last executing test programs: 8.246063387s ago: executing program 4 (id=2256): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800) recvmmsg(r1, &(0x7f0000001140), 0x700, 0x2, 0x0) 7.862340447s ago: executing program 4 (id=2259): openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x123880, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) listen(r0, 0xf5f) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 5.906263207s ago: executing program 2 (id=2267): socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3380, 0x1, 0x40024e}, 0x0, 0x0) eventfd2(0x7fffffff, 0x800) socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x10b701) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) 5.818550441s ago: executing program 0 (id=2268): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1c0000000000000, 0x4, &(0x7f0000006680)) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 5.790095645s ago: executing program 2 (id=2269): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000008}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20044014) syz_open_dev$sndctrl(0x0, 0x0, 0x200d01) syz_open_dev$sndctrl(0x0, 0x802, 0x100) syz_io_uring_setup(0x495, &(0x7f0000000540)={0x0, 0xe140, 0x0, 0x0, 0x288}, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_UNLINKAT={0x24, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c) setsockopt$IPT_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b0, 0x0, 0x238, 0x170, 0xd8, 0x0, 0x410, 0x410, 0x410, 0x410, 0x410, 0x6, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xffffff00, 0x0, 'veth0\x00', 'veth0_to_bridge\x00', {}, {0xff}, 0x62, 0x0, 0x50}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0xb, 0x4, @ipv4=@loopback, 0x4e24}}}, {{@ip={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000, 0xff, 'geneve0\x00', 'veth1_to_team\x00', {}, {}, 0x89, 0x6, 0x24}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xff, 'ip6_vti0\x00', 'geneve0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x5}, {0x0, 0x6}}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x31, 0x7, 0x1}}}, {{@ip={@loopback, @multicast1, 0xff, 0xff, 'veth0_to_batadv\x00', 'bridge_slave_0\x00', {0xff}, {0xff}, 0x44, 0x1, 0x15}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x55d, 0x3, @multicast1, 0x4e21}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x60) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x7000, 0x0, 0x3) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, 0x0) 5.686403226s ago: executing program 0 (id=2270): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002440)=ANY=[@ANYBLOB="0e000000252dca35ad1ee4811e688797de4548e365eaf099f140921f24af9ec5befe5e6dfbd221c2685615bd88f20f9c6fbc0b", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000023c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="010000000300000004000000ff07"], 0x48) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="057e30aae10df4f97559054b9a301ecfe91b645115e1421774006df60cb393573839b0078ce169ec2fde0afea66b5bbefa9d4f3cd8c2458336ceb1f0efe647d6d7b1cdbd12c9b8e3a822cbd51494bf79a1dbe5c22338ce37ed467a1d3d616564cbb81faa2e935b2697c12efb0ed141fa2eaad4747725c4bf20f8975e402b03eb77d1aa3f10f512397b5037b1b4cd4b7c08c03dc5e52a066e5982969fa044125ae251f46c26e2536cc8b77e8edb251378be4beedfb8dca0d449123f57677ca3da5bdebf91b195f1a5d49d7c292f20f58d490de36d8ee0e8a86bd04c3165549465cbee7891fc747d7def370ce644db894b56bd53af0d0e261bcfa6bf72a684dafc5bcafe07ece74cbd1d5fa32716dd03f7acd4f32d935438c91e033beaf49e3963e13d05e7a8334a858639636799f04a9033193e7d18a2a4b20bcc96811bb5efe476db70a76b7456ac4e71f3e89c00da0c7761c188570c7902bf2fee1be273be8a9f7a2d7508ef2188d3ba1db4fa9d1533d2f2a288cdfe3b0c50908d56ba69e81386e7e979e9d7ff78685ffb8de6baea2451762736a2bbafa11d541790b0564aef9b0b80fa24832090b84341a9fdf712d3296f911020f8021eda8130befaaab01cbe91dfc5768e6ff31ec50dd88596832a9f5fd4f558d367f40e454d3c97ad16a7f30b93629ee2def77b99f8a17c157529b0782fd847a4c75a2302ca96bbdcff660c2cca753e1a8c60dbcfb319a1594565a2e15bb6124316e196e3cafaf1a29eef84a0908d1dc80af7e333c65736699f1254addf2ab582f5c87c4f6ca234d7ca9673dc29444044b95abdaea958274e39aeb163ee2d05bc2ade5c33a0466e14fbdf8aa70ca2964c06ee5bc57b894b0143a7a503cc43574a07958940b029678df44d6c82fa2e6937ea6aeb5b8f33c21628e3b0d623c23c2e5a3546194fea742d90c1d61f343a005b9e58c3e8292b256fd0ecca81cda433f3bb0ed633607f0b635cdd8b4919bfa37c1e99df087d3f8f3ba5dec7930657eb3a4d8febb5234e048881fbfc499fe5eb6a0ce34546f7010ae2291e6731d0798ca451387a123998e68f6f577ba4e556bb9a119011a191a6bbcf55beb1fb0b8252deeed5721b271b964534a04462720c4c03e8ea7f120cfa1be630e7fc680d1f6e067075c72f642babcacf6b00cd3fdb9f3200e4ff8935b17ebe222053c78c3752666088017c2150dd014b9578af6adb15527a483eff5bb623710ca7b37ed49ff7cf1525f296af6f27846524e4aaea7476a2d08dceeca84a1ab11e2767abff12d10deaf63681dcabe9b1fb9ebe207d8e3793dba9a73a02ebea4e3a072397a88c47795d5e88b2040c9fe3f96f66f8f7d593547c8fc8f4e75a1c20962ecf2dd1e7bddf896f2a6c5f37a8784e2bc5b10cef2feab3b6eee7430908eeadd372248041a09b0c29385cd7a75754d2c429e72bf5fdac34097bbbbb3790f86399c60cb5054fbeb8eb1241608b506beb135091c18110c1d10d9a80f4adb11a6fd3001957cae0b4f8f730cc4fa4a7328e23f390caab014cfeec0ebfd0e14021f47fe330a68680678d23e7ca1ff18e7e242f4c1e3cca51dec73c58b596c2a92267ee76d3657c1e2b34102b09fa4c59c2619148440bf26802c6f858b8eee6d8c697bad2c4d5a0f76c6a4cdd3b8fdc21e447920491ef40578b68a7a5dfda04fa235fac01ad4e824b627137dc48807100e52ec5ae2f3a3fd84d68b824033b4f0ee28a9e72333b4e209ae905d0781e4fe8116e03b1ca5c3b1ea84974cabaa0214ed15bfe01e974491e8a20f9d03ed1b73799b083f3a65e809c3ff3cf126288fc1627409d46f78b5fe8b8ba0b3ddc3ac79aecd6eee2e0cc59826e5798f48f80f0c7f549b3a656e9acbc5e51bdc3becef93533166c1d9ffe4335ec973d3d27ce5987d150f554c4095650528578fe4858b670b0786f23c886612191f89ec57970dbc0e33cd62b57a08fa940b339577fd12d07dec2ac50e9e0b27f0716b3233803153389a95df956637af8d9778e27bce49ab0a832978712a074d3f7516ad512ed0d9b43049b5990c841a7b7146a24c62fb70645b8d85b6c8863d5c6aab03638ffa4e30c8de24383cf320eee735a4fd37262d473076f495da8b2f0f028b8f178c238010738d6afb1dc2e48089e80f6a7658ad3496f1a1f7f78abdcf934c733d22abb0671a0d41b9b33a5faf99d7b82166e27df0f97a7953dcc1fb364478200253757e8311ba61cb4c78a380cdd820553c7296816210f64b34619966f1540a407c8d6e8e30788909de19ede4116d09a14ce26ad59957add80b90602855c0134ba7fe8afd4493f7cd9ced61fda7d0ae02505c046acf68d68ecd9b1507a4d4eba4c2c834777b2c3c5a8b3c06677fe468072dcab48c1ac9deec30265c7f6c5864df89e25bba52715c82e9921db601b3935f5047b8cc07351b9965b1a1f6ef36c1fba89d9d96e332eacc1e8a78e09d7d6ba30845866449ed5264f763735d4e7cc133dba4b296b2dd9331efea01e5b3d05f38055e41c49993d679ef133b9b1af435fd0ac5fad33f571c76d02c40d4e301110b4442aa134364f0456da0cf362b2c27ebd667c0969ae09dad18becba9d6918fb1e741f685735cc7078f0e6328181a83da67516fac31522f9d9fc64a4b769e57e76bfff6f9867fa2fee1e7dddd11128322210e44eeef6db7269dfa1bfbd9099dd6f8219d585c22c20483251447772719a6115ccb690609de352989610a138110c884562b65de3cf63c3ebe9adfeb53c6e4ecc637c98b60161f71952b84c6fc4cea6af0ed533144bde4f8fbab2d3ffe0b2a5d0c55ec9979ea85a25045ad3a84becf0e891b89c1a83178d7368aea4bdfa0ebd46b8e110a2972c8ac96e10ac630e89f8d76bf35b03b5ecd393d1986fc61318e08ef02721e5f2cd2fe098ebcd1bd30a8f87b2a5650b51dd50d0d78ab7fe66490f5827372f1779d3d389e9fa66bd0296f0203af010d8f76783837cdde2555a90be577626a12de47d4da638efd0017750a230485f6ade34a27284d85dd87f9db8a832c571106d8296629418777b4d933fa049f0f4e5958c193e889305074091be14c66a4bf02cdfe1e8d26a5d21fa78c5628a7ee3d7a0c550296b2f0625e2dd18d45f2d45bee6746d4462c92bc3cf50503c7479bd121393821afe1cd7144ea37f4e8e5ee21f739024ad25af9430dee006b76617725556ff8a820b767fa821629819732f086a5fdf2ccb4edae0aceb3d6dea698e798ead905a2eef9065d633b007271e93101a71cbe385f56e32b3a8fb081c5c1ab09b729f89294a0007df3a3b8e93686020d993b812c6f85fe1618db897cd67be6cd5053dc8490bbebee133d140503c4aa51eea0c156523a1d81ae849dbe5a273bfc0de94836f8160ea9f146147fc02dd7b55dca6a2a43692268ee98f51fcd2d3faa76071d9716e877b2a3dcb51a51d5359a2ee705da52b43306f1f3caf33342fc281bc9c58d1ce05ecdeca371e3a788542f8fa999e4d8e10e66f0b6053d7d4cfc6acb815628bc2409b3dec01726121c267b3ee85fd61bbbdda68ae2c13026863e4a54b93d956fe692707a179411c841ca7d2f33a5223181b18b7ba2eebdd7c2a8dec3ac2a317b5fbd996e8598c394ee627308f0e887480a8dcd59b0256b636f4c62566501a733fa74232945ba1d9e2bae347391bf9ae2da4d3af2b262b772421fd3a5cab46862ea6049f5c9c76dd8549ce0e6c31c792b81b6b21f0bcca18bb2fa6a9d4d6e0a837bb119e2e002a69d6ca95a4b2acc463076c2e05731ef0cfaea84387a6baf6737cc14a25f5329ea924090311213344625a69ee382dd4bc72e00e63329956f3e021092585c9affa06a95bd0ef653ae9ff0abed5ee561ada4f83d8ef202d9c0b2225ebe8660cc408859d45e0332f4f78f6a339bce9d12ca2bc5116a8fd4007c485f5c1c41af96c41d96db35411842d7babc05c8b228066dccb9b67f348974363be521e41fa94d2034a0bc1e87360a80606e1e1bfa8e6399601b30bf93ac41129869158bc2b791b50e51519133ab58afd4023d4d721129b1307f054103a47c49e0524ac4df511c3409fa62d8b5c1a897794600f53efdcc987e06bffd77c9fc75fb7221ef29ed2f7e3e8abcb4a1875b85bd5176a6fba9a361d8684876508443bd50e630f4c684002b15930cf81d740b880eed25d22d8de8c00066790df084fea7c5021184a210a6d24f9bc862c4e3eafbb1782fa240ecfa5959d7a681bae84e8a96a5ff45dea4f9e16dd2cff2dccc6cf4042b44b7ad1f55dc1db5998ed40a409c0e67e1e64fab423d2c00fabb8976d9dacf0c82530e356a99f75082f3411adddfe4ab1ad3b55599fa15450dd5feee23591f1ce398e4c5ae8aad71ad26ea189c333c8467d1eaba9589bb8c41bbfe8c0c173e5446bc06b578c1db849fabe5fcd8fe0fca94bdc799b53b897249826037499e8b6213d640724fda1bcc9341ac61fbea02c8f39a53c496902d5c7922f678a273cdf5ffff38ea028ae19dc72f0b0688f2b9b7d5a9c04153c10ff4168cf9f243dea03b336be778f6c79d67a2d0ade82863eaf95d6fc7f745569864f369f4b39177c356c8c393bded485df28622f01251e58f3d39498520ff90e6c670f0dce5b494cb1d78dfad108406dc5857086d386bd42bd03fe716f049407e5e55caa0e73e96c1a4f6d5791ce7195b2ce72de52ed617ecefaeeabfa9350af49d1d91f9a4b97dc0808869b916f34ee242c40fe8c8aee57b6ddb69f9a10636e481dfa059ef001bad7020266f0d74b14edce6c18ffef854768a60885bad798658a6b9d0b438c483ba159346d5ce0771f53ff18e0bd47d8583bd56237f8da2747ac7eb2a87b6e26c4820d4fe18b76e06bb6e0c0cdf478b4aecd381c2a6ca9f10ec433f0aca63a66d04f70557baf9f2844005351a21664c2430fb0002cd03bcf0b2004068a2567f91a9fbee8c6d948fb35d48527b23e1398ce9f535e2b0b33c2bc31ab737ba4b980f46f5d424e33892c8093f3cd18510a3157afc023f63ad3ba999e950747c78c06ab141a26d74ffc049a6f76c465f9f9f03a8d339a8e61fef26a5239fbc11c01a87800c81efd7b9f28ee2ab2ed88a383f5013bfd6671ea3086121b235a0cc45ccb300c02588895f8d13ec7e00a3aaaa8b0e739f666fd1b13a90b23998704859c9c76108ed7ecdc63770e6ebaa0aeb9208b92ec4e948ac7fc81cc6f305f06c2f2d8c9267463af92e185ff627eed54313fa2ee0bff2cfa8be411982fd19fa88db5ec99f238f88782f8c7a957bef14f79351b63799a4cce160357c068987a5516b04c79644c140850cddc8bd5541fcca9e30826aad864240f434bd1fc67b58e3d664f782e9e46edcb34e2db98a39c23e334e51c71c9fa466470992cc1fbc36c3c8ff4340be67f9b85a74c9114cb9fe5ca4dcbb641ea17a54ba4658aeaa515109e117625a6196dd66d3584d293b468fce63b5a9c4b9461700c74ae955539bfbbe3eccfa7d9c9f737792a9d4b978baa2e92819e88340b73c88c2900b723248b18ae9414cb37a64ef8cb8ca85cda9677d9f1e71a6b70fe3ad17f2d13c1df48d93bfa50fd939a72ea26f9fbeaa6f8af2eec91b04a8fa7dc14fec0f54fcd1c5c848b4432f979f10e661cd2d7f8ff669ce99f9813fc5440fbbeb35f1a5e5115f5ca35dcc270bdbcae07a9ae8e22aabf8178379dee08874ec7840de27815890a88fc9a3bcfa88a33f9baef9af0ae01b2bd34a907f1151cb14bc8b396bc43a60f884f425e4a04348cc645aae68db49980139ddad0fed303e40b124fd654b36c961a56c44cc3686a7529b1f1ee47da3a0f1158542337df15780444790a2ff1b57e062f0db66730c9f98de395f939f44188225211c514447f67fcbf320a34c43ce09ed272bb992db3a35ae2c3c491c36f2de88984129fcea1ffd235aff7bef7fa95d65894db9a5f1b348efcb571a81b3d73ccd07cbef052389001e4d456800e05ca53bcf3485ce05791ff65a9f7913416ae26972f34f51a3270580b81307ce31c98eda06f3b35890ce317e79a16d728cd0bb6a3835667555c0c5138cfa5305a91db1f873b2a75b82ffcb27616ee67777708f7dc2ed9ddbeb38a60f446d3ac88ded25265c25ef38b0755a9d34bab5e669b6501d8c9787aae7eced9945cad3d4d1c32fa68b48a1d773750f814631db3e088c1b5e7ffa854ea1343d94ec1343918d7a1c5a095bb72b00eb3bff210aeec0b8a581a2a13429b83a193f4d447059265b63c4b8f8ea1b9494f65e79844d956c5d80780849dc086506e9eba002e682a1bae1543f8289588c574bb6ca9a2e57b908aaffed23ecf3536abaf96fe08291f3d70773288b4698e972b0187385dfff4cba59175814e75e7e5146205c7f2d2f749583b393f46c448c152d8be50d60ed8d8bdb30fc7925656a0f90b1de967c729980815e5f19ed453fbefcff67832cb90d753410a0b18eb7504600b11b0360c3d3594d48d832160d357afc1f17dc71dccabef7bbcf1fdd55b48cb02135c32650ab07b902f36b48be9376b2dd68343eacfe80d9dab3205a393a4c6ffd405f6db323dea11be4f22ce50df1e0cfec9e9b1e23acb94d66ea787d08f615a7c7288cdf1921a13a85d885e47cf1067d89ebad5b92ce5000000008d74bd2d5b78366f998cc35bf35e45d06128f1c5984fabee7542642bbf6d981b60759d3e7900e5b3d1d7310f90df0c88a600ff2f39932bf7411e61c692c9444dc9ae0dff28c0b94292c430ac4464e83ce8a29b886f45c98b8396667740c5be51e592eac0250d6e479505d36e930ca3a32cb671d58707d25b10e2660cd5e661b08e268c8bf1b3cbceb2d995a2a6fdfe5475cccc965f71baa7c84054e3bb6cbcb7167b06c708cd72ad4301e943dd1b2b2c325f682be3eaae730a8ed8bc3134b28d1ce04543bc66a529744561c42d25e65c7b5cc2a17875ebf35e53aa46e1edec29ff8d046a7e01459d9639c10d1df998cd9a12d7e50b2dc71ee7338cf71beb72d5020dc69eeafc354bf822d65ee0328eb07d04ac0d266fdb53227a158411da5ded254b3c359ee710e0278e1a06f06002538e108450fd6b11949fdc618a29baf34f232aa192230ddb318aa6d59d122257e50713fe73e6c0059399589c382dc901a8c3381139436f7331b69f457bbb38ed54daaa07a52cceb053c32690836c664b73d86261216b8610fc7b4d53dd3e5d9bcb3e25528e132911cac37e7f2618274c733b5ae02f9c27638d9e11988f1dfbb281ffd8cddf8558a481861cbe9d53a4ad8282d3587449cd51759ca397eda122d286e117d01539359870b94c98a3ce383ed1d280bcceb228acf73193e87fd3650e4dfd563cc55bfbc8626a41293cc90ef76e28e2dedaf968602d2997ae1c2752a0febe3a78f3756d40201ae13074091238324422caabe22c66b7866065264261fc2c3e0569493468d1c1c36259aedd5f078a231e72decd70f4de8532f6753287435296f33a096bc1c8b0ebb68c9f783881e45ac54159ec1c2f9e1f5cb48f96729a62d1b4fdaa89ef5de8741bca04e953534dc977e881a61281812af435206378eff173d7929ab4967e511bdc14e6d49cba517b0563c14fcd6ba38ef32bc48a00643416d7e34f7465b3e6240589d854db4d9714e998f2edf3a03986598a52aaf647d938f4a8e07c1c29615803af6cd403d261ad6da3c1c804034b4a4eef3ea1cc8db39d9e171b3f6dd074388577a4eb901c25c8031e4592cea80b6354850657f53b2acd910ec2c5a7db6abb0153e051dadfbcdf047e35591b96b5657ca55d99ef6fb48e07c34321cd20c40b30a646132f8afcb9426fe84a790567fb847076a8762ca29cfb037e0c948edc12122a1160a55d465f5c912406a10dc0d3c1156cd207e9ffe906d267c9c870521934e1c56af460c0ad0dea9c929acf85768e22bb65eca6e25e4ec8e6edb7a6215e8c7e5fdb56c7131b156ab6a78fc808f8f17a2708ff68b37778c00b3b546004fb2b2c588d8ca8276d281026bfe896698569814410422f27421b8fc5c09d47635f17ddf6b9f56a203c991514678c18a4afabe1eeca6fce1187fffcb6ebdacfc6cac9750766ed40c80e7eceb342a3fa6f86d014949f9d111bfd96e2a39d364f2e2722f2d9ab0577befe26055890161d780e52eff4022461c1d3b019b86af28c4f02fd1f7496d8c141344ad5756bcdc45158f3af7aac227c8853f607cae412db6fa924c039859fe455857bd5fde66cc1b773c12f516401a31c80d750079247c128a103361e7f0a392d21b4b1b594307ff6b37e5a242666209ec517561e04645b92e7cf3cff1a6c76c900d12d9556e2962c535401b1e61fa85e06551ed678703fb3bf8590f2608ae3c278b8d1ac286af38061afbbc3cb27ee7adc6ad299151cd00a84506e6a97648ff99f2a9d35d8421e71589437406fa8e6def8ce34c9abe5de3481c492887176d4485dac794b84567d5ebaf68d0007cb2256a0f1ce4318f6891f750fa9696fed3525059688cf973e70d688b1759cd0f3dfb0b2a7078174b978767cbdbfc3f7d5850e2f7772e2bd6e3ed69ef13cc141238b5ee04b6615e33c42fcd6cf979a0ac848458b713b9a988c1e3fc32f2a182fc0cab2e6933e9aa5c2d77db8c6a1802b43bd8220ff0ca92229fc26a44761d00eeebec834e5f7d382b4f58a2759c56e53b163dae034ffa1970acc57165746e575470e13c4044f392ae4bea93e7d666256436507bb987a247785301274d4f262f94989cdc94b209b7499bd0cb4437525b72be79c87c6076533e4a14799a60bd3563d46ee4767108bed7e637cfed6f3139637bb01f36385dc5873eed726fbec9a87da294cc11db8b49fe45b798ae74e1a8cb0f2907eb0178d2baf5f0f88f654baab9f147741945c496ddea1cfed65a82e913a131c4ac7bb6f0d8d5d28225dab8a33c6e60c0d2b2d5dbd8c35089f13f9a2ae81ec9addaefea9b8ddabc8cdeb6437381ce346db6e14d9d1e8bb4662b508d61da77fc8d9ebebceb1c23be5d0a7bba4a48c0591333ab7779bae78ff23c4bbf8a8cf30f3120a5b63a047064d7ed7d37191cf39b6d1e8ffe3b47379767bd691cb855a9c938e9a0235a5ec9c316a6dceca63fa5fe6df0b9f0d6b38add216aaf2726d3377ab827b00b4cbf490708a0f679b8cd7caadb3dee40cc98f778917d6a6263fcc0747bf75fd676d84abb7d10087da323f95c2571139fd4c9826ad5db6ee4c246b9da20592cae11f9264bd2945aa1a427b2acefb514a2daafbbae35ff761eb1e3b98b4a1dfca348b8c4ff96325a618d677180ceb7e916654ecc2deecb4e61d01080f44b98776b1b43aebeffe2c14006dd1d78c8babf1179f42fd20d87654d3246d41e9dc633eac1741be44f8d751d8c9fd57316fe06d60872939b7a2906bb27a299a3408a51d74e5d98417f05f85fc1b332e103e79203e9fe344dc1d1572de39d914c5270c839870d2b33da5a6efc08c4f0c8227cc35a7f77c6a55f80ceef90e217c80e5ecb4c236685f5219787b01612cfbac90794e8269c07fb7ca4f7dba4defb2aae2b37f7b1696e78de15dbb1b6d4ee0cc4c0fae274b2c2de9343862de1d9847515ad235b1837daa9b814f19e895ae3966ed262e3e7add9f19009e6b61462917b29502b67e124c43538a6bcab7296529e01bb26ab8b3ef094ed057383c4f92790b6f705ae9d943c4e8dad84f6ef82b54d062713c16960fb475d74d46a1b16062563da3391cc6ff5185162c31ff7339e4837e38adab8ab911abaaa006e313dd19a1f92b4f7bede4525b154e1b9f796136a85f3602da011ae2232be902347e08ce0bbf3d23d91c4aac11c8824caafa1d1ff0343ce655802c1915f3ae7c0c670b18e56e139be66a33613afcb3b1928613b3afba9d635070af678216d57023d1911f0eb7ebddefc96f0efd8e9dc10e8a87a68393e19733ef900c6264722940750ae16f664e445414e85e98570303c6d87d7f265cfae0a1e9314fc14674c2871c0d59bbe2eddaf9330a4e2a28673af73910d6cb90790f800e89d55a2930910a8430ade9551819d83d5ea6da4e58326b7ce555d01da86ea78200f0219ec92473da95cd5a632c525ca9fbcddebb8168881cdb2f5da787d0e31881e2b17d78184f3a0bed8662486d3937dab275d050b9dd5a2ce904208a91a467afc33e10fb6c1ca788a5ef30d6e8b615ec0ae1503fea7006569559b7b155c31b196b85881c5671173c06fc5373e9fd973e7111ed45874609bf3c88c6db732210a3ea04cb68662bbc2048bb55d811482af5c658e29bd18c57ffa25e88d7297cd20d4c2b13007cfae89f4dcd90177a0806a2ceb2095333b58f828c093b9bf63cd07e3d56a446fd12e755fd651211bc160948836939c17623b317b9e935307044bab2c11879a62288e7ecbbb97f10f52516f517b7b8e44cff5964fdfaf8044065056b48db13b1365004c336afa3535af1242c9b7271b8b1ba2213fcbb80926bcd394815cd7c27e3aeb2348dc45f5e06e32f5bd56d1c472f41b564ec0939cd012028412883cc098d086fd43858747b746be72b979d175f6a6447fc5908616dec7fc6c962e12e96e09bd068acd2fcf0ce1cc26d9f82b2b91bc9aafcbf8435011f73b6a8ea1bb2f3289b23236136b31656600762feff53e607df8cf3c9a7f257b212630c19f142e4cf5094250b629cabb145c77f1f14ad60ab7617078f810a766cfa341fb7c16086609bc0a768fb1cd782606f32b83a0a55d883269a05b80275612dc571cb993ea9e447b4d32570d412203ab4c8b050b63bb5ac0f8d6f4e9a1644e4b622587b2ae125c2093bd363493d58544d6303a0de17780fcd83e993aa83f4432274eee1e6333fcdc77bcfdea95b8b9ed787723e35b71f1dbe89ff1e3e6fde146c05b6fe9eae52b472624e412253a63e7fcf1b77dbff7509eec5a55501e222f66bd84d36663cd244fa1556bd34b4c9957a93a71e63961ffc7700c5545acdd3e79da41e1cfaca0956d4978222cda23a574d691dbb6c6bd083c70c2782c045bbbe0fcaa10efbc002af6832e3fa7dda0ec8ff6ded69302d55d5a62a7ec213f16ecc5e3304a83103d1c2b21e04e3f5f3730339a630a407e8cc6a5afd2f2ed78ff992035a3783a2708195a46e565a9113be8c228ccaae3510363b475732ad48fe8ff34801f4c35132359d4c5c5bff65141f4a8684d462cf5d97b44496440fff3f7a28d28bbaa8e6db2a6064cbe9fca4679afe8ca6dd27a25c56f3e58165040f19a0455199a0ece4583f060979427f2f3495f40a83bc6ee3eaadab18705d464662b8aba9c7aa2f29114f7acc247548a85bd44723064abeee18f7f558f6d0d74fa08103dd906124454745d23005c425b260b0034372123b642a0cbebbc1a0bcf0cfc3639876eceac5f9734057ff659cfd35b1a3eaa768b86d66244aabc23a45676a59d492614f1c0011c9253e53fc7bb3e20d303afdb5b6614dcc7bbf72a339e414672aac23c2e2983083f08dbc34e3452def00f402598b6aaa4f0d896d1648b1442621993b7d0c930560cb6152b9ce59f94356726816a224fca84da5dbde6675d20f546a3e4635e82ff9575cac9160e6819f", 