.804367][ T4173] cdc_wdm 7-1:1.0: Unknown control protocol [ 529.946122][ T4173] usb 7-1: USB disconnect, device number 8 [ 529.964770][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 529.971519][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 529.977652][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 531.031934][ T9637] netlink: 'syz.0.1145': attribute type 72 has an invalid length. [ 533.569355][ T9661] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 535.890999][ T9700] netlink: 'syz.6.1159': attribute type 72 has an invalid length. [ 536.065294][ T9705] vivid-002: ================= START STATUS ================= [ 536.080164][ T9705] vivid-002: Radio HW Seek Mode: Bounded [ 536.093399][ T9705] vivid-002: Radio Programmable HW Seek: false [ 536.278477][ T9705] vivid-002: RDS Rx I/O Mode: Block I/O [ 536.834784][ T9705] vivid-002: Generate RBDS Instead of RDS: false [ 537.070722][ T9705] vivid-002: RDS Reception: true [ 537.076323][ T9705] vivid-002: RDS Program Type: 0 inactive [ 537.082409][ T9705] vivid-002: RDS PS Name: inactive [ 537.088021][ T9705] vivid-002: RDS Radio Text: inactive [ 537.093843][ T9705] vivid-002: RDS Traffic Announcement: false inactive [ 537.101047][ T9705] vivid-002: RDS Traffic Program: false inactive [ 537.107785][ T9705] vivid-002: RDS Music: false inactive [ 537.113616][ T9705] vivid-002: ================== END STATUS ================== [ 538.698996][ T9726] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1165'. [ 541.192843][ T9749] netlink: 'syz.0.1171': attribute type 72 has an invalid length. [ 541.313681][ T9753] hub 8-0:1.0: USB hub found [ 541.324850][ T9753] hub 8-0:1.0: 1 port detected [ 544.629489][ T9784] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1179'. [ 546.489491][ T9794] netlink: 1752 bytes leftover after parsing attributes in process `syz.6.1183'. [ 550.258000][ T9831] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1194'. [ 551.405775][ T9836] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.1196'. [ 554.741292][ T9872] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1206'. [ 555.388208][ T9880] securityfs: Unknown parameter '' [ 558.045323][ T9890] netlink: 92 bytes leftover after parsing attributes in process `syz.8.1211'. [ 559.841013][ T9903] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1213'. [ 562.819726][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.826232][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.183326][ T9933] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1224'. [ 563.471704][ T4380] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 563.507285][ T9940] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1223'. [ 564.999031][ T9941] securityfs: Unknown parameter '' [ 568.318999][ T9956] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1227'. [ 569.175618][ T9959] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1231'. [ 570.725038][ T4233] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 571.045039][ T4233] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 571.297472][ T4233] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 571.307763][ T4233] usb 1-1: config 0 has no interfaces? [ 571.362212][ T9992] blk_update_request: I/O error, dev loop15, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 571.374005][ T9992] SQUASHFS error: Failed to read block 0x0: -5 [ 571.394725][ T9992] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1236'. [ 572.091106][ T4233] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 572.105432][ T4233] usb 1-1: config 0 has no interfaces? [ 572.134569][ T9991] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1238'. [ 572.324845][ T4233] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 572.344208][ T4233] usb 1-1: config 0 has no interfaces? [ 572.434905][ T4233] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 572.455015][ T4233] usb 1-1: config 0 has no interfaces? [ 572.564794][ T4233] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 572.581839][ T4233] usb 1-1: config 0 has no interfaces? [ 572.696501][ T4233] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 573.470612][ T4233] usb 1-1: config 0 has no interfaces? [ 573.549259][T10006] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1242'. [ 573.584857][ T4233] usb 1-1: unable to read config index 6 descriptor/start: -71 [ 573.592551][ T4233] usb 1-1: can't read configurations, error -71 [ 573.873494][T10015] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1244'. [ 574.929081][T10024] vivid-004: ================= START STATUS ================= [ 574.936835][T10024] vivid-004: Radio HW Seek Mode: Bounded [ 574.942483][T10024] vivid-004: Radio Programmable HW Seek: false [ 574.949029][T10024] vivid-004: RDS Rx I/O Mode: Block I/O [ 574.954611][T10024] vivid-004: Generate RBDS Instead of RDS: false [ 574.961069][T10024] vivid-004: RDS Reception: true [ 574.966037][T10024] vivid-004: RDS Program Type: 0 inactive [ 574.971777][T10024] vivid-004: RDS PS Name: inactive [ 574.977083][T10024] vivid-004: RDS Radio Text: inactive [ 574.982559][T10024] vivid-004: RDS Traffic Announcement: false inactive [ 574.989353][T10024] vivid-004: RDS Traffic Program: false inactive [ 574.995711][T10024] vivid-004: RDS Music: false inactive [ 575.001212][T10024] vivid-004: ================== END STATUS ================== [ 575.717818][T10027] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1248'. [ 576.430679][T10034] netlink: 92 bytes leftover after parsing attributes in process `syz.6.1251'. [ 577.326581][T10038] netlink: 'syz.6.1252': attribute type 10 has an invalid length. [ 578.889226][T10038] device veth0_vlan left promiscuous mode [ 578.948852][T10038] device veth0_vlan entered promiscuous mode [ 578.984860][T10044] vivid-001: ================= START STATUS ================= [ 578.992627][T10044] vivid-001: Radio HW Seek Mode: Bounded [ 579.026351][T10038] team0: Device veth0_vlan failed to register rx_handler [ 579.068089][T10044] vivid-001: Radio Programmable HW Seek: false [ 579.104894][T10044] vivid-001: RDS Rx I/O Mode: Block I/O [ 579.123966][T10044] vivid-001: Generate RBDS Instead of RDS: false [ 579.184900][T10044] vivid-001: RDS Reception: true [ 579.206729][T10044] vivid-001: RDS Program Type: 0 inactive [ 579.253808][T10044] vivid-001: RDS PS Name: inactive [ 579.303046][T10044] vivid-001: RDS Radio Text: inactive [ 579.304580][T10050] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1256'. [ 579.349301][T10044] vivid-001: RDS Traffic Announcement: false inactive [ 579.386985][T10044] vivid-001: RDS Traffic Program: false inactive [ 579.461348][T10044] vivid-001: RDS Music: false inactive [ 579.500359][T10044] vivid-001: ================== END STATUS ================== [ 579.750884][T10057] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1257'. [ 580.656506][T10066] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1259'. [ 581.344847][ T4194] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 581.624766][ T4194] usb 7-1: Using ep0 maxpacket: 32 [ 581.896274][ T4194] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 581.909755][ T4194] usb 7-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 581.920678][ T4194] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 582.114816][ T4194] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 582.124812][ T4194] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.132909][ T4194] usb 7-1: Product: syz [ 582.138003][ T4194] usb 7-1: Manufacturer: syz [ 582.142680][ T4194] usb 7-1: SerialNumber: syz [ 582.217238][ T4194] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 582.233490][ T4194] imon 7-1:155.0: unable to initialize intf0, err -19 [ 582.240886][ T4194] imon:imon_probe: failed to initialize context! [ 582.253608][ T4194] imon 7-1:155.0: unable to register, err -19 [ 583.639732][ T4381] usb 7-1: USB disconnect, device number 9 [ 584.402107][T10113] netlink: 'syz.2.1267': attribute type 10 has an invalid length. [ 584.484216][T10123] vivid-002: ================= START STATUS ================= [ 584.492152][T10123] vivid-002: Radio HW Seek Mode: Bounded [ 584.497912][T10123] vivid-002: Radio Programmable HW Seek: false [ 584.504129][T10123] vivid-002: RDS Rx I/O Mode: Block I/O [ 584.509790][T10123] vivid-002: Generate RBDS Instead of RDS: false [ 584.516187][T10123] vivid-002: RDS Reception: true [ 584.521166][T10123] vivid-002: RDS Program Type: 0 inactive [ 584.527002][T10123] vivid-002: RDS PS Name: inactive [ 584.532400][T10123] vivid-002: RDS Radio Text: inactive [ 584.537949][T10123] vivid-002: RDS Traffic Announcement: false inactive [ 584.544800][T10123] vivid-002: RDS Traffic Program: false inactive [ 584.551187][T10123] vivid-002: RDS Music: false inactive [ 584.556985][T10123] vivid-002: ================== END STATUS ================== [ 585.453280][T10113] device veth0_vlan left promiscuous mode [ 585.462379][T10113] device veth0_vlan entered promiscuous mode [ 585.471105][T10113] team0: Device veth0_vlan failed to register rx_handler [ 585.847505][T10139] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1270'. [ 585.942341][T10140] hub 8-0:1.0: USB hub found [ 585.947809][T10140] hub 8-0:1.0: 1 port detected [ 588.624865][ T4381] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 588.894816][ T4381] usb 1-1: Using ep0 maxpacket: 8 [ 589.054915][ T4381] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 589.069169][ T4381] usb 1-1: config 0 has no interface number 0 [ 589.075997][ T4381] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 589.092799][ T4381] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 589.104018][ T4381] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 589.123054][ T4381] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 589.132734][ T4381] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.153042][ T4381] usb 1-1: config 0 descriptor?? [ 589.206824][ T4381] ldusb 1-1:0.55: Interrupt in endpoint not found [ 589.418588][ T4381] usb 1-1: USB disconnect, device number 16 [ 589.584934][T10177] binder: 10174:10177 ioctl 4018620d 0 returned -22 [ 589.631230][T10177] netlink: 92 bytes leftover after parsing attributes in process `syz.8.1284'. [ 589.643223][T10180] vivid-002: ================= START STATUS ================= [ 589.651100][T10180] vivid-002: Radio HW Seek Mode: Bounded [ 589.656918][T10180] vivid-002: Radio Programmable HW Seek: false [ 589.663120][T10180] vivid-002: RDS Rx I/O Mode: Block I/O [ 589.668745][T10180] vivid-002: Generate RBDS Instead of RDS: false [ 589.675164][T10180] vivid-002: RDS Reception: true [ 589.680184][T10180] vivid-002: RDS Program Type: 0 inactive [ 589.686074][T10180] vivid-002: RDS PS Name: inactive [ 589.691331][T10180] vivid-002: RDS Radio Text: inactive [ 589.696941][T10180] vivid-002: RDS Traffic Announcement: false inactive [ 589.703759][T10180] vivid-002: RDS Traffic Program: false inactive [ 589.710296][T10180] vivid-002: RDS Music: false inactive [ 589.715887][T10180] vivid-002: ================== END STATUS ================== [ 590.081772][T10190] Cannot find add_set index 0 as target [ 591.365079][ T5912] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 591.690319][T10200] netlink: 'syz.6.1290': attribute type 10 has an invalid length. [ 591.698815][T10200] device veth0_vlan left promiscuous mode [ 591.706774][T10200] device veth0_vlan entered promiscuous mode [ 591.713871][T10200] team0: Device veth0_vlan failed to register rx_handler [ 591.755012][ T5912] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 591.782289][ T5912] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 591.823105][ T5912] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 591.867670][ T5912] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 591.884699][ T5912] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.914716][ T5912] usb 3-1: config 0 descriptor?? [ 592.505305][T10222] securityfs: Unknown parameter '' [ 593.595765][T10225] vivid-001: ================= START STATUS ================= [ 593.603588][T10225] vivid-001: Radio HW Seek Mode: Bounded [ 593.611014][T10225] vivid-001: Radio Programmable HW Seek: false [ 593.617385][T10225] vivid-001: RDS Rx I/O Mode: Block I/O [ 593.623092][T10225] vivid-001: Generate RBDS Instead of RDS: false [ 593.629769][T10225] vivid-001: RDS Reception: true [ 593.634973][T10225] vivid-001: RDS Program Type: 0 inactive [ 593.641090][T10225] vivid-001: RDS PS Name: inactive [ 593.646628][T10225] vivid-001: RDS Radio Text: inactive [ 593.653373][T10225] vivid-001: RDS Traffic Announcement: false inactive [ 593.660615][T10225] vivid-001: RDS Traffic Program: false inactive [ 593.667223][T10225] vivid-001: RDS Music: false inactive [ 593.673080][T10225] vivid-001: ================== END STATUS ================== [ 593.974895][ T5912] usbhid 3-1:0.0: can't add hid device: -71 [ 594.086443][ T5912] usbhid: probe of 3-1:0.0 failed with error -71 [ 594.159879][T10227] binder: 10226:10227 ioctl 4018620d 0 returned -22 [ 594.277486][T10227] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1299'. [ 595.330301][ T5912] usb 3-1: USB disconnect, device number 20 [ 595.569283][T10239] fuse: Unknown parameter 'group_i00000000000000000000' [ 596.549368][ T4381] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 596.630570][T10260] binder: 