last executing test programs: 22m45.278530173s ago: executing program 32 (id=12): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x67, &(0x7f0000000380)=ANY=[@ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$unix(0x1, 0x1, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1000000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00", 0x2) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r1, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 22m16.065458785s ago: executing program 33 (id=84): r0 = syz_open_procfs(0x0, &(0x7f0000000480)='net/fib_triestat\x00') ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmctl$IPC_INFO(0x0, 0x3, 0x0) pread64(r0, &(0x7f000004b680)=""/102363, 0x18fdb, 0x2) 21m18.865213837s ago: executing program 34 (id=196): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 19m46.532507029s ago: executing program 35 (id=325): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a30000000001400078005001500f01f000008001240000700000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}}, 0x0) 18m15.865414469s ago: executing program 36 (id=491): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 18m15.823011282s ago: executing program 7 (id=493): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x6, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000000000000000000000850000000e000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000001b701000000000000850000007b00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x22}, 0x94) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20e42) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 18m15.433744693s ago: executing program 7 (id=496): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket(0x1e, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x40000000000029a, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r2 = dup(r1) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) ftruncate(r3, 0x200004) sendfile(r2, r3, 0x0, 0x80001d00c0d1) 18m14.954643583s ago: executing program 7 (id=498): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x5c233}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}, @IFLA_BOND_AD_USER_PORT_KEY={0x6, 0x19, 0x900}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44001}, 0x20040040) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x3}, 0x50) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x3, [@const={0x7, 0x0, 0x0, 0xa, 0x4}, @ptr={0xf}, @int={0x2, 0x0, 0x0, 0x1, 0x0, 0x29, 0x0, 0x1e, 0x4}, @float={0xe, 0x0, 0x0, 0x10, 0xc}, @func={0x8, 0x0, 0x0, 0xc, 0x4}, @func={0x9, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x5f]}}, 0x0, 0x67, 0x0, 0xfffffffe, 0x7}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x5, 0x9a69, 0x0, 0x40284, r3, 0xfffff001, '\x00', 0x0, r4, 0x4, 0x1, 0x2, 0xb}, 0x50) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x4000000000001, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x10001, 0x1, 0x0, 0x6, 0x0, 0xd9b4, "5debca561a5fbf61048955f6f876b2ff", 0x2, 0x0, 0x0, 0x8}) sendmsg$key(0xffffffffffffffff, 0x0, 0x8810) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@func_proto, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x2, 0x1}]}]}, {0x0, [0x0, 0x5f]}}, &(0x7f0000000000)=""/28, 0x40, 0x1c, 0x1}, 0x28) ioctl$IOMMU_TEST_OP_ACCESS_RW(0xffffffffffffffff, 0x3ba0, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000380)={0x3, &(0x7f00000003c0)=[{0x1f, '\x00', @st={0x4, [{0x3, @uvalue=0x1000080000001}, {0x1, @uvalue=0x698}, {0x0, @uvalue=0xee6}, {0x3, @svalue=0x10}]}, 0x4}, {0x32, '\x00', @buffer={"55eb476b13d85ef77fe704c54bbcd80c02c838376100", 0x20}, 0x4}, {0x5, '\x00', @data=0x3, 0x3}]}) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r6, 0x400, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x24000001}, 0x40000) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000000200)={0x34, r6, 0x1, 0x70bd29, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc010000190001000000000300000000ac14141f0000000000000000000000000000000000000000000000000000000000000003000000000a0000005e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000044010500fc020000000000000000000000000000000000003200000000000000ffffff0301000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000330000000200"], 0x1fc}}, 0x0) 18m11.88191362s ago: executing program 7 (id=502): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x8) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x3c1, 0x3, 0x4b0, 0x0, 0x8, 0x7f02ae, 0x0, 0x200, 0x3e0, 0x2e8, 0x2e8, 0x3e0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x260, 0x288, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'wg1\x00', {}, '\x00', {0xff}, 0xc, 0x17}}, @common=@inet=@hashlimit2={{0x150}, {'batadv0\x00', {0x5, 0x3, 0x24, 0x9, 0xd353, 0x10001, 0x0, 0x40, 0x40}, {0x5a2f}}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xa, 0x6, 0x3}}}, {{@ipv6={@private2, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff, 0x0, 0xffffff00], [0x0, 0xffffffff], 'wlan0\x00', 'netdevsim0\x00', {}, {0xff}, 0x2c, 0x0, 0x1, 0x7b}, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@dst={{0x48}, {0xa, 0x0, 0x1, [0xff, 0x6, 0xff, 0x4608, 0x3, 0xe, 0x2, 0x8000, 0x4, 0x400, 0x800, 0x0, 0x8, 0x7, 0x0, 0x50], 0x2}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x13, 0x0, 0x8, 0x400, 'snmp\x00', 'syz1\x00', {0xffffffff8cdbbefd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) 18m10.618098423s ago: executing program 7 (id=504): ioctl$COMEDI_CMDTEST(0xffffffffffffffff, 0x8050640a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x3) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) ptrace(0x10, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102392, 0x18ff8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x2000002, 0xb, 0x0, &(0x7f0000000200)="df12c9f7b9a60000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r1 = socket(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0xc08, 0x3, 0x210, 0x310, 0x5002004a, 0xb, 0x310, 0xea13, 0x3a8, 0x3c8, 0x3c8, 0x3a8, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x5c, 0x3, 0x2}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@inet=@socket3={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x270) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) r2 = fanotify_init(0x1a, 0x800) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0xa8) fanotify_mark(r2, 0x641, 0x1028, r3, 0x0) fanotify_mark(r2, 0x1, 0x48000038, r3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) r4 = syz_io_uring_setup(0x4a7b, &(0x7f00000000c0)={0x0, 0x679d, 0x0, 0x2000003, 0x3ce}, 0x0, &(0x7f00000001c0), &(0x7f0000000300)) io_uring_register$IORING_UNREGISTER_BUFFERS(r4, 0x25, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) msgget$private(0x0, 0x21) 18m9.608334535s ago: executing program 7 (id=505): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000002c80)=@gcm_128={{0x304}, '\x00', "362574ad5924c0c5aedd72261081b10f", "0700d871", "d97ab19fbd9a8e17"}, 0x28) sendto$inet6(r3, &(0x7f0000000100), 0xe0, 0x8000, 0x0, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000880)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd6000000000403a01fe8000000000000000000000000000bbff02000000000000000000000000000104009078008000066cf6e45302002cfffe80000000000000000000000000003bfe8000000000000000000000000000aa2f0000010000000013d86558da0a7f6b"], 0x0) r4 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x0, 0x4}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r4, 0x40026f34, &(0x7f0000000040)=0x1) syz_emit_ethernet(0x36, 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000340)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x20000, 0x0}, 0x0, 0x0, 0x0, 0x10024, 0x0, 0x0}) 18m8.952579923s ago: executing program 37 (id=505): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000002c80)=@gcm_128={{0x304}, '\x00', "362574ad5924c0c5aedd72261081b10f", "0700d871", "d97ab19fbd9a8e17"}, 0x28) sendto$inet6(r3, &(0x7f0000000100), 0xe0, 0x8000, 0x0, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000880)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd6000000000403a01fe8000000000000000000000000000bbff02000000000000000000000000000104009078008000066cf6e45302002cfffe80000000000000000000000000003bfe8000000000000000000000000000aa2f0000010000000013d86558da0a7f6b"], 0x0) r4 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x0, 0x4}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r4, 0x40026f34, &(0x7f0000000040)=0x1) syz_emit_ethernet(0x36, 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000340)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x20000, 0x0}, 0x0, 0x0, 0x0, 0x10024, 0x0, 0x0}) 11m0.8404726s ago: executing program 2 (id=1457): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424", 0x73}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a", 0x42}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162", 0xc8}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759b", 0x9c}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2", 0x39}], 0x5}}], 0x1, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 10m59.910261254s ago: executing program 2 (id=1460): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) openat$comedi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/comedi5\x00', 0x80, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @broadcast}, 0x10) ptrace(0x10, 0x0) sigaltstack(&(0x7f0000000680)={&(0x7f00000005c0)=""/152, 0x2, 0x98}, &(0x7f0000000740)={&(0x7f00000006c0)=""/90, 0x0, 0x5a}) open_by_handle_at(r0, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x10000) ptrace$setregs(0xd, 0x0, 0x20000000002, &(0x7f0000000040)) r1 = socket$alg(0x26, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffffffffffedb) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x3, 0x0, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r1, 0x0, 0x0, 0x800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000540)=""/91, 0x5b}], 0x1}, 0x0) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080)=@gcm_128={{}, "9005451377480361", "bbad434d19477339418b5b79f10c141a", "dc717b03", "72f2ea1a3290afcc"}, 0x28) 10m58.586488631s ago: executing program 2 (id=1464): ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000140)={"4497acf4", 0xb, 0x5, 0x0, 0x3, 0x1000006, 'U\x00', "5a060040", "0725eade", "e4eecc1a", ["aabe8459c62224475793e8a7", "7f9ce2d2c4f439ff80e1d1c8", "fa0700f22b42a3023be516d1"]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) mq_open(0x0, 0x6e93ebbbcc0884f2, 0x15b, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0xc800) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0xffffffff, 0xffffffffffffffff, 0x0, 0x0}) r3 = shmget$private(0x0, 0x800000, 0x0, &(0x7f0000173000/0x800000)=nil) shmctl$SHM_LOCK(r3, 0xb) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0x1c, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1b}}, {}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x5}, {0x3, 0x3, 0x6, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x8, 0xa, 0x4}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x0}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x2}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c0}, 0x94) 10m57.515821962s ago: executing program 2 (id=1470): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ustat(0xfffffffffffffffc, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000000700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r5, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 10m55.498497638s ago: executing program 2 (id=1474): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x2, 0x1}]}]}}, &(0x7f0000000000)=""/28, 0x32, 0x1c, 0x1}, 0x28) 10m54.650377803s ago: executing program 2 (id=1476): ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000140)={"4497acf4", 0xb, 0x5, 0x0, 0x3, 0x1000006, 'U\x00', "5a060040", "0725eade", "e4eecc1a", ["aabe8459c62224475793e8a7", "7f9ce2d2c4f439ff80e1d1c8", "fa0700f22b42a3023be516d1"]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) mq_open(0x0, 0x6e93ebbbcc0884f2, 0x15b, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0xc800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0xffffffff, 0xffffffffffffffff, 0x0, 0x0}) r3 = shmget$private(0x0, 0x800000, 0x0, &(0x7f0000173000/0x800000)=nil) shmctl$SHM_LOCK(r3, 0xb) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0x1c, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1b}}, {}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x5}, {0x3, 0x3, 0x6, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x8, 0xa, 0x4}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x0}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x2}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c0}, 0x94) 10m38.343171437s ago: executing program 38 (id=1476): ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000140)={"4497acf4", 0xb, 0x5, 0x0, 0x3, 0x1000006, 'U\x00', "5a060040", "0725eade", "e4eecc1a", ["aabe8459c62224475793e8a7", "7f9ce2d2c4f439ff80e1d1c8", "fa0700f22b42a3023be516d1"]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) mq_open(0x0, 0x6e93ebbbcc0884f2, 0x15b, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0xc800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0xffffffff, 0xffffffffffffffff, 0x0, 0x0}) r3 = shmget$private(0x0, 0x800000, 0x0, &(0x7f0000173000/0x800000)=nil) shmctl$SHM_LOCK(r3, 0xb) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0x1c, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1b}}, {}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x5}, {0x3, 0x3, 0x6, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x8, 0xa, 0x4}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x0}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x2}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c0}, 0x94) 7m34.222502255s ago: executing program 1 (id=1837): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2a", 0x7c}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c8", 0x44}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e", 0xb6}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce800", 0x2a}, {&(0x7f0000000600)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb555c80dbd2bc9694e862a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec4898205a8d177ffe437570e15e55c72edfd43f3b828ce3dc05ea68517cf917ddc1fa4e5ad006f90fe2d02aa344b9f", 0xd9}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc231", 0x18}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0}}], 0x2, 0x20000044) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 7m33.753399331s ago: executing program 1 (id=1841): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f0000000700)=[{&(0x7f0000000200)="2e9b5b00ace03dd65193dfb6c561963d86dd606706000000060000000000449c34dcf74b5c85cd6d59f50000f5a81543b0c1", 0x32}, {&(0x7f0000000680)="37bcb3983785779d77392b7d7a586b7d44a9eabc", 0x14}], 0x2) 7m31.165194411s ago: executing program 1 (id=1849): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r5 = gettid() r6 = syz_open_procfs(r5, 0x0) write$binfmt_format(r6, &(0x7f0000000180)='1\x00', 0x2) 7m28.518500148s ago: executing program 1 (id=1853): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2a", 0x7c}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c8", 0x44}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e", 0xb6}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce800", 0x2a}, {&(0x7f0000000600)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb555c80dbd2bc9694e862a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec4898205a8d177ffe437570e15e55c72edfd43f3b828ce3dc05ea68517cf917ddc1fa4e5ad006f90fe2d02aa344b9f", 0xd9}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc231", 0x18}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0}}], 0x2, 0x20000044) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 7m27.652809936s ago: executing program 1 (id=1857): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=@newtfilter={0x24, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xfff3, 0xffe0}, {}, {0x7, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) 7m24.836932605s ago: executing program 1 (id=1864): r0 = socket$inet6_udp(0xa, 0x2, 0x0) mprotect(&(0x7f0000ffb000/0x5000)=nil, 0x5000, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7200000000003900000008000300", @ANYRES32=r3], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4004040) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x320, 0x18c, 0x203, 0x320, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x10}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x1, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r6, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x1, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xe3]}}, 0x5c) 7m9.625908766s ago: executing program 39 (id=1864): r0 = socket$inet6_udp(0xa, 0x2, 0x0) mprotect(&(0x7f0000ffb000/0x5000)=nil, 0x5000, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7200000000003900000008000300", @ANYRES32=r3], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4004040) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x320, 0x18c, 0x203, 0x320, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x10}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x1, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r6, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x1, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xe3]}}, 0x5c) 3m51.495899465s ago: executing program 4 (id=2393): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803", 0x81}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a", 0x42}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162", 0xc8}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759b", 0x9c}, {&(0x7f0000000900)}], 0x5}}], 0x1, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 3m51.205952822s ago: executing program 4 (id=2394): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x24040084) readv(r0, &(0x7f00000023c0)=[{0x0}, {&(0x7f0000000400)=""/104, 0x68}, {&(0x7f00000020c0)=""/254, 0xfe}, {&(0x7f00000021c0)=""/95, 0x5f}, {&(0x7f0000002240)=""/7, 0x7}, {&(0x7f0000002280)=""/139, 0x8b}, {&(0x7f0000002340)=""/85, 0x55}], 0x7) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000040)={0xfff, 0x4d4a, 0x5, 0x4, 0xd, "2ab76ecca931142653228cba5c0e5c3fe430f1"}) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x2c020400) msgget$private(0x0, 0x0) connect$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r7 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r8 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r8) execve(0x0, 0x0, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r7, 0x400442c8, &(0x7f0000000080)=ANY=[@ANYRES32=r3]) 3m50.029953583s ago: executing program 4 (id=2396): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf6", 0x7f}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c8", 0x44}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e", 0xb6}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce800", 0x2a}, {&(0x7f0000000600)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb555c80dbd2bc9694e862a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec4898205a8d177ffe437570e15e55c72edfd43f3b828ce3dc05ea68517cf917ddc1fa4e5ad006f90fe2d02aa344b9f", 0xd9}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc231", 0x18}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0}}], 0x2, 0x20000044) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, 0x0, 0x0, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 3m49.242313328s ago: executing program 4 (id=2398): ioctl$COMEDI_CMDTEST(0xffffffffffffffff, 0x8050640a, &(0x7f00000001c0)={0x1, 0x30000, 0x10, 0x5, 0x2, 0x8, 0x100, 0x0, 0x40, 0x7, 0x10, 0xffffff19, &(0x7f0000000280), 0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x3) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) ptrace(0x10, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102392, 0x18ff8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x2000002, 0xb, 0x0, &(0x7f0000000200)="df12c9f7b9a60000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socket(0xa, 0x1, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = fanotify_init(0x1a, 0x800) fanotify_mark(r1, 0x1, 0x48000038, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) syz_io_uring_setup(0x4a7b, &(0x7f00000000c0)={0x0, 0x679d, 0x0, 0x2000003, 0x3ce}, &(0x7f0000000040), &(0x7f00000001c0), &(0x7f0000000300)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) msgget$private(0x0, 0x21) 3m46.507088099s ago: executing program 4 (id=2404): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r0, &(0x7f00000002c0)="01", 0x1, 0x0, 0x0, 0x0) pselect6(0x900, 0x0, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 3m44.662173927s ago: executing program 4 (id=2411): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) pwrite64(r0, 0x0, 0x0, 0x4) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x13, r2, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r2, 0x0, 0xffffffdb) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_io_uring_setup(0x4f41, 0x0, 0x0, &(0x7f0000000140), &(0x7f00000003c0)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) syz_open_dev$I2C(0x0, 0x0, 0x80) sched_setscheduler(0x0, 0x2, 0x0) 3m29.493509246s ago: executing program 40 (id=2411): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) pwrite64(r0, 0x0, 0x0, 0x4) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x13, r2, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r2, 0x0, 0xffffffdb) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_io_uring_setup(0x4f41, 0x0, 0x0, &(0x7f0000000140), &(0x7f00000003c0)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) syz_open_dev$I2C(0x0, 0x0, 0x80) sched_setscheduler(0x0, 0x2, 0x0) 16.959422438s ago: executing program 9 (id=3042): io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000280)=[@ioring_restriction_register_op={0x0, 0x21}], 0x1) r0 = syz_io_uring_setup(0x315b, &(0x7f0000000080)={0x0, 0xcfca, 0x1042, 0x4, 0x356}, &(0x7f0000000100), 0x0, &(0x7f0000000000)) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 16.6367794s ago: executing program 9 (id=3046): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'lo\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) 16.471335847s ago: executing program 5 (id=3048): timer_create(0x2, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) sync() 16.425153873s ago: executing program 9 (id=3049): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'}) syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000002c0)={'#! ', './file0', [], 0xa, "1f410e2852ad52cb07410969e814977e4f2c4a80522094786c8673fb61cf8b86bd030000005a3c7c04055f1f70e4064d46b2bb9e5100d446bb6afb2c0fc07b58f4a9c1006a0b6c05639e23ec12979ff9b48ca61e6dec58682449c75d86eb4337b8d343ed9c18927289d3d788fa281a5742690ff5a505cfff34fc"}, 0x85) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) close(0xffffffffffffffff) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) fcntl$setlease(r3, 0x400, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x80, 0x148) r4 = open(&(0x7f0000000040)='./file0\x00', 0x109200, 0x25) ioctl$sock_SIOCDELDLCI(r4, 0x8981, &(0x7f0000000100)={'wg2\x00', 0x9}) open(&(0x7f0000000000)='./file0\x00', 0x4000, 0x20) fcntl$setlease(r3, 0x400, 0x2) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x0, 0x800, r5}, 0x38) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) 16.424882377s ago: executing program 3 (id=3050): r0 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 16.254978472s ago: executing program 3 (id=3052): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) unshare(0x8000000) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000740), 0x0, 0x0, 0x0}) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x9d9d6d0683454daa, 0x3}) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000540)={0x2, @win={{0x2, 0x1, 0x80000000, 0xcb81}, 0x1, 0x9, &(0x7f00000007c0)={{0x4, 0xf, 0xbaf, 0x8000}}, 0x7f, 0x0, 0x6}}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000fd3f00000000000009000000850000002e0000009500000000000000bd6482afcdfe986e9674a3c1419714961356fac4be989b4820f842475fe0388d33d8a58016b340325f9003784774c042e8b687ba0fa1e306a944f7d77c85de7e00"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 15.816495953s ago: executing program 5 (id=3055): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x9}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) memfd_create(&(0x7f0000000c00)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5Zy\xc2\x964\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0\xeb\v\xf8r\x10 >p\x95=N\xbepd\x99\xf9\x86k\xdf\xc7w\xff\x8f\x98\xd8\xe0C\xb2-[}\xb6\x88E5\xa0\xf9\x9f@I;\fn\xed\'\xe2\xf0\xe7_\xfa\x91\xba\x81\xbb\xda\xde\\\x98#g\xd1\xbb2\xd1WI\f\x9e\t\xe8\x1c{\xcd\x905\f=\xfe\'\x1ax\x91\xb7sB\xecN\x8e\x97$75\x16\xaaJ\x1e\'P\x12_D\xa2\x19dC(\xb4\xb8\x87]\x91\xefggP\x7f\xc4\a\xff\xcc\x19\x15\xae8m;nH\x9c\xda\x95\xf6\xe8F\x99\x99\x92M\xd0\xe5:\xcb\x19\xb4\xd2\xc5V\x8f\x8a\x1f\xe6\xc0\xfb$\xe9d\xe3\v', 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) 14.047492517s ago: executing program 5 (id=3062): epoll_create1(0x80000) r0 = syz_open_dev$video(&(0x7f0000009940), 0x9, 0x40200) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) r1 = io_uring_setup(0x6001, &(0x7f0000000080)={0x0, 0x100361c, 0x1, 0x2, 0x1bf}) close_range(r1, r1, 0x0) pselect6(0x40, &(0x7f0000000100)={0x2, 0x0, 0xfffffffffffffff8, 0x0, 0x1, 0x10}, 0x0, &(0x7f0000000240)={0x1f, 0xc, 0x715, 0x8000000000000000, 0x0, 0x80000000000000, 0x800, 0x20000}, 0x0, 0x0) syz_open_dev$video(0x0, 0x10001, 0x0) 12.77974121s ago: executing program 5 (id=3069): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r0, 0xe503, 0x0) syz_fuse_handle_req(r0, &(0x7f0000004100)="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", 0x2000, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000, 0x103) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) 12.483967113s ago: executing program 9 (id=3070): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="82", 0x1}], 0x1}}], 0x1, 0x4400c800) 12.356894592s ago: executing program 9 (id=3071): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r2) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) close(0x3) 11.714199245s ago: executing program 5 (id=3075): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0xa) landlock_restrict_self(r0, 0xa) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x101, 0x0, 0x3}, 0x18, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000140)={0x100, r2}, 0x0) landlock_restrict_self(r1, 0x4) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x0, 0x1000) 11.603901644s ago: executing program 5 (id=3076): pselect6(0x0, 0x0, 0x0, &(0x7f0000000240)={0x1f, 0x3}, 0x0, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, 0xffffffffffffffff, 0x0) syz_open_dev$cec(0x0, 0x0, 0x82002) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x1e, 0x4, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) 11.326264849s ago: executing program 8 (id=3077): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1}, 0x6e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000080)=@file={0x1}, 0x6e) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) 9.154445557s ago: executing program 8 (id=3083): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x134}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 8.905329711s ago: executing program 8 (id=3087): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r0, 0xe503, 0x0) syz_fuse_handle_req(r0, &(0x7f0000004100)="df2dbb357f9bf9dfd91bb058d06a5701dad53d991130458e0ed56e060bde1f046b19d531a5a554031cdd7b2a01c27d3c2c9df834090927975ede0c88333cf51ccc201d2e132da9806f8408029ddef7cea6876edba1f3f7c22c978a0247b437a08dfd9cc749c86aa33f176c12c830e5b0309981d59caaae28545facbc1adc6fe1f3b0e99a1bcfa32e52a8575b6d19134151bfbb6ed53a0f34bdaff16109f5ed03b7b967bdca2314c09b692112e7538b10a492b94fb53cfc6be61c44b013adebed8b10fc6ddbadfb1c91c2968c1b468a748aab321643982fc45bff069b43682cf8ca96c446ca527e6bae7eaedfc2fffea1dba95ad194b858de5b11fbdb18f56c26cd347ec5e95ed5f251cf43ae0ba3d6dec6fa39d863ba15ccf32253ab5a44e2dfde9adf35b47b25ed24e4a7bbd9d446b550eb994abae0c837f39e08de6d55d6fb76f5edeb49f3e181f01eacca24b7a01af3b3d2a5a9fce3c8a685c82b1d2b00bfc11be6938961ff232cac54dbb29597fcd67d43d90a9655fc3daa87e980cb6e3e9d85f964cf67c4ebe8119c8afc755f47ea4bf1c35418e4fb8a2f7c8e252002bd3b3f0415efa6da5b58df169dcfc031f92aaa3658ba505c7195383ff3adbaf1a18516573c239d47c25151d5a540ceba0f2278a3f733c64b1971daff1b4853c9cdac5bbd14ac3c877cb811644182751858eeafa5d26a12d38a655df86aa79b4458e91b67faf1b58ba10729d878930083d0bebba50ab086cca40246f41f1162033c82d2631423e8db3b20c4a776b2d43c1c0effb7ddd8f6e7e08b24cc1c98095b9d98bf250036c90bc34702e3ac09a9a2e36ffbcff2ce279907e86007bd25efc77f47afe85240a3dbbde356de9995752dda95feb4f7c3cfef0ef99ab260bad19a0215abafe97e5f9a72dab8d588abfe079adb96ba036ef7fe23caf599d0c7f1912c68087905f0fe9853809331196d1defa945aa1ba608e76906f3e2e15e510660bef7c672802025f49c89024b0824926b223b07ecf3e7d1c69b22fe0def81b0afadc00b13bfc7d6f59ec1c9356d355c951a8c67ca924fbc71452ca9736e366f79d011556d6ff57ed26ff48770dfbd32abe9eba26a1d37ed2071be4cdaec267eee0fe1ba2881b8aca35e6699d210669bd68ee8b5e9a6ac52ac363a2760ebdfdecd06b3d34682305762965e39048e1c96aa3746f290bab98ea767d543defba175d07017eec1b950a419ead72c0f1260fbce8e7a80884b0c566fcedf370238dd78540b7574336973e8bc14f3a0558c340087eaeeaff66aca47968e10e29742de81f97e8fc88103f65078ef4276c0bd87670b85df3aad2201d4c63fd949be4e456ddcb0c42b3da508080a96b247be94f4e903373c3b9f7d167622314610ebccd393d008a8346bbc5bacbcafacbe880a64e0f89af8b1cf67d7abd280cd3d575b8e3719d05a917db9392917c9254247432e6869a37b47ae28c052f068a7347b1d9aafd431ff42df8ebb7eaf71c393f11bbbe18d108785b25b4803c6153866b41b642f6983eaa5ca96e334cf65489f68e261f736bbb659a5b19403e2c7f357a3ac2a60ef9352aeed826f4430af91adbc71fc25468e2bbcf8723f1d481c31cc4b217564375160de94ab34e891909387adb50d1994630a2c520b605ac84739bfbdee95909e1fa913b02d33d60bde91f38fa1eb816469795fba4f2a8f5761504933e5ad4fe75235c78dedc5dd91aa95b7e254c4724871ae79230074f817033165a778658eeb18e3eb251edcb1e8fcea1b9997cadb2dac9e6238d9b359cf87a5468e4ffbf50d60a272b6bf6670ff5213fe57c5787de15f7a763886a0a3300aab06a199498e276169edc8ce4eb4ee796af33ca0b005d10f38ec36c65f821ad16fd18272cb6b8f4d1b9b447a323da188de6ed3ea77f94af6ebb4381952557afb0ebc0d9f52dac7481123c99b2f6672d64f633761ded649da36bdcc246f90b6eefb6b9ae3f0ea342749533eb01ee27bafb504dcb1bc4cf320074a8541fde11fcbb7f3728d93da20483751ae8263c2f027813e4dd9843fc8e5113acd69bbdb3de02170ef3117bcf17c573a180bf3447a2f8d5f5c94e07cdd62d3bd139a4435ab70e198efbfcc187dbde6e1e396e9300d0aa486f1dc79ec79d9c8da56ef657340f8df825d7719c459bd7520652f292c4911fd650316b6067bec9b5094b8932dafd89bd14d9c32552da58ab71b408eab39e3516a9b96824dc6639c096bde4470e5358a56bf0f33800e7a44a4a891721b31c790f8dbe753c30588ffea031b2504bd6fc536c9612191caa488686e7243691e9f3e56ff3b08bc7e4290bf4c89ed20ce1a0bca81d110b307491d154b87a31f027981ec8655c47dfabcacfbaf86b4e5f8b3156a2040e126cfddc6d1e06976cc46676b20d6d384ca95d6a1dd024286458ae47f25ea773a74d31a93febc3daeeb8bcf8edee2eb565d4a1c3950ac57283c60acfbd880d1f818cd3e4068684782d5c53ff88f4dfcd9617c87e939ed43f0b27846c96274876c180b22ed78078ac67151d1ec6e2349f97d2dd31c306f90be818e995b314ab1659e59b0b4283d5a9524d7458f7e26110e7ac7db1fadb88f38a6af6a48f9e300246e65a94fc22748902d6dd05023ed8aea602daddc7d7d5ceb41a3d70d1f47d7dd6024a8fab5aa698c2557d06e1dfb42de03f0441bc0ee0f157474caa6dff049ca2f1de730588d9a3ddc99390d476a31d7e2c33f3553dcaa09bdf1724a045e51c053cb1657f076e1c3566dd621e95497392b1cba91feeb32bef0c7552478bf29ae4c12a6fa6a7831a9f91cd947b686c94d834e0ad75f232cce64da863a28c1d2d68a8494707701cb3aa4eb15b1d88a3d1deb38d488c5a96528a1a17c326a1ce0d7faa9b3d998bc5005e1d9fa84173bf9c634fd1d5dbbe1c26603517341db9f3a05eaf9850d343b63d439b11bf8b7c62b2d43002d6dc7c2828f4195b9dd7f3ef22a8b38aebd0243a1c045b053f13ad55ced9d482d83a5b28dbbd0254d52ae9b064e441ea2cd42aca7883453a13c1035fede584dbff88f6e3e973bfdf3a2bbb92e980ba87bfc36007dba4f57c634417572969093baf19c37d20a2311238fcd579eb2e55d08e4dde54ec63b84816a26ecb215c6dcca015a0c9ce681c5330ceb4a762904cfa52200712e9cdc8f05ab23b4c7e52c8fa26546f36652781327a4c887977c55cc6b2023e7c64bd1de5c72c07e8650d14631901ffdb5b133570080d1186b63ecc9fea6692e1f326f090c9c093ea0ab6cd14b90dbdb429590c5581f6f8f756d9a4f911b19f990aef1d3df5123c7f697500732d5ba8c649f34e6adf47988bf44fb814095d60e445754808e482a7c1754a71322e7aa453453398c7ab566c14275f9c035a68b2f78fe0ca111bc76f894847c173ad23dd36b2916ceaed287c29b9c370901e736e903636e818d72c8cdc7a960e7c729b5c6392369ba9fbf17429ae1fc3ae27d18e4c7ff78f362477d5742fedf923a85613ad090691292a0b2fdc913396ed680acc498c13e523450082e29791949ea65110f87a210a635e59b6d7ef70314c0faf3e03142ebb1216e0ffa5e7a3f9502bffccdf1843d432861d1123fda1be89d220601c10c1e0979ead468529680a65bfd919cec10fac42d855c32ecedbe13cbb5090d843cb1690d0fa538ddf9bca427f03e46c8f489770d0812f69d801ce477aad686c7088b4a97857fb6a5aa7dd00a063f3c37e6f9d1b3f8650b5312fd5aecbaa3fb4b162d331192f160887772171df1884e957c507fe3ed5cb0fd7f7e01256f0ea0a7a5db32c66699b2efdf9d6577c8aab87844f9275e0cb0bbf852e10ea4ca6c56867fd4bdabda94743038292abe882fa59f9825c54610e284a5861d825f7d3109c205e40a4fa2d6b1db2260f96765efeb5bd4bf32f5f00936c63522954521668ecad7fad7db765b0e030f8abe055c32c6eb54540f41eec6adac44d74879e0a54a942c09bfae4f4d842805b6e6e9f82ea2e742d2511665344b92566625c95b6fc038c99fff7051392418197c617912a96f5ffc4fd90ed6963db532c628c54ad8059299d2e5e9ce8698466ec74e7497a78c37fa608cca689eea1a92747c7673345f6ea7ef056ebc3706b7c0e349ebc795e59ddbdc8652802167ce23c6033237ea18fc864f2fd007b452484e86b1d6e0fc7240dc8b88273fee58f7eb60defb4dd7ef10cdc487708988c80f9f6603f54f10a1aac00c4e73129bd7e929f85fd049b8a7a4ac3a3781bc087709219d57549c509d33d9d392ddd665724e132b62e09d4ff24fc9554ca4bdbdd0e0261deabefbe7a0b234919996f2b9f5f0004a6c3b1e40f9c56448b656bf4508ac8bd612cddb1a76dbfd3f9b60614c169761748d6796bcc663269506a11f935ec4ab9f518bdb6bf663496fd5e50cbeb81b1b2d3c5c6cf2dab24aae71471dd0f5b7f5c8c8e7c118c989cfddfb46bbe1c672625765707a9869985604da769fd1f1819b39cf79080f216f686b1c8acbef23f375d3aefef5d419214345ea95f8b8fe618ac8edf4717db30c85fe5c38e3fe52d36432fe5bad67c37bcb26220ea6f6940374bb6be43a8a0fd5099f7880d594dcda0dfa52be984b5bb8d7f41de06572234e5c40155058974e23f42b1d24dd6c06f68822c3c7623df7420e0c9af976895451eb78a22a8b56c73648f1b3595479b523c134c1b42a516e2086f23d732b67e92e192a08f56ac3e091eb2a8ec73944eb8ec90d368fffe4dc7bbf088e3e36122838f85adbf35682179a22588af6aa565993e740e572f16935cd5d204b4c401bc2c8a5da33988e33de2f075aef600ecb7c3a8f3d41a88c0cacf6938e8c4a943f09cb2949415d9e1d80ac6ba71a3fabea6348e8c0032ae9c848ea0f68dc6ec4ef083d70d64cc0a8643316711c53c02c366e3127b28d38cc77104cdf6be72bbf7c44c19ab3a795033a9ebedb58f18bad91102777f032df189af8b6c40f0d35b7dc4b9cbd56e51a537edc37945d469e02cd4047155f734d3b7094d57224fc25d930b5547c39f9a3c4d57ed3cd9633dae8ce8040b2c974f0027a6695fbd0623ce21d895589c52a11c4ccfc2f2cd5654f0f0251122679fa52ad11688ccb22ac4bd0b04d0c2c2162d3df9c17b64f52e665a3a8603b645a3b794249d1e1ef6ffc48b47b3680b0d1fee05a911c695ff6b73e05360bc212121551d987f84278beb1aea516770810a10a1cc202e7aa352eeeed97aad66b40b6b1d71a6480a64171493ad209af0fe8394cde95e02b925ae44de82c7c0b236aac32b9b383177ec4e364719121ee63f9f09a4e509500df2adab2a30c85efa7180023222d6cd3f5c2b5ce915c9e13ab61466a3aef3a096121e199d924dbcfc16f6c55dbee6da01f7d7ef33f57012ecb0f0353e5cbef7d1ad3cf5ce0232b0319877a95a70a88504afaf0a5dad07cd2f5fb1dadae7a114f6f34745138d1bef7974fdc83c25c2084d3234ab6cbc23351ad533cca53eafb355cb8e9468ab8d7a6d52fefe9c510d7df25c2ea4b5ceff8fa4bb40685c6cf0a7f1ad3a3c851c16a9ef8b472862932c9b1a35b9c6ae2a5ee6425ec1b077f15ba19e46c0685eaf291a5411647310a019f7ea7b3c46c25ffbfe3cec51ca9075932ffa3ffcb68f3902c9d9650cdac3e48cbad88b2a5318e03ef44b0fd9e45c0ec91b21ed9b443723d0e5b7da03b99275bfd8b936eb62546e2155018f1595ec13fad183e9cddf4797cc0e6fb6c64715303372419cafd4f5ec82c183f97bc2dfd402283123bd13f1f75c533567e9c3b205cdb3b5c85bbfa1b5c68ed9ecc2e0f98e2a9462ba2eb7b526ce1a449e52efcc64973c7137e42a908141d5ab5ed34f6d7403858193169e8b898037a660cc78a05c37ed1a880b50e20ba6d2b230f2993ad9a8eabacbcf6c4332b6f38ac1528f78741369f7beb35e0aa6e4bbf28bedf834af62ef8de78c1ec7ae5f6018b9ee76db5917d46e5061852569b409dd262781a10a61956cef9992910ce5ffa47290195eb502b13ef13fb131d6fc6ac4e684eae07cf64340d7f6ae336c50fb157c313ef1f48e5d42adc8a63e988b5176c1faa575c2a42a7c1c25da3bcf1b88091cea2317826c0545ab0e517c7832bcfce35b84207332eca7efe18e67cdbd35083ecca76e08057a148f5a043d14164282c4619eb8cb65dbb6537385e07a04b0f059ef0513d05b69e09e1717cd7f0808c05904f68eb0153d5e9f5181bcde4e4deca214310e544e158d69724a93fbac6cf896960ad55f44198a477dd95324cbe87b39ea4d09d36ebd9a59d61d194b0fd6534c9c3d7729990a5d4ef3c6eb16966e20e0442a1df6b7a021b282e8caead36a455c7683a57b1c6d9ffcf4da30a2d4215cdc24c3e2be8853e19b845f61808c8aaaf4eafc865f5d045e792db4dd5880ebf61c0ee78e1d0810790aaea4c892529349e72ca9305d962c940316275567a2ef62db450b459fba8ea5a852f82a27cd58746ad78aa8aab2563532518d9a7f320c21f9ce1f68ad2e1b77c242fa6e96b1f844e21318b627133767afc391280df9ce1c868df40468942f1291c5c7f401cf164005ffcb190ea1ef43ae6d5eaf897d77cf96901a26b23256c9fe64577e4fafc2375864e415008c8f394a7d7431f04ed1c4d25a5810930309d1e5f72f8f29a395c54e2ae3db3467c177b9118b33e7555474a62c68920e560a42416984482cfc31bd043fa19e218c494338510e725b2279db11d516efdd6826e5ab4de6d5d77596525f655f9d8ba9332fb0f7c7921884075c0d74537099c954c301d7286bc2047367d4044396f10c86080529664328026b5d285df7f24821f48cf5984b81196180059a6ce615b725276e4f3af3f5101771cb1484364fbb6bf15764f3936496e9f6e2b6e4be8c6ef07ee37e708666bf91d7647611151d448465d52055f229b35f7090173bf3b6a883103b386bf1970f99d8233a39075d8503f78a520fe9c6d2467a5b1b1ac08d69aeda46ab7cdc152b84b801040fc2fc1a7a911e834eaa884832d1a636710313766eb96d556bd7a993eaa3ffa4433eb4369e586f8ec0ef0a3bf025ad79acab28a73ba49993d32662866ad8d3d1353e05ec3709a2b582e50a1ec81b10611caa7633f6e26e6374a10b91bff0c03c9c7f230c49338cf5ce1112a1fed743e83afb7d09a42693c6c8b24ef2203563abfe224a5ea12e388afdf451268247c7d3bbf3730eb5c1f171cfc8ee653ace5c2a5e4fa4ae1b16b2e29eac74719ac266b6011a85accfba6a7529c0ebe572e002f19e72db948f798982233928b952dbbe812f4162a3711868fb57ab69dc92b25bd5228193713738b88e20962964581e42fab4d1b20feb4929ebdfaa68f8ee7864293a836dbb7526ac89a5eb62d723d99a142cb5fa1f51e230d22476a882165f58242a756bb795714b232d6fe968aa2ab9ef7f5c4d6625e1f6cced706877b3bfbc4d83d36d6b0e05a30deb41761258a23148c55a4e827b70542029c4e558e09cfd7ac93d3d793dc8d8559303daaf27853efb1077a39addb0fcae81020877f6638d7050dcf9d313e6680d5b10df3b33ed39a35d9c43c697e4668999604f73a05d699cfa9bd0db35ab6d4f58a5a063fb8d1dc179fbdb5dd14ac7aaba30b50888e6cfeb0971a44ef182cc31ad9582f058dab417352563d81a977ea2f876612b14a0041c89219984a7fe1e0136d8b4cb6ca85cb8cb4838b898a577f38215a640d62322c720f48d1df132be1d7f343142ffc12f58e7c6f26e3a68a51d000caaf4be884fbb3939fa7e75370286d44e29f7f2b6669427e12dfec7c0b9b724b46f7340dd54e2f6dce1515da03406b6a452bef21edad70e113d1c4544b12fda006cfaca59a6311bb174c91389f392cab21d282a96c36e8deca3ac22ab1e443d3c97b55317397229d4ae41e33d3fbd8d8b4df89d93dd2a2b89843587ad8a4b23cda74a1417be7ee153888ad04a99e97ea38f079eb0ce863760cfc7cd941ee1e064376054cbc9ba30acf814816e3095cbccd2a3efdcdf0ad6868b4865955994e3fc97a325cc76b2397f84050643127c97499ce372dc73b01ffc305f56997fedda253def99c8c2aaf87fe653cf5b98169ff69741034cd933d1b6914cd86bb7e7de6b29a42302b2cdcbb35b81d7b3fac85628b5fdd06d197f0c9bdd6b96ee226a323e2accba4e9b9915bb626537805eea5d4e28c79183c819c4a8eccc9a779c13a11fad31375638056a7bccb242e1ce571b4cd780c4647dc2f705c0c6ab545c28097334237782bafde3f994492d7dde4ba416a541e00d06a8de773ac423ea0a1d2de602f1a859d150fd88e4824b3abb658c99dfffec456073c92fe5f3fb246ac3ae53fc7f948c2b87b374da0d9095f9a1e5cb135ee583b6ea21d437c5c57e0cc1a7c434d9176d4d3fd7d0699f3edd92a4a5c337db806f6fd45e7d461be96cdcbbece6cd4d40dc796e4bf0c765fab3d8c8838a89397ca78a4ca6d3cdc79e97064257550f1037d327e2b5860592df949d557d615b727ee719f7f33f9b66195666e34eb753daadd489a290a6207569a4ef6932f7099775070766d15e640b0aaf83d0f0038efefac45af91e41c6ee0f58950b57d252ad0256bf2fcc5cda072ae80ede53b6418619141fa6fcf18445fdbdeb3076337b36e9ee16d2df11f86c19d734f3001399e61f44fffd85bfc8987457e0b0c180a4f5008330ef722aa539d6fc5a9575e9949a5992867c353de9097dfec73575bb7c270667fab96467110ca8beda36de7d7066761f05e0bec0162af2f53b8a4ce5ccd27ce48768c95c15e14cb918c6625d0d4be34eee5127d708266683465b5f6bfe6bfe0f52a0cf1bc884fa09a5c92ccaeaedf53651baf99ee84f25df2cc20f2a08eefd16ddfe7930de7b28292981520504814ef5a94377773491b92bc30e3cebaad6b71184999ec0f5771ed992c98e70d6935047b20fd6c7b2335692c623d79744923bd3f83cbfbf9e9f49b7306366718685afc5147ae327deb1bb15b0650709b411f332832c32da6d1b2420182d7e9100258575773c8e41772fec68b1823128db3b79e75eb4a6628c6310006b91c07eb1dc5b48889b5b4eece81ba54365d25d7a690ec7657d820604946dda16d0a8b9eef3a9b155dea308a03e8a76fa7e5d83cf60738cc7d457f9944a050d1269704fe7753c4e4584f1adde511c082ea560425cf99143c2a7711dcb035ac156f4bf5beb92e829971615a929592af3bb8b844029d071bc10739f3164adcd2290d4964403104c3a46b5ded2d01d58cacddf4489d094e0bec9f7c0bd932dfe95e7aff4fa28ebb3208fd08a6626e03ae7a2264417ba534ada8458d3948f40ca5ce51d88d6b77c7563b6bdb2c5427e33e70cadc4b1f3f57cc9bd17aa7e8de8082208ff2c6ae451e68cd513c2534fc6c013895b147828753c8cec588af25c81df7049b185b027d5ffd4d06d067d408bbba50bc364231bc4330a6854e8254607d02a73a71c13d3837d1e6e626f164bf242491a8d0413e0d8d1c09434e09b64ba15cf79fa91e779dea5637a4d9420820891f5bdd3ea1534e7f86d3dc7bf96d7a54d669d948ef4dca69c27cff7e56a1748f211f6dcb03b72e1fae2d30b7d36b5d217f52a9a0904a69fff879ccf43b55c67a2f8bcddba53267004d3930001e4b41cc67181302c51d5c3d3cf0ff1ced8d3f9b144e1471be35626fb15c14efc42fb20f9d0b0dee13ef5af899c858de7bbe3a52ff72ef44781c5a49353623fee91307a976d686eb2d93332eb160d248eef104713db2035eac7319b637b1673e4b7da5ea052dd17dbfb1b88bcfe8cb3103d25a32495a42158da4253a9f801901ca51c9a32fc187234faa8cb8957854b7cc6e7012d908f8aa0c035d6c6003aa13ccc2170125a66892e1449665e48fd227667cb5112d741ab136d22f3b5f42820b0208392090d877e429bf1802080f889069c8ef34a90dc6fe2096ddb7df195520de9fe751318e2af86af2f2ca350b186041d6530590273781dc8651a1cb75bf4c8d7ff6164b5522d2d91d862ce5a5884bdd035d014f516f172894b77179676710f99dc2ecb08499092f7864e40922be6f815ac2614a55c451f0b0f776baa1024bf5c69a0d7c0cbc5484aa211deda093102ceae9935653cace8937e23e1b50ddde2121d1edd0b7b153003b2e4bbf35ba0ea0ba805465289212f864e5653414750479f8df00009b32cf80056b7c760a5c4556f1340714fa9dd3428e02585466f3fca0aaeef23269fabe585222c539b140d047c92f183aba57af1568985e33a918814c2f99ac16c88d76b3b4312c896613e9e00ac4f3714d0fb916e60249a98d5e0be5ca46f2dce37f883c59ceaf9ec54047859ec30ce2da5f6b3777800ed4785a22168c78affc30d056f87971a8d9704f0154ae0915712893c425289c0cffc12082b95858346b299a5f65f2fe79ee79e5beb26d2de40b1d509dc05e97121239d991dadf7b41b3f3f6559c5aafefef87963da0bb40c99949e86286ebab6f571ea0b15c6db750ac695690ece6741e2e1a6dca6c61bce53ce429708862abe0a8d4257f3e53c91d607216a502535c7e2e8cf3f1c2b44bde73f0dfabecdb4ea0b2990845595d9aaadd9ae6cb6776bdb3b927aee1eda51c2ba535c7a73172085a77a1ef8b4dedb435460b371660cdf46747fedb1c54a761e30658de1a1ad9eed0aca268dd3aa9aef4b5f8705e64a29f98c1fe452a7955dc1ffbd48e8b8b9ac52eb348d80d099ca0e9b24b6c41b0cddc659ea6a0c19ecb9ea52416e2072827b5d1eb5c7b510a8ece9aeee90dbd843e2aa41c87528a4aa98d01413128baf543aadd924499c45d99bf5f733515ba8fb329cd1e2a9a1b682de40c69eb75d3dbedfc7b65afd324bc97d18c1fbc1cc17f0c179114df6a7eb5b96f06a11b807e25a357ee85962b66682f4d6c6ad6ed59e8ed47b5026643a6da00b4147324c40755fac9172030d7e8b75cc2c7eb2f4463560df83c4145aa353042f1f1fea869700249b4d8049706d003be92ece35788c7e360bdc88f32af9046ce41195dd81e307b4632287bbd02541533a7627e39285e20865664da09e8becf6fb0c2ee52ccb3ed67fbf4feb5fbe5d568480e88f592e7ddae60fee0f31820d739b4daa40afa82a9482c0f0eb728ecf03778b56eb18d96bb59543e37fe465b5ccf8240e7fea324a38787d4327b933754909b69e4c0ba6513c3f248a3d38b1e6221a5a239d2a14c310fc2fd45794cb1a7e1dde13c3a416d4d4d96d6ebb5b127d2c6ad43b4b38041e91c191653356224d60deeda2f3b7ae671231c45686b55ddd495135989ba73aeb8800059eedcf81d86564268076a7a606105e9b99eb76d78a3f8265b10d391ca4f017c505ae1f707a2e7939d5a543955567768e3f371627231bfa4cfd10dc7112a8e40659cb4b2ede30feba18c747d2183d7c560b56faec50960121a525ee414396e2708fee34f411c6a1a8e5dd41e3329aa1ab41bad97e88af294ee434f9dc459e608d89fd07f660d8b6efae6dc215b4f9eaf740dead47d94521b7f0d4ccca870aa2a01e0a0dc81050ac33739585c07c6431f49d277a60c8d30b0", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000, 0x103) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) 8.023883959s ago: executing program 8 (id=3091): socket$netlink(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) unshare(0x8000000) socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) unshare(0x28040600) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) semget$private(0x0, 0x4000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f00000001c0)={0xa, {{0xa, 0x4e20, 0x6, @local}}}, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x15) r3 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000100)={0x3, 0x980900}) r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000280)={0x3, 0x980900, 0x2eae0342ca72d7ea}) ioctl$VIDIOC_QUERYMENU(r4, 0xc008561c, &(0x7f00000001c0)={0x980900, 0xfffffff2, @value=0x9}) 6.236419304s ago: executing program 