0xfffffffffffffd8a, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000000c0), 0xce4, r2}, 0x38) r3 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f0000000100)=0x3) 5.685835516s ago: executing program 2 (id=2271): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000004800010029bd7000ffdbdf250a008000", @ANYRES32, @ANYBLOB="f9ffffff080002000b000000140001feff000000000000000000ffff00000000140001"], 0x4c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x855) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 5.604193261s ago: executing program 0 (id=2273): syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f00000000c0)={[{@filestreams}, {@usrquota}, {@noalign}, {@pquota}, {@inode32}, {@discard}, {@prjquota}, {@usrquota}, {@gquota}, {@nolargeio}]}, 0x1, 0x975c, &(0x7f000001c600)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1d81ca7, 0x0, 0x82, 0x0, &(0x7f0000000080)) syz_mount_image$vfat(&(0x7f0000000bc0), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xe8) 5.404867494s ago: executing program 2 (id=2275): unshare(0x26020480) fchdir(0xffffffffffffffff) 5.32835179s ago: executing program 2 (id=2276): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) getsockopt$inet_opts(r1, 0x0, 0x6, &(0x7f00000001c0)=""/169, &(0x7f00000000c0)=0xa9) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xb, 0xff, 0x5, 0x7f, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r3}, &(0x7f0000000780)=0x7d8, &(0x7f0000000180)='%pK \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r3}, &(0x7f0000000100)=0x7d8, &(0x7f0000000500)='%pi6 \x00'}, 0x2a) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) ioctl$TIOCVHANGUP(r0, 0x5437, 0x200000000000000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x400802, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r5, 0xaea2, 0x5) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000006c00010029bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="9d26a39e0000f1ff130035007465616d5f736c6176655f30000000002c003480140013006361696630000000000000000012de0014"], 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x4000804) getgroups(0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 5.267851669s ago: executing program 4 (id=2277): keyctl$session_to_parent(0x12) 4.271288826s ago: executing program 4 (id=2281): syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000001540)='./file1\x00', 0x1000000, &(0x7f00000001c0)={[{@shortname_win95}, {@utf8no}, {@utf8no}, {@shortname_lower}, {@fat=@codepage={'codepage', 0x3d, '869'}}, {@utf8no}, {@utf8no}, {@utf8no}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp737'}}, {@shortname_win95}, {@shortname_win95}]}, 0x15, 0x2ae, &(0x7f0000000900)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) 4.112844067s ago: executing program 2 (id=2283): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2b) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0x1, 0xfffff109, 0x3132564e, 0x1, 0xc, [{0x27b, 0x1}, {0x7, 0xffffff65}, {0x3ff, 0x7f}, {0x7, 0xa}, {0x0, 0x10001}, {0x8da, 0x2}, {0xbbf3, 0x80000001}, {0x4b82}], 0xd2, 0x7, 0x9, 0x1, 0x2}}) 3.318193101s ago: executing program 4 (id=2285): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff0000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0xb, &(0x7f0000000040)={0x0, 0xc8a1, 0xdb00, 0x8, 0x29}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200cc0c5, &(0x7f0000000080)={0xa, 0x4c20, 0x0, @mcast2}, 0x1c) sendto$inet6(r0, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0) 3.293991616s ago: executing program 3 (id=2286): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = eventfd2(0x6, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'pim6reg0\x00', 0x1}) io_setup(0x81, &(0x7f0000000400)=0x0) io_submit(r2, 0x3, &(0x7f00000006c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x9, r1, &(0x7f0000000040)='K', 0x1, 0x200000000000, 0x0, 0x1, r0}, 0x0, 0x0]) 3.26347352s ago: executing program 1 (id=2287): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f0000001180)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0, @ANYBLOB=',force,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c63726561746f723de3fa1e832c6e6c733d63703836392c0069471b720dbbbc038d139a61108c293c04744800574dadce1bf6c9051a85154eb0159cbeb7cd19c17cd475273a1b71a0406f0f8d69b87bc9cc8b060529109b020965b07f20ff5b89fcb649ff28"], 0x44, 0x6fd, &(0x7f0000000500)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1, 0x0) pwrite64(r0, &(0x7f0000000140)="9a", 0x1, 0xe7c) 3.114325143s ago: executing program 1 (id=2288): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x24000040) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x124) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)={0x14, 0x7, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x20004840}, 0x20008000) 3.114066883s ago: executing program 4 (id=2289): ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20004000) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) accept4(r3, 0x0, 0x0, 0x0) 2.742019234s ago: executing program 3 (id=2290): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = creat(0x0, 0x0) close(r1) socket$phonet_pipe(0x23, 0x5, 0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000100)=0x9) connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) close(0xffffffffffffffff) 2.723337331s ago: executing program 0 (id=2291): keyctl$session_to_parent(0x12) 2.532739586s ago: executing program 0 (id=2292): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='nv', 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xffffffffffffff81) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000004180)='/proc/mdstat\x00', 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_create(0x0, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) openat$ptp0(0xffffffffffffff9c, 0x0, 0x141000, 0x0) socket$inet(0x2, 0x80000, 0x9) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) 1.938265466s ago: executing program 1 (id=2293): socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3380, 0x1, 0x40024e}, 0x0, 0x0) eventfd2(0x7fffffff, 0x800) socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x10b701) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) 1.393640666s ago: executing program 3 (id=2294): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x24000040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004840}, 0x20008000) getsockopt$bt_hci(r0, 0x0, 0x2, &(0x7f00000012c0)=""/4096, &(0x7f0000000240)=0x1000) 1.392455596s ago: executing program 0 (id=2295): syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "45208e", 0x30, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, {[], @param_prob={0x4, 0x1, 0x0, 0x1, {0x3, 0x6, "db887a", 0xfffb, 0x2b, 0x1, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @private2}}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x40000) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000001f40)=@raw={'raw\x00', 0x8, 0x3, 0x3e8, 0x248, 0x43, 0xa0, 0x248, 0x98, 0x350, 0x178, 0x178, 0x350, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x228, 0x248, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@string={{0xc0}, {0x0, 0x3, 'kmp\x00', "7af8bdb4c056dc65949041982abfe9ed51b01289c0026e2e6034ed587be5f09017b907388134b0ede40eb8d493f20d534fc37f23ec524d91a7a041f36bb1d1c3ab474544c5ef3f2fa69a80a0d967ee4464257d28d31e6843bc1221dfb9a6a27ad13af7061b737fd97d94f50942c68242819c941c0b4d9ec154c7d327187e8198", 0x38, 0x2, {0x1}}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe8, 0x108, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x448) 1.373484083s ago: executing program 1 (id=2296): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_read_part_table(0x5e4, &(0x7f0000000000)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000100)={0xaee, 0x0, 0x81, 0x8, 0x4f, "0d418107009188b791e15b1b6f6ff88c6b00", 0x1, 0x100022}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x5) 1.211162653s ago: executing program 1 (id=2297): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000008}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20044014) syz_open_dev$sndctrl(0x0, 0x0, 0x200d01) syz_open_dev$sndctrl(&(0x7f0000000000), 0x802, 0x100) syz_io_uring_setup(0x495, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_UNLINKAT={0x24, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c) setsockopt$IPT_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b0, 0x0, 0x238, 0x170, 0xd8, 0x0, 0x410, 0x410, 0x410, 0x410, 0x410, 0x6, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xffffff00, 0x0, 'veth0\x00', 'veth0_to_bridge\x00', {}, {0xff}, 0x62, 0x0, 0x50}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0xb, 0x4, @ipv4=@loopback, 0x4e24}}}, {{@ip={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000, 0xff, 'geneve0\x00', 'veth1_to_team\x00', {}, {}, 0x89, 0x6, 0x24}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xff, 'ip6_vti0\x00', 'geneve0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x5}, {0x0, 0x6}}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x31, 0x7, 0x1}}}, {{@ip={@loopback, @multicast1, 0xff, 0xff, 'veth0_to_batadv\x00', 'bridge_slave_0\x00', {0xff}, {0xff}, 0x44, 0x1, 0x15}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x55d, 0x3, @multicast1, 0x4e21}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x60) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x7000, 0x0, 0x3) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, 0x0) 453.280173ms ago: executing program 3 (id=2298): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x2, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x41000, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 432.984869ms ago: executing program 1 (id=2299): syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file1\x00', 0x0, &(0x7f00000006c0)={[{@gquota}, {@nolargeio}, {@uqnoenforce}]}, 0x1, 0x9793, &(0x7f0000012f40)="$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") r0 = open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x21) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) 254.470187ms ago: executing program 3 (id=2300): syz_mount_image$hfs(&(0x7f00000007c0), &(0x7f0000000000)='./file1\x00', 0x30008c0, &(0x7f0000000980)=ANY=[@ANYBLOB="66696c655f756d61736b3d30303030303030303030303030303030303030373737372c6469725f756d61736b3d30303030303030303030303030303030303030303030302c696f636861727365743d69736f383835392d362c636f6465706167653d63703835352c63726561746f723d4ddd71752c00eeabc72a9832436950c6116498dda8be60a94746ea68766f63d1d63944fbda2a9337439b37b6f2a694ba98f40070d09c3890bd28a2018f1adfe1e0a630020a9cac1a43800a70a9328ddb2a2f2e207da7cd3caf243b39eaff4966b7aa97cb6cc7d2cfc59e7a976de0a00d23c7ffaaa056cc4f8bc7b4c0f9a21db642b3e832e30a90ba1b9e7933b77c60f6a1b9ca9128f0a2d0e23373c9d15c79865bae97ddd82b98001b6aa9c5390e4deaf5f0ee492c6842b1c08486e479a889491459a257e9d4083634dac6cd58520f72e6c2f11bbd5b03655bb1863b16f3", @ANYBLOB="11f4579be01e435c584a33c63f8173f96bc4546035804d47be19163bd9e589bfdd0a9e6804495a4e4d83804e78ac5a72446295afd79de3fd6a02932a26ab4045133c371e56b0d48544db3c7db23a432f837b93f89b6f223cd1f6731d407ffdb1dd9467f5cd2d6c4e8b9d4f50d338ac91501a4bb780c4723929e22f55254546facc4f0284e644e6", @ANYRES8, @ANYRESHEX=0x0], 0x11, 0x314, &(0x7f0000000b80)="$eJzs3U1rE08cB/Dv7KZN+m/pf7UVwYNINWAvovUiXiIlL8KTqE0KxSWitviAYBVPIvbu3aNXX4N4UQTP9eRJPHiqBxmZh2SfN6lmd1P9fsCy2dmZ/e3OzlPALIjon7Xa3n11/ov6JwAXLvDsIuAAaAA1AEdwtLHV29zY9LudvIJcHK+bXAImp0gcs9brpmVtwOawPPWphrnwPiqGlPLS56qDoMrp1i/d6M4Tuieo29apExsVxZfl8f6zfJsBsF1EMBMlv6bEHvZwD/OlhUNERBNJmPHdseP8nJ2/Ow7QtIOJSpu48f937VUdQOFkbmpo/NerLClUvf+vk4L1nl7CqXSnv0pMK+t17PNU7PM0zNMTmV2KYatKHYszs77hd8+s3fQ7Dp6gZYUOW9R/O/bxtCLR1hNFL6WsTXMMSpvJPESkzyhn9TVMqWtYMfHfBRCJfyH3jAUQ78QHcUV4eInOYP5Xk0JVk64pL1ZTJv6z2SXqq/TUUbDdRqvVciKHHNInOWbPYA25ygbcrDNO2zIjXxB4w+LUuQ7HcpmrOzck10JqrhW9vQwnI9diJJe6mvUN/232qUohXojLYglf8Qbt0PzfUfE1kWyZoYc+aDWiaYYCfcdV64zWbEitaXsiPXJsfdp9aPYnm8vgLiYbrPUjv0+jfXiO67iA+Tv3H9xwfb97W21c89XjqjcGe27N2Q2/O/UUCCdNyga2gz11SC1xcH9QKjOw5bEWqPqPlCTVsHrf+3tUKxtW4KM/jUf1A4XeutkRrmJ/G/2uazwFtt+P50HqTxsiST+llCU2oh17Z+JJ1XRLVK6g0kc7PmWqQwebqlJh1n/BeqVmJnvqj5c6Tx/xiwBbolRz7MEKLsgrzYwcwH85K7i0YjNXcMk1V2LNqNdcJ08Dp0Y/o2fj/EuINj7iKr//JyIiIiIiIiIiIiIiIiIiIiIiIiI6aMr4zzBVXyMRERERERERERERERERERERERERERER0UG32oD53Wv03/+L0d7/G38Vi2t+Enws7//d6YHv/yUq3q8AAAD///B/c8c=") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) 0s ago: executing program 3 (id=2301): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000380)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e21, 0x8, @local}]}, &(0x7f0000000180)=0x10) kernel console output (not intermixed with test programs): ] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 62.567161][ T4304] netlink: 36 bytes leftover after parsing attributes in process `syz.0.13'. [ 63.022985][ T21] usb 3-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 63.102085][ T4304] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.110333][ T4304] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.328576][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.337203][ T21] usb 3-1: Product: syz [ 63.341391][ T21] usb 3-1: Manufacturer: syz [ 63.347347][ T21] usb 3-1: SerialNumber: syz [ 63.364694][ T21] usb 3-1: config 0 descriptor?? [ 63.509930][ T4313] sctp: [Deprecated]: syz.1.14 (pid 4313) Use of int in maxseg socket option. [ 63.509930][ T4313] Use struct sctp_assoc_value instead [ 64.204909][ T21] msi2500 3-1:0.0: Registered as swradio24 [ 64.210934][ T21] msi2500 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 64.650755][ T21] usb 3-1: USB disconnect, device number 2 [ 64.730483][ T4322] QAT: failed to copy from user cfg_data. [ 64.746079][ T4322] netlink: 20 bytes leftover after parsing attributes in process `syz.1.17'. [ 64.755450][ T4322] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 65.492118][ T26] audit: type=1800 audit(1773275872.747:2): pid=4345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.27" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 65.572865][ T4347] netlink: 132 bytes leftover after parsing attributes in process `syz.4.25'. [ 66.212317][ T4350] sctp: [Deprecated]: syz.4.28 (pid 4350) Use of int in maxseg socket option. [ 66.212317][ T4350] Use struct sctp_assoc_value instead [ 66.588178][ T21] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 67.092706][ T21] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 67.109958][ T21] usb 3-1: config 0 has no interface number 0 [ 67.129844][ T21] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 67.142093][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.164988][ T21] usb 3-1: config 0 descriptor?? [ 67.205936][ T21] usb 3-1: selecting