10259:10260 ioctl 4018620d 0 returned -22 [ 596.638999][T10260] netlink: 92 bytes leftover after parsing attributes in process `syz.7.1311'. [ 597.365052][T10270] vivid-002: ================= START STATUS ================= [ 597.372766][T10270] vivid-002: Radio HW Seek Mode: Bounded [ 597.378630][T10270] vivid-002: Radio Programmable HW Seek: false [ 597.385314][T10270] vivid-002: RDS Rx I/O Mode: Block I/O [ 597.390974][T10270] vivid-002: Generate RBDS Instead of RDS: false [ 597.397465][T10270] vivid-002: RDS Reception: true [ 597.402454][T10270] vivid-002: RDS Program Type: 0 inactive [ 597.408292][T10270] vivid-002: RDS PS Name: inactive [ 597.413546][T10270] vivid-002: RDS Radio Text: inactive [ 597.419182][T10270] vivid-002: RDS Traffic Announcement: false inactive [ 597.426267][T10270] vivid-002: RDS Traffic Program: false inactive [ 597.432833][T10270] vivid-002: RDS Music: false inactive [ 597.432892][ T4381] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 597.438469][T10270] vivid-002: ================== END STATUS ================== [ 597.488372][ T4381] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 597.506852][ T4381] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 597.523494][ T4381] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 597.537108][ T4381] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.547514][ T4381] usb 1-1: config 0 descriptor?? [ 597.949585][T10272] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1314'. [ 598.326151][T10282] fuse: Unknown parameter 'group_i00000000000000000000' [ 598.534801][ T4386] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 598.574566][T10287] overlayfs: failed to clone upperpath [ 599.254940][ T4381] usbhid 1-1:0.0: can't add hid device: -71 [ 599.260994][ T4381] usbhid: probe of 1-1:0.0 failed with error -71 [ 599.308371][ T4381] usb 1-1: USB disconnect, device number 17 [ 599.707739][T10299] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 599.719269][T10299] SQUASHFS error: Failed to read block 0x0: -5 [ 599.741335][T10299] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1319'. [ 600.008487][T10296] securityfs: Unknown parameter '' [ 600.015127][ T4386] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 600.340831][ T4386] usb 3-1: New USB device found, idVendor=09da, idProduct=001a, bcdDevice= 0.00 [ 600.495625][ T4386] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.514387][ T4386] usb 3-1: config 0 descriptor?? [ 601.354877][ T4386] usb 3-1: can't set config #0, error -71 [ 601.379819][ T4386] usb 3-1: USB disconnect, device number 21 [ 602.092950][T10308] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1325'. [ 602.204431][T10311] binder: 10310:10311 ioctl 4018620d 0 returned -22 [ 602.229702][T10311] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1326'. [ 603.373351][T10330] fuse: Unknown parameter 'group_id00000000000000000000' [ 603.424795][ T4381] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 603.606865][T10342] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1336'. [ 603.790390][T10353] binder: 10352:10353 ioctl 4018620d 0 returned -22 [ 603.797236][ T4381] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 603.814981][ T4381] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 603.830543][ T4381] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 603.850243][ T4381] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 603.861067][T10353] netlink: 92 bytes leftover after parsing attributes in process `syz.6.1341'. [ 603.875973][ T4381] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.892551][ T4381] usb 1-1: config 0 descriptor?? [ 606.034824][ T4381] usbhid 1-1:0.0: can't add hid device: -71 [ 606.041115][ T4381] usbhid: probe of 1-1:0.0 failed with error -71 [ 606.076498][ T4381] usb 1-1: USB disconnect, device number 18 [ 607.264698][T10397] binder: 10394:10397 ioctl 4018620d 0 returned -22 [ 607.440570][T10397] netlink: 92 bytes leftover after parsing attributes in process `syz.8.1353'. [ 608.435420][T10413] hub 8-0:1.0: USB hub found [ 608.440298][T10413] hub 8-0:1.0: 1 port detected [ 608.895270][ T5912] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 609.635567][ T5912] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 610.483455][ T5912] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 610.542304][ T5912] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 610.600569][ T5912] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 610.639234][ T5912] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.705602][ T5912] usb 3-1: config 0 descriptor?? [ 611.640219][T10440] binder: 10439:10440 ioctl 4018620d 0 returned -22 [ 611.663985][T10440] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1365'. [ 611.938146][ C1] hrtimer: interrupt took 56712 ns [ 612.175015][ T5912] usbhid 3-1:0.0: can't add hid device: -71 [ 612.182395][ T5912] usbhid: probe of 3-1:0.0 failed with error -71 [ 612.294373][T10453] hub 8-0:1.0: USB hub found [ 612.299772][T10453] hub 8-0:1.0: 1 port detected [ 612.375913][ T5912] usb 3-1: USB disconnect, device number 22 [ 614.545046][T10476] SET target dimension over the limit! [ 616.708114][ T4230] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 617.240185][T10502] binder: 10500:10502 ioctl 4018620d 0 returned -22 [ 617.355249][T10502] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1383'. [ 617.702305][T10511] hub 8-0:1.0: USB hub found [ 617.714157][T10511] hub 8-0:1.0: 1 port detected [ 617.778923][ T4230] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 617.897918][ T4230] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 617.969535][ T4230] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 618.061455][ T4230] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 618.417558][ T4230] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.435602][ T4230] usb 7-1: config 0 descriptor?? [ 618.576298][ T4230] usb 7-1: can't set config #0, error -71 [ 618.723884][ T4230] usb 7-1: USB disconnect, device number 10 [ 618.840155][T10526] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1387'. [ 619.625049][T10522] Cannot find add_set index 0 as target [ 621.552620][T10555] device syzkaller0 entered promiscuous mode [ 621.827500][T10559] binder: 10558:10559 ioctl 4018620d 0 returned -22 [ 621.860033][T10559] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1401'. [ 622.773085][ T4381] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 623.192203][T10571] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1402'. [ 623.332672][ T4381] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 623.367773][ T4381] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 623.414343][ T4381] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 624.259799][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.267535][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.619470][ T4381] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 624.762879][T10576] SET target dimension over the limit! [ 625.278013][ T4381] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.333255][ T4381] usb 7-1: config 0 descriptor?? [ 625.381304][ T4381] usb 7-1: can't set config #0, error -71 [ 625.401001][ T4381] usb 7-1: USB disconnect, device number 11 [ 626.253277][T10599] binder: 10598:10599 ioctl 4018620d 0 returned -22 [ 626.288190][T10599] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1413'. [ 626.507712][T10603] blk_update_request: I/O error, dev loop17, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 626.519138][T10603] SQUASHFS error: Failed to read block 0x0: -5 [ 626.527932][T10603] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1414'. [ 626.984146][T10608] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1415'. [ 627.334119][T10613] device syzkaller0 entered promiscuous mode [ 627.335210][ T23] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 628.304875][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 628.321134][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 628.409627][ T23] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 628.422950][ T23] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 628.432340][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.447189][ T23] usb 1-1: config 0 descriptor?? [ 628.817013][T10644] binder: 10643:10644 ioctl 4018620d 0 returned -22 [ 628.835408][T10644] netlink: 92 bytes leftover after parsing attributes in process `syz.8.1428'. [ 629.127351][T10647] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1429'. [ 629.352910][T10653] vivid-004: ================= START STATUS ================= [ 629.363526][T10654] hub 8-0:1.0: USB hub found [ 629.369605][T10654] hub 8-0:1.0: 1 port detected [ 629.413322][T10653] vivid-004: Radio HW Seek Mode: Bounded [ 629.452421][T10653] vivid-004: Radio Programmable HW Seek: false [ 629.511753][T10653] vivid-004: RDS Rx I/O Mode: Block I/O [ 629.726452][T10653] vivid-004: Generate RBDS Instead of RDS: false [ 629.741726][T10653] vivid-004: RDS Reception: true [ 629.752734][T10653] vivid-004: RDS Program Type: 0 inactive [ 630.503809][T10653] vivid-004: RDS PS Name: inactive [ 630.534912][T10653] vivid-004: RDS Radio Text: inactive [ 630.542405][T10653] vivid-004: RDS Traffic Announcement: false inactive [ 630.554137][ T23] usbhid 1-1:0.0: can't add hid device: -71 [ 630.561748][T10653] vivid-004: RDS Traffic Program: false inactive [ 630.570827][ T23] usbhid: probe of 1-1:0.0 failed with error -71 [ 630.604796][T10653] vivid-004: RDS Music: false inactive [ 630.610456][T10653] vivid-004: ================== END STATUS ================== [ 630.628439][ T23] usb 1-1: USB disconnect, device number 19 [ 631.124694][ T4233] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 631.663976][T10685] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1440'. [ 631.844787][ T4233] usb 9-1: Using ep0 maxpacket: 8 [ 632.944454][ T4233] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 632.953792][ T4233] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.027185][ T4233] pvrusb2: Hardware description: Terratec Grabster AV400 [ 633.034282][ T4233] pvrusb2: ********** [ 633.082912][ T4233] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 633.137668][ T4233] pvrusb2: Important functionality might not be entirely working. [ 633.155289][ T4233] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 633.296757][ T4233] pvrusb2: ********** [ 633.678028][ T2425] pvrusb2: Invalid write control endpoint [ 633.997839][ T4233] usb 9-1: USB disconnect, device number 8 [ 634.069859][T10706] binder: 10705:10706 ioctl 4018620d 0 returned -22 [ 634.107396][T10706] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1445'. [ 634.109893][ T2425] pvrusb2: Invalid write control endpoint [ 634.169045][T10708] vivid-004: ================= START STATUS ================= [ 634.177022][T10708] vivid-004: Radio HW Seek Mode: Bounded [ 634.179743][ T2425] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 634.182931][T10708] vivid-004: Radio Programmable HW Seek: false [ 634.200527][T10708] vivid-004: RDS Rx I/O Mode: Block I/O [ 634.231139][T10708] vivid-004: Generate RBDS Instead of RDS: false [ 634.244049][T10708] vivid-004: RDS Reception: true [ 634.265230][T10708] vivid-004: RDS Program Type: 0 inactive [ 634.268857][ T2425] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 634.288494][T10708] vivid-004: RDS PS Name: inactive [ 634.297576][T10708] vivid-004: RDS Radio Text: inactive [ 634.303829][T10708] vivid-004: RDS Traffic Announcement: false inactive [ 634.316033][T10708] vivid-004: RDS Traffic Program: false inactive [ 634.323428][T10708] vivid-004: RDS Music: false inactive [ 634.326533][ T2425] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 634.348278][T10708] vivid-004: ================== END STATUS ================== [ 634.393012][ T2425] pvrusb2: Device being rendered inoperable [ 634.447586][ T2425] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 634.501768][ T2425] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 634.870362][ T2425] pvrusb2: Attached sub-driver cx25840 [ 634.907155][ T2425] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 634.978811][T10719] netlink: 'syz.7.1450': attribute type 5 has an invalid length. [ 634.979430][ T2425] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 635.388561][ T23] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 635.806855][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 636.635888][T10741] vivid-002: ================= START STATUS ================= [ 636.648046][T10741] vivid-002: Radio HW Seek Mode: Bounded [ 636.654519][T10741] vivid-002: Radio Programmable HW Seek: false [ 636.667518][T10741] vivid-002: RDS Rx I/O Mode: Block I/O [ 636.673602][T10741] vivid-002: Generate RBDS Instead of RDS: false [ 636.688688][T10741] vivid-002: RDS Reception: true [ 636.693957][T10741] vivid-002: RDS Program Type: 0 inactive [ 636.707226][T10741] vivid-002: RDS PS Name: inactive [ 636.712726][T10741] vivid-002: RDS Radio Text: inactive [ 636.721240][T10741] vivid-002: RDS Traffic Announcement: false inactive [ 636.731905][T10741] vivid-002: RDS Traffic Program: false inactive [ 636.741009][T10741] vivid-002: RDS Music: false inactive [ 636.750132][T10741] vivid-002: ================== END STATUS ================== [ 636.875333][ T23] usb 1-1: string descriptor 0 read error: -22 [ 636.882388][ T23] usb 1-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 636.902302][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.005637][T10747] binder: 10746:10747 ioctl 4018620d 0 returned -22 [ 637.020073][ T23] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 637.451139][T10747] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1459'. [ 637.505895][ T23] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 637.530342][ T23] usb 1-1: USB disconnect, device number 20 [ 637.621664][T10752] device syzkaller0 entered promiscuous mode [ 637.779590][ T5789] udevd[5789]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 640.154737][ T4381] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 640.164717][ T4230] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 640.404801][ T4230] usb 9-1: Using ep0 maxpacket: 8 [ 640.690041][ T4230] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 641.005267][ T4381] usb 3-1: device descriptor read/64, error -71 [ 641.267278][ T4230] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.334807][ T4230] usb 9-1: can't set config #252, error -71 [ 641.341870][ T4230] usb 9-1: USB disconnect, device number 9 [ 644.003724][T10810] binder: 10806:10810 ioctl 4018620d 0 returned -22 [ 644.012234][T10810] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1475'. [ 644.817285][ T4381] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 645.834878][ T4381] usb 8-1: Using ep0 maxpacket: 8 [ 646.214986][ T1325] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 646.454973][ T1325] usb 3-1: device descriptor read/64, error -71 [ 646.749197][ T4233] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 646.837095][ T1325] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 646.957533][ T4381] usb 8-1: string descriptor 0 read error: -22 [ 646.967134][ T4381] usb 8-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 646.990333][ T4381] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.999271][ T4233] usb 1-1: Using ep0 maxpacket: 8 [ 647.125432][ T4233] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 647.193804][ T4233] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.239234][ T4381] usb 8-1: Audio class v2/v3 interfaces need an interface association [ 647.466969][ T4233] pvrusb2: Hardware description: Terratec Grabster AV400 [ 647.609070][ T4233] pvrusb2: ********** [ 647.669088][ T4381] snd-usb-audio: probe of 8-1:1.0 failed with error -22 [ 647.676427][ T4233] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 647.700688][ T4233] pvrusb2: Important functionality might not be entirely working. [ 647.704187][ T5730] udevd[5730]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 647.710010][ T4381] usb 8-1: USB disconnect, device number 4 [ 647.731199][ T4233] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 647.734866][ T1325] usb 3-1: device descriptor read/64, error -71 [ 647.752307][ T4233] pvrusb2: ********** [ 647.807293][ T2425] pvrusb2: Invalid write control endpoint [ 647.910834][ T2425] pvrusb2: Invalid write control endpoint [ 647.916961][ T2425] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 647.926865][ T2425] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 647.934440][ T2425] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 647.945396][ T2425] pvrusb2: Device being rendered inoperable [ 647.951411][ T2425] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 647.959770][ T2425] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 647.970977][ T2425] pvrusb2: Attached sub-driver cx25840 [ 647.981208][ T1325] usb usb3-port1: attempt power cycle [ 647.988036][ T2425] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 647.998837][ T2425] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 648.059068][ T4386] usb 1-1: USB disconnect, device number 21 [ 648.357642][T10861] loop8: detected capacity change from 0 to 32768 [ 648.397137][ T1325] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 648.408748][T10861] BTRFS info (device loop8): using crc32c (crc32c-intel) checksum algorithm [ 648.420734][T10865] blk_update_request: I/O error, dev loop15, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 648.434526][T10861] BTRFS warning (device loop8): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 648.463066][T10865] SQUASHFS error: Failed to read block 0x0: -5 [ 648.477884][T10861] BTRFS info (device loop8): trying to use backup root at mount time [ 648.496176][ T1325] usb 3-1: device descriptor read/8, error -71 [ 648.502526][T10861] BTRFS info (device loop8): setting nodatasum [ 648.512281][T10861] BTRFS info (device loop8): enabling ssd optimizations [ 648.530646][T10861] BTRFS info (device loop8): using spread ssd allocation scheme [ 648.548963][T10861] BTRFS info (device loop8): turning on flush-on-commit [ 648.565322][T10861] BTRFS info (device loop8): setting datasum [ 648.581880][T10861] BTRFS info (device loop8): using free space tree [ 648.709735][T10861] BTRFS info (device loop8): has skinny extents [ 648.783079][T10884] vivid-004: ================= START STATUS ================= [ 648.891402][T10884] vivid-004: Radio HW Seek Mode: Bounded [ 648.931180][T10884] vivid-004: Radio Programmable HW Seek: false [ 648.965862][ T26] audit: type=1800 audit(1777390987.592:35): pid=10861 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1487" name="file1" dev="loop8" ino=260 res=0 errno=0 [ 648.999344][T10884] vivid-004: RDS Rx I/O Mode: Block I/O [ 649.075257][T10884] vivid-004: Generate RBDS Instead of RDS: false [ 649.089962][T10884] vivid-004: RDS Reception: true [ 649.111444][T10884] vivid-004: RDS Program Type: 0 inactive [ 649.159048][ T26] audit: type=1800 audit(1777390987.682:36): pid=10896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1487" name="bus" dev="loop8" ino=263 res=0 errno=0 [ 649.244571][T10884] vivid-004: RDS PS Name: inactive [ 649.410173][T10884] vivid-004: RDS Radio Text: inactive [ 649.523537][T10884] vivid-004: RDS Traffic Announcement: false inactive [ 649.759314][T10884] vivid-004: RDS Traffic Program: false inactive [ 649.823529][T10884] vivid-004: RDS Music: false inactive [ 649.864859][T10884] vivid-004: ================== END STATUS ================== [ 649.905553][T10901] binder: 10898:10901 ioctl 4018620d 0 returned -22 [ 649.952605][T10901] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1491'. [ 653.287669][ T7] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 653.299211][T10918] input: syz1 as /devices/virtual/input/input7 [ 653.494875][ T7] usb 7-1: device descriptor read/64, error -71 [ 653.613039][T10935] vivid-004: ================= START STATUS ================= [ 653.641479][T10935] vivid-004: Radio HW Seek Mode: Bounded [ 653.661762][T10935] vivid-004: Radio Programmable HW Seek: false [ 653.688685][T10935] vivid-004: RDS Rx I/O Mode: Block I/O [ 653.750789][T10935] vivid-004: Generate RBDS Instead of RDS: false [ 653.776007][T10935] vivid-004: RDS Reception: true [ 653.784933][ T7] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 653.796766][T10935] vivid-004: RDS Program Type: 0 inactive [ 653.819783][T10935] vivid-004: RDS PS Name: inactive [ 653.833137][T10935] vivid-004: RDS Radio Text: inactive [ 653.848058][T10935] vivid-004: RDS Traffic Announcement: false inactive [ 653.858360][T10935] vivid-004: RDS Traffic Program: false inactive [ 653.865236][T10935] vivid-004: RDS Music: false inactive [ 653.870941][T10935] vivid-004: ================== END STATUS ================== [ 653.984891][ T7] usb 7-1: device descriptor read/64, error -71 [ 654.076638][T10948] binder: 10946:10948 ioctl 4018620d 0 returned -22 [ 654.106142][ T7] usb usb7-port1: attempt power cycle [ 654.829053][T10948] netlink: 92 bytes leftover after parsing attributes in process `syz.7.1506'. [ 657.503922][T10979] vivid-000: ================= START STATUS ================= [ 657.536742][T10979] vivid-000: Radio HW Seek Mode: Bounded [ 657.542575][T10979] vivid-000: Radio Programmable HW Seek: false [ 657.559327][T10979] vivid-000: RDS Rx I/O Mode: Block I/O [ 657.572311][T10979] vivid-000: Generate RBDS Instead of RDS: false [ 657.586597][T10979] vivid-000: RDS Reception: true [ 657.597278][T10979] vivid-000: RDS Program Type: 0 inactive [ 657.610908][T10979] vivid-000: RDS PS Name: inactive [ 657.621846][T10979] vivid-000: RDS Radio Text: inactive [ 657.634206][T10979] vivid-000: RDS Traffic Announcement: false inactive [ 657.649130][T10979] vivid-000: RDS Traffic Program: false inactive [ 657.662394][T10955] loop2: detected capacity change from 0 to 32768 [ 657.664977][T10979] vivid-000: RDS Music: false inactive [ 657.686933][T10979] vivid-000: ================== END STATUS ================== [ 657.738270][T10955] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1508 (10955) [ 657.775404][T10955] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 657.811688][T10955] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 657.843427][T10955] BTRFS info (device loop2): trying to use backup root at mount time [ 657.853557][T10955] BTRFS info (device loop2): setting nodatasum [ 657.872130][T10955] BTRFS info (device loop2): enabling ssd optimizations [ 657.884839][T10955] BTRFS info (device loop2): using spread ssd allocation scheme [ 657.902901][T10955] BTRFS info (device loop2): turning on flush-on-commit [ 657.924333][T10955] BTRFS info (device loop2): setting datasum [ 657.943564][T10955] BTRFS info (device loop2): using free space tree [ 657.963917][T10955] BTRFS info (device loop2): has skinny extents [ 658.136982][T10955] BTRFS error (device loop2): open_ctree failed: -12 [ 658.422719][T10977] input: syz1 as /devices/virtual/input/input8 [ 658.553517][ T5730] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by udevd (5730) [ 658.998926][T11007] IPv4: Oversized IP packet from 127.202.26.0 [ 659.854926][ T4558] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 660.063416][T11014] binder: 11013:11014 ioctl 4018620d 0 returned -22 [ 660.092535][T11014] netlink: 92 bytes leftover after parsing attributes in process `syz.8.1521'. [ 660.100846][ T4558] usb 1-1: device descriptor read/64, error -71 [ 660.385228][ T4558] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 660.574857][ T4558] usb 1-1: device descriptor read/64, error -71 [ 660.702897][ T4558] usb usb1-port1: attempt power cycle [ 669.602457][T11050] siw: device registration error -23 [ 670.648654][T11067] binder: 11066:11067 ioctl 4018620d 0 returned -22 [ 670.678719][T11067] netlink: 92 bytes leftover after parsing attributes in process `syz.7.1534'. [ 671.145276][T11051] loop2: detected capacity change from 0 to 32768 [ 671.600220][T11051] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 671.632026][T11051] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 671.654691][T11051] BTRFS info (device loop2): trying to use backup root at mount time [ 671.681797][T11051] BTRFS info (device loop2): setting nodatasum [ 671.751399][T11051] BTRFS info (device loop2): enabling ssd optimizations [ 671.805182][T11051] BTRFS info (device loop2): using spread ssd allocation scheme [ 671.872697][T11051] BTRFS info (device loop2): turning on flush-on-commit [ 671.880184][T11051] BTRFS info (device loop2): setting datasum [ 671.886348][T11051] BTRFS info (device loop2): using free space tree [ 671.893513][T11051] BTRFS info (device loop2): has skinny extents [ 672.999814][T11051] BTRFS error (device loop2): open_ctree failed: -12 [ 673.154746][ T4230] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 673.203074][ T5730] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by udevd (5730) [ 673.514966][ T4230] usb 1-1: device descriptor read/64, error -71 [ 673.794962][ T4230] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 674.095151][T11116] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1542'. [ 674.134787][ T4230] usb 1-1: device descriptor read/64, error -71 [ 674.264913][ T4230] usb usb1-port1: attempt power cycle [ 674.999468][ T4230] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 675.314713][ T4230] usb 1-1: device not accepting address 27, error -71 [ 676.386952][T11132] binder: 11131:11132 ioctl 4018620d 0 returned -22 [ 676.459159][T11132] netlink: 92 bytes leftover after parsing attributes in process `syz.7.1548'. [ 678.370575][T11147] device syzkaller0 entered promiscuous mode [ 678.454656][T11147] 0: reclassify loop, rule prio 0, protocol 800 [ 678.601865][T11150] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1552'. [ 678.639544][T11150] bridge0: port 2(bridge_slave_1) entered disabled state [ 678.646968][T11150] bridge0: port 1(bridge_slave_0) entered disabled state [ 678.768038][T11152] device syzkaller0 entered promiscuous mode [ 679.138055][T11167] siw: device registration error -23 [ 679.950491][T11171] binder: 11170:11171 ioctl 4018620d 0 returned -22 [ 679.958728][T11171] netlink: 92 bytes leftover after parsing attributes in process `syz.7.1559'. [ 679.972106][T11165] bridge0: port 2(bridge_slave_1) entered blocking state [ 679.979495][T11165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 679.986955][T11165] bridge0: port 1(bridge_slave_0) entered blocking state [ 679.994126][T11165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 