8 (id=3096): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffec00000000000000000000000000010ff020000000000000000000000000001"], 0x340a) 5.723715987s ago: executing program 3 (id=3097): ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f00000004c0)={&(0x7f00000000c0)='q', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(0xffffffffffffffff, 0xc01464ba, &(0x7f0000000340)={0xffffffffffffffff, 0x0, r0}) 5.435333544s ago: executing program 3 (id=3098): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000003e00070100000000fcdbdf25047c000004000000140001800674405c57e0a99819f2ca68aa335d"], 0x2c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="070000000000feffff05000000180001801400020073797a5f74756e0000000000000000000c0003290800020000000c042723d4ea9dcb70e3974b9d532084e2f4c53b215204daa7d86711dfc207df4ef56c8a974d77b14e30c32d7278dfbb0dd556673b2ef2142c6ff8f681aecfd94869ca47f47e"], 0x38}, 0x1, 0x0, 0x0, 0xec691177f7bafef4}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000d40)=ANY=[@ANYBLOB="24010000000201030000000000000000070000022c000a800800014000000000080001400000000108000140ffffffff08000140000000010800014000000001e4000a804800028006000340007d7800060003400002000006000340000300000c00028005000100060000000c00028005000100210000001400018008000100ac1e010108000200640101020800014000000001900002800c000280050001002f00000008000000000000008400000006000340000400000c00028005000100210000000c00028005000100880000000c000280050001008400000006000340000200000c000280050001003a0000000600034020010000bafd018014000300ff02000000000000000000000000000114000400fe880000000000000000000000000101aa2776a1d7242ca6d4026b75a3e118c4695d"], 0x124}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340), 0x10}, 0x94) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000040)={0x80042, 0x1}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x8, 0x3, 0x200, 0x178, 0x8, 0xfa04, 0x178, 0x6c02, 0x278, 0x194, 0x194, 0x278, 0x194, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8, 0x0, {0x0, 0x74020000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x39d, 0x3, 0xfff, 'netbios-ns\x00', {0x2}}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x2c}, 0x0, 0xffffff00, 'macvlan1\x00', 'sit0\x00', {}, {}, 0x0, 0x0, 0x24}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0xef, 0xa, {0x9}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x260) bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000040)={r4, 0xffffffffffffffff, 0x10, 0x0, @val=@iter={&(0x7f0000001a40)=@cgroup, 0x10}}, 0x40) 5.014246361s ago: executing program 6 (id=3099): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a3000000000b0000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021740011800c000100636f756e74657200640002800c00024000000000000000010c000240000000000000000b0c000140000000000000007f0c00024080000000000000000c0002400000000000000fff0c0001400000000000000f1a0c0002404f93169d000001ff0c00014000000000000003aa3c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000100003800c00008008000340000000021400000010e201"], 0x134}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 4.880354053s ago: executing program 6 (id=3100): io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000280)=[@ioring_restriction_register_op={0x0, 0x21}], 0x1) r0 = syz_io_uring_setup(0x315b, &(0x7f0000000080)={0x0, 0xcfca, 0x1042, 0x4, 0x356}, &(0x7f0000000100), &(0x7f0000000300), 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 4.773243614s ago: executing program 6 (id=3101): r0 = getpid() timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x5, 0x6, @tid=r0}, &(0x7f00000001c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r1 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r4 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x80) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f00000000c0)={"ae42ffff", 0x4, 0x5, 0x4, 0x100, 0x803, "000000ffff0600000800", "00000002", "05030400", '\x00\b\x00', ['\x00', "6cb8ff080000000000fffd00", "f0ffffffffebffff00000010", "fdffffffff40b82dc44d00"]}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty, 0x2}, 0x1c) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0x3}}, 0x2e) syz_emit_ethernet(0x46, &(0x7f00000004c0)=ANY=[@ANYBLOB="99177fa56f05ece65fbcee5586dd60000000001011ff0000898af70200000000001000000001fe80000000000000000a3289a90000aa00000e22001090780203000000000000509c390acc00177a20dae7e6e16f1ce85d12ea4b3f251c1e6745678582a7c028c1f56b3d19a9f076b52d4f627acdff55ebb6521fd40388193d49922a65aac0db2cf94c06bcaa28e1107b37ca623d957434681cf1267ef1e79e6c4929d1dc9b82368bd694c5c0c09dac19273190c311fd2f7debdbecc4f26e5c067d58615acd42a6e3b38642c362605cd6fd4d997db88b81f42e89499f0da3661953ae"], 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f, 0x1}}, 0x20) r7 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000080), 0x0, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r8, 0x5760, 0x14) keyctl$KEYCTL_WATCH_KEY(0x20, r7, r8, 0xc7) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r9, 0x400455c8, 0x4) rseq(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) io_destroy(0x0) 3.341371584s ago: executing program 0 (id=3104): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r0, 0xe503, 0x0) syz_fuse_handle_req(r0, &(0x7f0000004100)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000, 0x103) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) 2.771756947s ago: executing program 0 (id=3105): capset(&(0x7f0000000000)={0x19980330}, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x0) 2.72536832s ago: executing program 0 (id=3106): r0 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{0x0}], 0x1}, 0x0) 2.579236519s ago: executing program 0 (id=3107): sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80000}, 0x40800) r0 = syz_create_resource$binfmt(&(0x7f0000000440)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) write$binfmt_script(r1, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2) write$binfmt_elf64(r1, &(0x7f0000000200)=ANY=[], 0x1cb) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 2.462231555s ago: executing program 0 (id=3109): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) sendmsg$nl_generic(r3, &(0x7f0000000980)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000940)={&(0x7f0000000580)={0x3c0, 0x3a, 0x400, 0x70bd27, 0x25dfdbfd, {0x20}, [@generic="8ab67f43696bcad14c2014861679c675658365e4ff804fc66f40ea7fc3f2854f2b18d980340109f65cd88a7f9556554cdc8ff24c711d9506b597155f64b93a61734ad9486c60cf006330c91955a3cd64d9358ead7a10fcd513496cb13fbd287bfc90df2af4effca60aca93ad9196c71da42b1d6616942dfbc547460f1ee6c7cf2988a5d8557ebe07524463296d63228aac45ba45a7224c6bd628e9c86d65f6a5a77697905124fd9188e1e80bd9e14a4296aead67a87a9d10153f5bf7b502", @generic="be787ef15efa2bfac7b2478fd85107e2d6e0a724b0dc8de7f5aa80095ed6dd578ef8dccb3d942b0970931cc2143dc8ad49ba5a0b1af715c9fb62bf705c4bd9dc78101c50e9ea43b9025dad8b9f4e1836ca7490ad4b271ea7a36bfd34ea5193c9944ccdc6d911cbbb73a587325e6276b93c65e8a128472a76a5f4054ea7e5dfa515bc459d9529e4df03e700c2e110a9817bb13c86ce9f542451bebc86904dfa65057c202661edf84e8ee77fb5c5b9f7645aeead0d3f0e00ca42fcac057c488b28bdcca76e0be83f25365e490878208a036e650f29bdaafaf044", @generic="567f9b5b6702eb99069c44ee09c2c92b950d643ac360e34bc96d4fe9a7c87752734f24db9ad0b1cf5b96a32f391110", @nested={0x1e1, 0x5d, 0x0, 0x1, [@nested={0x4, 0x54}, @generic="a27a9bd5a3b892a48abdb4a235754f86c873ee4613386b4bbd73975a2f632003ea4796e0b2b326dd85ae4dedeed6227b1fa6608e3dfca910548e5e208e06b19dbb9f021be077a9685a2bc2d18c98de05c47ab1666fe097b4dfdd0452a8dbf6f6be6791745930383e7414be2a00bc44f53a19b9d7d348d3277eb4b89f9a6001bf1ba8509feb7438d7d5354c05b37dcbe97ca176275d39390daa713b15e40f3dda22af16356bd955c191025bc9251a1a0a3dc504119ed73a96c30342d994d5ddb7d170f9bd0e2bb95eb0c7fcbb58d0e9147dfc96dcaf8e5aba018653110af51aed55d2486f78197d555a0d1a91f34ff801e746fd56", @generic="4930f7e46deefa8be932a67cb91edcf96cbdfacc7289b775809cc4c706accba15a11f0b35a49ab0ddfd8ec7080cef52076259ebedaf0de1187ac65e5a6f5f10e1e92888f91c6ac4fa06d7da18b8904aff09f2ce0660264e658c26b7c8f03d5222971b902a0281a91bad0010edd6fe074b377f41acd", @nested={0x4, 0x37}, @generic="980779cd61462404fc90d5a580b21e03d0d664d4926c66cf6e478fe0360cbf87e0cf47ca98af55b241e3d0dfc04008d4b1cf2175267c4bf641ac11cd5b1038e83a6f3bd760a7d2eee8f0a1be3b59a414ec5b10861a3d9f0f4de15fea75e44014", @typed={0x8, 0x9d, 0x0, 0x0, @ipv4=@multicast1}, @nested={0x4, 0xd3}]}]}, 0x3c0}, 0x1, 0x0, 0x0, 0x44}, 0x40000) setsockopt$inet_tcp_int(r2, 0x6, 0x1e, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) close(r2) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x80049367, &(0x7f0000000200)) ioctl$FE_GET_PROPERTY(r0, 0x80086f53, &(0x7f0000001480)={0x9, &(0x7f00000012c0)=[{0x3a, '\x00', @data=0xffffffd7, 0xfffffffd}]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, r5, 0x1, 0x70bd2e, 0x0, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4881}, 0x51) unshare(0x66000080) 1.234055407s ago: executing program 6 (id=3110): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x44, 0x9, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 1.075375315s ago: executing program 3 (id=3111): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 1.065543759s ago: executing program 9 (id=3112): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000cf8bed20d90f21004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="201101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000200)={&(0x7f0000000140)=[{0x83, 0x2201, 0x1d4, &(0x7f00000006c0)="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"}], 0x1}) syz_usb_control_io(r0, 0x0, 0x0) 1.046948718s ago: executing program 6 (id=3113): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000140)=0x2000) read$dsp(r0, &(0x7f0000000180)=""/174, 0xae) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x2000) 877.589008ms ago: executing program 3 (id=3114): capset(&(0x7f0000000080)={0x20071026}, &(0x7f00000000c0)={0x0, 0x0, 0x100000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000200)}], 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x1006, 0x0, 0x0, 0x7fff0006}]}) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='numa_maps\x00') r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fremovexattr(r2, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x8, 0x10, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x1, 0x7ffc1ffb}]}) clock_settime(0x0, 0x0) rt_sigprocmask(0x2, &(0x7f0000000b40)={[0x6d285c1d]}, 0x0, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) gettid() pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x3938700}, &(0x7f0000000000)={0x0}) lseek(0xffffffffffffffff, 0x4000000007, 0x1) ioctl$IOMMU_TEST_OP_ACCESS_RW(0xffffffffffffffff, 0x3ba0, &(0x7f0000000380)={0x48, 0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000540), 0x4}) r4 = syz_open_dev$radio(&(0x7f0000000100), 0x3, 0x2) ioctl$VIDIOC_S_MODULATOR(r4, 0x40445637, &(0x7f0000000040)={0x0, "02bd87ecd36ce84710f92cd32d87ac6ba29abe1d149a1dc651ef4682359ccdea", 0x2, 0x1, 0x394bfddf, 0x1, 0x1}) socket(0x10, 0x3, 0x4) 877.260369ms ago: executing program 8 (id=3115): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1}, 0x6e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000080)=@file={0x1}, 0x6e) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) 633.469435ms ago: executing program 6 (id=3116): socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0x80042, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) r0 = socket(0x2c, 0x3, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000001c0)=0x0) sched_setattr(r3, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f00000003c0)={@rand_addr, @multicast1, 0x0}, &(0x7f0000000400)=0xc) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000800)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="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"], 0x210}, 0x1, 0x0, 0x0, 0x4000000}, 0x4080) syz_io_uring_setup(0x4ad8, &(0x7f0000000300)={0x0, 0x9824, 0x20, 0xffffffff, 0x145}, &(0x7f0000000100), 0x0, &(0x7f0000000000)) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r5, &(0x7f0000001240)=""/102400, 0xffffff8c, 0x200000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) syz_io_uring_setup(0x1229, &(0x7f0000000200)={0x0, 0x4f5a, 0x10100, 0x3, 0xffffffed, 0x0, r5}, &(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000000)) socket$inet(0x2, 0x3, 0x5) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000500)="48000000140081fb7059ae08060c040002ff0f03900000000000000000006fabca3b4e7d06a6bd7c00000000030000068a562ad6e74703c48f93bc2a02000000461eb886a5e54f", 0x47}], 0x1}, 0x0) recvmmsg(r6, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x40, 0x0) 0s ago: executing program 0 (id=3117): r0 = syz_open_dev$I2C(&(0x7f00000001c0), 0x78b5, 0x80) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000080)={&(0x7f0000002480)=[{0x5, 0x200, 0x2, &(0x7f0000000340)="cd4c"}, {0xf, 0x3019, 0x0, 0x0}], 0x2}) kernel console output (not intermixed with test programs): usb 9-1: Product: syz [ 1179.520146][T13651] usb 9-1: Manufacturer: syz [ 1179.665268][T13651] usb 9-1: SerialNumber: syz [ 1180.112354][T13651] usb 9-1: config 0 descriptor?? [ 1180.167953][T17122] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2246'. [ 1181.441951][ T9370] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1182.173549][T17137] loop9: detected capacity change from 0 to 128 [ 1182.212919][T17137] EXT4-fs (loop9): Test dummy encryption mode enabled [ 1182.247692][T17137] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a806c018, mo2=0042] [ 1182.302714][ T5783] usb 9-1: USB disconnect, device number 22 [ 1182.314792][T17137] System zones: 1-3, 19-19, 35-36 [ 1182.357900][T17137] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1182.448637][T17137] ext4 filesystem being mounted at /319/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1182.887422][T13747] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 1184.432474][T17156] bond1: entered allmulticast mode [ 1184.942056][ T9370] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1184.991293][T17165] sg_write: data in/out 447452/210 bytes for SCSI command 0x0-- guessing data in; [ 1184.991293][T17165] program syz.6.2257 not setting count and/or reply_len properly [ 1185.279578][T17169] loop8: detected capacity change from 0 to 128 [ 1185.349681][T17169] EXT4-fs (loop8): Test dummy encryption mode enabled [ 1185.378287][T17169] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a806c018, mo2=0042] [ 1185.403893][T17169] System zones: 1-3, 19-19, 35-36 [ 1185.572374][ T5754] usb 10-1: new high-speed USB device number 40 using dummy_hcd [ 1185.580788][T16959] Bluetooth: hci0: command 0xfc11 tx timeout [ 1185.594702][T13747] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 1186.330647][T17169] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1186.382569][T17169] ext4 filesystem being mounted at /278/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1186.501150][ T5754] usb 10-1: config index 0 descriptor too short (expected 45, got 36) [ 1186.677654][ T5906] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1186.686811][ T5754] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1186.709029][ T5754] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1186.721885][ T5754] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1186.734926][ T5754] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1186.744637][ T5754] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1186.757147][ T5754] usb 10-1: config 0 descriptor?? [ 1187.548819][ T5783] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1187.594042][ T8958] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1187.679098][ T5906] usb 4-1: Using ep0 maxpacket: 16 [ 1187.822738][ T5906] usb 4-1: config index 0 descriptor too short (expected 65, got 36) [ 1187.844437][ T5906] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1187.869696][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1187.881284][ T5783] usb 5-1: Using ep0 maxpacket: 8 [ 1187.892240][ T5783] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1187.908249][ T5783] usb 5-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1187.939539][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1187.952935][ T5783] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1187.971270][ T5783] usb 5-1: Product: syz [ 1187.975607][ T5906] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1187.990363][ T5783] usb 5-1: Manufacturer: syz [ 1187.995423][ T5783] usb 5-1: SerialNumber: syz [ 1188.006887][ T5754] plantronics 0003:047F:FFFF.0006: reserved main item tag 0xd [ 1188.030198][ T5906] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 1188.039902][ T5906] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1188.054596][ T5754] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 1188.055692][ T5783] usb 5-1: config 0 descriptor?? [ 1188.256631][ T5754] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 1188.392214][ T5783] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1188.401705][ T5906] usb 4-1: config 0 descriptor?? [ 1188.432878][T17177] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1188.497091][ T5754] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 1188.509968][ T5906] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input25 [ 1188.567034][ T5754] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 1188.611180][ T5754] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 1188.714236][ T5783] gspca_zc3xx: reg_w_i err -71 [ 1188.720441][ T5754] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 1188.781989][ T24] usb 4-1: USB disconnect, device number 45 [ 1188.788071][ C1] pxrc 4-1:0.0: pxrc_usb_irq - usb_submit_urb failed with result: -19 [ 1188.813445][ T4970] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -19 [ 1188.844390][ T5754] usb 10-1: USB disconnect, device number 40 [ 1188.998772][T17198] fido_id[17198]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 1189.439955][ T5783] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1189.451927][ T5783] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1189.471934][ T5783] usb 5-1: USB disconnect, device number 13 [ 1189.491104][T16959] Bluetooth: hci0: command 0xfc11 tx timeout [ 1189.499668][T13747] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 1190.579933][T17211] netlink: 324 bytes leftover after parsing attributes in process `syz.4.2267'. [ 1195.124936][T13651] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 1195.879342][T13651] usb 10-1: config index 0 descriptor too short (expected 45, got 36) [ 1195.889058][T13651] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1195.908974][T13651] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1196.537577][T13651] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1196.557581][T13651] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1196.576404][T13651] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1196.636121][T13651] usb 10-1: config 0 descriptor?? [ 1196.848384][ T31] audit: type=1326 audit(1777788856.689:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17257 comm="syz.8.2282" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f58fbb9cdd9 code=0x0 [ 1196.957935][T14667] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 1197.525765][T13651] plantronics 0003:047F:FFFF.0007: reserved main item tag 0xd [ 1197.591318][T14667] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1197.591355][T13651] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 1197.617712][T14667] usb 1-1: config 0 has no interfaces? [ 1197.633596][T14667] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1197.647670][T17250] Bluetooth: hci0: command 0xfc11 tx timeout [ 1197.648227][T13747] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 1197.803280][T14667] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1197.847407][T14667] usb 1-1: Product: syz [ 1197.861756][T14667] usb 1-1: Manufacturer: syz [ 1197.872342][T14667] usb 1-1: SerialNumber: syz [ 1197.889506][T14667] usb 1-1: config 0 descriptor?? [ 1198.000099][T14667] usb 10-1: USB disconnect, device number 41 [ 1198.060264][T17263] fido_id[17263]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/10-1/report_descriptor': No such file or directory [ 1198.128627][T16959] Bluetooth: hci6: Entering manufacturer mode failed (-110) [ 1198.577961][ T5906] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1198.760716][ T5906] usb 7-1: Using ep0 maxpacket: 16 [ 1198.796043][ T5906] usb 7-1: config index 0 descriptor too short (expected 65, got 36) [ 1199.006287][ T5906] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1200.205576][ T5906] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1200.267370][ T5906] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1200.300036][ T5906] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1200.315257][ T5767] usb 1-1: USB disconnect, device number 28 [ 1200.370067][ T5906] usb 7-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 1200.421324][ T5906] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1200.455572][ T5906] usb 7-1: config 0 descriptor?? [ 1200.468522][T17268] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1200.507378][ T31] audit: type=1326 audit(1777788860.329:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17286 comm="syz.0.2291" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa7f819cdd9 code=0x0 [ 1200.511820][ T5906] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input27 [ 1200.637639][ T5754] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1200.876315][ T5754] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1200.923571][T17293] loop3: detected capacity change from 0 to 128 [ 1200.940249][ T5754] usb 5-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1201.055171][ T5754] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1201.170732][T17293] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1201.870521][ T5754] usb 5-1: config 0 descriptor?? [ 1201.968196][T17293] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a806c018, mo2=0042] [ 1201.982883][T17293] System zones: 1-3, 19-19, 35-36 [ 1202.435643][ T5754] usb 7-1: USB disconnect, device number 27 [ 1202.619400][T17293] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1203.353903][T17293] ext4 filesystem being mounted at /431/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1203.589323][ T24] usb 5-1: USB