invalid altsetting 1 [ 67.230532][ T21] dvb_ttusb_budget: ttusb_init_controller: error [ 67.250630][ T21] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 67.373627][ T4365] QAT: failed to copy from user cfg_data. [ 67.386433][ T4365] netlink: 20 bytes leftover after parsing attributes in process `syz.0.32'. [ 67.396348][ T4365] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 68.163006][ T4369] capability: warning: `syz.1.33' uses deprecated v2 capabilities in a way that may be insecure [ 68.228142][ T21] DVB: Unable to find symbol cx22700_attach() [ 68.367109][ T21] DVB: Unable to find symbol tda10046_attach() [ 68.382287][ T21] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 68.410898][ T21] usb 3-1: USB disconnect, device number 3 [ 68.716860][ T26] audit: type=1800 audit(1773275875.977:3): pid=4394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.40" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 70.011659][ T4403] device syzkaller0 entered promiscuous mode [ 70.593148][ T4419] QAT: failed to copy from user cfg_data. [ 70.610865][ T4419] netlink: 20 bytes leftover after parsing attributes in process `syz.1.48'. [ 70.621128][ T4419] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 71.366314][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.375868][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.942724][ T4442] syz.4.55 uses obsolete (PF_INET,SOCK_PACKET) [ 72.399359][ T4446] loop1: detected capacity change from 0 to 256 [ 72.506846][ T4450] netlink: 'syz.2.59': attribute type 1 has an invalid length. [ 73.453767][ T4456] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 73.826450][ T4468] loop4: detected capacity change from 0 to 1024 [ 74.117890][ T4475] netlink: 132 bytes leftover after parsing attributes in process `syz.3.66'. [ 74.387076][ T4468] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 74.491635][ T4468] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 74.507668][ T4468] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 74.522585][ T4468] System zones: 0-1, 3-36 [ 74.586448][ T4468] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 75.893666][ T4495] loop2: detected capacity change from 0 to 256 [ 76.584260][ T7] cfg80211: failed to load regulatory.db [ 76.787775][ T26] audit: type=1800 audit(1773275884.047:4): pid=4504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.75" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 77.968689][ T4513] Zero length message leads to an empty skb [ 78.145595][ T4517] netlink: 'syz.2.79': attribute type 1 has an invalid length. [ 78.220078][ T4517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.312090][ T4517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.342751][ T4517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.383609][ T4517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.457219][ T4517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.533989][ T4524] netlink: 132 bytes leftover after parsing attributes in process `syz.1.81'. [ 78.737986][ T4517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.962147][ T4517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.144400][ T4517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.208686][ T4517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.246876][ T4517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.330753][ T4517] device macvlan2 entered promiscuous mode [ 79.419703][ T4532] netlink: 12 bytes leftover after parsing attributes in process `syz.3.82'. [ 79.814596][ T4532] ALSA: mixer_oss: invalid OSS volume 'LI' [ 79.999372][ T4515] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.010404][ T4515] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.063400][ T4515] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.078805][ T4515] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.325582][ T26] audit: type=1800 audit(1773275887.587:5): pid=4546 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.89" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 81.279323][ T4544] binder: 4543:4544 ioctl 4018620d 0 returned -22 [ 81.368091][ T4559] netlink: 16 bytes leftover after parsing attributes in process `syz.3.90'. [ 83.456982][ T4590] loop4: detected capacity change from 0 to 256 [ 83.578207][ T4595] device syzkaller0 entered promiscuous mode [ 83.702607][ T4592] binder: 4591:4592 ioctl 4018620d 0 returned -22 [ 84.528193][ T4597] netlink: 16 bytes leftover after parsing attributes in process `syz.2.103'. [ 84.563158][ T4603] netlink: 'syz.4.105': attribute type 1 has an invalid length. [ 84.886180][ T4603] device macvlan2 entered promiscuous mode [ 86.296030][ T4626] netlink: 12 bytes leftover after parsing attributes in process `syz.1.110'. [ 86.395844][ T4226] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0 [ 86.513008][ T4226] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0 [ 86.513243][ T4226] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0 [ 86.513386][ T4226] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0 [ 86.513542][ T4226] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0 [ 86.513696][ T4226] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0 [ 86.514030][ T4226] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0 [ 86.514207][ T4226] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0 [ 86.514355][ T4226] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0 [ 86.514481][ T4226] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0 [ 86.514627][ T4226] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0 [ 86.514772][ T4226] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0 [ 86.514918][ T4226] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0 [ 86.515039][ T4226] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0 [ 86.515192][ T4226] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0 [ 87.087372][ T4226] hid-generic 00A0:0006:0003.0001: hidraw0: HID v0.05 Device [syz1] on syz0 [ 87.423685][ T4637] netlink: 8 bytes leftover after parsing attributes in process `syz.2.114'. [ 87.434016][ T4637] netlink: 12 bytes leftover after parsing attributes in process `syz.2.114'. [ 87.461584][ T4637] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.470830][ T4637] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.479632][ T4637] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.488376][ T4637] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.505366][ T4638] netlink: 8 bytes leftover after parsing attributes in process `syz.2.114'. [ 87.514957][ T4638] netlink: 12 bytes leftover after parsing attributes in process `syz.2.114'. [ 88.292981][ T4631] fido_id[4631]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 88.493012][ T4640] binder: 4639:4640 ioctl 4018620d 0 returned -22 [ 89.559897][ T4652] netlink: 16 bytes leftover after parsing attributes in process `syz.2.117'. [ 92.197058][ T4685] netlink: 12 bytes leftover after parsing attributes in process `syz.4.123'. [ 92.809171][ T1111] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 92.922550][ T21] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 93.722905][ T1111] usb 2-1: Using ep0 maxpacket: 16 [ 93.790437][ T4705] netlink: 16 bytes leftover after parsing attributes in process `syz.2.131'. [ 93.902293][ T21] usb 5-1: Using ep0 maxpacket: 32 [ 94.662521][ T1111] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 86 [ 94.892589][ T21] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.907370][ T21] usb 5-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 94.936637][ T21] usb 5-1: config 0 interface 0 has no altsetting 0 [ 94.947541][ T21] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 94.958648][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.972689][ T21] usb 5-1: config 0 descriptor?? [ 94.990386][ T4717] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 94.993020][ T1111] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 95.167186][ T1111] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.176052][ T1111] usb 2-1: Product: syz [ 95.180340][ T1111] usb 2-1: Manufacturer: syz [ 95.185104][ T1111] usb 2-1: SerialNumber: syz [ 95.197762][ T1111] usb 2-1: config 0 descriptor?? [ 95.205447][ T4720] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 95.215490][ T4720] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 95.223323][ T4689] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 95.223453][ T4720] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 95.536448][ T21] corsair-cpro 0003:1B1C:0C10.0002: unknown main item tag 0x0 [ 95.572819][ T1111] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 95.604709][ T154] usb 2-1: Failed to submit usb control message: -71 [ 95.620325][ T21] corsair-cpro 0003:1B1C:0C10.0002: unknown main item tag 0x0 [ 95.659566][ T1111] usb 2-1: USB disconnect, device number 2 [ 95.668499][ T154] usb 2-1: unable to send the bmi data to the device: -71 [ 95.690394][ T21] corsair-cpro 0003:1B1C:0C10.0002: unknown main item tag 0x0 [ 95.718633][ T154] usb 2-1: unable to get target info from device [ 95.734307][ T21] corsair-cpro 0003:1B1C:0C10.0002: unknown main item tag 0x0 [ 95.744166][ T154] usb 2-1: could not get target info (-71) [ 95.750441][ T154] usb 2-1: could not probe fw (-71) [ 95.776806][ T4731] QAT: failed to copy from user cfg_data. [ 95.944893][ T21] corsair-cpro 0003:1B1C:0C10.0002: unknown main item tag 0x0 [ 95.949330][ T21] corsair-cpro 0003:1B1C:0C10.0002: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.4-1/input0 [ 95.964604][ T4731] netlink: 20 bytes leftover after parsing attributes in process `syz.1.138'. [ 95.964720][ T4731] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 96.068633][ T4737] netlink: 12 bytes leftover after parsing attributes in process `syz.0.139'. [ 96.447292][ T21] corsair-cpro: probe of 0003:1B1C:0C10.0002 failed with error -38 [ 96.852438][ T21] usb 5-1: USB disconnect, device number 2 [ 96.909987][ T4737] ALSA: mixer_oss: invalid OSS volume 'LI' [ 98.017207][ T4754] netlink: 16 bytes leftover after parsing attributes in process `syz.0.144'. [ 98.555560][ T4767] ======================================================= [ 98.555560][ T4767] WARNING: The mand mount option has been deprecated and [ 98.555560][ T4767] and is ignored by this kernel. Remove the mand [ 98.555560][ T4767] option from the mount to silence this warning. [ 98.555560][ T4767] ======================================================= [ 98.604009][ T4753] fido_id[4753]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 100.618693][ T4786] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.796982][ T4786] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.914156][ T4786] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.944331][ T4786] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.674095][ T4807] QAT: failed to copy from user cfg_data. [ 101.681683][ T4807] netlink: 20 bytes leftover after parsing attributes in process `syz.4.158'. [ 101.690784][ T4807] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 102.003149][ T4813] netlink: 16 bytes leftover after parsing attributes in process `syz.2.160'. [ 102.188365][ T4821] netlink: 'syz.0.164': attribute type 1 has an invalid length. [ 102.511730][ T4823] bond1: (slave gretap1): making interface the new active one [ 102.665650][ T4832] netlink: 12 bytes leftover after parsing attributes in process `syz.2.166'. [ 103.419369][ T4832] ALSA: mixer_oss: invalid OSS volume 'LI' [ 103.505277][ T4823] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 103.795349][ T26] audit: type=1800 audit(1773275911.057:6): pid=4842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.169" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 103.941221][ T4225] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 104.886361][ T4823] syz.0.164 (4823) used greatest stack depth: 20176 bytes left [ 105.011199][ T4855] netlink: 16 bytes leftover after parsing attributes in process `syz.4.173'. [ 105.072878][ T4225] usb 3-1: config index 0 descriptor too short (expected 8292, got 100) [ 105.758181][ T4225] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 105.771962][ T4225] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 105.780923][ T4225] usb 3-1: config 1 has no interface number 0 [ 105.787155][ T4225] usb 3-1: too many endpoints for config 1 interface 1 altsetting 0: 222, using maximum allowed: 30 [ 105.798139][ T4225] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.809195][ T4225] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 222 [ 105.822639][ T4225] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 106.112846][ T4225] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice=17.40 [ 107.012331][ T4225] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.020366][ T4225] usb 3-1: Product: syz [ 107.024894][ T4225] usb 3-1: Manufacturer: syz [ 107.029674][ T4225] usb 3-1: SerialNumber: syz [ 107.305250][ T4225] usb 3-1: can't set config #1, error -71 [ 107.425107][ T4225] usb 3-1: USB disconnect, device number 4 [ 108.223799][ T4881] netlink: 12 bytes leftover after parsing attributes in process `syz.2.179'. [ 108.238644][ T4881] netlink: 68 bytes leftover after parsing attributes in process `syz.2.179'. [ 108.361952][ T4881] ALSA: mixer_oss: invalid OSS volume 'LI' [ 108.392182][ C1] sched: RT throttling activated [ 110.092114][ T4896] netlink: 'syz.1.183': attribute type 1 has an invalid length. [ 110.249242][ T4897] bond1: (slave gretap1): making interface the new active one [ 110.364899][ T4897] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 110.524023][ T26] audit: type=1326 audit(1773275917.787:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4903 comm="syz.1.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6520814799 code=0x7ffc0000 [ 110.616336][ T26] audit: type=1326 audit(1773275917.807:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4903 comm="syz.1.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6520814799 code=0x7ffc0000 [ 110.794044][ T4907] netlink: 8 bytes leftover after parsing attributes in process `syz.1.187'. [ 110.803924][ T4907] netlink: 16 bytes leftover after parsing attributes in process `syz.1.187'. [ 110.817145][ T4907] netlink: 8 bytes leftover after parsing attributes in process `syz.1.187'. [ 110.826089][ T4907] netlink: 16 bytes leftover after parsing attributes in process `syz.1.187'. [ 110.852530][ T26] audit: type=1326 audit(1773275917.807:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4903 comm="syz.1.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6520814799 code=0x7ffc0000 [ 111.268801][ T26] audit: type=1326 audit(1773275917.837:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4903 comm="syz.1.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6520814799 code=0x7ffc0000 [ 111.546087][ T26] audit: type=1326 audit(1773275917.837:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4903 comm="syz.1.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f6520814799 code=0x7ffc0000 [ 111.568472][ T26] audit: type=1326 audit(1773275917.837:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4903 comm="syz.1.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6520814799 code=0x7ffc0000 [ 111.591214][ T26] audit: type=1326 audit(1773275917.837:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4903 comm="syz.1.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f6520814799 code=0x7ffc0000 [ 111.613574][ T26] audit: type=1326 audit(1773275917.837:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4903 comm="syz.1.