680.940562][T11182] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1560'. [ 680.974913][ T4230] Bluetooth: hci5: command 0x0405 tx timeout [ 681.003397][T11183] vivid-000: ================= START STATUS ================= [ 681.055341][T11183] vivid-000: Radio HW Seek Mode: Bounded [ 681.061171][T11183] vivid-000: Radio Programmable HW Seek: false [ 681.141746][T11183] vivid-000: RDS Rx I/O Mode: Block I/O [ 681.213499][T11183] vivid-000: Generate RBDS Instead of RDS: false [ 681.608578][T11183] vivid-000: RDS Reception: true [ 681.613748][T11183] vivid-000: RDS Program Type: 0 inactive [ 681.622554][T11183] vivid-000: RDS PS Name: inactive [ 681.628213][T11183] vivid-000: RDS Radio Text: inactive [ 681.635049][T11183] vivid-000: RDS Traffic Announcement: false inactive [ 681.642259][T11183] vivid-000: RDS Traffic Program: false inactive [ 681.675338][T11183] vivid-000: RDS Music: false inactive [ 681.729876][T11183] vivid-000: ================== END STATUS ================== [ 682.366243][T11207] siw: device registration error -23 [ 685.335678][T11222] binder: 11221:11222 ioctl 4018620d 0 returned -22 [ 685.371469][T11222] netlink: 92 bytes leftover after parsing attributes in process `syz.8.1574'. [ 685.614147][T11230] lo speed is unknown, defaulting to 1000 [ 685.698910][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.705990][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.028139][T11240] vivid-002: ================= START STATUS ================= [ 686.063297][T11240] vivid-002: Radio HW Seek Mode: Bounded [ 686.074788][T11240] vivid-002: Radio Programmable HW Seek: false [ 686.124380][T11240] vivid-002: RDS Rx I/O Mode: Block I/O [ 686.132630][T11240] vivid-002: Generate RBDS Instead of RDS: false [ 686.150319][T11240] vivid-002: RDS Reception: true [ 686.162062][T11240] vivid-002: RDS Program Type: 0 inactive [ 686.187069][T11244] device bond1 entered promiscuous mode [ 686.193774][T11244] 8021q: adding VLAN 0 to HW filter on device bond1 [ 686.200972][T11240] vivid-002: RDS PS Name: inactive [ 686.245321][T11240] vivid-002: RDS Radio Text: inactive [ 686.251521][T11240] vivid-002: RDS Traffic Announcement: false inactive [ 686.422829][T11240] vivid-002: RDS Traffic Program: false inactive [ 686.437723][T11240] vivid-002: RDS Music: false inactive [ 686.451486][T11240] vivid-002: ================== END STATUS ================== [ 686.520666][T11254] siw: device registration error -23 [ 689.037441][T11271] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1588'. [ 689.502881][T11280] binder: 11279:11280 ioctl 4018620d 0 returned -22 [ 689.534012][T11280] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1592'. [ 689.857157][ T4245] nci: nci_ntf_packet: unknown ntf opcode 0x10a [ 691.107275][T11296] siw: device registration error -23 [ 691.484314][T11301] vivid-002: ================= START STATUS ================= [ 691.525171][T11301] vivid-002: Radio HW Seek Mode: Bounded [ 691.558978][T11301] vivid-002: Radio Programmable HW Seek: false [ 691.623818][T11301] vivid-002: RDS Rx I/O Mode: Block I/O [ 691.674493][T11301] vivid-002: Generate RBDS Instead of RDS: false [ 691.681796][T11301] vivid-002: RDS Reception: true [ 691.705028][T11301] vivid-002: RDS Program Type: 0 inactive [ 691.727217][T11301] vivid-002: RDS PS Name: inactive [ 691.753346][T11301] vivid-002: RDS Radio Text: inactive [ 691.784934][T11301] vivid-002: RDS Traffic Announcement: false inactive [ 691.825882][T11301] vivid-002: RDS Traffic Program: false inactive [ 691.846559][T11301] vivid-002: RDS Music: false inactive [ 691.853142][T11301] vivid-002: ================== END STATUS ================== [ 692.115494][T11309] device syzkaller0 entered promiscuous mode [ 692.663621][T11283] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 693.610806][T11324] binder: 11322:11324 ioctl 4018620d 0 returned -22 [ 693.755105][T11324] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1604'. [ 693.962612][T11331] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1605'. [ 695.746134][T11346] vivid-004: ================= START STATUS ================= [ 695.768807][T11346] vivid-004: Radio HW Seek Mode: Bounded [ 695.774953][T11346] vivid-004: Radio Programmable HW Seek: false [ 695.781266][T11346] vivid-004: RDS Rx I/O Mode: Block I/O [ 695.787116][T11346] vivid-004: Generate RBDS Instead of RDS: false [ 695.793593][T11346] vivid-004: RDS Reception: true [ 695.798779][T11346] vivid-004: RDS Program Type: 0 inactive [ 695.804692][T11346] vivid-004: RDS PS Name: inactive [ 695.810087][T11346] vivid-004: RDS Radio Text: inactive [ 695.815729][T11346] vivid-004: RDS Traffic Announcement: false inactive [ 695.822711][T11346] vivid-004: RDS Traffic Program: false inactive [ 695.829244][T11346] vivid-004: RDS Music: false inactive [ 695.835668][T11346] vivid-004: ================== END STATUS ================== [ 696.847318][T11367] binder: 11366:11367 ioctl 4018620d 0 returned -22 [ 696.907047][T11367] netlink: 92 bytes leftover after parsing attributes in process `syz.6.1619'. [ 697.926205][T11375] device syzkaller0 entered promiscuous mode [ 697.966704][T11375] tc action pedit 'at' offset 32289 out of bounds [ 697.973248][T11375] tc action pedit 'at' offset 32289 out of bounds [ 697.979908][T11375] tc action pedit 'at' offset 32289 out of bounds [ 697.986386][T11375] tc action pedit 'at' offset 32289 out of bounds [ 697.992938][T11375] tc action pedit 'at' offset 32289 out of bounds [ 697.999421][T11375] tc action pedit 'at' offset 32289 out of bounds [ 698.005901][T11375] tc action pedit 'at' offset 32289 out of bounds [ 698.012348][T11375] tc action pedit 'at' offset 32289 out of bounds [ 698.018845][T11375] tc action pedit 'at' offset 32289 out of bounds [ 698.025322][T11375] tc action pedit 'at' offset 32289 out of bounds [ 698.031760][T11375] tc action pedit 'at' offset 32289 out of bounds [ 698.038390][T11375] tc action pedit 'at' offset 32289 out of bounds [ 698.045019][T11375] tc action pedit 'at' offset 32289 out of bounds [ 698.051470][T11375] tc action pedit 'at' offset 32289 out of bounds [ 698.058085][T11375] tc action pedit 'at' offset 32289 out of bounds [ 698.064531][T11375] tc action pedit 'at' offset 32289 out of bounds [ 698.071155][T11375] tc action pedit 'at' offset 32289 out of bounds [ 698.077633][T11375] tc action pedit 'at' offset 32289 out of bounds [ 698.084081][T11375] tc action pedit 'at' offset 32289 out of bounds [ 698.090676][T11375] tc action pedit 'at' offset 32289 out of bounds [ 698.097171][T11375] tc action pedit 'at' offset 32289 out of bounds [ 698.103619][T11375] tc action pedit 'at' offset 32289 out of bounds [ 698.110105][T11375] tc action pedit 'at' offset 32289 out of bounds [ 698.116576][T11375] tc action pedit 'at' offset 32289 out of bounds [ 698.123101][T11375] tc action pedit 'at' offset 32289 out of bounds [ 698.129759][T11375] tc action pedit 'at' offset 32289 out of bounds [ 698.136326][T11375] tc action pedit 'at' offset 32289 out of bounds [ 698.142783][T11375] tc action pedit 'at' offset 32289 out of bounds [ 698.149520][T11375] tc action pedit 'at' offset 32289 out of bounds [ 698.155986][T11375] tc action pedit 'at' offset 32289 out of bounds [ 698.162440][T11375] tc action pedit 'at' offset 32289 out of bounds [ 698.168952][T11375] tc action pedit 'at' offset 32289 out of bounds [ 698.175427][T11375] TC_ACT_REPEAT abuse ? [ 700.148088][T11397] xt_hashlimit: size too large, truncated to 1048576 [ 700.944215][T11408] netlink: 'syz.0.1629': attribute type 1 has an invalid length. [ 700.996058][T11408] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.280636][T11410] binder: 11409:11410 ioctl 4018620d 0 returned -22 [ 701.337667][T11411] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1630'. [ 702.526191][T11424] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1632'. [ 703.492680][T11417] crypto_alloc_aead failed rc=-4 [ 703.678123][T11440] tipc: Started in network mode [ 703.683595][T11440] tipc: Node identity fa0b05ee682a, cluster identity 4711 [ 703.755034][T11440] tipc: Enabled bearer , priority 0 [ 704.070507][T11444] device syzkaller0 entered promiscuous mode [ 704.207158][T11437] tipc: Resetting bearer [ 704.313590][T11437] tipc: Disabling bearer [ 704.335588][T11450] device syzkaller0 entered promiscuous mode [ 704.615456][T11458] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1640'. [ 704.806143][ T4202] block nbd0: Receive control failed (result -1) [ 707.671113][T11494] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 707.853339][T11502] blk_update_request: I/O error, dev loop13, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 707.900350][T11502] SQUASHFS error: Failed to read block 0x0: -5 [ 708.429981][T11508] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1652'. [ 708.443603][T11511] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 708.486192][T11508] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1652'. [ 708.650708][ T1108] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 708.934895][ T1108] usb 1-1: Using ep0 maxpacket: 8 [ 709.095535][ T1108] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 709.145589][ T1108] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.477242][ T1108] pvrusb2: Hardware description: Terratec Grabster AV400 [ 709.514645][ T1108] pvrusb2: ********** [ 709.544791][ T1108] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 709.585610][ T1108] pvrusb2: Important functionality might not be entirely working. [ 709.642843][ T1108] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 709.670497][ T1108] pvrusb2: ********** [ 709.721473][ T2425] pvrusb2: Invalid write control endpoint [ 710.560797][ T4232] usb 1-1: USB disconnect, device number 29 [ 710.613338][ T2425] pvrusb2: Invalid write control endpoint [ 710.624270][ T2425] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 710.660566][ T2425] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 710.705860][ T2425] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 710.745736][ T2425] pvrusb2: Device being rendered inoperable [ 710.753138][ T2425] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 710.773093][ T2425] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 710.805696][ T2425] pvrusb2: Attached sub-driver cx25840 [ 710.834798][ T2425] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 710.914916][ T2425] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 714.416537][T11585] xt_connbytes: Forcing CT accounting to be enabled [ 714.640713][T11585] xt_CT: No such helper "netbios-ns" [ 715.690456][T11600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1678'. [ 718.850757][T11628] vivid-002: ================= START STATUS ================= [ 718.880802][T11628] vivid-002: Radio HW Seek Mode: Bounded [ 718.889263][T11628] vivid-002: Radio Programmable HW Seek: false [ 718.921036][T11628] vivid-002: RDS Rx I/O Mode: Block I/O [ 718.938487][T11628] vivid-002: Generate RBDS Instead of RDS: false [ 718.984824][T11628] vivid-002: RDS Reception: true [ 719.007099][T11628] vivid-002: RDS Program Type: 0 inactive [ 719.034640][T11628] vivid-002: RDS PS Name: inactive [ 719.057385][T11628] vivid-002: RDS Radio Text: inactive [ 719.081202][T11628] vivid-002: RDS Traffic Announcement: false inactive [ 719.109693][T11628] vivid-002: RDS Traffic Program: false inactive [ 719.146210][T11628] vivid-002: RDS Music: false inactive [ 719.172041][T11628] vivid-002: ================== END STATUS ================== [ 723.530862][T11699] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 723.611022][T11699] SQUASHFS error: Failed to read block 0x0: -5 [ 725.321437][T11718] SET target dimension over the limit! [ 725.833710][T11720] netlink: 'syz.6.1716': attribute type 1 has an invalid length. [ 725.862102][T11720] 8021q: adding VLAN 0 to HW filter on device bond1 [ 725.896585][T11720] bond1: (slave geneve2): making interface the new active one [ 725.917640][T11720] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 725.932441][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 725.973422][T11720] syz.6.1716 (11720) used greatest stack depth: 17680 bytes left [ 726.454843][T11695] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 727.336940][T11745] netlink: 'syz.6.1723': attribute type 10 has an invalid length. [ 727.388856][T11745] 8021q: adding VLAN 0 to HW filter on device team0 [ 727.417500][T11745] bond0: (slave team0): Enslaving as an active interface with an up link [ 728.193055][T11755] device syzkaller0 entered promiscuous mode [ 728.569140][T11765] blk_update_request: I/O error, dev loop15, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 728.580986][T11765] SQUASHFS error: Failed to read block 0x0: -5 [ 728.599963][T11765] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1728'. [ 728.764961][ T4232] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 729.095013][ T4232] usb 7-1: Using ep0 maxpacket: 32 [ 729.485134][ T4232] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 730.397704][ T4232] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 730.734757][ T4232] usb 7-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 731.508204][ T4232] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.516963][ T4232] usb 7-1: Product: syz [ 731.521545][ T4232] usb 7-1: Manufacturer: syz [ 731.526543][ T4232] usb 7-1: SerialNumber: syz [ 731.533066][ T4232] usb 7-1: config 0 descriptor?? [ 731.567451][ T4232] usb 7-1: can't set config #0, error -71 [ 731.588972][T11806] device syzkaller0 entered promiscuous mode [ 731.596062][ T4232] usb 7-1: USB disconnect, device number 15 [ 731.622254][T11803] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1743'. [ 733.046008][T11824] device syzkaller0 entered promiscuous mode [ 733.804775][ T4236] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 734.054733][ T4236] usb 7-1: Using ep0 maxpacket: 32 [ 734.175001][ T4236] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 734.206538][ T4236] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 735.304772][ T4236] usb 7-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 735.313902][ T4236] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.351108][ T4236] usb 7-1: Product: syz [ 735.377134][ T1108] Bluetooth: hci5: command 0x0405 tx timeout [ 736.829153][ T4236] usb 7-1: Manufacturer: syz [ 736.833919][ T4236] usb 7-1: SerialNumber: syz [ 736.851341][ T4236] usb 7-1: config 0 descriptor?? [ 736.927766][ T4236] usb 7-1: can't set config #0, error -71 [ 736.972081][ T4236] usb 7-1: USB disconnect, device number 16 [ 737.185393][T11866] device syzkaller0 entered promiscuous mode [ 737.578790][T11879] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1764'. [ 737.749092][T11881] SET target dimension over the limit! [ 738.363966][T11886] binder: 11885:11886 ioctl 4018620d 0 returned -22 [ 739.324884][ T4276] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 739.516383][T11901] input: syz1 as /devices/virtual/input/input9 [ 739.570507][ T4276] usb 3-1: Using ep0 maxpacket: 8 [ 739.775956][ T4276] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 739.790659][ T4276] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.857544][ T4276] pvrusb2: Hardware description: Terratec Grabster AV400 [ 739.885672][ T4276] pvrusb2: ********** [ 739.894746][ T4276] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 739.942695][ T4276] pvrusb2: Important functionality might not be entirely working. [ 739.954649][ T4276] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 739.982372][ T4276] pvrusb2: ********** [ 740.066088][ T2425] pvrusb2: Invalid write control endpoint [ 740.217540][T11917] SET target dimension over the limit! [ 740.278280][ T2425] pvrusb2: Invalid write control endpoint [ 740.284283][ T2425] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 740.296724][ T4276] usb 3-1: USB disconnect, device number 29 [ 740.333463][ T2425] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 740.359876][ T2425] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 740.384686][ T2425] pvrusb2: Device being rendered inoperable [ 740.437608][ T2425] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 740.465344][ T2425] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 740.493355][ T2425] pvrusb2: Attached sub-driver cx25840 [ 740.511340][ T2425] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 740.525136][ T2425] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 740.957488][T11919] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 740.991677][T11919] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 741.019240][T11919] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1778'. [ 741.641378][T11929] binder: 11928:11929 ioctl 4018620d 0 returned -22 [ 741.703947][T11931] vivid-002: ================= START STATUS ================= [ 741.711702][T11931] vivid-002: Radio HW Seek Mode: Bounded [ 741.717415][T11931] vivid-002: Radio Programmable HW Seek: false [ 741.723614][T11931] vivid-002: RDS Rx I/O Mode: Block I/O [ 741.729251][T11931] vivid-002: Generate RBDS Instead of RDS: false [ 741.735652][T11931] vivid-002: RDS Reception: true [ 741.740640][T11931] vivid-002: RDS Program Type: 0 inactive [ 741.746449][T11931] vivid-002: RDS PS Name: inactive [ 741.751699][T11931] vivid-002: RDS Radio Text: inactive [ 741.757251][T11931] vivid-002: RDS Traffic Announcement: false inactive [ 741.764093][T11931] vivid-002: RDS Traffic Program: false inactive [ 741.770511][T11931] vivid-002: RDS Music: false inactive [ 741.776365][T11931] vivid-002: ================== END STATUS ================== [ 743.560399][T11943] input: syz1 as /devices/virtual/input/input10 [ 744.026843][T11956] Cannot find add_set index 0 as target [ 744.381722][T11961] bridge0: port 1(bridge_slave_0) entered forwarding state [ 744.634921][ T4276] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 744.874865][ T4276] usb 7-1: Using ep0 maxpacket: 8 [ 744.995010][ T4276] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 745.013308][ T4276] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.087381][ T4276] pvrusb2: Hardware description: Terratec Grabster AV400 [ 745.103464][ T4276] pvrusb2: ********** [ 745.123884][ T4276] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 745.159860][ T4276] pvrusb2: Important functionality might not be entirely working. [ 745.193131][ T4276] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 745.217517][ T4276] pvrusb2: ********** [ 745.312837][ T2425] pvrusb2: Invalid write control endpoint [ 745.540637][ T4276] usb 7-1: USB disconnect, device number 17 [ 745.709855][ T2425] pvrusb2: Invalid write control endpoint [ 745.760736][ T2425] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 745.786226][ T2425] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 745.808493][ T2425] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 745.823021][T11973] binder: 11972:11973 ioctl 4018620d 0 returned -22 [ 745.827235][ T2425] pvrusb2: Device being rendered inoperable [ 745.844029][ T2425] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 745.859563][ T2425] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 745.898005][ T2425] pvrusb2: Attached sub-driver cx25840 [ 745.917018][ T2425] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 745.945940][ T2425] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 746.145566][T11980] device syzkaller0 entered promiscuous mode [ 747.139113][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.148862][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.890887][T12004] netlink: 'syz.6.1805': attribute type 10 has an invalid length. [ 748.900649][T12004] device veth0_vlan left promiscuous mode [ 748.922754][T12004] device veth0_vlan entered promiscuous mode [ 748.965508][T12004] team0: Device veth0_vlan failed to register rx_handler [ 749.568965][T12008] SET target dimension over the limit! [ 750.648982][T12018] vivid-004: ================= START STATUS ================= [ 750.656759][T12018] vivid-004: Radio HW Seek Mode: Bounded [ 750.662447][T12018] vivid-004: Radio Programmable HW Seek: false [ 750.668706][T12018] vivid-004: RDS Rx I/O Mode: Block I/O [ 750.674290][T12018] vivid-004: Generate RBDS Instead of RDS: false [ 750.680770][T12018] vivid-004: RDS Reception: true [ 750.685773][T12018] vivid-004: RDS Program Type: 0 inactive [ 750.691546][T12018] vivid-004: RDS PS Name: inactive [ 750.696837][T12018] vivid-004: RDS Radio Text: inactive [ 750.702377][T12018] vivid-004: RDS Traffic Announcement: false inactive [ 750.709268][T12018] vivid-004: RDS Traffic Program: false inactive [ 750.715709][T12018] vivid-004: RDS Music: false inactive [ 750.721245][T12018] vivid-004: ================== END STATUS ================== [ 755.085187][ T4236] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 755.374795][ T4236] usb 1-1: Using ep0 maxpacket: 32 [ 755.515400][ T4236] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 755.575680][ T4236] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 755.805637][ T4236] usb 1-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 755.823693][ T4236] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.843160][ T4236] usb 1-1: Product: syz [ 755.861101][T12045] netlink: 'syz.7.1817': attribute type 10 has an invalid length. [ 755.880441][ T4236] usb 1-1: Manufacturer: syz [ 755.904737][ T4236] usb 1-1: SerialNumber: syz [ 755.944050][ T4236] usb 1-1: config 0 descriptor?? [ 756.004012][T12045] device veth0_vlan left promiscuous mode [ 756.013097][T12045] device veth0_vlan entered promiscuous mode [ 756.022344][T12045] team0: Device veth0_vlan failed to register rx_handler [ 756.240652][T12060] hub 8-0:1.0: USB hub found [ 756.253999][T12060] hub 8-0:1.0: 1 port detected [ 756.275855][ T4236] viperboard 1-1:0.0: version 0.00 found at bus 001 address 030 [ 757.115777][ T4236] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 757.129968][ T4236] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5 [ 757.151036][ T4236] usb 1-1: USB disconnect, device number 30 [ 758.601500][T12077] binder: 12076:12077 ioctl 4018620d 0 returned -22 [ 760.966880][T12104] netlink: 'syz.7.1835': attribute type 10 has an invalid length. [ 760.979561][T12104] device veth0_vlan left promiscuous mode [ 760.997108][T12104] device veth0_vlan entered promiscuous mode [ 761.062277][T12104] team0: Device veth0_vlan failed to register rx_handler [ 761.854776][ T4194] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 762.042111][T12115] binder: 12114:12115 ioctl 4018620d 0 returned -22 [ 763.004698][ T4194] usb 3-1: Using ep0 maxpacket: 32 [ 763.374822][ T4194] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 763.399557][ T4194] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 763.611273][ T4194] usb 3-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 763.654652][ T4194] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.765451][ T4194] usb 3-1: Product: syz [ 763.823393][ T4194] usb 3-1: Manufacturer: syz [ 763.905192][ T4194] usb 3-1: SerialNumber: syz [ 763.997983][ T4194] usb 3-1: config 0 descriptor?? [ 764.065219][ T4194] usb 3-1: can't set config #0, error -71 [ 764.116010][ T4194] usb 3-1: USB disconnect, device number 30 [ 765.730771][T12140] netlink: 'syz.2.1848': attribute type 10 has an invalid length. [ 765.738932][T12140] device veth0_vlan left promiscuous mode [ 765.745226][T12140] device veth0_vlan entered promiscuous mode [ 765.752257][T12140] team0: Device veth0_vlan failed to register rx_handler [ 766.009257][T12156] binder: 12155:12156 ioctl 4018620d 0 returned -22 [ 767.117534][T12163] vivid-001: ================= START STATUS ================= [ 767.185191][T12163] vivid-001: Radio HW Seek Mode: Bounded [ 767.203026][T12163] vivid-001: Radio Programmable HW Seek: false [ 767.249402][T12163] vivid-001: RDS Rx I/O Mode: Block I/O [ 767.346596][T12163] vivid-001: Generate RBDS Instead of RDS: false [ 767.404726][T12163] vivid-001: RDS Reception: true [ 767.420708][T12163] vivid-001: RDS Program Type: 0 inactive [ 767.460432][T12163] vivid-001: RDS PS Name: inactive [ 767.524295][T12163] vivid-001: RDS Radio Text: inactive [ 767.551254][T12163] vivid-001: RDS Traffic Announcement: false inactive [ 767.590746][T12163] vivid-001: RDS Traffic Program: false inactive [ 767.646161][T12163] vivid-001: RDS Music: false inactive [ 767.652316][T12163] vivid-001: ================== END STATUS ================== [ 767.655149][ T4232] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 767.934712][ T4232] usb 3-1: Using ep0 maxpacket: 32 [ 768.054888][ T4232] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 768.074741][ T4232] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 768.374929][ T4232] usb 3-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 768.389828][ T4232] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.414713][ T4232] usb 3-1: Product: syz [ 768.419236][ T4232] usb 3-1: Manufacturer: syz [ 768.424284][ T4232] usb 3-1: SerialNumber: syz [ 768.438534][ T4232] usb 3-1: config 0 descriptor?? [ 768.624726][ T4232] viperboard 3-1:0.0: version 0.00 found at bus 003 address 031 [ 768.854878][ T4232] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 768.920713][ T4232] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5 [ 769.082251][ T4232] usb 3-1: USB disconnect, device number 31 [ 769.543291][T12190] netlink: 'syz.6.1862': attribute type 10 has an invalid length. [ 769.553048][T12190] device veth0_vlan left promiscuous mode [ 769.565798][T12190] device veth0_vlan entered promiscuous mode [ 769.587725][T12190] team0: Device veth0_vlan failed to register rx_handler [ 770.461553][T12195] binder: 12194:12195 ioctl 4018620d 0 returned -22 [ 774.904246][T12249] netlink: 'syz.2.1876': attribute type 10 has an invalid length. [ 774.922639][T12249] device veth0_vlan left promiscuous mode [ 774.959599][T12249] device veth0_vlan entered promiscuous mode [ 775.151341][T12249] team0: Device veth0_vlan failed to register rx_handler [ 775.447213][T12254] binder: 12253:12254 ioctl 4018620d 0 returned -22 [ 776.432630][T12261] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 778.006254][T12271] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1883'. [ 780.267071][T12291] netlink: 'syz.0.1889': attribute type 10 has an invalid length. [ 780.280904][T12291] device veth0_vlan left promiscuous mode [ 780.298453][T12291] device veth0_vlan entered promiscuous mode [ 780.330564][T12291] team0: Device veth0_vlan failed to register rx_handler [ 781.346175][T12295] binder: 12294:12295 ioctl 4018620d 0 returned -22 [ 781.951041][T12302] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 