disconnect, device number 14 [ 1204.106785][ T5632] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1206.126376][T17332] loop4: detected capacity change from 0 to 128 [ 1206.169845][T17332] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1206.214453][T17332] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a806c018, mo2=0042] [ 1206.230231][T17332] System zones: 1-3, 19-19, 35-36 [ 1206.250742][T17332] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1206.287778][T17332] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1207.080638][T15645] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1207.340718][ T31] audit: type=1326 audit(1777788867.179:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17338 comm="syz.4.2304" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff89999cdd9 code=0x0 [ 1207.690970][T17348] binder: 17347:17348 ioctl 541b 0 returned -22 [ 1207.803506][ T5906] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1208.117595][ T5906] usb 7-1: Using ep0 maxpacket: 16 [ 1208.124455][ T5906] usb 7-1: config index 0 descriptor too short (expected 65, got 36) [ 1208.143870][ T5906] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1208.849225][ T5906] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1208.873298][ T5906] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1208.901034][ T5906] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1209.369393][ T5906] usb 7-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 1209.402143][ T5906] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1209.442515][ T5906] usb 7-1: config 0 descriptor?? [ 1209.463933][T17345] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1209.484646][ T5906] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input28 [ 1209.774390][ T5906] usb 7-1: USB disconnect, device number 28 [ 1210.544048][T16959] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 1211.400793][T17374] loop8: detected capacity change from 0 to 128 [ 1211.640995][T17374] EXT4-fs (loop8): Test dummy encryption mode enabled [ 1212.183646][T17374] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a806c018, mo2=0042] [ 1212.211368][T17374] System zones: 1-3, 19-19, 35-36 [ 1212.236237][T17374] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1212.310841][T17374] ext4 filesystem being mounted at /286/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1212.898770][T17386] loop6: detected capacity change from 0 to 1024 [ 1214.117806][T17386] EXT4-fs: Ignoring removed orlov option [ 1214.177117][ T8958] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1214.198744][T17386] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1214.841266][ T6055] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1215.043728][T17407] binder: 17405:17407 ioctl 541b 0 returned -22 [ 1215.298335][T17409] loop8: detected capacity change from 0 to 1024 [ 1215.327654][ T31] audit: type=1326 audit(1777788875.159:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17410 comm="syz.6.2322" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6557d9cdd9 code=0x0 [ 1215.403297][T17413] loop9: detected capacity change from 0 to 512 [ 1215.424164][T17409] EXT4-fs: Ignoring removed orlov option [ 1215.534024][T17409] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1215.636308][T17413] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1215.716202][T17413] ext4 filesystem being mounted at /335/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1216.154987][T17424] usb usb5: usbfs: process 17424 (syz.9.2325) did not claim interface 0 before use [ 1216.842885][ T9370] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1217.055926][ T8958] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1217.311978][T17429] loop9: detected capacity change from 0 to 512 [ 1218.110808][T17429] ext4: Unknown parameter 'dont_measure' [ 1221.050115][T17454] loop9: detected capacity change from 0 to 1024 [ 1225.331510][T17468] loop8: detected capacity change from 0 to 128 [ 1225.431159][T17468] EXT4-fs (loop8): Test dummy encryption mode enabled [ 1225.449227][T17468] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a806c018, mo2=0042] [ 1225.467476][T17473] loop3: detected capacity change from 0 to 1024 [ 1225.475524][T17473] EXT4-fs: Ignoring removed orlov option [ 1225.532621][T17473] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1225.599769][T17468] System zones: 1-3, 19-19, 35-36 [ 1225.645984][T17468] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1225.697390][T17468] ext4 filesystem being mounted at /293/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1226.754386][ T24] usb 10-1: new high-speed USB device number 42 using dummy_hcd [ 1226.972096][ T8958] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1226.986809][ T5632] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1227.056005][ T24] usb 10-1: Using ep0 maxpacket: 16 [ 1227.063618][ T24] usb 10-1: config index 0 descriptor too short (expected 65, got 36) [ 1227.072726][ T24] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1227.100522][ T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1227.112312][ T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1227.124405][ T24] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1227.138217][ T24] usb 10-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 1227.147370][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1227.183491][ T24] usb 10-1: config 0 descriptor?? [ 1227.196563][T17481] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1227.334631][ T24] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input29 [ 1228.675139][ T24] usb 10-1: USB disconnect, device number 42 [ 1228.711545][ T4970] pxrc 10-1:0.0: pxrc_open - usb_submit_urb failed, error: -19 [ 1228.904072][ T31] audit: type=1326 audit(1777788888.739:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17503 comm="syz.4.2346" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff89999cdd9 code=0x0 [ 1230.555026][T17524] loop9: detected capacity change from 0 to 256 [ 1231.299972][T17532] loop3: detected capacity change from 0 to 512 [ 1231.907224][T17532] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1231.956888][T17532] ext4 filesystem being mounted at /441/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1232.404364][T17540] usb usb5: usbfs: process 17540 (syz.3.2354) did not claim interface 0 before use [ 1233.452836][ T5632] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1235.486969][ T5767] usb 10-1: new high-speed USB device number 43 using dummy_hcd [ 1235.735221][ T5767] usb 10-1: config 0 has an invalid interface number: 50 but max is 0 [ 1235.813186][ T5767] usb 10-1: config 0 has no interface number 0 [ 1235.837219][ T5767] usb 10-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1235.903818][ T5767] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1235.931038][ T5767] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1235.962010][ T5767] usb 10-1: Product: syz [ 1235.977428][ T5767] usb 10-1: Manufacturer: syz [ 1235.993936][ T5767] usb 10-1: SerialNumber: syz [ 1236.039192][ T5767] usb 10-1: config 0 descriptor?? [ 1236.181230][ T5767] yurex 10-1:0.50: USB YUREX device now attached to Yurex #0 [ 1236.443799][ T5767] usb 10-1: USB disconnect, device number 43 [ 1236.604810][ T5767] yurex 10-1:0.50: USB YUREX #0 now disconnected [ 1238.051329][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.060887][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1240.075861][T17588] loop0: detected capacity change from 0 to 1024 [ 1240.122887][T17589] loop3: detected capacity change from 0 to 1024 [ 1240.584902][T17594] set match dimension is over the limit! [ 1243.624016][T17605] loop9: detected capacity change from 0 to 32768 [ 1243.635340][T17605] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.2374 (17605) [ 1243.817662][T17605] BTRFS info (device loop9): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1243.827873][T17605] BTRFS info (device loop9): using sha256 checksum algorithm [ 1245.273797][T17626] loop4: detected capacity change from 0 to 256 [ 1245.970790][T17605] BTRFS info (device loop9): enabling ssd optimizations [ 1245.977906][T17605] BTRFS info (device loop9): turning on async discard [ 1245.984769][T17605] BTRFS info (device loop9): enabling free space tree [ 1247.308820][T17647] loop3: detected capacity change from 0 to 32768 [ 1247.340740][T17647] BTRFS info: device /dev/loop3 (7:3) using temp-fsid 18e3e14a-1d66-424d-935a-9538a0c525ec [ 1247.350812][T17647] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2383 (17647) [ 1247.367701][T17647] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1247.378230][T17647] BTRFS info (device loop3): using sha256 checksum algorithm [ 1247.519112][T17647] BTRFS info (device loop3): enabling ssd optimizations [ 1247.526136][T17647] BTRFS info (device loop3): turning on async discard [ 1247.537055][T17647] BTRFS info (device loop3): enabling free space tree [ 1247.722770][T17668] vivid-007: disconnect [ 1248.058635][T17645] vivid-007: reconnect [ 1249.297280][ T9370] BTRFS info (device loop9): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1249.385735][ T5632] BTRFS info (device loop3): last unmount of filesystem 18e3e14a-1d66-424d-935a-9538a0c525ec [ 1249.837634][T13651] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 1250.036680][T13651] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1250.107634][ T5783] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1250.247946][ T5783] usb 4-1: device descriptor read/64, error -71 [ 1250.264941][T13651] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1250.273491][T13651] usb 7-1: Product: syz [ 1250.277709][T13651] usb 7-1: Manufacturer: syz [ 1250.282307][T13651] usb 7-1: SerialNumber: syz [ 1250.324969][T13651] usb 7-1: config 0 descriptor?? [ 1250.612201][T17696] loop9: detected capacity change from 0 to 512 [ 1250.770221][ T5783] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1250.795728][T17696] ext4: Unknown parameter 'dont_measure' [ 1251.487689][ T5783] usb 4-1: device descriptor read/64, error -71 [ 1251.633924][ T5783] usb usb4-port1: attempt power cycle [ 1252.239569][T13651] usb 7-1: Firmware: major: 9, minor: 0, hardware type: ATUSB (0) [ 1252.358682][T13651] usb 7-1: failed to fetch extended address, random address set [ 1252.409842][T16959] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 1252.411826][T13747] Bluetooth: hci0: command 0xfc11 tx timeout [ 1252.541016][ T5783] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1252.768639][ T5783] usb 4-1: device descriptor read/8, error -71 [ 1252.863558][T13651] usb 7-1: USB disconnect, device number 29 [ 1253.204541][ T5783] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1253.488268][ T5783] usb 4-1: device not accepting address 49, error -71 [ 1253.780792][ T5783] usb usb4-port1: unable to enumerate USB device [ 1254.572026][T17738] loop3: detected capacity change from 0 to 128 [ 1254.910762][T17738] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1255.443666][T17738] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a806c018, mo2=0042] [ 1255.597667][T17738] System zones: 1-3, 19-19, 35-36 [ 1255.737468][T17738] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1255.813672][T17738] ext4 filesystem being mounted at /450/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1256.826366][ T5632] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1258.216763][T17767] loop6: detected capacity change from 0 to 131072 [ 1258.585805][T17782] loop8: detected capacity change from 0 to 64 [ 1258.742286][T17767] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1258.767978][T17767] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 1258.792155][T17767] F2FS-fs (loop6): recover xattr in inode (7), error(0) [ 1258.799345][T17767] F2FS-fs (loop6): set inode (7) has corrupted xattr [ 1258.853241][T17782] minix: block size(59136) > page size(4096) not supported by filesystem [ 1259.730072][T17794] Cannot find set identified by id 0 to match [ 1260.388333][T17793] loop3: detected capacity change from 0 to 128 [ 1260.442083][T17793] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1260.519857][T17793] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a806c018, mo2=0042] [ 1260.603459][T17793] System zones: 1-3, 19-19, 35-36 [ 1260.664668][T17793] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1260.730684][T17793] ext4 filesystem being mounted at /452/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1261.874938][ T5632] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1262.375626][T17813] set match dimension is over the limit! [ 1263.190337][ T31] audit: type=1326 audit(1777788923.029:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17812 comm="syz.3.2424" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9b0559cdd9 code=0x0 [ 1269.436145][T17851] loop0: detected capacity change from 0 to 256 [ 1269.444563][T17854] loop6: detected capacity change from 0 to 512 [ 1269.639061][T17854] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1269.780105][T17854] ext4 filesystem being mounted at /435/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1270.911526][ T6055] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1271.467860][ T5754] usb 7-1: new full-speed USB device number 30 using dummy_hcd [ 1271.663166][ T5754] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1271.714494][ T5754] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1271.756428][ T5754] usb 7-1: Product: syz [ 1271.784348][ T5754] usb 7-1: Manufacturer: syz [ 1271.822682][ T5754] usb 7-1: SerialNumber: syz [ 1271.848532][ T5783] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1271.883366][ T5754] usb 7-1: config 0 descriptor?? [ 1272.174701][ T5783] usb 1-1: Using ep0 maxpacket: 16 [ 1272.201515][ T5754] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1272.209927][ T5783] usb 1-1: config index 0 descriptor too short (expected 65, got 36) [ 1272.209981][ T5783] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1272.210012][ T5783] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1272.210044][ T5783] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1272.210075][ T5783] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1272.210122][ T5783] usb 1-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 1272.210150][ T5783] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1272.249060][ T5783] usb 1-1: config 0 descriptor?? [ 1272.372990][T17874] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1273.022667][ T5783] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input30 [ 1273.104591][ T5783] usb 1-1: USB disconnect, device number 29 [ 1273.353802][T17250] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1273.367773][T17250] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1273.384314][T17250] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1273.398515][T17250] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1273.406332][T17250] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1273.649969][T17893] loop8: detected capacity change from 0 to 128 [ 1273.689338][T17893] EXT4-fs (loop8): Test dummy encryption mode enabled [ 1273.724653][T17893] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a806c018, mo2=0042] [ 1273.752826][T17893] System zones: 1-3, 19-19, 35-36 [ 1273.770339][T17893] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1273.804235][T17893] ext4 filesystem being mounted at /318/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1273.871504][T17899] loop0: detected capacity change from 0 to 64 [ 1274.040985][T17899] minix: block size(59136) > page size(4096) not supported by filesystem [ 1274.954975][ T5754] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1274.981348][ T5754] usb 7-1: USB disconnect, device number 30 [ 1275.021012][ T8958] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1275.401784][ T4115] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1275.469273][ T5783] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 1275.495768][T17250] Bluetooth: hci0: command tx timeout [ 1275.637612][ T5783] usb 9-1: Using ep0 maxpacket: 32 [ 1275.661770][ T5783] usb 9-1: config 0 has an invalid interface number: 8 but max is 0 [ 1275.692482][T17920] loop6: detected capacity change from 0 to 1024 [ 1275.698972][ T5783] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1275.744124][ T5783] usb 9-1: config 0 has no interface number 0 [ 1275.765336][ T5783] usb 9-1: config 0 interface 8 altsetting 248 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 1275.827209][ T5783] usb 9-1: config 0 interface 8 has no altsetting 0 [ 1275.914296][ T5783] usb 9-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 1275.966370][ T5783] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1276.029469][ T5783] usb 9-1: Product: syz [ 1276.106057][ T5783] usb 9-1: Manufacturer: syz [ 1276.135905][ T4115] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1276.170556][ T5783] usb 9-1: SerialNumber: syz [ 1276.485342][ T5783] usb 9-1: config 0 descriptor?? [ 1276.812710][ T5783] ath6kl: Failed to submit usb control message: -71 [ 1276.819528][T17886] lo speed is unknown, defaulting to 1000 [ 1276.825712][ T5783] ath6kl: unable to send the bmi data to the device: -71 [ 1276.848572][ T5783] ath6kl: Unable to send get target info: -71 [ 1276.916291][ T5783] ath6kl: Failed to init ath6kl core: -71 [ 1276.923089][ T5783] ath6kl_usb 9-1:0.8: probe with driver ath6kl_usb failed with error -71 [ 1276.987652][ T5783] usb 9-1: USB disconnect, device number 23 [ 1277.034584][ T4115] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1277.347613][ T5754] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1277.591947][T17250] Bluetooth: hci0: command tx timeout [ 1277.617836][ T5754] usb 4-1: Using ep0 maxpacket: 32 [ 1277.634548][ T5754] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1277.645743][ T5754] usb 4-1: config 0 has no interface number 0 [ 1278.176471][ T5754] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1278.212586][ T5754] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1278.286845][ T5754] usb 4-1: Product: syz [ 1278.311712][ T4115] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1278.331078][ T5754] usb 4-1: Manufacturer: syz [ 1278.346470][ T5754] usb 4-1: SerialNumber: syz [ 1278.376795][ T5754] usb 4-1: config 0 descriptor?? [ 1278.411958][ T5754] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1278.413596][T17940] loop6: detected capacity change from 0 to 1024 [ 1278.492170][T17933] tipc: Started in network mode [ 1278.519308][ T5754] usb 4-1: selecting invalid altsetting 1 [ 1278.549559][T17933] tipc: Node identity bed744ec4763, cluster identity 4711 [ 1278.556758][ T5754] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1278.693273][T17933] tipc: Enabled bearer , priority 0 [ 1278.761345][ T5754] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1278.922132][ T5754] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1279.037772][ T5754] usb 4-1: media controller created [ 1279.197386][T17936] syzkaller0: entered promiscuous mode [ 1279.320900][T17936] syzkaller0: entered allmulticast mode [ 1279.476072][ T5754] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1279.620889][T17927] tipc: Resetting bearer [ 1279.649535][T17250] Bluetooth: hci0: command tx timeout [ 1279.722507][T17950] loop8: detected capacity change from 0 to 1024 [ 1279.790043][T17927] tipc: Disabling bearer [ 1280.208586][T17926] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1280.937933][ T5754] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 1280.944986][ T5754] zl10353_read_register: readreg error (reg=127, ret==-32) [ 1280.972918][ T5624] tipc: Node number set to 4189340908 [ 1281.887870][T17250] Bluetooth: hci0: command tx timeout [ 1282.571259][ T5754] usb 4-1: USB disconnect, device number 50 [ 1282.745475][T17968] loop8: detected capacity change from 0 to 256 [ 1285.632192][T17984] loop8: detected capacity change from 0 to 512 [ 1285.752754][T17984] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1285.780012][ T4115] bridge_slave_1: left allmulticast mode [ 1285.790041][ T4115] bridge_slave_1: left promiscuous mode [ 1285.816888][ T4115] bridge0: port 2(bridge_slave_1) entered disabled state [ 1285.847419][T17984] ext4 filesystem being mounted at /323/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1286.005432][ T4115] bridge_slave_0: left allmulticast mode [ 1286.992131][T18002] usb usb5: usbfs: process 18002 (syz.8.2469) did not claim interface 0 before use [ 1287.023403][ T4115] bridge_slave_0: left promiscuous mode [ 1287.035544][ T4115] bridge0: port 1(bridge_slave_0) entered disabled state [ 1287.564128][ T8958] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1290.958966][T18031] loop6: detected capacity change from 0 to 512 [ 1291.045341][T18031] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1291.059418][T18031] ext4 filesystem being mounted at /444/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1291.389510][ T24] usb 9-1: new low-speed USB device number 24 using dummy_hcd [ 1292.391326][ T24] usb 9-1: config 0 has no interfaces? [ 1292.416165][T18049] loop0: detected capacity change from 0 to 1024 [ 1292.441035][ T24] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1292.481486][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1292.497103][ T4115] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1292.540511][ T24] usb 9-1: config 0 descriptor?? [ 1292.845199][ T6055] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1292.955085][ T4115] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1293.037065][ T4115] bond0 (unregistering): Released all slaves [ 1293.897199][ T5280] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1294.392286][T18065] loop0: detected capacity change from 0 to 40427 [ 1294.400849][T18065] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 1294.408682][T18065] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1294.450764][T18065] F2FS-fs (loop0): invalid crc value [ 1294.512161][T18065] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1294.528093][T18065] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1294.535194][T18065] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1294.983076][ T31] audit: type=1800 audit(1777788954.689:240): pid=18073 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2486" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 1296.646112][ T9075] syz-executor: attempt to access beyond end of device [ 1296.646112][ T9075] loop0: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 1296.699918][ T9075] CPU: 1 UID: 0 PID: 9075 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 1296.699958][ T9075] Tainted: [L]=SOFTLOCKUP [ 1296.699968][ T9075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1296.699985][ T9075] Call Trace: [ 1296.699996][ T9075] [ 1296.700006][ T9075] dump_stack_lvl+0xe8/0x150 [ 1296.700041][ T9075] f2fs_stop_checkpoint+0x3c7/0x590 [ 1296.700091][ T9075] f2fs_write_end_io+0x1274/0x1740 [ 1296.700150][ T9075] __submit_merged_bio+0x256/0x6a0 [ 1296.700186][ T9075] f2fs_submit_merged_write+0x284/0x390 [ 1296.700236][ T9075] ? __pfx_f2fs_submit_merged_write+0x10/0x10 [ 1296.700288][ T9075] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1296.700331][ T9075] f2fs_sync_node_pages+0x11fe/0x13c0 [ 1296.700382][ T9075] ? __pfx_f2fs_sync_node_pages+0x10/0x10 [ 1296.700449][ T9075] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1296.700489][ T9075] f2fs_write_checkpoint+0xeb8/0x26a0 [ 1296.700523][ T9075] ? __lock_acquire+0x6b5/0x2cf0 [ 1296.700590][ T9075] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 1296.700623][ T9075] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1296.700726][ T9075] kill_f2fs_super+0x314/0x730 [ 1296.700767][ T9075] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1296.700815][ T9075] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1296.700845][ T9075] ? lockdep_hardirqs_on+0x7a/0x110 [ 1296.700879][ T9075] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1296.700926][ T9075] deactivate_locked_super+0xbc/0x130 [ 1296.700964][ T9075] cleanup_mnt+0x437/0x4d0 [ 1296.701001][ T9075] ? _raw_spin_unlock_irq+0x23/0x50 [ 1296.701037][ T9075] task_work_run+0x1d9/0x270 [ 1296.701082][ T9075] ? __pfx_task_work_run+0x10/0x10 [ 1296.701131][ T9075] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1296.701159][ T9075] exit_to_user_mode_loop+0xed/0x480 [ 1296.701185][ T9075] ? rcu_is_watching+0x15/0xb0 [ 1296.701218][ T9075] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1296.701246][ T9075] do_syscall_64+0x33e/0xf80 [ 1296.701279][ T9075] ? trace_irq_disable+0x3b/0x140 [ 1296.701326][ T9075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1296.701351][ T9075] RIP: 0033:0x7fa7f819e017 [ 1296.701375][ T9075] Code: a2 c7 05 dc 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 1296.701396][ T9075] RSP: 002b:00007fff73ba0b08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1296.701422][ T9075] RAX: 0000000000000000 RBX: 00007fa7f8232120 RCX: 00007fa7f819e017 [ 1296.701440][ T9075] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff73ba0bc0 [ 1296.701457][ T9075] RBP: 00007fff73ba0bc0 R08: 00007fff73ba1bc0 R09: 00000000ffffffff [ 1296.701476][ T9075] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff73ba1c50 [ 1296.701493][ T9075] R13: 00007fa7f8232120 R14: 000000000013c7e2 R15: 00007fff73ba1c90 [ 1296.701534][ T9075] [ 1296.992322][ T9075] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 1297.557663][ T5754] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1297.879085][ T5754] usb 4-1: Using ep0 maxpacket: 16 [ 1297.953763][ T5754] usb 4-1: config index 0 descriptor too short (expected 65, got 36) [ 1298.060481][ T5754] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1298.215718][ T5754] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1298.379318][ T5754] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1298.415226][ T5754] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1298.428081][T18089] loop6: detected capacity change from 0 to 1024 [ 1298.492854][ T5754] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 1298.513631][ T5754] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1298.699187][ T5754] usb 4-1: config 0 descriptor?? [ 1298.832894][T18083] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1299.121065][ T5754] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input31 [ 1299.434795][T13652] usb 9-1: USB disconnect, device number 24 [ 1299.492063][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1299.500049][ T5754] usb 4-1: USB disconnect, device number 51 [ 1299.500049][ C0] pxrc 4-1:0.0: pxrc_usb_irq - usb_submit_urb failed with result: -19 [ 1299.518587][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1299.557902][ T4970] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -19 [ 1300.694489][T17886] bridge0: port 1(bridge_slave_0) entered blocking state [ 1300.735771][T17886] bridge0: port 1(bridge_slave_0) entered disabled state [ 1300.936976][T17886] bridge_slave_0: entered allmulticast mode [ 1300.945720][T17886] bridge_slave_0: entered promiscuous mode [ 1300.954685][T17886] bridge0: port 2(bridge_slave_1) entered blocking state [ 1300.962141][T17886] bridge0: port 2(bridge_slave_1) entered disabled state [ 1300.993080][T17886] bridge_slave_1: entered allmulticast mode [ 1301.327105][T17886] bridge_slave_1: entered promiscuous mode [ 1301.383483][ T4115] hsr_slave_0: left promiscuous mode [ 1301.429604][ T4115] hsr_slave_1: left promiscuous mode [ 1301.462235][ T4115] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1301.501093][ T4115] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1301.700952][ T4115] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1302.756830][ T4115] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1302.833379][ T4115] veth1_macvtap: left promiscuous mode [ 1302.839080][ T4115] veth0_macvtap: left promiscuous mode [ 1302.844724][ T4115] veth1_vlan: left promiscuous mode [ 1302.851286][ T4115] veth0_vlan: left promiscuous mode [ 1303.500563][T18136] loop6: detected capacity change from 0 to 1024 [ 1304.973178][ T4115] team0 (unregistering): Port device team_slave_1 removed [ 1305.325151][ T4115] team0 (unregistering): Port device team_slave_0 removed [ 1306.271596][T18147] loop6: detected capacity change from 0 to 16 [ 1306.316518][T18147] erofs: Unknown parameter '' [ 1306.629098][ T5280] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1306.657541][T17886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1306.719533][T18151] atomic_op ffff888032141998 conn xmit_atomic 0000000000000000 [ 1307.293822][T17886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1308.721241][T17886] team0: Port device team_slave_0 added [ 1308.914665][T18165] loop3: detected capacity change from 0 to 40427 [ 1308.930891][T18165] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 1308.938670][T18165] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1308.953249][T18165] F2FS-fs (loop3): invalid crc value [ 1309.036144][T17886] team0: Port device team_slave_1 added [ 1309.355267][T18165] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1309.461128][T18165] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1309.468319][T18165] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1309.883342][ T31] audit: type=1800 audit(1777788969.649:241): pid=18178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2510" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 1310.970941][T17886] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1311.003130][T17886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1311.220683][T18184] loop9: detected capacity change from 0 to 40427 [ 1311.260326][T18184] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 1311.268142][T18184] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 1311.281424][T18184] F2FS-fs (loop9): invalid crc value [ 1311.306143][ T49] kworker/u8:3: attempt to access beyond end of device [ 1311.306143][ T49] loop3: rw=1, sector=77824, nr_sectors = 4096 limit=40427 [ 1311.363731][T17886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1311.419061][T18184] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1311.443258][T18184] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 1311.450675][T18184] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 1311.493187][T17886] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1311.515081][T17886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1311.545332][ T49] kworker/u8:3: attempt to access beyond end of device [ 1311.545332][ T49] loop3: rw=1, sector=49152, nr_sectors = 4096 limit=40427 [ 1311.860893][ T31] audit: type=1800 audit(1777788971.619:242): pid=18193 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.2514" name="file1" dev="loop9" ino=10 res=0 errno=0 [ 1312.693629][ T49] kworker/u8:3: attempt to access beyond end of device [ 1312.693629][ T49] loop3: rw=1, sector=57344, nr_sectors = 1872 limit=40427 [ 1312.718749][T17886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1313.716316][ T5868] kworker/u8:11: attempt to access beyond end of device [ 1313.716316][ T5868] loop9: rw=1, sector=77824, nr_sectors = 4096 limit=40427 [ 1313.855498][T17886] hsr_slave_0: entered promiscuous mode [ 1313.888011][T17886] hsr_slave_1: entered promiscuous mode [ 1313.894382][T17886] debugfs: 'hsr0' already exists in 'hsr' [ 1313.900166][T17886] Cannot create hsr debugfs directory [ 1314.003829][ T5868] kworker/u8:11: attempt to access beyond end of device [ 1314.003829][ T5868] loop9: rw=1, sector=49152, nr_sectors = 4096 limit=40427 [ 1314.071859][T18209] syzkaller0: entered promiscuous mode [ 1314.082939][ T5868] kworker/u8:11: attempt to access beyond end of device [ 1314.082939][ T5868] loop9: rw=1, sector=57344, nr_sectors = 1760 limit=40427 [ 1314.096839][T18209] syzkaller0: entered allmulticast mode [ 1314.783330][ T5280] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1316.617949][T18241] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2525'. [ 1316.847621][T17250] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 1316.847960][T16959] Bluetooth: hci4: command 0xfc11 tx timeout [ 1317.041933][T18247] loop6: detected capacity change from 0 to 128 [ 1317.116356][T18247] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1317.190413][T18247] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a806c018, mo2=0042] [ 1317.203003][T18247] System zones: 1-3, 19-19, 35-36 [ 1317.353457][T18247] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1317.511028][T18247] ext4 filesystem being mounted at /457/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1318.998473][ T6055] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1319.300610][ T5280] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1319.368387][ T5783] usb 4-1: new low-speed USB device number 52 using dummy_hcd [ 1319.422663][T18276] loop6: detected capacity change from 0 to 512 [ 1319.518360][T18276] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1319.531555][T18276] ext4 filesystem being mounted at /458/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1319.899747][T18281] usb usb5: usbfs: process 18281 (syz.6.2531) did not claim interface 0 before use [ 1319.911333][ T5783] usb 4-1: config 0 has no interfaces? [ 1319.923268][ T5783] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1319.947955][ T5783] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1319.995323][ T5783] usb 4-1: config 0 descriptor?? [ 1320.304374][ T6055] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1320.985027][T17886] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1321.521092][T17886] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1321.534304][T17886] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1321.589577][T17886] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1321.624640][T17886] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1321.782435][T17886] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1322.218081][T17886] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1322.322425][T17886] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1322.336013][ T10] usb 4-1: USB disconnect, device number 52 [ 1323.087089][T17886] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1323.237008][T17886] 8021q: adding VLAN 0 to HW filter on device team0 [ 1323.969547][ T2902] bridge0: port 1(bridge_slave_0) entered blocking state [ 1323.976703][ T2902] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1324.037071][ T2902] bridge0: port 2(bridge_slave_1) entered blocking state [ 1324.044242][ T2902] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1324.052701][T18326] binder: 18325:18326 ioctl 4018620d 0 returned -22 [ 1324.553186][T18331] loop9: detected capacity change from 0 to 32768 [ 1324.606966][T18331] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.2541 (18331) [ 1324.631452][T18331] BTRFS info (device loop9): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1324.643384][T18331] BTRFS info (device loop9): using sha256 checksum algorithm [ 1324.775437][T18331] BTRFS info (device loop9): enabling ssd optimizations [ 1324.783812][T18331] BTRFS info (device loop9): turning on async discard [ 1324.790701][T18331] BTRFS info (device loop9): enabling free space tree [ 1325.500567][T18354] vivid-007: disconnect [ 1325.823723][T18329] vivid-007: reconnect [ 1326.900222][ T9370] BTRFS info (device loop9): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1328.212191][T18379] loop8: detected capacity change from 0 to 128 [ 1328.285993][T18379] EXT4-fs (loop8): Test dummy encryption mode enabled [ 1328.385087][T18379] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a806c018, mo2=0042] [ 1328.504572][T18379] System zones: 1-3, 19-19, 35-36 [ 1328.559843][T18379] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1328.587668][T18379] ext4 filesystem being mounted at /336/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1328.784859][ T8958] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1329.035008][T18395] loop3: detected capacity change from 0 to 1024 [ 1330.823603][T18409] loop0: detected capacity change from 0 to 32768 [ 1330.846152][T18409] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2555 (18409) [ 1330.863566][T18409] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1330.873752][T18409] BTRFS info (device loop0): using sha256 checksum algorithm [ 1331.014060][T18409] BTRFS info (device loop0): enabling ssd optimizations [ 1331.021079][T18409] BTRFS info (device loop0): turning on async discard [ 1331.027862][T18409] BTRFS info (device loop0): enabling free space tree [ 1331.086153][T18430] loop3: detected capacity change from 0 to 1024 [ 1331.235896][T18431] vivid-007: disconnect [ 1331.518734][T18408] vivid-007: reconnect [ 1332.270979][ T9075] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1333.000070][T18440] loop8: detected capacity change from 0 to 32768 [ 1333.008363][T18440] BTRFS info: device /dev/loop8 (7:8) using temp-fsid 58aeea93-af50-4265-9a5a-b527e1a6fb1d [ 1333.018625][T18440] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.2558 (18440) [ 1333.037555][T18440] BTRFS info (device loop8): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1333.047697][T18440] BTRFS info (device loop8): using sha256 checksum algorithm [ 1333.323844][T18440] BTRFS info (device loop8): enabling ssd optimizations [ 1333.330944][T18440] BTRFS info (device loop8): turning on async discard [ 1333.338060][T18440] BTRFS info (device loop8): enabling free space tree [ 1333.787253][T18467] vivid-007: disconnect [ 1334.176665][T18439] vivid-007: reconnect [ 1334.575856][T16959] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1334.596864][T16959] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1334.637508][T16959] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1334.653803][T16959] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1334.663334][T16959] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1335.268697][T18479] loop0: detected capacity change from 0 to 32768 [ 1335.279726][T18479] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2561 (18479) [ 1335.304954][T18479] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1335.315238][T18479] BTRFS info (device loop0): using sha256 checksum algorithm [ 1335.539355][T18479] BTRFS info (device loop0): enabling ssd optimizations [ 1335.546418][T18479] BTRFS info (device loop0): turning on async discard [ 1335.553264][T18479] BTRFS info (device loop0): enabling free space tree [ 1335.648350][T18500] vivid-007: disconnect [ 1335.665237][T18495] loop6: detected capacity change from 0 to 128 [ 1335.679865][ T8958] BTRFS info (device loop8): last unmount of filesystem 58aeea93-af50-4265-9a5a-b527e1a6fb1d [ 1335.731954][T18477] vivid-007: reconnect [ 1335.737913][T18495] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1335.811848][T18495] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a806c018, mo2=0042] [ 1335.873822][T18495] System zones: 1-3, 19-19, 35-36 [ 1335.907689][T18495] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1335.982879][T18495] ext4 filesystem being mounted at /461/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1336.102330][ T9075] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1336.773440][T16959] Bluetooth: hci4: command tx timeout [ 1338.868038][T16959] Bluetooth: hci4: command tx timeout [ 1339.514535][ T31] audit: type=1326 audit(1777788999.349:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18532 comm="syz.9.2568" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd3fd79cdd9 code=0x0 [ 1339.541349][T18534] loop0: detected capacity change from 0 to 512 [ 1339.644342][T18534] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1339.685845][T18534] ext4 filesystem being mounted at /343/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1340.927604][T16959] Bluetooth: hci4: command tx timeout [ 1341.736758][ T31] audit: type=1800 audit(1777789001.569:244): pid=18534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2569" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 1341.829357][ T31] audit: type=1800 audit(1777789001.649:245): pid=18548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2569" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 1341.923141][ T31] audit: type=1800 audit(1777789001.689:246): pid=18550 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2569" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 1342.027557][ T9075] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1343.007740][T17250] Bluetooth: hci4: command tx timeout [ 1343.477935][ T5767] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 1343.671053][ T5767] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1343.704756][ T5767] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1343.713857][T18469] lo speed is unknown, defaulting to 1000 [ 1343.753957][ T5767] usb 1-1: Product: syz [ 1343.778809][ T5767] usb 1-1: Manufacturer: syz [ 1343.801647][ T5767] usb 1-1: SerialNumber: syz [ 1343.836340][ T5767] usb 1-1: config 0 descriptor?? [ 1344.062835][ T5767] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1344.184277][ T6055] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1344.627702][T17250] Bluetooth: hci0: command 0xfc11 tx timeout [ 1344.657659][T16959] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 1345.990612][ T5767] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1346.004773][ T5767] usb 1-1: USB disconnect, device number 30 [ 1346.264269][T18592] loop9: detected capacity change from 0 to 32768 [ 1346.278410][T18592] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.2576 (18592) [ 1346.294268][T18592] BTRFS info (device loop9): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1346.304465][T18592] BTRFS info (device loop9): using sha256 checksum algorithm [ 1346.444130][T18592] BTRFS info (device loop9): enabling ssd optimizations [ 1346.451651][T18592] BTRFS info (device loop9): turning on async discard [ 1346.458493][T18592] BTRFS info (device loop9): enabling free space tree [ 1346.664335][T18611] vivid-007: disconnect [ 1347.046294][T18591] vivid-007: reconnect [ 1348.266826][ T6712] bridge_slave_1: left allmulticast mode [ 1348.278367][ T6712] bridge_slave_1: left promiscuous mode [ 1348.398551][ T6712] bridge0: port 2(bridge_slave_1) entered disabled state [ 1348.497128][ T6712] bridge_slave_0: left allmulticast mode [ 1348.997592][ T6712] bridge_slave_0: left promiscuous mode [ 1349.032733][ T6712] bridge0: port 1(bridge_slave_0) entered disabled state [ 1349.706416][ T9370] BTRFS info (device loop9): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1350.398139][ T10] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 1350.596874][ T10] usb 9-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1350.611591][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1350.694474][ T10] usb 9-1: Product: syz [ 1350.767763][ T10] usb 9-1: Manufacturer: syz [ 1350.780404][ T10] usb 9-1: SerialNumber: syz [ 1350.796199][ T10] usb 9-1: config 0 descriptor?? [ 1351.166357][T18642] loop0: detected capacity change from 0 to 1024 [ 1351.562335][ T10] usb 9-1: Firmware: major: 32, minor: 174, hardware type: ATUSB (0) [ 1351.910945][ T10] usb 9-1: failed to fetch extended address, random address set [ 1352.142918][ T6712] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1352.185121][ T6712] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1352.274714][ T6712] bond0 (unregistering): Released all slaves [ 1352.327643][ T24] usb 10-1: new high-speed USB device number 44 using dummy_hcd [ 1352.547685][ T24] usb 10-1: Using ep0 maxpacket: 32 [ 1352.596929][ T10] usb 9-1: USB disconnect, device number 25 [ 1352.610038][ T24] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1352.797872][ T24] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1352.812539][ T24] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1352.821731][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1352.886355][ T24] usb 10-1: config 0 descriptor?? [ 1353.152555][ T24] hub 10-1:0.0: bad descriptor, ignoring hub [ 1353.152786][T18660] loop8: detected capacity change from 0 to 32768 [ 1353.168697][T18660] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.2586 (18660) [ 1353.213154][ T24] hub 10-1:0.0: probe with driver hub failed with error -5 [ 1353.221314][T18660] BTRFS info (device loop8): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1353.231857][T18660] BTRFS info (device