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f6520814799 code=0x7ffc0000 [ 111.895284][ T4915] QAT: failed to copy from user cfg_data. [ 111.909059][ T4915] netlink: 20 bytes leftover after parsing attributes in process `syz.2.189'. [ 111.918580][ T4915] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 112.759660][ T4924] loop2: detected capacity change from 0 to 1024 [ 112.862098][ T4924] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 112.904535][ T4924] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 113.134055][ T4933] netlink: 36 bytes leftover after parsing attributes in process `syz.0.191'. [ 113.894851][ T4924] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 113.926738][ T4924] System zones: 0-1, 3-36 [ 113.955916][ T4924] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 116.763217][ T4960] QAT: failed to copy from user cfg_data. [ 116.773352][ T4960] netlink: 20 bytes leftover after parsing attributes in process `syz.4.202'. [ 116.782588][ T4960] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 117.133561][ T4966] netlink: 8 bytes leftover after parsing attributes in process `syz.2.199'. [ 117.142618][ T4966] netlink: 24 bytes leftover after parsing attributes in process `syz.2.199'. [ 117.153910][ T4966] netlink: 8 bytes leftover after parsing attributes in process `syz.2.199'. [ 117.163250][ T4966] netlink: 24 bytes leftover after parsing attributes in process `syz.2.199'. [ 117.321438][ T4956] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.381644][ T4956] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.404327][ T4965] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 117.431401][ T4956] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.446645][ T4956] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.664929][ T4697] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 117.914374][ T4697] usb 5-1: Using ep0 maxpacket: 8 [ 117.927357][ T4965] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 117.937958][ T4965] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.948965][ T4965] usb 2-1: config 1 interface 1 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 117.959810][ T4965] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 118.233313][ T4965] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 118.313297][ T4965] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.427882][ T4965] usb 2-1: Product: syz [ 118.481243][ T4965] usb 2-1: Manufacturer: syz [ 118.538584][ T4965] usb 2-1: SerialNumber: syz [ 118.704840][ T4697] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 118.715898][ T4697] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 118.725605][ T4697] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 118.735310][ T4697] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 14129, setting to 64 [ 118.746321][ T4697] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 118.755454][ T4697] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.780435][ T4697] usb 5-1: config 0 descriptor?? [ 118.896444][ T4997] loop3: detected capacity change from 0 to 1024 [ 118.973989][ T4997] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 119.053588][ T4997] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 119.120803][ T4997] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 119.132363][ T4227] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 119.138248][ T4997] System zones: 0-1, 3-36 [ 119.155894][ T4997] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 120.232524][ T4965] cdc_ncm 2-1:1.0: bind() failure [ 120.552459][ T4227] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 120.561171][ T4227] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 120.920136][ T4965] cdc_ncm: probe of 2-1:1.1 failed with error -71 [ 120.926941][ T4227] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 120.941959][ T4227] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 120.998096][ T4965] cdc_mbim: probe of 2-1:1.1 failed with error -71 [ 121.010292][ T4227] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 121.060231][ T4965] usbtest: probe of 2-1:1.1 failed with error -71 [ 121.547312][ T4965] usb 2-1: USB disconnect, device number 3 [ 121.553546][ T4227] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 121.579442][ T4227] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 121.670560][ T5028] QAT: failed to copy from user cfg_data. [ 121.683407][ T5028] netlink: 20 bytes leftover after parsing attributes in process `syz.4.215'. [ 121.692688][ T5028] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 122.537370][ T4227] usb 3-1: Product: syz [ 122.541566][ T4227] usb 3-1: Manufacturer: syz [ 122.751559][ T5042] netlink: 36 bytes leftover after parsing attributes in process `syz.3.218'. [ 123.234423][ T4965] usb 5-1: USB disconnect, device number 3 [ 123.353184][ T5042] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.360579][ T5042] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.109490][ T4227] usb 3-1: can't set config #1, error -71 [ 124.157055][ T5041] netlink: 8 bytes leftover after parsing attributes in process `syz.1.217'. [ 124.206642][ T5041] netlink: 24 bytes leftover after parsing attributes in process `syz.1.217'. [ 124.241577][ T4227] usb 3-1: USB disconnect, device number 5 [ 124.296478][ T5046] netlink: 8 bytes leftover after parsing attributes in process `syz.1.217'. [ 124.321974][ T5046] netlink: 24 bytes leftover after parsing attributes in process `syz.1.217'. [ 124.365897][ T5055] loop3: detected capacity change from 0 to 1024 [ 124.379264][ T4189] Bluetooth: hci0: unknown advertising packet type: 0x30 [ 124.379342][ T4189] Bluetooth: hci0: Malicious advertising data. [ 124.435558][ T5055] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 124.541405][ T5055] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 124.565479][ T5066] netlink: 165 bytes leftover after parsing attributes in process `syz.2.224'. [ 124.610140][ T5055] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 124.620205][ T5055] System zones: 0-1, 3-36 [ 124.671592][ T5055] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 127.322505][ T5102] netlink: 36 bytes leftover after parsing attributes in process `syz.1.233'. [ 127.776068][ T5102] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.783561][ T5102] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.202285][ T5109] QAT: failed to copy from user cfg_data. [ 128.211514][ T5109] netlink: 20 bytes leftover after parsing attributes in process `syz.3.234'. [ 128.220966][ T5109] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 128.958690][ T5117] netlink: 8 bytes leftover after parsing attributes in process `syz.1.235'. [ 128.967627][ T5117] netlink: 24 bytes leftover after parsing attributes in process `syz.1.235'. [ 128.978739][ T5117] netlink: 8 bytes leftover after parsing attributes in process `syz.1.235'. [ 128.987645][ T5117] netlink: 24 bytes leftover after parsing attributes in process `syz.1.235'. [ 129.369697][ T5126] loop0: detected capacity change from 0 to 1024 [ 130.045330][ T5126] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 130.067174][ T5126] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 130.148972][ T5126] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 130.179292][ T5126] System zones: 0-1, 3-36 [ 130.211790][ T5126] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 130.284210][ T1108] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 131.864637][ T5141] netlink: 16 bytes leftover after parsing attributes in process `syz.3.241'. [ 131.918253][ T5143] netlink: 'syz.3.241': attribute type 2 has an invalid length. [ 132.002295][ T1108] usb 3-1: Using ep0 maxpacket: 8 [ 132.222384][ T1108] usb 3-1: unable to get BOS descriptor or descriptor too short [ 132.372262][ T1108] usb 3-1: unable to read config index 0 descriptor/all [ 132.392215][ T1108] usb 3-1: can't read configurations, error -71 [ 132.732868][ T5170] netlink: 36 bytes leftover after parsing attributes in process `syz.1.246'. [ 132.754359][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.761060][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.260858][ T5223] netlink: 36 bytes leftover after parsing attributes in process `syz.0.261'. [ 137.060520][ T5246] netlink: 8 bytes leftover after parsing attributes in process `syz.4.266'. [ 137.069529][ T5246] netlink: 24 bytes leftover after parsing attributes in process `syz.4.266'. [ 137.082626][ T5246] netlink: 8 bytes leftover after parsing attributes in process `syz.4.266'. [ 137.091511][ T5246] netlink: 24 bytes leftover after parsing attributes in process `syz.4.266'. [ 137.969727][ T5272] netlink: 36 bytes leftover after parsing attributes in process `syz.0.275'. [ 141.521852][ T5338] ALSA: mixer_oss: invalid OSS volume '' [ 141.529342][ T5338] netlink: 12 bytes leftover after parsing attributes in process `syz.4.291'. [ 141.545137][ T5338] netlink: 68 bytes leftover after parsing attributes in process `syz.4.291'. [ 142.143025][ T5341] netlink: 36 bytes leftover after parsing attributes in process `syz.1.292'. [ 143.145394][ T5352] QAT: failed to copy from user cfg_data. [ 143.152798][ T5352] netlink: 20 bytes leftover after parsing attributes in process `syz.1.296'. [ 143.161736][ T5352] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 144.158571][ T5373] sctp: [Deprecated]: syz.0.302 (pid 5373) Use of int in maxseg socket option. [ 144.158571][ T5373] Use struct sctp_assoc_value instead [ 145.344296][ T5385] netlink: 12 bytes leftover after parsing attributes in process `syz.0.304'. [ 145.373960][ T5386] netlink: 36 bytes leftover after parsing attributes in process `syz.3.307'. [ 146.670001][ T5404] netlink: 28 bytes leftover after parsing attributes in process `syz.0.313'. [ 146.702238][ T5404] netlink: 32 bytes leftover after parsing attributes in process `syz.0.313'. [ 146.760683][ T5404] netlink: 28 bytes leftover after parsing attributes in process `syz.0.313'. [ 146.794073][ T26] audit: type=1800 audit(1773275954.057:15): pid=5408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.314" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0 [ 147.614826][ T5404] netlink: 32 bytes leftover after parsing attributes in process `syz.0.313'. [ 147.732882][ T5417] sctp: [Deprecated]: syz.1.315 (pid 5417) Use of int in maxseg socket option. [ 147.732882][ T5417] Use struct sctp_assoc_value instead [ 148.290916][ T5421] QAT: failed to copy from user cfg_data. [ 148.298092][ T5421] netlink: 20 bytes leftover after parsing attributes in process `syz.3.316'. [ 148.307119][ T5421] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 148.401132][ T5425] netlink: 12 bytes leftover after parsing attributes in process `syz.1.318'. [ 149.847805][ T5441] netlink: 36 bytes leftover after parsing attributes in process `syz.0.321'. [ 149.992402][ T4696] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 150.514497][ T5448] loop0: detected capacity change from 0 to 1024 [ 150.573611][ T5448] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 150.573607][ T4696] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 150.573634][ T4696] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 150.590365][ T5448] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 150.739752][ T4696] usb 2-1: Product: syz [ 150.750497][ T5448] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 150.760001][ T4696] usb 2-1: SerialNumber: syz [ 150.766751][ T5448] System zones: 0-1, 3-36 [ 150.800758][ T4696] usb 2-1: config 0 descriptor?? [ 151.063287][ T4696] hso 2-1:0.0: Can't find BULK IN endpoint [ 151.374337][ T4696] usb 2-1: USB disconnect, device number 4 [ 151.410396][ T5448] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 152.178584][ T5467] netlink: 'syz.3.330': attribute type 1 has an invalid length. [ 152.318505][ T26] audit: type=1800 audit(1773275959.577:16): pid=5471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.329" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 155.840041][ T5487] QAT: failed to copy from user cfg_data. [ 155.865758][ T5487] netlink: 20 bytes leftover after parsing attributes in process `syz.0.333'. [ 155.874911][ T5487] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 156.302034][ T5496] binder_alloc: 5495: binder_alloc_buf, no vma [ 158.614908][ T5516] loop1: detected capacity change from 0 to 1024 [ 158.659982][ T5516] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 158.678488][ T5516] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 158.735314][ T5516] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 158.751066][ T5516] System zones: 0-1, 3-36 [ 158.850132][ T5516] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 158.870149][ C1] vkms_vblank_simulate: vblank timer overrun [ 158.944052][ T5522] sctp: [Deprecated]: syz.2.342 (pid 5522) Use of int in maxseg socket option. [ 158.944052][ T5522] Use struct sctp_assoc_value instead [ 161.778462][ T26] audit: type=1800 audit(1773275969.037:17): pid=5532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.345" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 163.159859][ T5542] netlink: 16 bytes leftover after parsing attributes in process `syz.2.348'. [ 163.172260][ T5542] netlink: 'syz.2.348': attribute type 2 has an invalid length. [ 164.843236][ T5553] netlink: 36 bytes leftover after parsing attributes in process `syz.2.350'. [ 164.963577][ T5553] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.971162][ T5553] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.018407][ T5568] loop3: detected capacity change from 0 to 1024 [ 167.045859][ T5568] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 167.069598][ T5568] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 167.091575][ T5568] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 167.100301][ T5568] System zones: 0-1, 3-36 [ 167.386674][ T5568] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 170.076530][ T5598] netlink: 36 bytes leftover after parsing attributes in process `syz.4.361'. [ 170.234062][ T5598] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.241440][ T5598] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.590687][ T5641] loop2: detected capacity change from 0 to 1024 [ 175.718724][ T5646] QAT: failed to copy from user cfg_data. [ 175.727594][ T5641] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 175.737665][ T5646] netlink: 20 bytes leftover after parsing attributes in process `syz.1.374'. [ 175.746684][ T5646] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 175.755626][ T5641] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 175.792406][ T21] Bluetooth: hci1: command 0x0406 tx timeout [ 175.799484][ T21] Bluetooth: hci3: command 0x0406 tx timeout [ 175.828237][ T5652] sctp: [Deprecated]: syz.3.376 (pid 5652) Use of int in maxseg socket option. [ 175.828237][ T5652] Use struct sctp_assoc_value instead [ 176.140151][ T21] Bluetooth: hci2: command 0x0406 tx timeout [ 176.360938][ T21] Bluetooth: hci4: command 0x0406 tx timeout [ 176.369505][ T5641] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 176.369986][ T21] Bluetooth: hci0: command 0x0406 tx timeout [ 176.382337][ T5641] System zones: 0-1, 3-36 [ 176.400563][ T5641] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 180.523497][ T5690] netlink: 36 bytes leftover after parsing attributes in process `syz.0.387'. [ 181.717744][ T5704] sctp: [Deprecated]: syz.0.388 (pid 5704) Use of int in maxseg socket option. [ 181.717744][ T5704] Use struct sctp_assoc_value instead [ 182.262698][ T5709] loop0: detected capacity change from 0 to 1024 [ 182.288489][ T5709] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 182.314308][ T5709] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 182.368694][ T5709] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 182.385220][ T5709] System zones: 0-1, 3-36 [ 182.425139][ T5709] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 183.661937][ T5724] netlink: 12 bytes leftover after parsing attributes in process `syz.4.394'. [ 184.305611][ T5724] ALSA: mixer_oss: invalid OSS volume 'LI' [ 184.601599][ T5732] netlink: 36 bytes leftover after parsing attributes in process `syz.1.398'. [ 187.107553][ T5756] sctp: [Deprecated]: syz.1.405 (pid 5756) Use of int in maxseg socket option. [ 187.107553][ T5756] Use struct sctp_assoc_value instead [ 187.890301][ T5755] QAT: failed to copy from user cfg_data. [ 187.963371][ T5747] netlink: 20 bytes leftover after parsing attributes in process `syz.3.402'. [ 188.129344][ T5747] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 188.222004][ T5764] netlink: 12 bytes leftover after parsing attributes in process `syz.1.406'. [ 188.492519][ T5764] ALSA: mixer_oss: invalid OSS volume 'LI' [ 192.320040][ T5807] netlink: 12 bytes leftover after parsing attributes in process `syz.4.417'. [ 192.591978][ T5807] ALSA: mixer_oss: invalid OSS volume 'LI' [ 193.323286][ T5820] QAT: failed to copy from user cfg_data. [ 193.480375][ T5820] netlink: 20 bytes leftover after parsing attributes in process `syz.0.422'. [ 193.501405][ T5820] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 194.196610][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.203036][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.455221][ T5846] binder: BINDER_SET_CONTEXT_MGR already set [ 195.493485][ T5846] binder: 5843:5846 ioctl 4018620d 200000004a80 returned -16 [ 195.724327][ T5856] netlink: 12 bytes leftover after parsing attributes in process `syz.3.431'. [ 196.196065][ T5856] ALSA: mixer_oss: invalid OSS volume '' [ 198.083910][ T5879] sctp: [Deprecated]: syz.3.436 (pid 5879) Use of int in maxseg socket option. [ 198.083910][ T5879] Use struct sctp_assoc_value instead [ 199.654958][ T5892] ALSA: mixer_oss: invalid OSS volume 'VOLU' [ 199.663661][ T5892] netlink: 12 bytes leftover after parsing attributes in process `syz.4.440'. [ 201.553808][ T5904] netlink: 8 bytes leftover after parsing attributes in process `syz.4.444'. [ 201.685640][ T5910] netlink: 12 bytes leftover after parsing attributes in process `syz.0.445'. [ 201.698661][ T5910] netlink: 68 bytes leftover after parsing attributes in process `syz.0.445'. [ 202.398437][ T5910] ALSA: mixer_oss: invalid OSS volume '' [ 202.565079][ T5914] netlink: 'syz.0.447': attribute