784.142433][T12315] blk_update_request: I/O error, dev loop17, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 784.154668][T12315] SQUASHFS error: Failed to read block 0x0: -5 [ 784.200615][T12315] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1896'. [ 784.828104][T11012] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 784.939910][T12322] netlink: 'syz.6.1900': attribute type 10 has an invalid length. [ 784.948073][T12322] device veth0_vlan left promiscuous mode [ 784.955048][T12322] device veth0_vlan entered promiscuous mode [ 784.962100][T12322] team0: Device veth0_vlan failed to register rx_handler [ 785.234885][T11012] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 785.251247][T11012] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 785.285395][T11012] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 785.346019][T11012] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 785.585790][T11012] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 785.683834][T12335] binder: 12333:12335 ioctl 4018620d 0 returned -22 [ 785.734834][T11012] usb 1-1: string descriptor 0 read error: -71 [ 785.744740][T11012] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 785.764639][T11012] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 785.834826][T11012] usb 1-1: can't set config #1, error -71 [ 785.852641][T11012] usb 1-1: USB disconnect, device number 31 [ 787.786065][T12345] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 788.645595][T12359] blk_update_request: I/O error, dev loop13, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 788.656951][T12359] SQUASHFS error: Failed to read block 0x0: -5 [ 788.665500][T12359] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1910'. [ 790.221517][T12372] binder: 12371:12372 ioctl 4018620d 0 returned -22 [ 790.245388][T12372] netlink: 92 bytes leftover after parsing attributes in process `syz.6.1916'. [ 790.384670][ T4275] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 790.655489][ T4194] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 790.667018][ T4194] Bluetooth: hci1: Injecting HCI hardware error event [ 790.681810][ T4202] Bluetooth: hci1: hardware error 0x00 [ 790.754919][ T4275] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 790.766932][ T4275] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 790.788848][ T4275] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 790.807880][ T4275] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 790.830592][ T4275] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 790.965993][ T4275] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 790.984662][ T4275] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 791.006809][ T4275] usb 3-1: Product: syz [ 791.011053][ T4275] usb 3-1: Manufacturer: syz [ 791.085893][ T4275] cdc_wdm 3-1:1.0: skipping garbage [ 791.091172][ T4275] cdc_wdm 3-1:1.0: skipping garbage [ 791.119747][ T4275] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 791.129377][ T4275] cdc_wdm 3-1:1.0: Unknown control protocol [ 791.404673][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 791.411346][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 791.425991][ T4230] usb 3-1: USB disconnect, device number 32 [ 791.444630][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 791.451294][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 791.457397][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 792.467017][T12392] netlink: 'syz.8.1920': attribute type 10 has an invalid length. [ 793.187106][T12392] device veth0_vlan left promiscuous mode [ 793.343393][T12392] device veth0_vlan entered promiscuous mode [ 794.379928][T12392] team0: Device veth0_vlan failed to register rx_handler [ 794.664296][T12408] blk_update_request: I/O error, dev loop15, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 794.675862][T12408] SQUASHFS error: Failed to read block 0x0: -5 [ 794.695425][T12408] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1925'. [ 795.482338][T11012] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 795.508430][T11012] Bluetooth: hci5: Injecting HCI hardware error event [ 795.516194][ T4192] Bluetooth: hci5: hardware error 0x00 [ 795.702303][T12415] binder: 12414:12415 ioctl 4018620d 0 returned -22 [ 795.733582][T12415] netlink: 92 bytes leftover after parsing attributes in process `syz.7.1928'. [ 796.240473][T12411] Bluetooth: hci1: unexpected event for opcode 0x203d [ 797.564790][ T1108] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 797.708365][ T4275] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 797.964867][ T1108] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 797.973589][ T4275] usb 3-1: Using ep0 maxpacket: 32 [ 798.114654][ T1108] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 798.133206][ T1108] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 798.142788][ T1108] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 798.158815][ T1108] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 798.175991][T12411] Bluetooth: hci5: unexpected event for opcode 0x1002 [ 798.194762][ T4275] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 798.232596][ T4275] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 798.294889][ T1108] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 798.320415][ T1108] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 798.364066][ T1108] usb 1-1: Product: syz [ 798.374833][ T1108] usb 1-1: Manufacturer: syz [ 798.425821][ T1108] cdc_wdm 1-1:1.0: skipping garbage [ 798.432195][ T4275] usb 3-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 798.441635][ T1108] cdc_wdm 1-1:1.0: skipping garbage [ 798.451692][ T4275] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 798.467809][ T1108] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 798.475726][ T4275] usb 3-1: Product: syz [ 798.481507][ T1108] cdc_wdm 1-1:1.0: Unknown control protocol [ 798.489045][ T4275] usb 3-1: Manufacturer: syz [ 798.515705][ T4275] usb 3-1: SerialNumber: syz [ 798.539329][ T4275] usb 3-1: config 0 descriptor?? [ 798.689079][ T1108] usb 1-1: USB disconnect, device number 32 [ 798.695143][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 798.695163][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 798.695175][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 798.744694][ T4275] viperboard 3-1:0.0: version 0.00 found at bus 003 address 033 [ 798.774702][ T4275] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 798.787031][ T4275] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5 [ 798.876977][ T4275] usb 3-1: USB disconnect, device number 33 [ 799.585684][T12457] blk_update_request: I/O error, dev loop13, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 799.597983][T12457] SQUASHFS error: Failed to read block 0x0: -5 [ 799.654497][T12457] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1937'. [ 800.747543][T12459] binder: 12458:12459 ioctl 4018620d 0 returned -22 [ 800.815286][T12459] netlink: 92 bytes leftover after parsing attributes in process `syz.6.1940'. [ 803.478802][T12495] blk_update_request: I/O error, dev loop17, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 803.490328][T12495] SQUASHFS error: Failed to read block 0x0: -5 [ 803.499199][T12495] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1950'. [ 804.616630][ T4275] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 804.874772][ T4275] usb 9-1: Using ep0 maxpacket: 32 [ 805.735705][ T7] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 805.743578][ T4275] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 805.789606][ T4275] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 805.815599][T12505] binder: 12504:12505 ioctl 4018620d 0 returned -22 [ 805.831761][T12505] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1954'. [ 805.974842][ T4275] usb 9-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 805.994249][ T4275] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.002907][ T4275] usb 9-1: Product: syz [ 806.011661][ T4275] usb 9-1: Manufacturer: syz [ 806.017757][ T4275] usb 9-1: SerialNumber: syz [ 806.031739][ T4275] usb 9-1: config 0 descriptor?? [ 806.094807][ T7] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 806.114426][ T7] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 806.139926][ T7] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 806.153364][ T7] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 806.166432][ T7] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 806.224692][ T4275] viperboard 9-1:0.0: version 0.00 found at bus 009 address 010 [ 806.258838][ T4275] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 806.268195][ T4275] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5 [ 806.294903][ T7] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 806.320402][ T7] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 806.395108][ T4275] usb 9-1: USB disconnect, device number 10 [ 806.524097][ T7] usb 3-1: Product: syz [ 806.587441][ T7] usb 3-1: Manufacturer: syz [ 806.781256][ T7] cdc_wdm 3-1:1.0: skipping garbage [ 806.861425][ T7] cdc_wdm 3-1:1.0: skipping garbage [ 807.055849][ T7] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 807.152080][ T7] cdc_wdm 3-1:1.0: Unknown control protocol [ 807.235200][ T7] usb 3-1: USB disconnect, device number 34 [ 808.579612][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.586321][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.628179][T12552] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1963'. [ 809.641930][T12554] binder: 12553:12554 ioctl 4018620d 0 returned -22 [ 809.655366][T12554] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1968'. [ 809.994694][ T4236] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 810.280182][ T4236] usb 9-1: Using ep0 maxpacket: 32 [ 810.424939][ T4236] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 810.448790][ T4236] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 810.784882][ T4236] usb 9-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 810.799346][ T4236] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 810.847854][ T4236] usb 9-1: Product: syz [ 810.864963][ T4236] usb 9-1: Manufacturer: syz [ 810.940472][ T4236] usb 9-1: SerialNumber: syz [ 811.033872][T12571] securityfs: Unknown parameter '' [ 812.614667][ T4236] usb 9-1: config 0 descriptor?? [ 813.254785][ T4236] usb 9-1: can't set config #0, error -71 [ 813.311265][ T4236] usb 9-1: USB disconnect, device number 11 [ 815.554229][T12592] binder: 12591:12592 ioctl 4018620d 0 returned -22 [ 815.634052][T12592] netlink: 92 bytes leftover after parsing attributes in process `syz.8.1979'. [ 816.186040][T12604] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1980'. [ 817.915123][T12620] securityfs: Unknown parameter '' [ 821.598384][T12645] binder: 12644:12645 ioctl 4018620d 0 returned -22 [ 821.660337][T12645] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1995'. [ 824.204719][ T4276] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 824.414651][ T4276] usb 1-1: device descriptor read/64, error -71 [ 824.694681][ T4276] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 824.884126][T12669] blk_update_request: I/O error, dev loop13, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 824.904824][ T4276] usb 1-1: device descriptor read/64, error -71 [ 825.004749][T12669] SQUASHFS error: Failed to read block 0x0: -5 [ 825.034907][ T4276] usb usb1-port1: attempt power cycle [ 825.494672][ T4276] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 826.919121][T12677] securityfs: Unknown parameter '' [ 827.394684][ T4276] usb 1-1: device not accepting address 35, error -71 [ 829.958592][T12688] binder: 12687:12688 ioctl 4018620d 0 returned -22 [ 829.996204][T12688] netlink: 92 bytes leftover after parsing attributes in process `syz.8.2007'. [ 832.784666][ T4276] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 833.004738][ T4276] usb 9-1: device descriptor read/64, error -71 [ 833.294659][ T4276] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 834.054633][ T4276] usb 9-1: device descriptor read/64, error -71 [ 834.195790][T12729] securityfs: Unknown parameter '' [ 835.734893][ T4276] usb usb9-port1: attempt power cycle [ 837.104619][ T4276] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 837.382657][ T4276] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 837.415493][ T4276] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 838.304692][ T4276] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 838.363763][ T4276] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 838.399755][ T4276] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 838.437946][ T4276] usb 9-1: config 0 descriptor?? [ 838.454115][T12751] binder: 12750:12751 ioctl 4018620d 0 returned -22 [ 838.472017][T12751] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2021'. [ 839.115513][ T4276] usbhid 9-1:0.0: can't add hid device: -71 [ 839.127730][ T4276] usbhid: probe of 9-1:0.0 failed with error -71 [ 839.187240][ T4276] usb 9-1: USB disconnect, device number 14 [ 839.581863][T12770] blk_update_request: I/O error, dev loop15, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 839.593183][T12770] SQUASHFS error: Failed to read block 0x0: -5 [ 839.601496][T12770] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2022'. [ 