loop8): using sha256 checksum algorithm [ 1353.296601][T18660] BTRFS info (device loop8): enabling ssd optimizations [ 1353.306438][T18660] BTRFS info (device loop8): turning on async discard [ 1353.311851][ T24] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 1353.313277][T18660] BTRFS info (device loop8): enabling free space tree [ 1353.791068][ T6712] hsr_slave_0: left promiscuous mode [ 1353.850782][ T6712] hsr_slave_1: left promiscuous mode [ 1353.857364][ T6712] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1353.924248][ T6712] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1353.974996][T18685] loop3: detected capacity change from 0 to 1024 [ 1353.979761][ T8958] BTRFS info (device loop8): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1354.228294][ T24] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1355.161488][ T24] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1355.196638][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1355.214412][ T24] usb 7-1: Product: syz [ 1355.257534][ T24] usb 7-1: Manufacturer: syz [ 1355.327864][ T5624] usb 10-1: USB disconnect, device number 44 [ 1355.370319][T18696] loop9: detected capacity change from 0 to 16 [ 1355.384155][ T24] usb 7-1: SerialNumber: syz [ 1355.409281][T18696] erofs: Unknown parameter '' [ 1355.410894][ T24] usb 7-1: config 0 descriptor?? [ 1356.105938][T18706] atomic_op ffff888053440998 conn xmit_atomic 0000000000000000 [ 1356.737365][ T24] usb 7-1: Firmware version (0.0) predates our first public release. [ 1356.748993][ T24] usb 7-1: Please update to version 0.2 or newer [ 1358.942235][ T6712] team0 (unregistering): Port device team_slave_1 removed [ 1359.228483][ T6712] team0 (unregistering): Port device team_slave_0 removed [ 1359.556902][T18733] loop8: detected capacity change from 0 to 16 [ 1359.573555][T18733] erofs: Unknown parameter '' [ 1359.896478][T18735] atomic_op ffff888034287198 conn xmit_atomic 0000000000000000 [ 1360.627201][ T24] usb 7-1: USB disconnect, device number 31 [ 1360.711661][T18469] bridge0: port 1(bridge_slave_0) entered blocking state [ 1360.754624][T18469] bridge0: port 1(bridge_slave_0) entered disabled state [ 1360.794729][T18469] bridge_slave_0: entered allmulticast mode [ 1360.840434][T18469] bridge_slave_0: entered promiscuous mode [ 1360.999819][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.069818][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.278369][T18469] bridge0: port 2(bridge_slave_1) entered blocking state [ 1361.309163][T18469] bridge0: port 2(bridge_slave_1) entered disabled state [ 1361.319804][T18469] bridge_slave_1: entered allmulticast mode [ 1361.392575][ T10] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1361.437295][T18469] bridge_slave_1: entered promiscuous mode [ 1361.616272][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 1361.652777][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1361.739647][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1361.776717][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1361.861730][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1362.306508][ T10] usb 4-1: config 0 descriptor?? [ 1362.323929][ T10] hub 4-1:0.0: bad descriptor, ignoring hub [ 1362.367508][ T10] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1362.484393][ T10] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1362.542096][T18469] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1362.563766][T18469] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1362.724669][T18469] team0: Port device team_slave_0 added [ 1362.778431][T18469] team0: Port device team_slave_1 added [ 1362.977397][T18469] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1363.012007][T18469] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1363.072140][T18469] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1363.133994][T18469] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1363.160088][T18469] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1363.249033][T18469] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1363.561431][T18469] hsr_slave_0: entered promiscuous mode [ 1363.600686][T18469] hsr_slave_1: entered promiscuous mode [ 1363.630125][T18469] debugfs: 'hsr0' already exists in 'hsr' [ 1363.819797][T18469] Cannot create hsr debugfs directory [ 1364.948255][ T5624] usb 4-1: USB disconnect, device number 53 [ 1365.288287][ T5783] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1365.681553][T18784] overlayfs: failed to resolve './file1': -2 [ 1365.959026][ T31] audit: type=1804 audit(1777789025.759:247): pid=18788 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.2609" name="/newroot/383/file0" dev="tmpfs" ino=2045 res=1 errno=0 [ 1366.060171][ T5783] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1366.136461][ T5783] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1366.240292][ T5783] usb 4-1: Product: syz [ 1366.284907][ T5783] usb 4-1: Manufacturer: syz [ 1366.322654][ T5783] usb 4-1: SerialNumber: syz [ 1366.876545][ T5783] usb 4-1: config 0 descriptor?? [ 1367.900360][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 1367.920470][ T5783] usb 4-1: Firmware version (0.0) predates our first public release. [ 1368.065431][ T5783] usb 4-1: Please update to version 0.2 or newer [ 1368.815989][ T5783] usb 4-1: USB disconnect, device number 54 [ 1369.475235][T18816] loop8: detected capacity change from 0 to 40427 [ 1369.483317][T18816] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 1369.491355][T18816] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 1369.595931][T18816] F2FS-fs (loop8): invalid crc value [ 1369.692055][T18816] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1369.731935][T18816] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 1369.739445][T18816] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 1370.156661][ T31] audit: type=1800 audit(1777789029.969:248): pid=18828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2615" name="file1" dev="loop8" ino=10 res=0 errno=0 [ 1371.368291][ T24] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1371.661141][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 1371.831413][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1372.007331][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1372.179053][ T24] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1372.253809][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1372.302285][ T24] usb 1-1: config 0 descriptor?? [ 1372.320517][ T24] hub 1-1:0.0: bad descriptor, ignoring hub [ 1372.326492][ T24] hub 1-1:0.0: probe with driver hub failed with error -5 [ 1372.345422][ T24] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1372.444183][T17632] kworker/u8:5: attempt to access beyond end of device [ 1372.444183][T17632] loop8: rw=1, sector=77824, nr_sectors = 4096 limit=40427 [ 1372.675300][T17632] kworker/u8:5: attempt to access beyond end of device [ 1372.675300][T17632] loop8: rw=1, sector=49152, nr_sectors = 4096 limit=40427 [ 1372.746896][T17632] kworker/u8:5: attempt to access beyond end of device [ 1372.746896][T17632] loop8: rw=1, sector=57344, nr_sectors = 2136 limit=40427 [ 1373.073424][T18469] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1373.109117][T18469] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1373.125651][T18469] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1373.149602][ T5783] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1373.161358][T18469] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1373.321870][T18469] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1373.728843][ T5783] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1373.770297][ T5783] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1373.836385][ T5783] usb 4-1: Product: syz [ 1373.913979][ T5783] usb 4-1: Manufacturer: syz [ 1373.932331][T18469] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1373.949627][ T5783] usb 4-1: SerialNumber: syz [ 1373.982024][T18469] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1373.994684][ T5783] usb 4-1: config 0 descriptor?? [ 1374.017831][ T5624] usb 1-1: USB disconnect, device number 31 [ 1374.055032][T18469] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1374.703734][ T10] usb 10-1: new high-speed USB device number 45 using dummy_hcd [ 1374.881215][ T10] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1374.893547][ T10] usb 10-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1374.940309][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1375.200813][ T5783] usb 4-1: Firmware version (0.0) predates our first public release. [ 1375.505580][ T5783] usb 4-1: Please update to version 0.2 or newer [ 1375.534449][ T10] usb 10-1: config 0 descriptor?? [ 1375.613154][ T5783] usb 4-1: USB disconnect, device number 55 [ 1376.268847][ T10] (null): keene_cmd_main failed (-110) [ 1376.318123][ T10] video4linux radio48: keene_cmd_main failed (-32) [ 1376.326383][ T10] radio-keene 10-1:0.0: V4L2 device registered as radio48 [ 1376.409842][T18469] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1376.438058][ T24] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1376.470223][T18893] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2620'. [ 1376.558706][T18469] 8021q: adding VLAN 0 to HW filter on device team0 [ 1376.574414][ T10] usb 10-1: USB disconnect, device number 45 [ 1376.639456][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1376.690638][ T24] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1376.734773][ T1044] bridge0: port 1(bridge_slave_0) entered blocking state [ 1376.742038][ T1044] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1377.156095][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1377.205138][ T24] usb 1-1: config 0 descriptor?? [ 1377.297291][ T1044] bridge0: port 2(bridge_slave_1) entered blocking state [ 1377.304523][ T1044] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1378.402234][ T24] (null): keene_cmd_main failed (-110) [ 1378.525007][ T24] video4linux radio48: keene_cmd_main failed (-32) [ 1378.949802][ T24] radio-keene 1-1:0.0: V4L2 device registered as radio48 [ 1379.265542][ T5767] usb 1-1: USB disconnect, device number 32 [ 1380.115962][T18920] loop6: detected capacity change from 0 to 32768 [ 1380.123916][T18920] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.2636 (18920) [ 1380.144736][T18920] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1380.154928][T18920] BTRFS info (device loop6): using sha256 checksum algorithm [ 1380.289387][T18920] BTRFS info (device loop6): enabling ssd optimizations [ 1380.296421][T18920] BTRFS info (device loop6): turning on async discard [ 1380.303533][T18920] BTRFS info (device loop6): enabling free space tree [ 1380.598969][T18941] vivid-007: disconnect [ 1380.931187][T18918] vivid-007: reconnect [ 1381.135486][T18947] loop3: detected capacity change from 0 to 1024 [ 1381.377782][ T5754] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1381.537549][ T5754] usb 1-1: Using ep0 maxpacket: 32 [ 1382.085628][ T5754] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1382.226363][ T5754] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1382.239888][ T5754] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1382.249276][ T5754] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1382.260822][ T5754] usb 1-1: config 0 descriptor?? [ 1382.291256][ T5754] hub 1-1:0.0: bad descriptor, ignoring hub [ 1382.297229][ T5754] hub 1-1:0.0: probe with driver hub failed with error -5 [ 1382.319621][ T5754] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1382.511507][ T6055] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1384.500113][T18984] loop8: detected capacity change from 0 to 32768 [ 1384.567059][T18984] XFS (loop8): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1384.613308][T18984] XFS (loop8): Ending clean mount [ 1384.622069][T18984] XFS (loop8): Quotacheck needed: Please wait. [ 1384.699524][T16697] usb 1-1: USB disconnect, device number 33 [ 1384.933281][T18469] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1385.035242][T18984] XFS (loop8): Quotacheck: Done. [ 1385.277262][ T31] audit: type=1800 audit(1777789045.089:249): pid=19002 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2645" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop8" ino=4429 res=0 errno=0 [ 1385.728183][ T8958] XFS (loop8): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1386.898872][T19016] loop3: detected capacity change from 0 to 1024 [ 1387.796722][T18469] veth0_vlan: entered promiscuous mode [ 1387.951642][T18469] veth1_vlan: entered promiscuous mode [ 1388.139812][T18469] veth0_macvtap: entered promiscuous mode [ 1388.223007][T18469] veth1_macvtap: entered promiscuous mode [ 1388.432395][T18469] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1388.453392][ T10] usb 9-1: new full-speed USB device number 26 using dummy_hcd [ 1388.543424][T18469] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1388.626776][ T6712] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1388.665476][ T6712] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1388.675386][ T10] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1388.731886][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1388.783029][ T10] usb 9-1: Product: syz [ 1388.785298][ T6712] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1388.811113][ T10] usb 9-1: Manufacturer: syz [ 1388.855611][ T10] usb 9-1: SerialNumber: syz [ 1388.886942][ T6712] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1388.897723][ T10] usb 9-1: config 0 descriptor?? [ 1389.166477][ T10] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1389.333499][ T5868] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1389.376649][ T5868] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1389.552961][ T6712] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1389.601930][ T6712] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1389.817618][T13651] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 1390.097835][T13651] usb 1-1: Using ep0 maxpacket: 16 [ 1390.251082][T13651] usb 1-1: config index 0 descriptor too short (expected 65, got 36) [ 1390.268567][T13651] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1390.283496][T13651] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1390.296109][T13651] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1390.320753][T13651] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1390.395795][T13651] usb 1-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 1390.410918][T13651] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1390.472922][T13651] usb 1-1: config 0 descriptor?? [ 1390.482374][T19044] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1390.573067][T13651] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input32 [ 1391.053113][ T10] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1391.074062][ T10] usb 9-1: USB disconnect, device number 26 [ 1391.083043][ T5754] usb 1-1: USB disconnect, device number 34 [ 1391.224645][ T5858] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -19 [ 1393.124262][T19067] capability: warning: `syz.8.2659' uses 32-bit capabilities (legacy support in use) [ 1393.906569][T19074] loop0: detected capacity change from 0 to 512 [ 1394.115252][T19074] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1394.253515][T19074] ext4 filesystem being mounted at /359/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1394.755373][T19086] usb usb5: usbfs: process 19086 (syz.0.2660) did not claim interface 0 before use [ 1395.383783][ T9075] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1395.680464][T19094] loop8: detected capacity change from 0 to 128 [ 1397.348039][T19128] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2672'. [ 1397.430792][T19128] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2672'. [ 1398.693008][T19154] netlink: 'syz.0.2680': attribute type 4 has an invalid length. [ 1398.741609][ T5624] lo speed is unknown, defaulting to 1000 [ 1398.773497][ T5624] syz2: Port: 1 Link ACTIVE [ 1400.028925][T16959] Bluetooth: hci4: link tx timeout [ 1400.037862][T16959] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1400.184441][T19186] loop2: detected capacity change from 0 to 7 [ 1400.252886][T19186] Dev loop2: unable to read RDB block 7 [ 1400.252947][T19186] loop2: AHDI p1 p2 p3 [ 1400.252978][T19186] loop2: partition table partially beyond EOD, truncated [ 1400.253209][T19186] loop2: p1 start 1818582900 is beyond EOD, truncated [ 1400.253235][T19186] loop2: p3 start 335544320 is beyond EOD, truncated [ 1400.655653][T19197] netlink: 'syz.8.2692': attribute type 2 has an invalid length. [ 1400.697408][T19197] tipc: Started in network mode [ 1400.727260][T19197] tipc: Node identity 8, cluster identity 4711 [ 1400.761398][T19197] tipc: Node number set to 8 [ 1401.192851][ T31] audit: type=1326 audit(1777789061.029:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19209 comm="syz.5.2697" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb99839cdd9 code=0x7ffc0000 [ 1401.341921][ T31] audit: type=1326 audit(1777789061.069:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19209 comm="syz.5.2697" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb99839cdd9 code=0x7ffc0000 [ 1401.468006][T19223] netlink: 7 bytes leftover after parsing attributes in process `syz.9.2701'. [ 1401.483797][ T31] audit: type=1326 audit(1777789061.069:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19209 comm="syz.5.2697" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb99839cdd9 code=0x7ffc0000 [ 1401.526780][T19223] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2701'. [ 1401.556995][T19223] netlink: 7 bytes leftover after parsing attributes in process `syz.9.2701'. [ 1401.664550][ T31] audit: type=1326 audit(1777789061.069:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19209 comm="syz.5.2697" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb99839cdd9 code=0x7ffc0000 [ 1401.807229][ T31] audit: type=1326 audit(1777789061.069:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19209 comm="syz.5.2697" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fb99839cdd9 code=0x7ffc0000 [ 1401.974567][ T31] audit: type=1326 audit(1777789061.069:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19209 comm="syz.5.2697" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb99839cdd9 code=0x7ffc0000 [ 1402.131057][T17250] Bluetooth: hci4: command 0x0406 tx timeout [ 1402.155400][ T31] audit: type=1326 audit(1777789061.069:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19209 comm="syz.5.2697" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb99839cdd9 code=0x7ffc0000 [ 1402.366930][ T31] audit: type=1326 audit(1777789061.069:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19209 comm="syz.5.2697" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fb99839cdd9 code=0x7ffc0000 [ 1402.449860][ T31] audit: type=1326 audit(1777789061.069:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19209 comm="syz.5.2697" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb99839cdd9 code=0x7ffc0000 [ 1402.513549][ T31] audit: type=1326 audit(1777789061.079:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19209 comm="syz.5.2697" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7fb99839cdd9 code=0x7ffc0000 [ 1402.602669][T19233] hub 9-0:1.0: USB hub found [ 1402.624657][T19233] hub 9-0:1.0: 1 port detected [ 1403.109053][T19258] IPv6: NLM_F_CREATE should be specified when creating new route [ 1403.796047][T19275] netlink: 'syz.0.2714': attribute type 3 has an invalid length. [ 1405.062368][ T5768] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1405.247734][ T5768] usb 4-1: Using ep0 maxpacket: 32 [ 1405.276150][ T5768] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1405.336348][ T5768] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1405.395146][ T5768] usb 4-1: config 0 descriptor?? [ 1405.663191][ T5768] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 1405.759003][ T5768] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1405.880221][ T5768] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 1405.925988][ T5768] usb 4-1: media controller created [ 1406.040706][ T5768] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1406.436448][ T5768] DVB: Unable to find symbol dib7000p_attach() [ 1406.474360][ T5768] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 1406.814028][T19324] binder: 19318:19324 ioctl c0306201 0 returned -14 [ 1406.829953][T19324] binder: 19318:19324 ioctl c0306201 0 returned -14 [ 1407.807826][ T5768] rc_core: IR keymap rc-dib0700-rc5 not found [ 1407.840116][ T5768] Registered IR keymap rc-empty [ 1407.889562][ T5768] dvb-usb: could not initialize remote control. [ 1407.965907][ T5768] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 1408.040364][ T5768] usb 4-1: USB disconnect, device number 56 [ 1408.337703][ T5768] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 1408.976473][T19354] syzkaller1: entered promiscuous mode [ 1409.010100][T19354] syzkaller1: entered allmulticast mode [ 1409.103206][T19355] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2733'. [ 1410.498022][T19405] syzkaller1: entered promiscuous mode [ 1410.518719][T19405] syzkaller1: entered allmulticast mode [ 1412.358091][ T5783] usb 4-1: new full-speed USB device number 57 using dummy_hcd [ 1412.533883][ T5783] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1412.583772][ T5783] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1412.626423][ T5783] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1412.661708][T19447] misc userio: No port type given on /dev/userio [ 1412.662809][ T5783] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1412.748944][ T5783] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1412.801636][ T5783] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1412.823777][ T5783] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1412.864368][ T5783] usb 4-1: Product: syz [ 1412.886061][ T5783] usb 4-1: Manufacturer: syz [ 1412.908282][ T5783] usb 4-1: SerialNumber: syz [ 1412.942421][ T5783] usb 4-1: config 0 descriptor?? [ 1412.949725][T19455] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2761'. [ 1413.188924][ T5783] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 