type 1 has an invalid length. [ 204.152029][ T5942] ALSA: mixer_oss: invalid OSS volume '' [ 204.159339][ T5942] netlink: 12 bytes leftover after parsing attributes in process `syz.2.454'. [ 204.659549][ T5944] netlink: 16 bytes leftover after parsing attributes in process `syz.0.455'. [ 205.255171][ T5955] netlink: 12 bytes leftover after parsing attributes in process `syz.2.457'. [ 206.029926][ T5955] ALSA: mixer_oss: invalid OSS volume '' [ 207.040426][ T5974] sctp: [Deprecated]: syz.2.462 (pid 5974) Use of int in maxseg socket option. [ 207.040426][ T5974] Use struct sctp_assoc_value instead [ 208.207414][ T5992] netlink: 16 bytes leftover after parsing attributes in process `syz.1.469'. [ 209.957225][ T6019] netlink: 132 bytes leftover after parsing attributes in process `syz.2.474'. [ 211.106017][ T6036] netlink: 68 bytes leftover after parsing attributes in process `syz.4.483'. [ 211.554070][ T6041] netlink: 16 bytes leftover after parsing attributes in process `syz.0.486'. [ 211.624954][ T6036] ALSA: mixer_oss: invalid OSS volume '' [ 213.844598][ T6073] netlink: 132 bytes leftover after parsing attributes in process `syz.0.492'. [ 214.439152][ T6061] sctp: failed to load transform for md5: -2 [ 217.780587][ T6119] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 217.996364][ T6124] trusted_key: encrypted_key: insufficient parameters specified [ 218.814694][ T6128] binder: BINDER_SET_CONTEXT_MGR already set [ 218.854572][ T6128] binder: 6127:6128 ioctl 4018620d 200000004a80 returned -16 [ 218.974109][ T6132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 221.481402][ T6171] binder: BINDER_SET_CONTEXT_MGR already set [ 221.522827][ T6171] binder: 6170:6171 ioctl 4018620d 200000004a80 returned -16 [ 221.613463][ T6180] netlink: 36 bytes leftover after parsing attributes in process `syz.0.523'. [ 224.998257][ T6208] sctp: [Deprecated]: syz.4.537 (pid 6208) Use of int in max_burst socket option deprecated. [ 224.998257][ T6208] Use struct sctp_assoc_value instead [ 225.736527][ T6220] QAT: failed to copy from user cfg_data. [ 227.185522][ T6219] netlink: 20 bytes leftover after parsing attributes in process `syz.2.540'. [ 227.195260][ T6219] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 230.083571][ T6242] sctp: [Deprecated]: syz.2.546 (pid 6242) Use of int in maxseg socket option. [ 230.083571][ T6242] Use struct sctp_assoc_value instead [ 231.528762][ T6266] netlink: 36 bytes leftover after parsing attributes in process `syz.2.552'. [ 233.697566][ T6285] sctp: [Deprecated]: syz.0.558 (pid 6285) Use of int in maxseg socket option. [ 233.697566][ T6285] Use struct sctp_assoc_value instead [ 236.482732][ T6305] netlink: 16 bytes leftover after parsing attributes in process `syz.1.566'. [ 236.495797][ T6305] netlink: 36 bytes leftover after parsing attributes in process `syz.1.566'. [ 236.681549][ T6318] netlink: 36 bytes leftover after parsing attributes in process `syz.0.564'. [ 237.642218][ T23] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 237.976398][ T6335] sctp: [Deprecated]: syz.3.573 (pid 6335) Use of int in maxseg socket option. [ 237.976398][ T6335] Use struct sctp_assoc_value instead [ 238.931702][ T23] usb 5-1: Using ep0 maxpacket: 8 [ 239.695842][ T23] usb 5-1: unable to get BOS descriptor or descriptor too short [ 239.852311][ T23] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 239.940121][ T23] usb 5-1: can't read configurations, error -71 [ 239.979276][ T6355] netlink: 8 bytes leftover after parsing attributes in process `syz.3.581'. [ 240.029341][ T6355] netlink: 4 bytes leftover after parsing attributes in process `syz.3.581'. [ 240.056279][ T6355] netlink: 'syz.3.581': attribute type 18 has an invalid length. [ 240.082260][ T6355] netlink: 'syz.3.581': attribute type 18 has an invalid length. [ 241.443350][ T6376] sctp: [Deprecated]: syz.0.587 (pid 6376) Use of int in maxseg socket option. [ 241.443350][ T6376] Use struct sctp_assoc_value instead [ 244.400954][ T6417] netlink: 36 bytes leftover after parsing attributes in process `syz.4.596'. [ 244.935383][ T6422] netlink: 68 bytes leftover after parsing attributes in process `syz.0.602'. [ 245.407159][ T6422] ALSA: mixer_oss: invalid OSS volume '' [ 248.223583][ T6463] netlink: 68 bytes leftover after parsing attributes in process `syz.0.614'. [ 248.736529][ T6463] ALSA: mixer_oss: invalid OSS volume '' [ 249.240797][ T6478] netlink: 132 bytes leftover after parsing attributes in process `syz.3.618'. [ 249.843607][ T6481] netlink: 16 bytes leftover after parsing attributes in process `syz.0.619'. [ 252.210303][ T6509] netlink: 68 bytes leftover after parsing attributes in process `syz.0.626'. [ 252.736611][ T6509] ALSA: mixer_oss: invalid OSS volume '' [ 254.086619][ T6576] netlink: 132 bytes leftover after parsing attributes in process `syz.0.631'. [ 255.732775][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.739112][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.886245][ T6598] binder: BINDER_SET_CONTEXT_MGR already set [ 255.904390][ T6598] binder: 6597:6598 ioctl 4018620d 200000004a80 returned -16 [ 256.083237][ T6601] netlink: 36 bytes leftover after parsing attributes in process `syz.2.635'. [ 257.787967][ T6621] netlink: 68 bytes leftover after parsing attributes in process `syz.0.640'. [ 258.373643][ T6621] ALSA: mixer_oss: invalid OSS volume '' [ 258.982331][ T6522] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 259.439178][ T6643] binder_alloc: 6642: binder_alloc_buf, no vma [ 259.453154][ T6522] usb 1-1: config 251 has an invalid interface number: 129 but max is 0 [ 259.462723][ T6522] usb 1-1: config 251 has no interface number 0 [ 259.469021][ T6522] usb 1-1: config 251 interface 129 has no altsetting 0 [ 259.702379][ T6522] usb 1-1: New USB device found, idVendor=12d1, idProduct=fd3b, bcdDevice=69.26 [ 259.717315][ T6522] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.740792][ T6522] usb 1-1: Product: syz [ 259.753899][ T6522] usb 1-1: Manufacturer: syz [ 259.779299][ T6522] usb 1-1: SerialNumber: syz [ 259.822188][ T4697] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 260.135144][ T6522] option 1-1:251.129: GSM modem (1-port) converter detected [ 260.148886][ T6522] usb 1-1: USB disconnect, device number 2 [ 260.173815][ T6522] option 1-1:251.129: device disconnected [ 260.194470][ T4697] usb 4-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 260.373207][ T4697] usb 4-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 260.389748][ T4697] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.415805][ T4697] usb 4-1: Product: syz [ 260.430265][ T4697] usb 4-1: Manufacturer: syz [ 260.445488][ T4697] usb 4-1: SerialNumber: syz [ 260.508169][ T4697] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 260.520748][ T4697] dvb-usb: bulk message failed: -22 (3/0) [ 260.567412][ T4697] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 260.619205][ T4697] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 error while loading driver (-19) [ 260.655288][ T4697] dvb_usb_umt_010: probe of 4-1:54.0 failed with error -22 [ 260.743671][ T4697] usb 4-1: USB disconnect, device number 2 [ 260.923708][ T6656] netlink: 68 bytes leftover after parsing attributes in process `syz.0.653'. [ 261.489080][ T6656] ALSA: mixer_oss: invalid OSS volume '' [ 262.512269][ T4697] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 262.815499][ T6682] netlink: 36 bytes leftover after parsing attributes in process `syz.3.658'. [ 262.889438][ T6683] netlink: 132 bytes leftover after parsing attributes in process `syz.4.662'. [ 262.992295][ T4697] usb 1-1: Using ep0 maxpacket: 32 [ 263.137134][ T4697] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 263.215270][ T4697] usb 1-1: config 0 has no interface number 0 [ 263.642280][ T4697] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 263.661690][ T4697] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.670155][ T4697] usb 1-1: Product: syz [ 263.682143][ T4697] usb 1-1: Manufacturer: syz [ 263.686866][ T4697] usb 1-1: SerialNumber: syz [ 263.734494][ T4697] usb 1-1: config 0 descriptor?? [ 263.804303][ T4697] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 263.823407][ T4697] usb 1-1: selecting invalid altsetting 1 [ 263.842727][ T4697] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 263.898277][ T6692] netlink: 68 bytes leftover after parsing attributes in process `syz.4.666'. [ 263.967096][ T4697] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 264.201959][ T4697] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 264.343064][ T4697] usb 1-1: media controller created [ 264.481505][ T4697] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 264.486305][ T6692] ALSA: mixer_oss: invalid OSS volume '' [ 265.173389][ T6667] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 265.302861][ T4697] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 265.310955][ T4697] zl10353_read_register: readreg error (reg=127, ret==-32) [ 265.677515][ T4697] usb 1-1: USB disconnect, device number 3 [ 266.919149][ T6740] netlink: 68 bytes leftover after parsing attributes in process `syz.3.677'. [ 267.511958][ T6740] ALSA: mixer_oss: invalid OSS volume '' [ 267.932469][ T4228] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 268.353397][ T4228] usb 3-1: unable to get BOS descriptor or descriptor too short [ 268.402481][ T4228] usb 3-1: not running at top speed; connect to a high speed hub [ 268.476169][ T6766] netlink: 16 bytes leftover after parsing attributes in process `syz.1.688'. [ 268.485771][ T6766] netlink: 48 bytes leftover after parsing attributes in process `syz.1.688'. [ 268.495487][ T4228] usb 3-1: config 17 has an invalid interface number: 8 but max is 1 [ 268.505458][ T4228] usb 3-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 268.516537][ T4228] usb 3-1: config 17 has no interface number 0 [ 268.525307][ T4228] usb 3-1: config 17 interface 8 altsetting 6 has an invalid endpoint with address 0x6E, skipping [ 268.536451][ T4228] usb 3-1: config 17 interface 8 has no altsetting 0 [ 268.557584][ T6767] netlink: 36 bytes leftover after parsing attributes in process `syz.3.682'. [ 268.844335][ T4228] usb 3-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 268.862255][ T5631] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 268.864255][ T4228] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.898454][ T4228] usb 3-1: Product: syz [ 268.905027][ T4228] usb 3-1: Manufacturer: syz [ 268.909757][ T4228] usb 3-1: SerialNumber: syz [ 269.132259][ T5631] usb 5-1: Using ep0 maxpacket: 8 [ 269.258635][ T4228] usb 3-1: selecting invalid altsetting 0 [ 269.292304][ T5631] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 269.313049][ T5631] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 269.331809][ T4228] usb 3-1: USB disconnect, device number 8 [ 269.339909][ T5631] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.372901][ T5631] usb 5-1: config 0 descriptor?? [ 269.668766][ T5631] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 269.811517][ T6733] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 270.107621][ T4193] usb 5-1: USB disconnect, device number 6 [ 271.186008][ T6808] tipc: Failed to remove unknown binding: 66,0,0/0:4188380018/4188380020 [ 271.221239][ T6808] tipc: Failed to remove unknown binding: 66,0,0/0:4188380018/4188380019 [ 271.236887][ T6808] tipc: Failed to remove unknown binding: 66,0,0/0:4188380018/4188380020 [ 271.245769][ T6808] tipc: Failed to remove unknown binding: 66,0,0/0:4188380018/4188380019 [ 271.305339][ T6817] netlink: 36 bytes leftover after parsing attributes in process `syz.1.700'. [ 272.483973][ T6522] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 272.606619][ T6838] netlink: 132 bytes leftover after parsing attributes in process `syz.3.710'. [ 273.292169][ T6522] usb 3-1: Using ep0 maxpacket: 32 [ 273.414495][ T6522] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 273.428942][ T6522] usb 3-1: config 0 has no interface number 0 [ 273.437154][ T6522] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 273.482170][ T6522] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 273.493897][ T6837] sctp: [Deprecated]: syz.0.713 (pid 6837) Use of int in maxseg socket option. [ 273.493897][ T6837] Use struct sctp_assoc_value instead [ 273.642406][ T6522] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 273.671895][ T6522] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.682008][ T6522] usb 3-1: Product: syz [ 273.714777][ T6522] usb 3-1: Manufacturer: syz [ 273.719395][ T6522] usb 3-1: SerialNumber: syz [ 273.774391][ T6522] usb 3-1: config 0 descriptor?? [ 274.332642][ T6522] radio-si470x 3-1:0.35: this is not a si470x device. [ 274.434703][ T6522] radio-raremono 3-1:0.35: this is not Thanko's Raremono. [ 274.557775][ T6522] usb 3-1: USB disconnect, device number 9 [ 274.611404][ T6854] netlink: 40 bytes leftover after parsing attributes in process `syz.2.717'. [ 276.252391][ T4193] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 276.300581][ T6875] ALSA: mixer_oss: invalid OSS volume 'LI' [ 276.308814][ T6875] netlink: 68 bytes leftover after parsing attributes in process `syz.4.723'. [ 276.612314][ T4193] usb 4-1: Using ep0 maxpacket: 32 [ 276.753025][ T4193] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 276.791729][ T4193] usb 4-1: config 0 has no interface number 0 [ 277.888796][ T4193] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 277.902140][ T6522] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 277.910154][ T4193] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.918588][ T4193] usb 4-1: Product: syz [ 277.923029][ T4193] usb 4-1: Manufacturer: syz [ 277.927627][ T4193] usb 4-1: SerialNumber: syz [ 277.934807][ T4193] usb 4-1: config 0 descriptor?? [ 277.936959][ T6892] netlink: 36 bytes leftover after parsing attributes in process `syz.0.719'. [ 278.665930][ T4193] smsc95xx v2.0.0 [ 278.812202][ T6522] usb 5-1: Using ep0 maxpacket: 32 [ 278.904530][ T6522] usb 5-1: too many configurations: 17, using maximum allowed: 8 [ 279.014556][ T6522] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 279.052163][ T6522] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 279.084295][ T6522] usb 5-1: config 0 has no interface number 0 [ 279.090423][ T6522] usb 5-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 279.164343][ T4193] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 279.234567][ T6522] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 279.254341][ T6522] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 279.284268][ T6522] usb 5-1: config 0 has no interface number 0 [ 279.301805][ T6522] usb 5-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 279.384377][ T4193] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 279.408467][ T4193] smsc95xx: probe of 4-1:0.67 failed with error -71 [ 279.434548][ T6522] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 279.458243][ T4193] usb 4-1: USB disconnect, device number 3 [ 279.464242][ T6522] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 279.498065][ T6522] usb 5-1: config 0 has no interface number 0 [ 279.517650][ T6522] usb 5-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 279.779852][ T6522] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 279.788555][ T6522] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 279.807526][ T6522] usb 5-1: config 0 has no interface number 0 [ 279.813706][ T6522] usb 5-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 280.252214][ T6522] usb 5-1: unable to read config index 4 descriptor/all [ 280.272816][ T6522] usb 5-1: can't read configurations, error -71 [ 280.409162][ T6920] ALSA: mixer_oss: invalid OSS volume 'LI' [ 280.416977][ T6920] netlink: 68 bytes leftover after parsing attributes in process `syz.4.737'. [ 281.112189][ T1111] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 282.572590][ T1111] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 282.598972][ T1111] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.638653][ T1111] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.693739][ T1111] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 283.054589][ T1111] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 283.067719][ T1111] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 283.112148][ T1111] usb 4-1: Manufacturer: syz [ 283.178995][ T1111] usb 4-1: config 0 descriptor?? [ 284.185918][ T1111] usbhid 4-1:0.0: can't add hid device: -71 [ 284.191919][ T1111] usbhid: probe of 4-1:0.0 failed with error -71 [ 284.207632][ T1111] usb 4-1: USB disconnect, device number 4 [ 285.519304][ T6968] ALSA: mixer_oss: invalid OSS volume 'LI' [ 285.527217][ T6968] netlink: 68 bytes leftover after parsing attributes in process `syz.0.750'. [ 286.027308][ T6969] netlink: 16 bytes leftover after parsing attributes in process `syz.2.751'. [ 286.040830][ T6969] netlink: 