840.815902][ T4230] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 841.004606][ T4230] usb 3-1: device descriptor read/64, error -71 [ 841.274676][ T4230] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 841.462985][T12788] securityfs: Unknown parameter '' [ 841.475904][ T4230] usb 3-1: device descriptor read/64, error -71 [ 842.687800][ T4230] usb usb3-port1: attempt power cycle [ 843.324673][ T4230] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 843.512450][ T4230] usb 3-1: device descriptor read/8, error -71 [ 847.244788][T12812] binder: 12811:12812 ioctl 4018620d 0 returned -22 [ 847.271643][T12812] netlink: 92 bytes leftover after parsing attributes in process `syz.8.2038'. [ 849.495931][ T4276] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 849.620187][T12840] securityfs: Unknown parameter '' [ 849.734685][ T4276] usb 9-1: device descriptor read/64, error -71 [ 850.424736][ T4276] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 850.864705][ T4276] usb 9-1: device descriptor read/64, error -71 [ 850.994779][ T4276] usb usb9-port1: attempt power cycle [ 851.028781][T12855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2045'. [ 851.403685][T12861] binder: 12860:12861 ioctl 4018620d 0 returned -22 [ 851.411982][T12861] netlink: 92 bytes leftover after parsing attributes in process `syz.8.2053'. [ 851.764622][T11012] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 851.834688][ T7] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 852.174943][T11012] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 852.194695][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 852.195016][T11012] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 852.634813][ T7] usb 3-1: string descriptor 0 read error: -22 [ 852.642495][ T7] usb 3-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 852.651764][T11012] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 852.651807][T11012] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 852.680850][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.709702][T11012] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 852.741153][ T7] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 852.748922][T11012] usb 7-1: config 0 descriptor?? [ 852.863315][ T7] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 852.916046][ T5789] udevd[5789]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 852.940945][ T7] usb 3-1: USB disconnect, device number 39 [ 852.998763][T12879] hub 8-0:1.0: USB hub found [ 853.093831][T12879] hub 8-0:1.0: 1 port detected [ 853.384842][ T7] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 853.584756][ T7] usb 8-1: device descriptor read/64, error -71 [ 853.854698][ T7] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 854.074714][ T7] usb 8-1: device descriptor read/64, error -71 [ 854.195874][ T7] usb usb8-port1: attempt power cycle [ 855.030570][T12892] securityfs: Unknown parameter '' [ 855.394748][T11012] usbhid 7-1:0.0: can't add hid device: -71 [ 855.400802][T11012] usbhid: probe of 7-1:0.0 failed with error -71 [ 855.440387][T11012] usb 7-1: USB disconnect, device number 18 [ 855.667837][T12904] vivid-000: ================= START STATUS ================= [ 855.675625][T12904] vivid-000: Radio HW Seek Mode: Bounded [ 855.681532][T12904] vivid-000: Radio Programmable HW Seek: false [ 855.687892][T12904] vivid-000: RDS Rx I/O Mode: Block I/O [ 855.693597][T12904] vivid-000: Generate RBDS Instead of RDS: false [ 855.700211][T12904] vivid-000: RDS Reception: true [ 855.705347][T12904] vivid-000: RDS Program Type: 0 inactive [ 855.711253][T12904] vivid-000: RDS PS Name: inactive [ 855.716610][T12904] vivid-000: RDS Radio Text: inactive [ 855.722490][T12904] vivid-000: RDS Traffic Announcement: false inactive [ 855.729470][T12904] vivid-000: RDS Traffic Program: false inactive [ 855.736032][T12904] vivid-000: RDS Music: false inactive [ 855.741809][T12904] vivid-000: ================== END STATUS ================== [ 856.564148][T12906] binder: 12905:12906 ioctl 4018620d 0 returned -22 [ 856.614205][T12906] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2066'. [ 856.920813][T12912] blk_update_request: I/O error, dev loop13, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 856.932590][T12912] SQUASHFS error: Failed to read block 0x0: -5 [ 856.953306][T12912] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2064'. [ 858.064629][ T7] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 858.254835][ T1108] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 858.354618][ T7] usb 8-1: Using ep0 maxpacket: 8 [ 858.484595][ T1108] usb 1-1: device descriptor read/64, error -71 [ 858.738027][ T7] usb 8-1: string descriptor 0 read error: -22 [ 858.744358][ T7] usb 8-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 858.755849][ T7] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.769365][ T1108] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 859.127894][ T7] usb 8-1: Audio class v2/v3 interfaces need an interface association [ 859.178057][ T7] snd-usb-audio: probe of 8-1:1.0 failed with error -22 [ 859.284667][ T1108] usb 1-1: device descriptor read/64, error -71 [ 859.294489][ T5730] udevd[5730]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 859.330719][ T7] usb 8-1: USB disconnect, device number 8 [ 859.407514][ T1108] usb usb1-port1: attempt power cycle [ 859.834608][ T1108] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 859.954680][ T1108] usb 1-1: device descriptor read/8, error -71 [ 860.174668][ T4231] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 860.244811][ T1108] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 860.375154][ T1108] usb 1-1: device descriptor read/8, error -71 [ 860.496209][ T1108] usb usb1-port1: unable to enumerate USB device [ 861.138615][T12950] vivid-004: ================= START STATUS ================= [ 861.146408][T12950] vivid-004: Radio HW Seek Mode: Bounded [ 861.152417][T12950] vivid-004: Radio Programmable HW Seek: false [ 861.158815][T12950] vivid-004: RDS Rx I/O Mode: Block I/O [ 861.164644][T12950] vivid-004: Generate RBDS Instead of RDS: false [ 861.171227][T12950] vivid-004: RDS Reception: true [ 861.176452][T12950] vivid-004: RDS Program Type: 0 inactive [ 861.182472][T12950] vivid-004: RDS PS Name: inactive [ 861.187841][T12950] vivid-004: RDS Radio Text: inactive [ 861.193518][T12950] vivid-004: RDS Traffic Announcement: false inactive [ 861.200632][T12950] vivid-004: RDS Traffic Program: false inactive [ 861.207202][T12950] vivid-004: RDS Music: false inactive [ 861.212861][T12950] vivid-004: ================== END STATUS ================== [ 861.937198][T12953] binder: 12952:12953 ioctl 4018620d 0 returned -22 [ 862.062276][T12953] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2079'. [ 862.251342][T12961] securityfs: Unknown parameter '' [ 863.178695][T12973] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 863.220362][T12973] SQUASHFS error: Failed to read block 0x0: -5 [ 863.505005][ T4231] usb 9-1: unable to read config index 0 descriptor/all [ 863.512096][ T4231] usb 9-1: can't read configurations, error -71 [ 865.193508][T12998] vivid-001: ================= START STATUS ================= [ 865.248976][T12998] vivid-001: Radio HW Seek Mode: Bounded [ 865.299342][T12998] vivid-001: Radio Programmable HW Seek: false [ 865.331457][T12998] vivid-001: RDS Rx I/O Mode: Block I/O [ 865.383922][T12998] vivid-001: Generate RBDS Instead of RDS: false [ 865.436901][T12998] vivid-001: RDS Reception: true [ 865.460397][T12998] vivid-001: RDS Program Type: 0 inactive [ 865.504037][T12998] vivid-001: RDS PS Name: inactive [ 865.521269][T13005] binder: 13004:13005 ioctl 4018620d 0 returned -22 [ 865.528129][T12998] vivid-001: RDS Radio Text: inactive [ 865.565724][T13005] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2094'. [ 865.579632][T12998] vivid-001: RDS Traffic Announcement: false inactive [ 865.588307][ T4275] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 865.677462][T12998] vivid-001: RDS Traffic Program: false inactive [ 865.712743][T12998] vivid-001: RDS Music: false inactive [ 865.742192][T12998] vivid-001: ================== END STATUS ================== [ 865.900223][ T4275] usb 7-1: Using ep0 maxpacket: 8 [ 865.960879][T13010] securityfs: Unknown parameter '' [ 866.047566][ T4275] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 866.059814][ T4275] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 866.116960][ T4275] pvrusb2: Hardware description: Terratec Grabster AV400 [ 866.125761][ T4275] pvrusb2: ********** [ 866.129980][ T4275] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 866.146760][ T4275] pvrusb2: Important functionality might not be entirely working. [ 866.158616][ T4275] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 866.172913][ T4275] pvrusb2: ********** [ 866.356068][ T2425] pvrusb2: Invalid write control endpoint [ 866.384800][T13015] netlink: 'syz.0.2098': attribute type 10 has an invalid length. [ 866.412626][T13015] bridge0: port 2(bridge_slave_1) entered disabled state [ 866.420166][T13015] bridge0: port 1(bridge_slave_0) entered disabled state [ 866.452628][ T2425] pvrusb2: Invalid write control endpoint [ 866.469832][ T2425] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 866.476736][T13015] bridge0: port 2(bridge_slave_1) entered blocking state [ 866.486337][T13015] bridge0: port 2(bridge_slave_1) entered forwarding state [ 866.493810][T13015] bridge0: port 1(bridge_slave_0) entered blocking state [ 866.500967][T13015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 866.504229][ T2425] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 866.521589][ T2425] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 866.531994][ T2425] pvrusb2: Device being rendered inoperable [ 866.545852][ T2425] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 866.554225][ T2425] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 866.583791][T13015] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 866.594707][ T1108] usb 7-1: USB disconnect, device number 19 [ 866.599333][ T2425] pvrusb2: Attached sub-driver cx25840 [ 866.616698][ T2425] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 866.647616][ T2425] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 867.178943][T13027] blk_update_request: I/O error, dev loop15, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 867.327581][T13030] netlink: 'syz.6.2102': attribute type 10 has an invalid length. [ 867.384129][T13027] SQUASHFS error: Failed to read block 0x0: -5 [ 867.390533][T13030] bridge0: port 2(bridge_slave_1) entered disabled state [ 867.397810][T13030] bridge0: port 1(bridge_slave_0) entered disabled state [ 867.442341][T13030] bridge0: port 2(bridge_slave_1) entered blocking state [ 867.449578][T13030] bridge0: port 2(bridge_slave_1) entered forwarding state [ 867.456989][T13030] bridge0: port 1(bridge_slave_0) entered blocking state [ 867.464083][T13030] bridge0: port 1(bridge_slave_0) entered forwarding state [ 867.534711][T11012] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 867.656092][T13030] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 867.904907][T11012] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 867.933231][T11012] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 867.983554][T11012] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 868.040960][T11012] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 868.083037][T11012] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.125703][T11012] usb 9-1: config 0 descriptor?? [ 869.130476][T13046] vivid-002: ================= START STATUS ================= [ 869.315450][T13048] binder: 13047:13048 ioctl 4018620d 0 returned -22 [ 869.316584][T13046] vivid-002: Radio HW Seek Mode: Bounded [ 869.363431][T13046] vivid-002: Radio Programmable HW Seek: false [ 869.372349][T13046] vivid-002: RDS Rx I/O Mode: Block I/O [ 869.386790][T13048] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2108'. [ 869.412896][T13046] vivid-002: Generate RBDS Instead of RDS: false [ 869.453181][T13046] vivid-002: RDS Reception: true [ 869.488462][T13046] vivid-002: RDS Program Type: 0 inactive [ 869.543203][T13046] vivid-002: RDS PS Name: inactive [ 869.602706][T13046] vivid-002: RDS Radio Text: inactive [ 869.682758][T13046] vivid-002: RDS Traffic Announcement: false inactive [ 869.868604][T13046] vivid-002: RDS Traffic Program: false inactive [ 869.909164][T13046] vivid-002: RDS Music: false inactive [ 869.927792][T13046] vivid-002: ================== END STATUS ================== [ 870.017954][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.026782][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.120581][T13051] securityfs: Unknown parameter '' [ 870.242762][T13053] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2110'. [ 870.574843][ T4276] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 870.609376][T11012] usbhid 9-1:0.0: can't add hid device: -71 [ 870.619482][T11012] usbhid: probe of 9-1:0.0 failed with error -71 [ 870.640894][T11012] usb 9-1: USB disconnect, device number 20 [ 870.765214][ T4276] usb 1-1: device descriptor read/64, error -71 [ 871.048332][ T4276] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 871.264746][ T4276] usb 1-1: device descriptor read/64, error -71 [ 871.385075][ T4276] usb usb1-port1: attempt power cycle [ 871.594955][T13078] binder: 13077:13078 ioctl 4018620d 0 returned -22 [ 871.665591][T13078] netlink: 92 bytes leftover after parsing attributes in process `syz.8.2120'. [ 871.904626][ T4276] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 871.976032][T13083] blk_update_request: I/O error, dev loop13, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 872.014769][ T4276] usb 1-1: device descriptor read/8, error -71 [ 872.278455][T13083] SQUASHFS error: Failed to read block 0x0: -5 [ 872.294662][ T4276] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 872.394986][ T4276] usb 1-1: device descriptor read/8, error -71 [ 872.534763][ T4276] usb usb1-port1: unable to enumerate USB device [ 873.629918][ T4276] usb 9-1: new full-speed USB device number 21 using dummy_hcd [ 873.693453][T13108] loop5: detected capacity change from 0 to 7 [ 873.709109][ T5730] Dev loop5: unable to read RDB block 7 [ 873.718596][ T5730] loop5: unable to read partition table [ 873.724422][ T5730] loop5: partition table beyond EOD, truncated [ 873.792777][T13108] Dev loop5: unable to read RDB block 7 [ 873.807451][T13108] loop5: unable to read partition table [ 873.813602][T13108] loop5: partition table beyond EOD, truncated [ 873.820317][T13108] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 874.035894][ T4276] usb 9-1: unable to get BOS descriptor or descriptor too short [ 874.084816][ T4276] usb 9-1: not running at top speed; connect to a high speed hub [ 874.164881][ T4276] usb 9-1: config 17 has an invalid interface number: 8 but max is 1 [ 874.191167][ T4276] usb 9-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 874.200662][ T4231] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 874.224154][ T4276] usb 9-1: config 17 has no interface number 0 [ 874.224204][ T4276] usb 9-1: config 17 interface 8 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0 [ 874.224230][ T4276] usb 9-1: config 17 interface 8 has no altsetting 0 [ 874.375001][ T4276] usb 9-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 874.384205][ T4276] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 874.414496][ T4276] usb 9-1: Product: syz [ 874.429578][ T4276] usb 9-1: Manufacturer: syz [ 874.434260][ T4276] usb 9-1: SerialNumber: syz [ 874.554811][ T4231] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 874.581180][ T4231] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 874.860173][ T4276] usb 9-1: selecting invalid altsetting 0 [ 875.226076][ T4231] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 875.280672][ T4276] usb 9-1: USB disconnect, device number 21 [ 875.309390][ T4231] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 875.334416][T13127] device syzkaller0 entered promiscuous mode [ 875.348603][ T4231] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 875.382755][ T3560] Dev loop5: unable to read RDB block 7 [ 875.390802][ T4231] usb 3-1: config 0 descriptor?? [ 875.396009][ T3560] loop5: unable to read partition table [ 875.414858][ T3560] loop5: partition table beyond EOD, truncated [ 875.485616][ T3560] [ 875.488008][ T3560] ====================================================== [ 875.495039][ T3560] WARNING: possible circular locking dependency detected [ 875.502063][ T3560] syzkaller #0 Not tainted [ 875.506472][ T3560] ------------------------------------------------------ [ 875.513484][ T3560] udevd/3560 is trying to acquire lock: [ 875.519023][ T3560] ffff88807877b138 ((wq_completion)loop5){+.+.}-{0:0}, at: flush_workqueue+0x150/0x13d0 [ 875.528853][ T3560] [ 875.528853][ T3560] but task is already holding lock: [ 875.536224][ T3560] ffff88802116a468 (&lo->lo_mutex){+.+.}-{3:3}, at: __loop_clr_fd+0xaa/0xb90 [ 875.545135][ T3560] [ 875.545135][ T3560] which lock already depends on the new lock. [ 875.545135][ T3560] [ 875.555663][ T3560] [ 875.555663][ T3560] the existing dependency chain (in reverse order) is: [ 875.564676][ T3560] [ 875.564676][ T3560] -> #6 (&lo->lo_mutex){+.+.}-{3:3}: [ 875.572149][ T3560] __mutex_lock_common+0x1e3/0x2400 [ 875.578044][ T3560] mutex_lock_killable_nested+0x17/0x20 [ 875.584110][ T3560] lo_open+0x6a/0x100 [ 875.588606][ T3560] blkdev_get_whole+0x90/0x390 [ 875.593941][ T3560] blkdev_get_by_dev+0x2d0/0xa60 [ 875.599394][ T3560] blkdev_open+0x12d/0x2c0 [ 875.604553][ T3560] do_dentry_open+0x7ff/0xf80 [ 875.609894][ T3560] path_openat+0x26f5/0x2fa0 [ 875.615073][ T3560] do_filp_open+0x1e2/0x410 [ 875.620102][ T3560] do_sys_openat2+0x150/0x4b0 [ 875.625296][ T3560] __x64_sys_openat+0x135/0x160 [ 875.630665][ T3560] do_syscall_64+0x4c/0xa0 [ 875.635623][ T3560] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 875.642039][ T3560] [ 875.642039][ T3560] -> #5 (&disk->open_mutex){+.+.}-{3:3}: [ 875.649854][ T3560] __mutex_lock_common+0x1e3/0x2400 [ 875.655575][ T3560] mutex_lock_nested+0x17/0x20 [ 875.660860][ T3560] blkdev_get_by_dev+0x157/0xa60 [ 875.666319][ T3560] swsusp_check+0xa1/0x2b0 [ 875.671328][ T3560] software_resume+0xc6/0x3b0 [ 875.676520][ T3560] resume_store+0xe4/0x130 [ 875.681475][ T3560] kernfs_fop_write_iter+0x379/0x4c0 [ 875.687363][ T3560] vfs_write+0x745/0xd60 [ 875.692131][ T3560] ksys_write+0x152/0x260 [ 875.696982][ T3560] do_syscall_64+0x4c/0xa0 [ 875.701919][ T3560] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 875.708331][ T3560] [ 875.708331][ T3560] -> #4 (system_transition_mutex/1){+.+.}-{3:3}: [ 875.716854][ T3560] __mutex_lock_common+0x1e3/0x2400 [ 875.722587][ T3560] mutex_lock_nested+0x17/0x20 [ 875.727881][ T3560] software_resume+0x7c/0x3b0 [ 875.733177][ T3560] resume_store+0xe4/0x130 [ 875.738114][ T3560] kernfs_fop_write_iter+0x379/0x4c0 [ 875.743951][ T3560] vfs_write+0x745/0xd60 [ 875.748723][ T3560] ksys_write+0x152/0x260 [ 875.753656][ T3560] do_syscall_64+0x4c/0xa0 [ 875.758597][ T3560] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 875.765030][ T3560] [ 875.765030][ T3560] -> #3 (&of->mutex){+.+.}-{3:3}: [ 875.772241][ T3560] __mutex_lock_common+0x1e3/0x2400 [ 875.777963][ T3560] mutex_lock_nested+0x17/0x20 [ 875.783264][ T3560] kernfs_seq_start+0x51/0x3c0 [ 875.788552][ T3560] seq_read_iter+0x3c4/0xd50 [ 875.793733][ T3560] vfs_read+0x759/0xd60 [ 875.798407][ T3560] ksys_read+0x152/0x260 [ 875.803175][ T3560] do_syscall_64+0x4c/0xa0 [ 875.808127][ T3560] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 875.814550][ T3560] [ 875.814550][ T3560] -> #2 (&p->lock){+.+.}-{3:3}: [ 875.821601][ T3560] __mutex_lock_common+0x1e3/0x2400 [ 875.827321][ T3560] mutex_lock_nested+0x17/0x20 [ 875.832605][ T3560] seq_read_iter+0xad/0xd50 [ 875.837631][ T3560] do_iter_readv_writev+0x47e/0x5f0 [ 875.843362][ T3560] do_iter_read+0x20b/0x7c0 [ 875.848390][ T3560] loop_process_work+0x16dd/0x24a0 [ 875.854019][ T3560] process_one_work+0x85f/0x1010 [ 875.859476][ T3560] worker_thread+0xaa6/0x1290 [ 875.864673][ T3560] kthread+0x436/0x520 [ 875.869346][ T3560] ret_from_fork+0x1f/0x30 [ 875.874320][ T3560] [ 875.874320][ T3560] -> #1 ((work_completion)(&lo->rootcg_work)){+.+.}-{0:0}: [ 875.883695][ T3560] process_one_work+0x7bb/0x1010 [ 875.889150][ T3560] worker_thread+0xaa6/0x1290 [ 875.894361][ T3560] kthread+0x436/0x520 [ 875.898947][ T3560] ret_from_fork+0x1f/0x30 [ 875.903971][ T3560] [ 875.903971][ T3560] -> #0 ((wq_completion)loop5){+.+.}-{0:0}: [ 875.912130][ T3560] __lock_acquire+0x2c42/0x7d10 [ 875.917587][ T3560] lock_acquire+0x19e/0x400 [ 875.922639][ T3560] flush_workqueue+0x16c/0x13d0 [ 875.928037][ T3560] drain_workqueue+0xcf/0x380 [ 875.933247][ T3560] destroy_workqueue+0x7b/0xb20 [ 875.938618][ T3560] __loop_clr_fd+0x234/0xb90 [ 875.943749][ T3560] blkdev_put+0x53f/0x7d0 [ 875.948597][ T3560] blkdev_close+0x76/0xa0 [ 875.953443][ T3560] __fput+0x234/0x930 [ 875.957949][ T3560] task_work_run+0x125/0x1a0 [ 875.963068][ T3560] exit_to_user_mode_loop+0x10f/0x130 [ 875.969016][ T3560] exit_to_user_mode_prepare+0xee/0x180 [ 875.975080][ T3560] syscall_exit_to_user_mode+0x16/0x40 [ 875.981084][ T3560] do_syscall_64+0x58/0xa0 [ 875.986018][ T3560] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 875.992518][ T3560] [ 875.992518][ T3560] other info that might help us debug this: [ 875.992518][ T3560] [ 876.002742][ T3560] Chain exists of: [ 876.002742][ T3560] (wq_completion)loop5 --> &disk->open_mutex --> &lo->lo_mutex [ 876.002742][ T3560] [ 876.016208][ T3560] Possible unsafe locking scenario: [ 876.016208][ T3560] [ 876.023955][ T3560] CPU0 CPU1 [ 876.029851][ T3560] ---- ---- [ 876.035228][ T3560] lock(&lo->lo_mutex); [ 876.039591][ T3560] lock(&disk->open_mutex); [ 876.046728][ T3560] lock(&lo->lo_mutex); [ 876.053518][ T3560] lock((wq_completion)loop5); [ 876.058487][ T3560] [ 876.058487][ T3560] *** DEADLOCK *** [ 876.058487][ T3560] [ 876.066622][ T3560] 2 locks held by udevd/3560: [ 876.071310][ T3560] #0: ffff88802107fd18 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0xf9/0x7d0 [ 876.080628][ T3560] #1: ffff88802116a468 (&lo->lo_mutex){+.+.}-{3:3}, at: __loop_clr_fd+0xaa/0xb90 [ 876.089938][ T3560] [ 876.089938][ T3560] stack backtrace: [ 876.095830][ T3560] CPU: 0 PID: 3560 Comm: udevd Not tainted syzkaller #0 [ 876.102763][ T3560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 876.112819][ T3560] Call Trace: [ 876.116098][ T3560] [ 876.119232][ T3560] dump_stack_lvl+0x188/0x250 [ 876.123928][ T3560] ? load_image+0x400/0x400 [ 876.128455][ T3560] ? show_regs_print_info+0x20/0x20 [ 876.133665][ T3560] ? print_circular_bug+0x12b/0x1a0 [ 876.138876][ T3560] check_noncircular+0x296/0x330 [ 876.143813][ T3560] ? add_chain_block+0x940/0x940 [ 876.148749][ T3560] ? lockdep_lock+0xf1/0x1f0 [ 876.153350][ T3560] ? mark_lock+0x94/0x320 [ 876.157676][ T3560] __lock_acquire+0x2c42/0x7d10 [ 876.162551][ T3560] ? __lock_acquire+0x13bc/0x7d10 [ 876.167580][ T3560] ? verify_lock_unused+0x140/0x140 [ 876.172784][ T3560] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 876.178770][ T3560] ? verify_lock_unused+0x140/0x140 [ 876.183974][ T3560] ? memset+0x1e/0x40 [ 876.188015][ T3560] lock_acquire+0x19e/0x400 [ 876.192531][ T3560] ? flush_workqueue+0x150/0x13d0 [ 876.197600][ T3560] ? __mutex_trylock_common+0x155/0x260 [ 876.203301][ T3560] ? read_lock_is_recursive+0x10/0x10 [ 876.208686][ T3560] ? __init_swait_queue_head+0xa5/0x150 [ 876.214236][ T3560] flush_workqueue+0x16c/0x13d0 [ 876.219088][ T3560] ? flush_workqueue+0x150/0x13d0 [ 876.224147][ T3560] ? __lock_acquire+0x7d10/0x7d10 [ 876.229178][ T3560] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 876.235247][ T3560] ? _raw_spin_lock_irqsave+0x8b/0x100 [ 876.240882][ T3560] ? rcu_work_rcufn+0x120/0x120 [ 876.245815][ T3560] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 876.251458][ T3560] ? finish_wait+0xc0/0x1d0 [ 876.255963][ T3560] drain_workqueue+0xcf/0x380 [ 876.260643][ T3560] destroy_workqueue+0x7b/0xb20 [ 876.265580][ T3560] __loop_clr_fd+0x234/0xb90 [ 876.270170][ T3560] ? lo_release+0x172/0x1f0 [ 876.274756][ T3560] ? lo_open+0x100/0x100 [ 876.278995][ T3560] blkdev_put+0x53f/0x7d0 [ 876.283415][ T3560] blkdev_close+0x76/0xa0 [ 876.287742][ T3560] ? blkdev_open+0x2c0/0x2c0 [ 876.292342][ T3560] __fput+0x234/0x930 [ 876.296329][ T3560] task_work_run+0x125/0x1a0 [ 876.300940][ T3560] exit_to_user_mode_loop+0x10f/0x130 [ 876.306313][ T3560] exit_to_user_mode_prepare+0xee/0x180 [ 876.311857][ T3560] syscall_exit_to_user_mode+0x16/0x40 [ 876.317341][ T3560] do_syscall_64+0x58/0xa0 [ 876.321981][ T3560] ? clear_bhb_loop+0x30/0x80 [ 876.326673][ T3560] ? clear_bhb_loop+0x30/0x80 [ 876.331361][ T3560] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 876.337271][ T3560] RIP: 0033:0x7f799830b407 [ 876.341695][ T3560] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 876.361303][ T3560] RSP: 002b:00007ffce18cf0d0 EFLAGS: 00000202 ORIG_RAX: 0000000000000003 [ 876.369944][ T3560] RAX: 0000000000000000 RBX: 00007f799821d880 RCX: 00007f799830b407 [ 876.377916][ T3560] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000c [ 876.385889][ T3560] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 876.393860][ T3560] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000c [ 876.402025][ T3560] R13: 0000558df8089100 R14: 0000000000000000 R15: 00007ffce18cf310 [ 876.410139][ T3560] [ 877.024572][ T1108] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 877.255581][ T1108] usb 9-1: device descriptor read/64, error -71 [ 877.454702][ T4231] usbhid 3-1:0.0: can't add hid device: -71 [ 877.460717][ T4231] usbhid: probe of 3-1:0.0 failed with error -71 [ 877.478008][ T4231] usb 3-1: USB disconnect, device number 40 [ 877.554700][ T1108] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 877.754618][ T1108] usb 9-1: device descriptor read/64, error -71 [ 877.884728][ T1108] usb usb9-port1: attempt power cycle [ 878.294653][ T1108] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 878.384778][ T1108] usb 9-1: device descriptor read/8, error -71 [ 878.654706][ T1108] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 878.744734][ T1108] usb 9-1: device descriptor read/8, error -71 [ 878.864814][ T1108] usb usb9-port1: unable to enumerate USB device [ 878.871715][ T5730] udevd[5730]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:17.8/sound/card3/controlC3/../uevent} for writing: No such file or directory