1413.231806][ T5783] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -5 [ 1413.383552][T19464] kAFS: unable to lookup cell '' [ 1413.861164][T19457] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2759'. [ 1413.876774][T19473] mmap: syz.0.2760 (19473) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1413.892663][T19457] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2759'. [ 1413.918360][T19459] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1413.926021][T19459] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1413.950858][T19475] snd_aloop snd_aloop.0: control 0:0:0:syz0:0 is already present [ 1413.979355][ T5783] usb 4-1: USB disconnect, device number 57 [ 1414.183846][T19459] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1414.203145][T19459] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1415.044598][ T5768] usb 10-1: new high-speed USB device number 46 using dummy_hcd [ 1415.238402][ T5768] usb 10-1: Using ep0 maxpacket: 32 [ 1415.269666][ T5768] usb 10-1: config 0 has an invalid descriptor of length 140, skipping remainder of the config [ 1415.336035][ T5768] usb 10-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1415.392020][ T5768] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1415.427016][ T5768] usb 10-1: Product: syz [ 1415.451662][ T5768] usb 10-1: Manufacturer: syz [ 1415.480092][ T5768] usb 10-1: SerialNumber: syz [ 1415.522634][ T5768] usb 10-1: config 0 descriptor?? [ 1415.578834][ T5768] cdc_ether 10-1:0.0: skipping garbage [ 1415.595294][ T5768] usb 10-1: No union descriptors [ 1415.615996][ T5768] usb 10-1: unsupported MDLM descriptors [ 1415.789879][ T5768] usb 10-1: USB disconnect, device number 46 [ 1415.893413][T19529] tipc: Started in network mode [ 1415.927985][T19529] tipc: Node identity 7664f46d908c, cluster identity 4711 [ 1415.962826][T19529] tipc: Enabled bearer , priority 0 [ 1416.020442][T19529] syzkaller0: entered promiscuous mode [ 1416.077785][T19529] syzkaller0: entered allmulticast mode [ 1416.116768][T19536] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2784'. [ 1416.154524][T19536] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2784'. [ 1416.239823][T19529] tipc: Resetting bearer [ 1416.496813][T19529] tipc: Disabling bearer [ 1416.533497][T19534] libceph: resolve '0..' (ret=-3): failed [ 1417.501513][T19573] netlink: 292 bytes leftover after parsing attributes in process `syz.9.2796'. [ 1417.689157][ T10] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 1417.906945][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 1417.950681][ T10] usb 1-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 1417.998696][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1418.045330][ T10] usb 1-1: Product: syz [ 1418.064049][ T10] usb 1-1: Manufacturer: syz [ 1418.084518][ T10] usb 1-1: SerialNumber: syz [ 1418.113862][ T10] usb 1-1: config 0 descriptor?? [ 1418.126049][T19589] netlink: 60 bytes leftover after parsing attributes in process `syz.9.2803'. [ 1418.173665][ T10] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 1418.217216][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 1418.325972][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1418.365664][T19571] dvb-usb: bulk message failed: -22 (3/0) [ 1418.384150][ T10] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 1418.425436][ T10] usb 1-1: media controller created [ 1418.506839][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1418.724461][ T10] usb 1-1: selecting invalid altsetting 7 [ 1418.800141][ T10] cxusb: set interface failed [ 1418.829357][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1419.116980][ T10] DVB: Unable to find symbol lgdt330x_attach() [ 1419.225740][ T10] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 1419.630737][ T10] rc_core: IR keymap rc-dvico-portable not found [ 1419.655713][ T10] Registered IR keymap rc-empty [ 1419.742906][ T10] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 1419.806886][ T10] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input34 [ 1419.882812][ T10] dvb-usb: schedule remote query interval to 100 msecs. [ 1419.923190][ T10] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 1419.983930][ T10] usb 1-1: USB disconnect, device number 35 [ 1420.040080][ T5783] dvb-usb: bulk message failed: -22 (1/0) [ 1420.537732][T16697] usb 10-1: new high-speed USB device number 47 using dummy_hcd [ 1420.563245][ T10] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 1420.627912][T19647] fuse: Unknown parameter '' [ 1420.774530][T16697] usb 10-1: Using ep0 maxpacket: 8 [ 1420.808451][T16697] usb 10-1: config 0 has no interfaces? [ 1420.833340][T19653] erspan1: entered allmulticast mode [ 1420.879523][T16697] usb 10-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 1420.947354][T16697] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 1420.976533][T16697] usb 10-1: Product: syz [ 1420.995301][T16697] usb 10-1: Manufacturer: syz [ 1421.023919][T16697] usb 10-1: SerialNumber: syz [ 1421.089717][T16697] usb 10-1: config 0 descriptor?? [ 1422.082326][T13651] usb 10-1: USB disconnect, device number 47 [ 1422.370353][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.380598][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1422.423312][T19696] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2829'. [ 1424.042374][T19728] binder: 19718:19728 ioctl c0306201 0 returned -14 [ 1426.368254][ T5624] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1426.589289][ T5624] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1426.631929][ T5624] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1426.676279][ T5624] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1426.695983][ T5624] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1426.774653][ T5624] usb 6-1: config 0 descriptor?? [ 1427.665428][T19786] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2855'. [ 1427.847782][T19754] Invalid logical block size (3595) [ 1427.948088][T19786] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2855'. [ 1428.162320][T19786] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2855'. [ 1428.187860][ T5783] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 1428.668857][T19722] syz.9.2835 (19722): drop_caches: 2 [ 1429.353460][ T5624] usbhid 6-1:0.0: can't add hid device: -71 [ 1429.410564][ T5624] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1429.506441][T19786] loop5: detected capacity change from 0 to 7 [ 1429.563834][ T5624] usb 6-1: USB disconnect, device number 8 [ 1429.654546][T19786] Dev loop5: unable to read RDB block 7 [ 1429.700386][T19786] loop5: unable to read partition table [ 1429.788012][T19786] loop5: partition table beyond EOD, truncated [ 1429.841434][T19786] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1430.414738][ T4985] Dev loop5: unable to read RDB block 7 [ 1430.466394][ T4985] loop5: unable to read partition table [ 1430.494661][ T4985] loop5: partition table beyond EOD, truncated [ 1431.087573][T13651] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1431.380331][T13651] usb 6-1: config 1 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1431.405032][T13651] usb 6-1: config 1 interface 0 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 16 [ 1431.415202][T19822] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2861'. [ 1431.468954][T13651] usb 6-1: config 1 interface 0 altsetting 5 bulk endpoint 0x3 has invalid maxpacket 16 [ 1431.505198][T13651] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1431.532130][T13651] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1431.557388][T13651] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1431.599342][T13651] usb 6-1: Product: Ь [ 1431.623871][T13651] usb 6-1: Manufacturer: М [ 1431.646582][T13651] usb 6-1: SerialNumber: 復韡葇넋韮㸎阄纮ￂ䮀啻䩲薂ᙇ㇋㎄훊㉌ড়빢⊞琽괬醳澥葁嚙㪖୨飯즃윹涼鐓ᇧ䨨ဨ駳焿㝵殥藌쁊ქ믴椸感赩䯉꿾鑩탌閄Ο❹ಅ茜ሩᄁ旯ꔂ伩᫥⠚䰫䨣淒⩀彆 [ 1431.788360][T19816] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1431.812370][T19816] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1431.879084][T19833] fuse: Bad value for 'fd' [ 1432.073068][T19815] netlink: 'syz.5.2860': attribute type 12 has an invalid length. [ 1432.119812][ T5624] usb 7-1: new full-speed USB device number 33 using dummy_hcd [ 1432.142936][T19815] bond1: option primary_reselect: invalid value (255) [ 1432.161407][T19815] bond1 (unregistering): Released all slaves [ 1432.378082][ T5624] usb 7-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1432.422413][T13651] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 1432.458607][ T5624] usb 7-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 1432.498765][ T5754] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 1432.519093][ T5624] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1432.536861][T13651] usb 6-1: USB disconnect, device number 9 [ 1432.572097][ T5624] usb 7-1: Product: syz [ 1432.586602][ T5624] usb 7-1: Manufacturer: syz [ 1432.600987][ T5624] usb 7-1: SerialNumber: syz [ 1432.666468][ T5624] usb 7-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 1432.717774][ T5754] usb 9-1: Using ep0 maxpacket: 32 [ 1432.739966][ T5754] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1432.785370][ T5754] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1432.832470][ T5754] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1432.863930][ T5754] usb 9-1: Product: syz [ 1432.878005][ T5754] usb 9-1: Manufacturer: syz [ 1432.893238][ T5754] usb 9-1: SerialNumber: syz [ 1432.920302][ T5754] usb 9-1: config 0 descriptor?? [ 1432.946138][T19846] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 1432.984969][ T5754] hub 9-1:0.0: bad descriptor, ignoring hub [ 1433.013844][ T5754] hub 9-1:0.0: probe with driver hub failed with error -5 [ 1433.239543][ T5754] usb 9-1: USB disconnect, device number 27 [ 1433.392309][T19867] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2874'. [ 1433.507120][T19869] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2874'. [ 1433.512091][T19829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1433.582310][ T5624] usb 7-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 1433.610736][T19829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1433.678919][T19864] syzkaller0: entered promiscuous mode [ 1433.710786][T19864] syzkaller0: entered allmulticast mode [ 1433.748646][ T5767] usb 7-1: USB disconnect, device number 33 [ 1433.797926][ T10] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 1433.970742][ T10] usb 9-1: Using ep0 maxpacket: 32 [ 1433.993201][ T10] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1434.030131][ T10] usb 9-1: string descriptor 0 read error: -22 [ 1434.053863][ T10] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1434.087773][ T10] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1434.132745][ T10] usb 9-1: config 0 descriptor?? [ 1434.156123][T19846] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1434.204552][ T10] hub 9-1:0.0: bad descriptor, ignoring hub [ 1434.227373][ T10] hub 9-1:0.0: probe with driver hub failed with error -5 [ 1434.287631][ T5754] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1434.461467][T19846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1434.485925][T19846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1434.535071][ T5754] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1434.601659][ T5754] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1434.645009][ T5754] usb 6-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1434.658030][ T10] usb 9-1: USB disconnect, device number 28 [ 1434.736829][ T5754] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1434.784686][ T5754] usb 6-1: config 0 descriptor?? [ 1435.702563][T19878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1435.718599][T19878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1435.865744][ T5754] hid-led 0003:27B8:01ED.0008: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.5-1/input0 [ 1436.026973][T19878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1436.100561][ T5754] hid-led 0003:27B8:01ED.0008: ThingM blink(1) initialized [ 1436.153132][T19878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1436.229036][ T5754] usb 6-1: USB disconnect, device number 10 [ 1436.397540][T14667] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 1436.516487][T19903] fido_id[19903]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1436.627867][T14667] usb 9-1: Using ep0 maxpacket: 8 [ 1436.636080][T14667] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1436.647225][T14667] usb 9-1: config 0 has no interfaces? [ 1436.662935][T14667] usb 9-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1436.679967][T14667] usb 9-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1436.697144][T14667] usb 9-1: Product: syz [ 1436.703500][T14667] usb 9-1: Manufacturer: syz [ 1436.711472][T14667] usb 9-1: SerialNumber: syz [ 1436.742628][T14667] usb 9-1: config 0 descriptor?? [ 1436.805774][T19909] fuse: Bad value for 'fd' [ 1437.567460][ T5624] usb 9-1: USB disconnect, device number 29 [ 1438.343125][T14667] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1438.387298][ T5767] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 1438.517992][T14667] usb 6-1: Using ep0 maxpacket: 32 [ 1438.525659][T14667] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1438.534455][T14667] usb 6-1: config 0 has no interface number 0 [ 1438.545444][T14667] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1438.554863][T14667] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1438.563103][T14667] usb 6-1: Product: syz [ 1438.567334][T14667] usb 6-1: Manufacturer: syz [ 1438.572271][ T5767] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1438.588608][T14667] usb 6-1: SerialNumber: syz [ 1438.595215][ T5767] usb 9-1: config 0 has no interfaces? [ 1438.602297][T14667] usb 6-1: config 0 descriptor?? [ 1438.614754][ T5767] usb 9-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 1438.626079][ T5767] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1438.635901][T14667] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1438.644771][ T5767] usb 9-1: Product: syz [ 1438.649344][T14667] usb 6-1: selecting invalid altsetting 1 [ 1438.655127][ T5767] usb 9-1: Manufacturer: syz [ 1438.659828][T14667] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1438.666982][ T5767] usb 9-1: SerialNumber: syz [ 1438.678478][ T5767] usb 9-1: config 0 descriptor?? [ 1438.705061][T14667] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1438.717011][T14667] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1438.725423][T14667] usb 6-1: media controller created [ 1438.751982][T14667] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1438.904393][ T5767] usb 9-1: USB disconnect, device number 30 [ 1439.737254][T19941] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2893'. [ 1439.807947][T14667] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1439.837165][T14667] zl10353_read_register: readreg error (reg=127, ret==-110) [ 1439.847837][T19934] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 1439.955534][T14667] usb 6-1: USB disconnect, device number 11 [ 1440.692042][T19950] fuse: Bad value for 'fd' [ 1440.889033][ T5754] usb 7-1: new full-speed USB device number 34 using dummy_hcd [ 1441.100631][ T5754] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1441.124932][ T5754] usb 7-1: config 0 has no interface number 0 [ 1441.162364][T19960] batadv_slave_0: entered promiscuous mode [ 1441.177619][ T5754] usb 7-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1441.257115][T19960] macsec1: entered allmulticast mode [ 1441.263978][ T5754] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1441.295722][T19960] batadv_slave_0: entered allmulticast mode [ 1441.310588][ T5754] usb 7-1: Product: syz [ 1441.320714][ T5754] usb 7-1: Manufacturer: syz [ 1441.342669][ T5754] usb 7-1: SerialNumber: syz [ 1441.378495][T19960] batadv_slave_0: left allmulticast mode [ 1441.404521][ T5754] usb 7-1: config 0 descriptor?? [ 1441.413978][T19960] batadv_slave_0: left promiscuous mode [ 1441.431317][ T5754] usb 7-1: selecting invalid altsetting 1 [ 1441.495402][ T5754] dvb_ttusb_budget: ttusb_init_controller: error [ 1441.504042][ T5754] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1441.873686][ T5754] DVB: Unable to find symbol stv0299_attach() [ 1442.028210][ T5754] DVB: Unable to find symbol tda8083_attach() [ 1442.048912][ T5754] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 1442.099809][ T5754] usb 7-1: USB disconnect, device number 34 [ 1442.831888][T19990] vivid-000: ================= START STATUS ================= [ 1442.854654][T19990] vivid-000: Test Pattern: [ 1442.865177][T19994] fuse: Bad value for 'fd' [ 1442.922215][T19990] 75% Colorbar [ 1443.025976][T19990] vivid-000: Fill Percentage of Frame: 100 [ 1443.100709][T19990] vivid-000: Horizontal Movement: No Movement [ 1443.161386][T19990] vivid-000: Vertical Movement: No Movement [ 1443.168133][T19990] vivid-000: OSD Text Mode: All [ 1443.173250][T19990] vivid-000: Show Border: false [ 1443.179071][T19990] vivid-000: Show Square: false [ 1443.191736][T19990] vivid-000: Sensor Flipped Horizontally: false [ 1443.200924][T19990] vivid-000: Sensor Flipped Vertically: false [ 1443.208958][T19990] vivid-000: Insert SAV Code in Image: false [ 1443.215383][T19990] vivid-000: Insert EAV Code in Image: false [ 1443.221899][T19990] vivid-000: Insert Video Guard Band: false [ 1443.232608][T19990] vivid-000: Reduced Framerate: false [ 1443.240892][T19990] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 1443.256976][T19990] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 1443.279282][T19990] vivid-000: Enable Capture Cropping: true [ 1443.296158][T19990] vivid-000: Enable Capture Composing: true [ 1443.307962][T19990] vivid-000: Enable Capture Scaler: true [ 1443.335656][T19990] vivid-000: Timestamp Source: End of Frame [ 1443.349588][T19990] vivid-000: Colorspace: sRGB [ 1443.356982][T19990] vivid-000: Transfer Function: Default [ 1443.365678][T19990] vivid-000: Y'CbCr Encoding: Default [ 1443.376710][T19990] vivid-000: HSV Encoding: Hue 0-179 [ 1443.387316][T19990] vivid-000: Quantization: Default [ 1443.398174][T19990] vivid-000: Apply Alpha To Red Only: false [ 1443.410903][T19990] vivid-000: Standard Aspect Ratio: 4x3 [ 1443.507261][T19990] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 1443.683216][T19990] vivid-000: DV Timings: 640x480p59 inactive [ 1443.726704][T19990] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 1443.788287][T19990] vivid-000: Maximum EDID Blocks: 2 [ 1443.814985][T19990] vivid-000: Limited RGB Range (16-235): false [ 1443.909113][T19990] vivid-000: Rx RGB Quantization Range: Automatic [ 1444.020448][T19990] vivid-000: Power Present: 0x00000001 [ 1444.137004][T19990] tpg source WxH: 320x240 (Y'CbCr) [ 1444.259034][T19990] tpg field: 1 [ 1444.275616][T19990] tpg crop: (0,0)/320x240 [ 1444.296061][T19990] tpg compose: (0,0)/320x240 [ 1444.316753][T19990] tpg colorspace: 8 [ 1444.331506][T19990] tpg transfer function: 0/0 [ 1444.349958][T19990] tpg Y'CbCr encoding: 0/0 [ 1444.368794][T19990] tpg quantization: 0/0 [ 1444.394896][T19990] tpg RGB range: 0/2 [ 1444.415598][T19990] vivid-000: ================== END STATUS ================== [ 1445.406104][T20058] syzkaller1: entered promiscuous mode [ 1445.428008][T20058] syzkaller1: entered allmulticast mode [ 1445.738910][T20061] bridge0: port 1(bridge_slave_0) entered disabled state [ 1445.768424][T20061] bridge0: port 1(bridge_slave_0) entered blocking state [ 1445.775857][T20061] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1446.043749][T20072] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2938'. [ 1446.068010][T20072] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2938'. [ 1446.157631][T14667] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 1446.215061][T20076] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) ! [ 1446.259420][T20076] syzkaller0: entered promiscuous mode [ 1446.289046][T20076] syzkaller0: entered allmulticast mode [ 1446.329903][T14667] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1446.372371][T14667] usb 1-1: config 0 has no interface number 0 [ 1446.418736][T14667] usb 1-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1446.486806][T14667] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1446.519480][T20081] fuse: Bad value for 'fd' [ 1446.537097][T14667] usb 1-1: Product: syz [ 1446.555391][T14667] usb 1-1: Manufacturer: syz [ 1446.584214][T14667] usb 1-1: SerialNumber: syz [ 1446.641559][T14667] usb 1-1: config 0 descriptor?? [ 1446.671492][T14667] usb 1-1: selecting invalid altsetting 1 [ 1446.740686][T14667] dvb_ttusb_budget: ttusb_init_controller: error [ 1446.776760][T14667] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1447.025745][T14667] DVB: Unable to find symbol stv0299_attach() [ 1447.204157][T14667] DVB: Unable to find symbol tda8083_attach() [ 1447.223409][T14667] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 1447.256137][T14667] usb 1-1: USB disconnect, device number 36 [ 1447.338663][T20092] bridge2: entered promiscuous mode [ 1447.358131][T20092] bridge2: entered allmulticast mode [ 1447.431857][T20094] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2947'. [ 1447.453871][T20094] openvswitch: netlink: Flow actions attr not present in new flow. [ 1447.862959][T20104] netlink: 'syz.9.2948': attribute type 12 has an invalid length. [ 1448.134027][T20104] bond0: option primary_reselect: invalid value (255) [ 1448.155433][ T24] usb 9-1: new full-speed USB device number 31 using dummy_hcd [ 1448.233533][T20104] bond0 (unregistering): Released all slaves [ 1448.355118][ T24] usb 9-1: config 0 has no interfaces? [ 1448.396992][ T24] usb 9-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1448.456385][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1448.487614][ T24] usb 9-1: Product: syz [ 1448.504457][ T24] usb 9-1: Manufacturer: syz [ 1448.522562][ T24] usb 9-1: SerialNumber: syz [ 1448.656110][ T24] usb 9-1: config 0 descriptor?? [ 1449.325944][T20118] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.2954'. [ 1449.933166][T20138] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2961'. [ 1450.960689][ T5624] usb 9-1: USB disconnect, device number 31 [ 1452.022371][T20182] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2978'. [ 1452.241252][T20190] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2980'. [ 1452.276404][T20186] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2979'. [ 1453.030787][T20210] binder: 20206:20210 ioctl 4018620d 0 returned -22 [ 1453.150305][T20210] binder: 20206:20210 ioctl 4018620d 0 returned -22 [ 1453.213133][T20210] binder: 20206:20210 ioctl c0306201 0 returned -14 [ 1453.266499][ T5624] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 1453.497975][ T24] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 1453.682246][ T5624] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1453.752448][ T24] usb 9-1: config 0 has no interfaces? [ 1453.777552][ T24] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1453.815281][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1453.846318][ T24] usb 9-1: SerialNumber: syz [ 1453.940020][ T24] usb 9-1: config 0 descriptor?? [ 1456.607618][ T24] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1457.082719][ T24] usb 1-1: config 1 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1457.122279][ T24] usb 1-1: config 1 interface 0 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 16 [ 1457.165456][ T24] usb 1-1: config 1 interface 0 altsetting 5 bulk endpoint 0x3 has invalid maxpacket 16 [ 1457.194538][ T24] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1457.232290][ T24] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1457.267382][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1457.297899][ T24] usb 1-1: Product: Ь [ 1457.305011][T20262] netlink: 16186 bytes leftover after parsing attributes in process `syz.9.3004'. [ 1457.319673][ T24] usb 1-1: Manufacturer: М [ 1457.333447][ T24] usb 1-1: SerialNumber: 復韡葇넋韮㸎阄纮ￂ䮀啻䩲薂ᙇ㇋㎄훊㉌ড়빢⊞琽괬醳澥葁嚙㪖୨飯즃윹涼鐓ᇧ䨨ဨ駳焿㝵殥藌쁊ქ믴椸感赩䯉꿾鑩탌閄Ο❹ಅ茜ሩᄁ旯ꔂ伩᫥⠚䰫䨣淒⩀彆 [ 1457.413521][T20257] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1457.431177][T20257] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1457.617581][ T5754] usb 10-1: new high-speed USB device number 48 using dummy_hcd [ 1457.671229][T20256] netlink: 'syz.0.3001': attribute type 12 has an invalid length. [ 1457.757545][ T31] kauditd_printk_skb: 18 callbacks suppressed [ 1457.757567][ T31] audit: type=1326 audit(1777789117.589:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20263 comm="syz.6.3003" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6557d9cdd9 code=0x7ffc0000 [ 1457.790140][ T31] audit: type=1326 audit(1777789117.589:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20263 comm="syz.6.3003" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6557d9cdd9 code=0x7ffc0000 [ 1457.799955][ T5754] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1457.815023][ T31] audit: type=1326 audit(1777789117.599:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20263 comm="syz.6.3003" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6557d9cdd9 code=0x7ffc0000 [ 1457.815090][ T31] audit: type=1326 audit(1777789117.599:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20263 comm="syz.6.3003" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6557d9cdd9 code=0x7ffc0000 [ 1457.876343][ T31] audit: type=1326 audit(1777789117.609:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20263 comm="syz.6.3003" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f6557d9cdd9 code=0x7ffc0000 [ 1457.905335][T20256] bond1: option primary_reselect: invalid value (255) [ 1457.987643][ T31] audit: type=1326 audit(1777789117.719:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20263 comm="syz.6.3003" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6557d9cdd9 code=0x7ffc0000 [ 1458.021025][ T5767] usb 9-1: USB disconnect, device number 32 [ 1458.096244][ T31] audit: type=1326 audit(1777789117.719:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20263 comm="syz.6.3003" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6557d9cdd9 code=0x7ffc0000 [ 1458.190555][ T5754] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1458.191544][T20256] bond1 (unregistering): Released all slaves [ 1458.214901][ T31] audit: type=1326 audit(1777789118.049:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20263 comm="syz.6.3003" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f6557d9cdd9 code=0x7ffc0000 [ 1458.304743][ T5754] usb 10-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1458.325293][ T5754] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1458.364962][ T5754] usb 10-1: config 0 descriptor?? [ 1458.488162][ T31] audit: type=1326 audit(1777789118.329:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20263 comm="syz.6.3003" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6557d9cdd9 code=0x7ffc0000 [ 1458.522761][T20210] syz.3.2986 (20210): drop_caches: 2 [ 1458.576264][ T31] audit: type=1326 audit(1777789118.329:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20263 comm="syz.6.3003" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6557d9cdd9 code=0x7ffc0000 [ 1458.665397][ T24] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 1458.745374][ T24] usb 1-1: USB disconnect, device number 37 [ 1459.238694][T20262] netlink: 60 bytes leftover after parsing attributes in process `syz.9.3004'. [ 1459.278090][T20262] unsupported nlmsg_type 40 [ 1459.443851][T20262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1459.492666][T20262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1459.582850][T20262] netlink: 'syz.9.3004': attribute type 30 has an invalid length. [ 1459.658618][ T5754] hid-led 0003:27B8:01ED.000A: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.9-1/input0 [ 1459.827836][ T5754] hid-led 0003:27B8:01ED.000A: ThingM blink(1) initialized [ 1459.850359][T20262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1459.934155][T20262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1460.164464][T20262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1460.212922][T20262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1460.300999][ T5754] usb 10-1: USB disconnect, device number 48 [ 1460.651535][T20303] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3016'. [ 1461.609937][ T10] usb 10-1: new high-speed USB device number 49 using dummy_hcd [ 1461.980653][ T10] usb 10-1: config 1 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1462.211145][ T10] usb 10-1: config 1 interface 0 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 16 [ 1462.421575][ T10] usb 10-1: config 1 interface 0 altsetting 5 bulk endpoint 0x3 has invalid maxpacket 16 [ 1462.455870][ T10] usb 10-1: config 1 interface 0 has no altsetting 0 [ 1462.478921][ T10] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1462.522504][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1462.539955][ T10] usb 10-1: Product: Ь [ 1462.546400][ T10] usb 10-1: Manufacturer: М [ 1462.554381][ T10] usb 10-1: SerialNumber: 復韡葇넋韮㸎阄纮ￂ䮀啻䩲薂ᙇ㇋㎄훊㉌ড়빢⊞琽괬醳澥葁嚙㪖୨飯즃윹涼鐓ᇧ䨨ဨ駳焿㝵殥藌쁊ქ믴椸感赩䯉꿾鑩탌閄Ο❹ಅ茜ሩᄁ旯ꔂ伩᫥⠚䰫䨣淒⩀彆 [ 1462.604465][T20319] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1462.628564][T20319] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1462.995721][T20318] netlink: 'syz.9.3022': attribute type 12 has an invalid length. [ 1463.233785][T20318] bond0: option primary_reselect: invalid value (255) [ 1463.303526][T20318] bond0 (unregistering): Released all slaves [ 1463.702069][T20359] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3038'. [ 1463.737945][T20359] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3038'. [ 1463.771240][T20359] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 1463.847384][ T10] cdc_ether 10-1:1.0: probe with driver cdc_ether failed with error -71 [ 1463.913743][ T10] usb 10-1: USB disconnect, device number 49 [ 1464.914831][T20378] loop2: detected capacity change from 0 to 7 [ 1464.949758][T20378] Dev loop2: unable to read RDB block 7 [ 1465.017091][T20378] loop2: AHDI p1 p2 p3 [ 1465.037949][T20378] loop2: partition table partially beyond EOD, truncated [ 1465.078307][T20378] loop2: p1 start 1818582900 is beyond EOD, truncated [ 1465.104073][T20378] loop2: p3 start 335544320 is beyond EOD, truncated [ 1465.531576][ T24] usb 7-1: new full-speed USB device number 35 using dummy_hcd [ 1465.661544][T20403] binder: 20400:20403 ioctl 4018620d 0 returned -22 [ 1465.743340][T20403] binder: 20400:20403 ioctl c0306201 0 returned -14 [ 1465.855955][ T24] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1465.872440][ T24] usb 7-1: not running at top speed; connect to a high speed hub [ 1465.894477][ T24] usb 7-1: config 3 has an invalid interface number: 166 but max is 0 [ 1465.938856][ T24] usb 7-1: config 3 has no interface number 0 [ 1465.964236][ T24] usb 7-1: config 3 interface 166 has no altsetting 0 [ 1466.029548][ T24] usb 7-1: New USB device found, idVendor=0c45, idProduct=624f, bcdDevice=e8.db [ 1466.091040][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1466.151022][ T24] usb 7-1: Product: syz [ 1466.180038][ T24] usb 7-1: Manufacturer: syz [ 1466.204693][ T24] usb 7-1: SerialNumber: syz [ 1467.608613][T20429] vivid-000: ================= START STATUS ================= [ 1467.637663][T20429] vivid-000: Generate PTS: true [ 1467.704762][T20429] vivid-000: Generate SCR: true [ 1467.821712][T20429] tpg source WxH: 320x180 (Y'CbCr) [ 1467.868467][T20429] tpg field: 1 [ 1467.883078][T20429] tpg crop: (0,0)/320x180 [ 1467.906388][T20429] tpg compose: (0,0)/320x180 [ 1467.931902][T20429] tpg colorspace: 8 [ 1467.966984][T20429] tpg transfer function: 0/0 [ 1467.984760][T20429] tpg Y'CbCr encoding: 0/0 [ 1467.999293][T20429] tpg quantization: 0/0 [ 1468.039714][T20429] tpg RGB range: 0/2 [ 1468.080548][T20429] vivid-000: ================== END STATUS ================== [ 1468.431703][ T24] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:624f [ 1468.459499][ T24] gspca_sn9c20x: Write register 1000 failed -71 [ 1468.478418][ T24] gspca_sn9c20x: Device initialization failed [ 1468.497249][ T24] gspca_sn9c20x 7-1:3.166: probe with driver gspca_sn9c20x failed with error -71 [ 1468.528398][ T24] usb 7-1: USB disconnect, device number 35 [ 1473.975278][T20515] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3095'. [ 1475.357210][T20403] syz.3.3052 (20403): drop_caches: 2 [ 1476.805892][ T31] kauditd_printk_skb: 6 callbacks suppressed [ 1476.805911][ T31] audit: type=1326 audit(1777789136.639:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20538 comm="syz.6.3101" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6557d9cdd9 code=0x7ffc0000 [ 1476.877714][ T31] audit: type=1326 audit(1777789136.679:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20538 comm="syz.6.3101" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6557d9cdd9 code=0x7ffc0000 [ 1476.931350][ T31] audit: type=1326 audit(1777789136.679:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20538 comm="syz.6.3101" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6557d5d60e code=0x7ffc0000 [ 1476.967653][ T31] audit: type=1326 audit(1777789136.679:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20538 comm="syz.6.3101" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6557d9cdd9 code=0x7ffc0000 [ 1477.019543][ T31] audit: type=1326 audit(1777789136.679:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20538 comm="syz.6.3101" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6557d9cdd9 code=0x7ffc0000 [ 1477.107272][ T31] audit: type=1326 audit(1777789136.679:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20538 comm="syz.6.3101" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6557d9cdd9 code=0x7ffc0000 [ 1477.204510][ T31] audit: type=1326 audit(1777789136.679:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20538 comm="syz.6.3101" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6557d9cdd9 code=0x7ffc0000 [ 1477.319885][ T31] audit: type=1326 audit(1777789136.679:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20538 comm="syz.6.3101" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6557d9cdd9 code=0x7ffc0000 [ 1477.454018][ T31] audit: type=1326 audit(1777789136.679:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20538 comm="syz.6.3101" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6557d9cdd9 code=0x7ffc0000 [ 1477.569182][ T31] audit: type=1326 audit(1777789136.679:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20538 comm="syz.6.3101" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f6557d9cdd9 code=0x7ffc0000 [ 1479.511278][T17250] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1479.517977][T16959] Bluetooth: hci0: command 0x1003 tx timeout [ 1480.284666][T20522] syzkaller1: entered promiscuous mode [ 1480.290631][T20522] syzkaller1: entered allmulticast mode [ 1480.480151][T20461] lo speed is unknown, defaulting to 1000 [ 1480.517347][T20557] lo speed is unknown, defaulting to 1000 [ 1480.737918][ T5767] usb 10-1: new high-speed USB device number 50 using dummy_hcd [ 1480.914795][ T5767] usb 10-1: Using ep0 maxpacket: 32 [ 1480.925605][ T5767] usb 10-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1480.972683][ T5767] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1481.036988][ T5767] usb 10-1: config 0 descriptor?? [ 1481.278965][ T5767] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 1481.376429][ T5767] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1481.440816][ T5767] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 1481.496858][ T5767] usb 10-1: media controller created [ 1481.589191][ T5767] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1481.611470][T20582] ------------[ cut here ]------------ [ 1481.620014][T20582] usb 10-1: BOGUS control dir, pipe 80003280 doesn't match bRequestType c0 [ 1481.628670][T20582] WARNING: drivers/usb/core/urb.c:413 at usb_submit_urb+0x1053/0x18b0, CPU#0: syz.0.3117/20582 [ 1481.639323][T20582] Modules linked in: [ 1481.644897][T20582] CPU: 0 UID: 0 PID: 20582 Comm: syz.0.3117 Tainted: G L syzkaller #0 PREEMPT(full) [ 1481.655992][T20582] Tainted: [L]=SOFTLOCKUP [ 1481.660339][T20582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1481.670406][T20582] RIP: 0010:usb_submit_urb+0x1115/0x18b0 [ 1481.676043][T20582] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c1 f2 ff ff 89 e9 [ 1481.695730][T20582] RSP: 0018:ffffc90005897948 EFLAGS: 00010246 [ 1481.701973][T20582] RAX: 0000000000000000 RBX: ffff888034458700 RCX: 0000000080003280 [ 1481.710104][T20582] RDX: ffff888062e46580 RSI: ffffffff8c8089e0 RDI: ffffffff903e07b0 [ 1481.718119][T20582] RBP: 1ffff110045f6c4c R08: 00000000000000c0 R09: 0000000000000000 [ 1481.726082][T20582] R10: dffffc0000000000 R11: fffff52000b12f54 R12: ffff8880299a0100 [ 1481.734110][T20582] R13: ffff888022fb6260 R14: 0000000080003280 R15: ffff888062e46580 [ 1481.742163][T20582] FS: 00007fa7f90916c0(0000) GS:ffff888125290000(0000) knlGS:0000000000000000 [ 1481.751155][T20582] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1481.757791][T20582] CR2: 0000200000002480 CR3: 000000008fe26000 CR4: 0000000000350ef0 [ 1481.765765][T20582] Call Trace: [ 1481.769092][T20582] [ 1481.772016][T20582] ? __init_swait_queue_head+0xa9/0x150 [ 1481.777602][T20582] usb_start_wait_urb+0x13f/0x5b0 [ 1481.782638][T20582] ? rcu_is_watching+0x15/0xb0 [ 1481.787472][T20582] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 1481.793019][T20582] ? trace_kmalloc+0x2a/0xf0 [ 1481.797690][T20582] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1481.803327][T20582] usb_control_msg+0x234/0x3e0 [ 1481.808157][T20582] dib0700_i2c_xfer+0xbb2/0xf80 [ 1481.813026][T20582] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1481.818826][T20582] __i2c_transfer+0x79a/0x1f70 [ 1481.823601][T20582] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1481.829469][T20582] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1481.835295][T20582] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1481.840991][T20582] ? i2c_transfer+0xc8/0x2d0 [ 1481.845590][T20582] i2c_transfer+0x1cc/0x2d0 [ 1481.850152][T20582] i2cdev_ioctl_rdwr+0x460/0x740 [ 1481.855102][T20582] i2cdev_ioctl+0x6a5/0x880 [ 1481.859760][T20582] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 1481.864826][T20582] ? __fget_files+0x3a0/0x420 [ 1481.869563][T20582] ? __fget_files+0x2a/0x420 [ 1481.874157][T20582] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1481.879905][T20582] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1481.885560][T20582] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 1481.890814][T20582] __se_sys_ioctl+0xfc/0x170 [ 1481.895452][T20582] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1481.901584][T20582] do_syscall_64+0x15f/0xf80 [ 1481.906209][T20582] ? trace_irq_disable+0x3b/0x140 [ 1481.911396][T20582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1481.917449][T20582] RIP: 0033:0x7fa7f819cdd9 [ 1481.921883][T20582] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1481.941596][T20582] RSP: 002b:00007fa7f9091028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1481.950092][T20582] RAX: ffffffffffffffda RBX: 00007fa7f8415fa0 RCX: 00007fa7f819cdd9 [ 1481.958148][T20582] RDX: 0000200000000080 RSI: 0000000000000707 RDI: 0000000000000003 [ 1481.966135][T20582] RBP: 00007fa7f8232d69 R08: 0000000000000000 R09: 0000000000000000 [ 1481.974179][T20582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1481.982234][T20582] R13: 00007fa7f8416038 R14: 00007fa7f8415fa0 R15: 00007fff73ba1898 [ 1481.990299][T20582] [ 1481.993350][T20582] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1482.000686][T20582] CPU: 0 UID: 0 PID: 20582 Comm: syz.0.3117 Tainted: G L syzkaller #0 PREEMPT(full) [ 1482.012093][T20582] Tainted: [L]=SOFTLOCKUP [ 1482.016504][T20582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1482.026563][T20582] Call Trace: [ 1482.029848][T20582] [ 1482.032794][T20582] vpanic+0x56c/0xa60 [ 1482.036787][T20582] ? __pfx__printk+0x10/0x10 [ 1482.041397][T20582] ? __pfx_vpanic+0x10/0x10 [ 1482.045909][T20582] ? is_bpf_text_address+0x292/0x2b0 [ 1482.051215][T20582] ? is_bpf_text_address+0x26/0x2b0 [ 1482.056444][T20582] panic+0xc5/0xd0 [ 1482.060171][T20582] ? __pfx_panic+0x10/0x10 [ 1482.064608][T20582] __warn+0x315/0x4c0 [ 1482.068591][T20582] ? usb_submit_urb+0x1053/0x18b0 [ 1482.073627][T20582] ? usb_submit_urb+0x1053/0x18b0 [ 1482.078662][T20582] __report_bug+0x29a/0x540 [ 1482.083170][T20582] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1482.088808][T20582] ? usb_submit_urb+0x1053/0x18b0 [ 1482.093850][T20582] ? __pfx___report_bug+0x10/0x10 [ 1482.098889][T20582] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1482.104532][T20582] ? lockdep_hardirqs_on+0x7a/0x110 [ 1482.109739][T20582] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1482.115372][T20582] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1482.121184][T20582] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1482.126843][T20582] report_bug_entry+0x19a/0x290 [ 1482.131730][T20582] ? usb_submit_urb+0x1115/0x18b0 [ 1482.136801][T20582] ? usb_submit_urb+0x111a/0x18b0 [ 1482.141853][T20582] handle_bug+0xce/0x200 [ 1482.146118][T20582] exc_invalid_op+0x1a/0x50 [ 1482.150632][T20582] asm_exc_invalid_op+0x1a/0x20 [ 1482.155483][T20582] RIP: 0010:usb_submit_urb+0x1115/0x18b0 [ 1482.161137][T20582] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c1 f2 ff ff 89 e9 [ 1482.180746][T20582] RSP: 0018:ffffc90005897948 EFLAGS: 00010246 [ 1482.186824][T20582] RAX: 0000000000000000 RBX: ffff888034458700 RCX: 0000000080003280 [ 1482.194796][T20582] RDX: ffff888062e46580 RSI: ffffffff8c8089e0 RDI: ffffffff903e07b0 [ 1482.202777][T20582] RBP: 1ffff110045f6c4c R08: 00000000000000c0 R09: 0000000000000000 [ 1482.210745][T20582] R10: dffffc0000000000 R11: fffff52000b12f54 R12: ffff8880299a0100 [ 1482.218719][T20582] R13: ffff888022fb6260 R14: 0000000080003280 R15: ffff888062e46580 [ 1482.226706][T20582] ? usb_submit_urb+0x10a4/0x18b0 [ 1482.231757][T20582] ? __init_swait_queue_head+0xa9/0x150 [ 1482.237314][T20582] usb_start_wait_urb+0x13f/0x5b0 [ 1482.242346][T20582] ? rcu_is_watching+0x15/0xb0 [ 1482.247121][T20582] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 1482.252667][T20582] ? trace_kmalloc+0x2a/0xf0 [ 1482.257278][T20582] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1482.262918][T20582] usb_control_msg+0x234/0x3e0 [ 1482.267700][T20582] dib0700_i2c_xfer+0xbb2/0xf80 [ 1482.272584][T20582] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1482.278245][T20582] __i2c_transfer+0x79a/0x1f70 [ 1482.283059][T20582] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1482.288871][T20582] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1482.294684][T20582] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1482.300318][T20582] ? i2c_transfer+0xc8/0x2d0 [ 1482.304929][T20582] i2c_transfer+0x1cc/0x2d0 [ 1482.309448][T20582] i2cdev_ioctl_rdwr+0x460/0x740 [ 1482.314408][T20582] i2cdev_ioctl+0x6a5/0x880 [ 1482.318919][T20582] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 1482.323956][T20582] ? __fget_files+0x3a0/0x420 [ 1482.328649][T20582] ? __fget_files+0x2a/0x420 [ 1482.333241][T20582] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1482.338879][T20582] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1482.344524][T20582] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 1482.349559][T20582] __se_sys_ioctl+0xfc/0x170 [ 1482.354249][T20582] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1482.360313][T20582] do_syscall_64+0x15f/0xf80 [ 1482.364911][T20582] ? trace_irq_disable+0x3b/0x140 [ 1482.369950][T20582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1482.375845][T20582] RIP: 0033:0x7fa7f819cdd9 [ 1482.380257][T20582] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1482.399869][T20582] RSP: 002b:00007fa7f9091028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1482.408291][T20582] RAX: ffffffffffffffda RBX: 00007fa7f8415fa0 RCX: 00007fa7f819cdd9 [ 1482.416259][T20582] RDX: 0000200000000080 RSI: 0000000000000707 RDI: 0000000000000003 [ 1482.424223][T20582] RBP: 00007fa7f8232d69 R08: 0000000000000000 R09: 0000000000000000 [ 1482.432191][T20582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1482.440163][T20582] R13: 00007fa7f8416038 R14: 00007fa7f8415fa0 R15: 00007fff73ba1898 [ 1482.448153][T20582] [ 1482.451482][T20582] Kernel Offset: disabled [ 1482.455806][T20582] Rebooting in 86400 seconds..