48 bytes leftover after parsing attributes in process `syz.2.751'. [ 286.179235][ T6970] sctp: [Deprecated]: syz.4.749 (pid 6970) Use of int in maxseg socket option. [ 286.179235][ T6970] Use struct sctp_assoc_value instead [ 287.276958][ T6990] netlink: 36 bytes leftover after parsing attributes in process `syz.3.745'. [ 289.251081][ T7014] ALSA: mixer_oss: invalid OSS volume 'LI' [ 289.258773][ T7014] netlink: 68 bytes leftover after parsing attributes in process `syz.2.763'. [ 290.085318][ T7022] netlink: 16 bytes leftover after parsing attributes in process `syz.4.766'. [ 290.098074][ T7022] netlink: 48 bytes leftover after parsing attributes in process `syz.4.766'. [ 292.357383][ T7045] netlink: 4 bytes leftover after parsing attributes in process `syz.4.774'. [ 292.399102][ T7041] sctp: [Deprecated]: syz.2.770 (pid 7041) Use of int in maxseg socket option. [ 292.399102][ T7041] Use struct sctp_assoc_value instead [ 292.539484][ T7] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 292.665885][ T7058] netlink: 68 bytes leftover after parsing attributes in process `syz.1.776'. [ 293.305106][ T7059] netlink: 16 bytes leftover after parsing attributes in process `syz.4.779'. [ 293.340450][ T4193] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 293.356282][ T7062] netlink: 48 bytes leftover after parsing attributes in process `syz.4.779'. [ 293.522448][ T7] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 293.562243][ T7] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 293.571731][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.612482][ T7] usb 1-1: config 0 descriptor?? [ 293.862668][ T4193] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 293.912575][ T4193] usb 4-1: config 0 has no interface number 0 [ 294.021607][ T4193] usb 4-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 294.102428][ T7] ath6kl: Failed to read usb control message: -71 [ 294.125045][ T7] ath6kl: Unable to read the bmi data from the device: -71 [ 294.299530][ T4193] usb 4-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 294.310984][ T7] ath6kl: Unable to recv target info: -71 [ 294.320545][ T7] ath6kl: Failed to init ath6kl core: -71 [ 294.336183][ T7] ath6kl_usb: probe of 1-1:0.0 failed with error -71 [ 294.429730][ T7] usb 1-1: USB disconnect, device number 4 [ 294.532444][ T4193] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 294.556345][ T4193] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.575891][ T4193] usb 4-1: Product: syz [ 294.586730][ T4193] usb 4-1: Manufacturer: syz [ 294.595887][ T4193] usb 4-1: SerialNumber: syz [ 294.635631][ T4193] usb 4-1: config 0 descriptor?? [ 294.662512][ T7043] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 294.769377][ T4193] cyberjack 4-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 295.111369][ T4193] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 295.332478][ T4193] usb 4-1: USB disconnect, device number 5 [ 295.370745][ T7089] netlink: 28 bytes leftover after parsing attributes in process `syz.0.787'. [ 295.395144][ T4193] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 295.456249][ T4193] cyberjack 4-1:0.69: device disconnected [ 295.764721][ T7101] ALSA: mixer_oss: invalid OSS volume 'LI' [ 295.772592][ T7101] netlink: 68 bytes leftover after parsing attributes in process `syz.4.790'. [ 296.377197][ T7102] netlink: 16 bytes leftover after parsing attributes in process `syz.0.792'. [ 296.934411][ T7109] netlink: 124 bytes leftover after parsing attributes in process `syz.4.793'. [ 299.225975][ T7135] netlink: 20 bytes leftover after parsing attributes in process `syz.4.802'. [ 299.509930][ T26] audit: type=1326 audit(1773276106.767:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7138 comm="syz.3.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74f671799 code=0x7ffc0000 [ 300.418410][ T26] audit: type=1326 audit(1773276106.787:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7138 comm="syz.3.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74f671799 code=0x7ffc0000 [ 300.452497][ T26] audit: type=1326 audit(1773276107.507:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7138 comm="syz.3.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7fd74f671799 code=0x7ffc0000 [ 301.182246][ T26] audit: type=1326 audit(1773276107.507:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7138 comm="syz.3.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74f671799 code=0x7ffc0000 [ 301.252932][ T26] audit: type=1326 audit(1773276107.507:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7138 comm="syz.3.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7fd74f671799 code=0x7ffc0000 [ 301.348296][ T26] audit: type=1326 audit(1773276107.507:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7138 comm="syz.3.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74f671799 code=0x7ffc0000 [ 302.492372][ T7181] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 302.556288][ T7183] netlink: 36 bytes leftover after parsing attributes in process `syz.3.815'. [ 302.823677][ T7188] sctp: [Deprecated]: syz.2.820 (pid 7188) Use of int in maxseg socket option. [ 302.823677][ T7188] Use struct sctp_assoc_value instead [ 303.408894][ T7207] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 305.820350][ T7294] sctp: [Deprecated]: syz.4.840 (pid 7294) Use of int in maxseg socket option. [ 305.820350][ T7294] Use struct sctp_assoc_value instead [ 306.304803][ T7305] netlink: 36 bytes leftover after parsing attributes in process `syz.0.835'. [ 306.527028][ T4696] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 306.816342][ T7313] ALSA: mixer_oss: invalid OSS volume 'LI' [ 306.824058][ T7313] netlink: 136 bytes leftover after parsing attributes in process `syz.4.845'. [ 307.002167][ T4696] usb 4-1: Using ep0 maxpacket: 32 [ 307.330746][ T7320] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 307.379470][ T7320] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 307.497564][ T7326] netlink: 12 bytes leftover after parsing attributes in process `syz.4.852'. [ 307.755434][ T4696] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 307.764651][ T4696] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.773118][ T4696] usb 4-1: Product: syz [ 307.777281][ T4696] usb 4-1: Manufacturer: syz [ 307.781908][ T4696] usb 4-1: SerialNumber: syz [ 307.789077][ T4696] usb 4-1: config 0 descriptor?? [ 307.824275][ T7337] sctp: [Deprecated]: syz.4.855 (pid 7337) Use of int in maxseg socket option. [ 307.824275][ T7337] Use struct sctp_assoc_value instead [ 308.088145][ T4696] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: failure sending bit rate [ 308.107351][ T4696] RobotFuzz Open Source InterFace, OSIF: probe of 4-1:0.0 failed with error -71 [ 308.120021][ T4696] usb 4-1: USB disconnect, device number 6 [ 308.967397][ T7356] ALSA: mixer_oss: invalid OSS volume 'LI' [ 308.975014][ T7356] netlink: 12 bytes leftover after parsing attributes in process `syz.0.860'. [ 308.987031][ T7356] netlink: 68 bytes leftover after parsing attributes in process `syz.0.860'. [ 309.663544][ T7360] netlink: 12 bytes leftover after parsing attributes in process `syz.0.864'. [ 309.930265][ T7369] netlink: 36 bytes leftover after parsing attributes in process `syz.3.861'. [ 310.243485][ T7376] process 'syz.2.869' launched './file0' with NULL argv: empty string added [ 310.982843][ T7398] netlink: 8 bytes leftover after parsing attributes in process `syz.4.875'. [ 311.896894][ T1111] Bluetooth: hci1: command 0x2021 tx timeout [ 313.374408][ T7440] ALSA: mixer_oss: invalid OSS volume 'LI' [ 313.380893][ T7440] netlink: 12 bytes leftover after parsing attributes in process `syz.3.888'. [ 313.414374][ T7440] netlink: 68 bytes leftover after parsing attributes in process `syz.3.888'. [ 314.581858][ T7466] netlink: 36 bytes leftover after parsing attributes in process `syz.1.889'. [ 315.742717][ T7483] loop3: detected capacity change from 0 to 1024 [ 315.805964][ T7483] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 315.828819][ T7483] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 315.870955][ T7483] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 315.884534][ T7483] System zones: 0-1, 3-36 [ 315.935645][ T7483] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 316.313599][ T7495] netlink: 160 bytes leftover after parsing attributes in process `syz.1.908'. [ 316.879256][ T7503] netlink: 20 bytes leftover after parsing attributes in process `syz.1.911'. [ 316.956524][ T7503] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 317.080927][ T7514] netlink: 24 bytes leftover after parsing attributes in process `syz.4.915'. [ 317.105583][ T7514] bond0: invalid ARP target 0.0.0.0 specified for addition [ 317.162424][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.168787][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.171844][ T7514] bond0: option arp_ip_target: invalid value (0) [ 317.506300][ T7520] ALSA: mixer_oss: invalid OSS volume 'LI' [ 317.514056][ T7520] netlink: 12 bytes leftover after parsing attributes in process `syz.0.917'. [ 317.528700][ T7520] netlink: 68 bytes leftover after parsing attributes in process `syz.0.917'. [ 318.091169][ T7528] device macvlan2 entered promiscuous mode [ 318.099170][ T7528] device bond3 entered promiscuous mode [ 318.105854][ T7528] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 318.144887][ T7528] device bond3 left promiscuous mode [ 318.408995][ T7539] netlink: 36 bytes leftover after parsing attributes in process `syz.2.916'. [ 319.845382][ T7566] netlink: 12 bytes leftover after parsing attributes in process `syz.1.932'. [ 320.176351][ T7570] QAT: failed to copy from user cfg_data. [ 320.189655][ T7570] netlink: 20 bytes leftover after parsing attributes in process `syz.3.933'. [ 320.199162][ T7570] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 321.447286][ T7581] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 321.461854][ T7581] device macvlan2 entered promiscuous mode [ 321.471377][ T7581] device bond2 entered promiscuous mode [ 321.477173][ T7581] device gretap1 entered promiscuous mode [ 321.483621][ T7581] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 321.494764][ T7581] device bond2 left promiscuous mode [ 321.500063][ T7581] device gretap1 left promiscuous mode [ 322.578821][ T7594] trusted_key: encrypted_key: insufficient parameters specified [ 323.377265][ T7596] loop3: detected capacity change from 0 to 1024 [ 323.437653][ T7596] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 323.465438][ T7596] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 323.519711][ T7596] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 323.538881][ T7596] System zones: 0-1, 3-36 [ 323.569821][ T7596] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 324.611551][ T7612] ALSA: mixer_oss: invalid OSS volume 'LI' [ 324.619174][ T7612] netlink: 12 bytes leftover after parsing attributes in process `syz.2.944'. [ 324.632910][ T7612] netlink: 68 bytes leftover after parsing attributes in process `syz.2.944'. [ 326.088941][ T7618] QAT: failed to copy from user cfg_data. [ 326.103683][ T7618] netlink: 20 bytes leftover after parsing attributes in process `syz.2.947'. [ 326.112633][ T7618] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 327.277280][ T7634] team0 (unregistering): Port device team_slave_0 removed [ 327.416597][ T7634] team0 (unregistering): Port device team_slave_1 removed [ 327.760569][ T7644] loop2: detected capacity change from 0 to 1024 [ 328.133759][ T7644] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 328.162986][ T7644] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 328.214690][ T7644] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 328.224302][ T7644] System zones: 0-1, 3-36 [ 328.367051][ T7644] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 330.323142][ T21] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 331.162249][ T21] usb 4-1: config 251 has an invalid interface number: 129 but max is 0 [ 331.184107][ T21] usb 4-1: config 251 has no interface number 0 [ 331.190394][ T21] usb 4-1: config 251 interface 129 has no altsetting 0 [ 331.412846][ T21] usb 4-1: New USB device found, idVendor=12d1, idProduct=fd3b, bcdDevice=69.26 [ 331.459306][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.561812][ T21] usb 4-1: Product: syz [ 331.682542][ T21] usb 4-1: Manufacturer: syz [ 331.740310][ T21] usb 4-1: SerialNumber: syz [ 332.108390][ T4193] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 332.243679][ T7708] netlink: 12 bytes leftover after parsing attributes in process `syz.0.975'. [ 332.317961][ T7708] ALSA: mixer_oss: invalid OSS volume '' [ 332.678653][ T21] option 4-1:251.129: GSM modem (1-port) converter detected [ 332.868733][ T21] usb 4-1: USB disconnect, device number 7 [ 333.024543][ T21] option 4-1:251.129: device disconnected [ 334.122362][ T7730] netlink: 8 bytes leftover after parsing attributes in process `syz.4.983'. [ 334.131404][ T7730] netlink: 4 bytes leftover after parsing attributes in process `syz.4.983'. [ 335.392337][ T4193] usb 3-1: unable to read config index 0 descriptor/all [ 335.420542][ T4193] usb 3-1: can't read configurations, error -71 [ 336.070372][ T7760] netlink: 12 bytes leftover after parsing attributes in process `syz.0.987'. [ 336.083278][ T7760] netlink: 68 bytes leftover after parsing attributes in process `syz.0.987'. [ 336.323116][ T7760] ALSA: mixer_oss: invalid OSS volume '' [ 336.889887][ T7771] trusted_key: encrypted_key: insufficient parameters specified [ 336.970981][ T7772] netlink: 36 bytes leftover after parsing attributes in process `syz.0.992'. [ 338.856262][ T7801] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1004'. [ 339.762158][ T26] audit: type=1326 audit(1773276147.007:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7812 comm="syz.2.1009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81dea4a799 code=0x7ffc0000 [ 340.062734][ T26] audit: type=1326 audit(1773276147.007:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7812 comm="syz.2.1009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81dea4a799 code=0x7ffc0000 [ 340.571124][ T26] audit: type=1326 audit(1773276147.827:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7812 comm="syz.2.1009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81dea4a799 code=0x7ffc0000 [ 340.597239][ T26] audit: type=1326 audit(1773276147.827:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7812 comm="syz.2.1009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81dea4a799 code=0x7ffc0000 [ 340.620701][ T26] audit: type=1326 audit(1773276147.887:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7812 comm="syz.2.1009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f81dea4a799 code=0x7ffc0000 [ 340.677112][ T26] audit: type=1326 audit(1773276147.887:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7812 comm="syz.2.1009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81dea4a799 code=0x7ffc0000 [ 340.699306][ C0] vkms_vblank_simulate: vblank timer overrun [ 340.722442][ T7820] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1008'. [ 340.741728][ T26] audit: type=1326 audit(1773276147.887:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7812 comm="syz.2.1009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81dea4a799 code=0x7ffc0000 [ 341.499439][ T7828] nfs: Unknown parameter 'ac' [ 341.664169][ T26] audit: type=1326 audit(1773276147.907:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7812 comm="syz.2.1009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81dea4a799 code=0x7ffc0000 [ 341.686592][ C0] vkms_vblank_simulate: vblank timer overrun [ 342.384932][ T26] audit: type=1326 audit(1773276147.907:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7812 comm="syz.2.1009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81dea4a799 code=0x7ffc0000 [ 342.410943][ T26] audit: type=1326 audit(1773276147.907:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7812 comm="syz.2.1009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f81dea4a799 code=0x7ffc0000 [ 344.986570][ T7881] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1030'. [ 345.458651][ T7892] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1035'. [ 349.412210][ T7937] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1047'. [ 350.574018][ T7949] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1051'. [ 350.614531][ T7949] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1051'. [ 350.696397][ T7949] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 350.737798][ T7957] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1052'. [ 350.750535][ T7958] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1051'. [ 350.767117][ T7958] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1051'. [ 350.781823][ T7958] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 351.868473][ T7983] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1060'. [ 351.954565][ T7986] trusted_key: encrypted_key: insufficient parameters specified [ 353.236318][ T8000] QAT: failed to copy from user cfg_data. [ 353.254971][ T8000] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1067'. [ 353.306361][ T8000] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 354.579519][ T8028] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1072'. [ 355.246750][ T8036] trusted_key: encrypted_key: insufficient parameters specified [ 356.877631][ T8059] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1083'. [ 356.886925][ T8059] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 357.471900][ T8080] trusted_key: encrypted_key: insufficient parameters specified [ 358.577050][ T8089] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1088'. [ 363.555764][ T8156] sctp: [Deprecated]: syz.1.1115 (pid 8156) Use of struct sctp_assoc_value in delayed_ack socket option. [ 363.555764][ T8156] Use struct sctp_sack_info instead [ 363.737680][ T8164] sctp: [Deprecated]: syz.0.1114 (pid 8164) Use of int in maxseg socket option. [ 363.737680][ T8164] Use struct sctp_assoc_value instead [ 366.969673][ T8209] loop8: detected capacity change from 0 to 7 [ 367.000097][ T4177] Dev loop8: unable to read RDB block 7 [ 367.012131][ T4177] loop8: unable to read partition table [ 367.028860][ T4177] loop8: partition table beyond EOD, truncated [ 367.067028][ T8209] Dev loop8: unable to read RDB block 7 [ 367.082237][ T8209] loop8: unable to read partition table [ 367.100498][ T8209] loop8: partition table beyond EOD, truncated [ 367.109577][ T8209] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 368.609638][ T8243] overlayfs: failed to resolve './file0': -2 [ 370.677371][ T8280] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1156'. [ 370.686405][ T8280] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 370.771632][ T8287] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1155'. [ 373.010670][ T8317] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1169'. [ 373.166276][ T8323] QAT: failed to copy from user cfg_data. [ 373.175350][ T8323] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1172'. [ 373.184442][ T8323] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 376.051821][ T8362] QAT: failed to copy from user cfg_data. [ 376.095821][ T8362] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1188'. [ 376.104920][ T8362] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 376.219628][ T23] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 376.246409][ T8368] binder: BINDER_SET_CONTEXT_MGR already set [ 376.261776][ T8368] binder: 8367:8368 ioctl 4018620d 200000004a80 returned -16 [ 376.360645][ T8368] binder: 8367:8368 ioctl c0306201 0 returned -14 [ 377.263247][ T8380] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 377.665170][ T8394] cgroup: none used incorrectly [ 377.704159][ T23] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 377.741295][ T23] usb 4-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 377.762733][ T23] usb 4-1: Product: syz [ 377.766926][ T23] usb 4-1: Manufacturer: syz [ 377.771520][ T23] usb 4-1: SerialNumber: syz [ 377.800997][ T23] usb 4-1: config 0 descriptor?? [ 377.875638][ T23] ch341 4-1:0.0: ch341-uart converter detected [ 377.885799][ T8399] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1203'. [ 377.931529][ T8405] binder: 8404:8405 ioctl c0306201 0 returned -14 [ 378.515425][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.524224][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.582214][ T23] usb 4-1: failed to send control message: -71 [ 378.589646][ T23] ch341-uart: probe of ttyUSB0 failed with error -71 [ 378.637974][ T23] usb 4-1: USB disconnect, device number 8 [ 378.689394][ T23] ch341 4-1:0.0: device disconnected [ 379.551253][ T8444] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 379.582264][ T8444] CIFS mount error: No usable UNC path provided in device string! [ 379.582264][ T8444] [ 379.612513][ T8444] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 379.843937][ T8453] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1221'. [ 380.774965][ T8464] binder: 8459:8464 ioctl c0306201 0 returned -14 [ 380.830194][ T8468] overlayfs: failed to clone upperpath [ 381.932751][ T8489] tmpfs: Unknown parameter 'usrquota_block_hardlimit' [ 383.789204][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 383.789217][ T26] audit: type=1326 audit(1773276191.047:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8529 comm="syz.3.1248" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd74f671799 code=0x0 [ 386.188939][ T8559] sctp: [Deprecated]: syz.1.1256 (pid 8559) Use of int in maxseg socket option. [ 386.188939][ T8559] Use struct sctp_assoc_value instead [ 394.901664][ T8668] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1290'. [ 397.096420][ T8681] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1294'. [ 397.106345][ T8681] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1294'. [ 397.253864][ T8681] ALSA: mixer_oss: invalid OSS volume '' [ 397.266835][ T8703] capability: warning: `syz.1.1303' uses 32-bit capabilities (legacy support in use) [ 398.613809][ T8711] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 398.891005][ T8716] kvm: pic: non byte read [ 398.909738][ T8716] kvm: pic: non byte read [ 398.928513][ T8716] kvm: pic: non byte read [ 398.953685][ T8716] kvm: pic: non byte read [ 398.975194][ T8716] kvm: pic: single mode not supported [ 398.976321][ T8716] kvm: pic: non byte read [ 399.017152][ T8716] kvm: pic: non byte read [ 399.036739][ T8716] kvm: pic: non byte read [ 399.056239][ T8716] kvm: pic: non byte read [ 399.074914][ T8716] kvm: pic: non byte read [ 399.107147][ T8716] kvm: pic: non byte read [ 400.368138][ T8745] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1319'. [ 401.345114][ T8756] syz.0.1320 (8756) used greatest stack depth: 20016 bytes left [ 401.775273][ T8767] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1323'. [ 402.080043][ T8767] ALSA: mixer_oss: invalid OSS volume '' [ 402.700723][ T8788] kAFS: No cell specified [ 402.731807][ T8789] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1333'. [ 404.230135][ T4263] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 404.712338][ T4263] usb 4-1: config 13 interface 0 has no altsetting 0 [ 404.874714][ T8818] binder: 8817:8818 ioctl 4018620d 0 returned -22 [ 404.882671][ T4263] usb 4-1: New USB device found, idVendor=04b4, idProduct=9321, bcdDevice=55.de [ 405.399356][ T8820] binder: 8817:8820 ioctl c0306201 0 returned -14 [ 405.481194][ T4263] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.490354][ T4263] usb 4-1: Product: syz [ 405.496335][ T4263] usb 4-1: Manufacturer: syz [ 405.501108][ T4263] usb 4-1: SerialNumber: syz [ 405.832882][ T8822] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1344'. [ 405.841981][ T8822] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 406.525177][ T4263] usb 4-1: selecting invalid altsetting 0 [ 406.541477][ T4263] usb 4-1: can't set first interface for hiFace device. [ 406.569194][ T4263] snd-usb-hiface: probe of 4-1:13.0 failed with error -5 [ 406.610207][ T4263] usb 4-1: USB disconnect, device number 9 [ 408.255907][ T8856] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1345'. [ 409.379775][ T8869] QAT: failed to copy from user cfg_data. [ 409.392613][ T8869] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1357'. [ 409.402112][ T8869] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 410.190115][ T4697] kernel write not supported for file bpf-prog (pid: 4697 comm: kworker/1:7) [ 410.326387][ T8892] sctp: [Deprecated]: syz.4.1360 (pid 8892) Use of int in maxseg socket option. [ 410.326387][ T8892] Use struct sctp_assoc_value instead [ 410.418566][ T8906] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1373'. [ 410.672359][ T4227] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 411.354824][ T4227] usb 1-1: unable to get BOS descriptor or descriptor too short [ 411.792618][ T4227] usb 1-1: not running at top speed; connect to a high speed hub [ 411.802384][ T4227] usb 1-1: too many configurations: 227, using maximum allowed: 8 [ 411.910957][ T8945] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1386'. [ 411.922187][ T4227] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 411.938779][ T4227] usb 1-1: config 1 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 411.969171][ T4227] usb 1-1: config 1 interface 0 has no altsetting 0 [ 412.424840][ T8920] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1379'. [ 412.469837][ T8920] device vlan0 entered promiscuous mode [ 412.502351][ T4227] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 412.532168][ T4227] usb 1-1: config 1 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 412.590865][ T4227] usb 1-1: config 1 interface 0 has no altsetting 0 [ 412.712322][ T4227] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 412.754256][ T4227] usb 1-1: config 1 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 412.920339][ T4227] usb 1-1: config 1 interface 0 has no altsetting 0 [ 413.052479][ T4227] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 413.432514][ T4227] usb 1-1: config 1 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 413.472492][ T4227] usb 1-1: config 1 interface 0 has no altsetting 0 [ 413.612247][ T4227] usb 1-1: unable to read config index 4 descriptor/start: -71 [ 413.627703][ T4227] usb 1-1: can't read configurations, error -71 [ 414.523764][ T8994] trusted_key: encrypted_key: insufficient parameters specified [ 414.970243][ T8995] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1398'. [ 414.991972][ T8995] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1398'. [ 415.465481][ T8998] device sit0 entered promiscuous mode [ 415.498901][ T8998] netlink: 'syz.4.1405': attribute type 1 has an invalid length. [ 415.545069][ T8998] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1405'. [ 416.298863][ T9031] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1418'. [ 416.473429][ T9034] trusted_key: encrypted_key: insufficient parameters specified [ 417.551148][ T9049] fuse: Unknown parameter 'appraise_type' [ 418.651231][ T9072] QAT: failed to copy from user cfg_data. [ 418.667530][ T9072] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1430'. [ 418.677221][ T9072] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 419.152393][ T13] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 419.578647][ T9082] sctp: [Deprecated]: syz.2.1429 (pid 9082) Use of int in maxseg socket option. [ 419.578647][ T9082] Use struct sctp_assoc_value instead [ 419.632396][ T13] usb 5-1: unable to get BOS descriptor or descriptor too short [ 419.702287][ T13] usb 5-1: not running at top speed; connect to a high speed hub [ 419.792593][ T13] usb 5-1: config 0 has an invalid interface number: 122 but max is 0 [ 419.811089][ T13] usb 5-1: config 0 has no interface number 0 [ 419.819832][ T13] usb 5-1: config 0 interface 122 altsetting 187 endpoint 0x82 has invalid maxpacket 65535, setting to 64 [ 419.851587][ T13] usb 5-1: config 0 interface 122 altsetting 187 has an invalid endpoint with address 0x95, skipping [ 419.885615][ T13] usb 5-1: config 0 interface 122 altsetting 187 endpoint 0x6 has invalid wMaxPacketSize 0 [ 419.908843][ T13] usb 5-1: config 0 interface 122 has no altsetting 0 [ 420.112391][ T13] usb 5-1: New USB device found, idVendor=04b8, idProduct=0521, bcdDevice=15.4a [ 420.121575][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.365612][ T13] usb 5-1: Product: syz [ 420.369944][ T13] usb 5-1: Manufacturer: syz [ 420.448560][ T13] usb 5-1: SerialNumber: syz [ 420.473017][ T13] usb 5-1: config 0 descriptor?? [ 420.512360][ T9074] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 420.520878][ T9074] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 420.889128][ T13] pl2303 5-1:0.122: required endpoints missing [ 421.121878][ T13] usb 5-1: USB disconnect, device number 9 [ 422.870564][ T9118] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1442'. [ 423.082688][ T9120] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1445'. [ 423.091698][ T9120] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1445'. [ 423.123978][ T9118] ALSA: mixer_oss: invalid OSS volume '' [ 423.124938][ T9120] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 423.232327][ T9126] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1445'. [ 423.327410][ T9128] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1447'. [ 423.336890][ T9128] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 423.363936][ T9126] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1445'. [ 423.956046][ T9126] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 425.836515][ T9141] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1453'. [ 426.259859][ T9160] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1458'. [ 426.468022][ T9160] ALSA: mixer_oss: invalid OSS volume '' [ 428.996653][ T9206] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1471'. [ 429.086239][ T5631] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 429.150626][ T9206] ALSA: mixer_oss: invalid OSS volume '' [ 429.200850][ T9213] vcan0: tx drop: invalid sa for name 0x0000000007fffffe [ 429.384189][ T5631] usb 1-1: Using ep0 maxpacket: 32 [ 429.502218][ T5631] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 429.510568][ T5631] usb 1-1: config 0 has no interface number 0 [ 430.082842][ T5631] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 430.107085][ T5631] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.130866][ T5631] usb 1-1: Product: syz [ 430.143006][ T5631] usb 1-1: Manufacturer: syz [ 430.147695][ T5631] usb 1-1: SerialNumber: syz [ 430.154781][ T5631] usb 1-1: config 0 descriptor?? [ 430.235636][ T5631] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 431.254494][ T5631] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 431.334554][ T6588] Bluetooth: hci5: Frame reassembly failed (-84) [ 431.343171][ T5631] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 432.634878][ T5631] usb 1-1: USB disconnect, device number 7 [ 432.652103][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 432.671671][ T5631] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 432.725358][ T5631] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 432.746124][ T5631] quatech2 1-1:0.51: device disconnected [ 433.392816][ T13] Bluetooth: hci5: command 0x1003 tx timeout [ 433.401341][ T9240] Bluetooth: hci5: sending frame failed (-49) [ 435.473176][ T4193] Bluetooth: hci5: command 0x1001 tx timeout [ 435.480074][ T9240] Bluetooth: hci5: sending frame failed (-49) [ 436.350926][ T9304] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1507'. [ 436.360031][ T9304] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 436.396607][ T9305] sctp: [Deprecated]: syz.4.1506 (pid 9305) Use of int in maxseg socket option. [ 436.396607][ T9305] Use struct sctp_assoc_value instead [ 437.980354][ T6522] Bluetooth: hci5: command 0x1009 tx timeout [ 439.956302][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.962877][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.524666][ T9361] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1523'. [ 441.757393][ T9361] ALSA: mixer_oss: invalid OSS volume '' [ 441.923859][ T9368] sctp: [Deprecated]: syz.0.1521 (pid 9368) Use of int in maxseg socket option. [ 441.923859][ T9368] Use struct sctp_assoc_value instead [ 443.670194][ T9394] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1533'. [ 445.064698][ T9394] netem: invalid attributes len -7 [ 445.069847][ T9394] netem: change failed [ 445.573747][ T9419] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1538'. [ 445.817755][ T9419] ALSA: mixer_oss: invalid OSS volume '' [ 446.981430][ T9436] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1546'. [ 449.523441][ T9460] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1553'. [ 449.608345][ T9460] ALSA: mixer_oss: invalid OSS volume '' [ 453.688219][ T9506] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1566'. [ 454.027283][ T9506] ALSA: mixer_oss: invalid OSS volume '' [ 454.341472][ T9511] sctp: [Deprecated]: syz.4.1568 (pid 9511) Use of int in maxseg socket option. [ 454.341472][ T9511] Use struct sctp_assoc_value instead [ 458.152069][ T9555] sctp: [Deprecated]: syz.3.1583 (pid 9555) Use of int in maxseg socket option. [ 458.152069][ T9555] Use struct sctp_assoc_value instead [ 458.416403][ T9563] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1584'. [ 460.221836][ T9577] netlink: 'syz.4.1588': attribute type 1 has an invalid length. [ 460.439217][ T9578] device macvlan2 entered promiscuous mode [ 460.453440][ T9578] device bond2 entered promiscuous mode [ 460.472156][ T9578] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 460.485300][ T9578] device bond2 left promiscuous mode [ 460.528285][ T9582] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1589'. [ 460.544269][ T9582] device bond0 entered promiscuous mode [ 460.550011][ T9582] device bond_slave_0 entered promiscuous mode [ 460.556493][ T9582] device bond_slave_1 entered promiscuous mode [ 460.573893][ T9582] device gretap0 entered promiscuous mode [ 460.593396][ T9582] device hsr1 entered promiscuous mode [ 461.799379][ T9592] sctp: [Deprecated]: syz.3.1594 (pid 9592) Use of int in maxseg socket option. [ 461.799379][ T9592] Use struct sctp_assoc_value instead [ 462.846429][ T9611] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1600'. [ 462.988691][ T9613] netlink: 'syz.4.1601': attribute type 1 has an invalid length. [ 463.258426][ T9618] device macvlan2 entered promiscuous mode [ 463.266243][ T9618] device bond3 entered promiscuous mode [ 463.275835][ T9618] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 463.286670][ T9618] device bond3 left promiscuous mode [ 464.098117][ T9642] sctp: [Deprecated]: syz.1.1608 (pid 9642) Use of int in maxseg socket option. [ 464.098117][ T9642] Use struct sctp_assoc_value instead [ 466.043879][ T9665] netlink: 'syz.4.1614': attribute type 1 has an invalid length. [ 466.372130][ T4697] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 466.518498][ T9671] device macvlan2 entered promiscuous mode [ 466.546766][ T9671] device bond4 entered promiscuous mode [ 466.555347][ T9671] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 466.591719][ T9671] device bond4 left promiscuous mode [ 466.619851][ T9700] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1616'. [ 466.874484][ T4697] usb 3-1: Using ep0 maxpacket: 32 [ 466.946194][ T9709] sctp: [Deprecated]: syz.0.1619 (pid 9709) Use of int in maxseg socket option. [ 466.946194][ T9709] Use struct sctp_assoc_value instead [ 468.020495][ T4697] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 468.129654][ T4697] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 468.148694][ T4697] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 468.158823][ T4697] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.177672][ T4697] usb 3-1: config 0 descriptor?? [ 468.316922][ T4697] hub 3-1:0.0: USB hub found [ 468.512500][ T4697] hub 3-1:0.0: 1 port detected [ 468.883003][ T9708] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.892212][ T9708] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.901110][ T9708] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.911771][ T9708] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.979795][ T9749] netlink: 'syz.3.1631': attribute type 1 has an invalid length. [ 469.019747][ T4697] usb 3-1: USB disconnect, device number 12 [ 469.223388][ T9750] device macvlan2 entered promiscuous mode [ 469.230787][ T9750] device bond3 entered promiscuous mode [ 469.238867][ T9750] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 470.411163][ T9750] device bond3 left promiscuous mode [ 470.619055][ T9765] sctp: [Deprecated]: syz.1.1635 (pid 9765) Use of int in maxseg socket option. [ 470.619055][ T9765] Use struct sctp_assoc_value instead [ 470.757344][ T9758] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1632'. [ 473.532119][ T9806] sctp: [Deprecated]: syz.3.1648 (pid 9806) Use of int in maxseg socket option. [ 473.532119][ T9806] Use struct sctp_assoc_value instead [ 474.410378][ T9821] QAT: failed to copy from user cfg_data. [ 474.422713][ T9821] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1650'. [ 474.432325][ T9821] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 476.946498][ T9864] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1662'. [ 478.869239][ T9885] netlink: 'syz.3.1672': attribute type 1 has an invalid length. [ 478.908739][ T9885] device macvlan2 entered promiscuous mode [ 478.916044][ T9885] device bond4 entered promiscuous mode [ 478.921982][ T9885] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 478.934358][ T9885] device bond4 left promiscuous mode [ 479.154343][ T9894] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1670'. [ 479.182368][ T9894] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 480.265062][ T9919] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1679'. [ 480.276407][ T9919] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1679'. [ 481.496115][ T9932] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1682'. [ 484.006894][ T9941] netlink: 'syz.2.1686': attribute type 1 has an invalid length. [ 484.332699][ T9948] QAT: failed to copy from user cfg_data. [ 484.349167][ T9948] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1687'. [ 484.358454][ T9948] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 484.956267][ T9945] device macvlan2 entered promiscuous mode [ 485.083469][ T9945] device bond1 entered promiscuous mode [ 485.089404][ T9945] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 485.159829][ T9945] device bond1 left promiscuous mode [ 489.500935][ T9995] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1699'. [ 490.886449][T10005] netlink: 'syz.0.1703': attribute type 1 has an invalid length. [ 491.776601][T10008] device macvlan2 entered promiscuous mode [ 491.804481][T10008] device bond4 entered promiscuous mode [ 491.810404][T10008] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 491.820224][T10008] device bond4 left promiscuous mode [ 493.924494][T10038] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1714'. [ 498.291079][T10093] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1728'. [ 498.324954][T10088] netlink: 'syz.4.1729': attribute type 1 has an invalid length. [ 499.136822][T10092] device macvlan2 entered promiscuous mode [ 499.144775][T10092] device bond5 entered promiscuous mode [ 499.151188][T10092] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 499.164026][T10092] device bond5 left promiscuous mode [ 499.170358][T10103] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1733'. [ 499.179467][T10103] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 501.633217][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.652201][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.025946][T10144] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1743'. [ 502.284768][T10150] QAT: failed to copy from user cfg_data. [ 502.297581][T10150] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1745'. [ 502.307042][T10150] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 506.149357][T10195] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1758'. [ 506.279174][T10200] netlink: 'syz.4.1761': attribute type 1 has an invalid length. [ 506.348547][T10203] device macvlan2 entered promiscuous mode [ 506.454129][T10203] device bond6 entered promiscuous mode [ 506.460565][T10203] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 506.470473][T10203] device bond6 left promiscuous mode [ 508.162816][T10226] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1767'. [ 509.183155][T10246] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1773'. [ 511.433427][T10262] QAT: failed to copy from user cfg_data. [ 511.696084][T10264] netlink: 'syz.1.1779': attribute type 1 has an invalid length. [ 511.987311][T10267] device macvlan2 entered promiscuous mode [ 511.998011][T10267] device bond2 entered promiscuous mode [ 512.005348][T10267] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 512.022285][T10267] device bond2 left promiscuous mode [ 512.119351][T10277] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1783'. [ 512.333660][T10279] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1782'. [ 514.128188][T10300] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1787'. [ 514.794333][T10309] QAT: failed to copy from user cfg_data. [ 517.455860][T10335] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1798'. [ 521.386759][T10377] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1810'. [ 521.632166][ T4185] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 521.872606][ T4185] usb 5-1: Using ep0 maxpacket: 32 [ 521.992314][ T4185] usb 5-1: config index 0 descriptor too short (expected 12544, got 36) [ 522.010311][ T4185] usb 5-1: config 52 has too many interfaces: 56, using maximum allowed: 32 [ 522.040041][ T4185] usb 5-1: config 52 has an invalid descriptor of length 52, skipping remainder of the config [ 522.081184][ T4185] usb 5-1: config 52 has 0 interfaces, different from the descriptor's value: 56 [ 522.282275][ T4185] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 522.311789][ T4185] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.333134][ T4185] usb 5-1: Product: syz [ 522.337325][ T4185] usb 5-1: Manufacturer: syz [ 522.341920][ T4185] usb 5-1: SerialNumber: syz [ 522.665651][ T4185] usb 5-1: USB disconnect, device number 10 [ 523.184789][T10400] QAT: failed to copy from user cfg_data. [ 526.952625][T10428] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1824'. [ 528.102212][ T4263] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 528.792099][ T4263] usb 3-1: Using ep0 maxpacket: 16 [ 528.860111][T10473] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1839'. [ 528.945147][ T4263] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 528.972166][ T4263] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 528.994713][ T4263] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 529.013443][ T4263] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 529.023567][ T4263] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 529.122806][ T4263] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 529.135395][ T4263] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 529.148662][ T4263] usb 3-1: Manufacturer: syz [ 529.171010][ T4263] usb 3-1: config 0 descriptor?? [ 530.352108][ T4263] rc_core: IR keymap rc-hauppauge not found [ 530.458081][ T4263] Registered IR keymap rc-empty [ 530.465428][ T4263] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 530.502102][ T4263] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 530.553282][ T4263] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 530.577430][ T4263] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input6 [ 530.942287][ T4263] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 530.982259][ T4263] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 531.022230][ T4263] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 531.072279][ T4263] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 531.112203][ T4263] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 531.152316][ T4263] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 531.194328][ T4263] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 531.284667][T10511] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1853'. [ 531.351816][ T4263] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 531.382121][ T4263] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 531.979059][ T4263] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 532.106157][ T4263] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 532.115968][ T4263] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 532.126923][ T4263] usb 3-1: USB disconnect, device number 13 [ 532.817822][T10530] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1859'. [ 533.726787][T10547] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1865'. [ 535.281647][T10567] fuse: Unknown parameter 'fl' [ 538.714978][T10607] overlayfs: unrecognized mount option "smackfsfloor=-" or missing value [ 544.999244][T10696] netlink: 'syz.2.1913': attribute type 1 has an invalid length. [ 545.147479][T10697] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1913'. [ 545.223767][T10702] device macvlan2 entered promiscuous mode [ 545.250136][T10702] device bond2 entered promiscuous mode [ 545.275469][T10702] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 545.305470][T10702] device bond2 left promiscuous mode [ 550.989824][T10781] netlink: 'syz.4.1939': attribute type 1 has an invalid length. [ 551.226339][T10787] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1939'. [ 551.320588][T10787] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1939'. [ 551.912776][T10788] device macvlan2 entered promiscuous mode [ 551.919701][T10788] device bond7 entered promiscuous mode [ 551.926082][T10788] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 552.483887][T10788] device bond7 left promiscuous mode [ 552.559092][T10799] binder: 10798:10799 ioctl c0306201 0 returned -14 [ 553.075599][T10806] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 553.193332][T10806] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 553.318038][T10806] overlayfs: missing 'lowerdir' [ 555.176669][T10836] netlink: 'syz.4.1956': attribute type 1 has an invalid length. [ 555.218874][T10840] binder: 10839:10840 ioctl c0306201 0 returned -14 [ 555.254834][T10845] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1956'. [ 555.308380][T10845] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1956'. [ 555.345563][T10836] device macvlan2 entered promiscuous mode [ 555.363022][T10836] device bond8 entered promiscuous mode [ 555.377546][T10836] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 555.398015][T10836] device bond8 left promiscuous mode [ 556.022225][ T1108] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 556.442624][ T1108] usb 5-1: config 13 interface 0 has no altsetting 0 [ 556.612851][ T1108] usb 5-1: New USB device found, idVendor=04b4, idProduct=9321, bcdDevice=55.de [ 556.672383][ T1108] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.770400][ T1108] usb 5-1: Product: syz [ 556.818477][ T1108] usb 5-1: Manufacturer: syz [ 557.660573][ T1108] usb 5-1: SerialNumber: syz [ 559.144710][ T1108] usb 5-1: can't set config #13, error -71 [ 560.002370][ T1108] usb 5-1: USB disconnect, device number 11 [ 560.145766][T10882] netlink: 'syz.3.1971': attribute type 1 has an invalid length. [ 560.223654][T10886] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1971'. [ 560.268485][T10886] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1971'. [ 561.158430][T10882] device macvlan2 entered promiscuous mode [ 561.185455][T10882] device bond5 entered promiscuous mode [ 561.204545][T10882] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 561.344059][T10882] device bond5 left promiscuous mode [ 562.578610][T10915] trusted_key: encrypted_key: insufficient parameters specified [ 562.862998][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.875306][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.383629][T10940] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1987'. [ 565.502266][T10944] netlink: 'syz.1.1988': attribute type 1 has an invalid length. [ 565.554224][T10944] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1988'. [ 565.572012][T10944] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1988'. [ 565.588676][T10944] device macvlan2 entered promiscuous mode [ 565.598486][T10944] device bond3 entered promiscuous mode [ 565.604438][T10944] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 565.621911][T10944] device bond3 left promiscuous mode [ 566.845933][T10967] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1994'. [ 569.548909][T10969] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1995'. [ 570.499118][T10980] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1999'. [ 570.595791][T10983] 9pnet_virtio: no channels available for device ./bus [ 571.355251][T10986] netlink: 'syz.3.2001': attribute type 1 has an invalid length. [ 571.380158][T10986] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2001'. [ 571.391674][T10986] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2001'. [ 571.409232][T10986] device macvlan2 entered promiscuous mode [ 571.416650][T10986] device bond6 entered promiscuous mode [ 571.422993][T10986] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 571.453961][T10986] device bond6 left promiscuous mode [ 572.838981][T11007] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2007'. [ 573.937109][T11014] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2009'. [ 575.045498][T11024] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2011'. [ 575.916697][T11031] QAT: failed to copy from user cfg_data. [ 575.927967][T11031] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2013'. [ 576.856761][T11044] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2019'. [ 577.003995][T11052] netlink: 'syz.1.2022': attribute type 1 has an invalid length. [ 577.176225][T11056] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2022'. [ 577.194911][T11059] device macvlan2 entered promiscuous mode [ 577.205959][T11059] device bond4 entered promiscuous mode [ 577.212355][T11059] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 577.225166][T11059] device bond4 left promiscuous mode [ 577.239201][T11060] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2024'. [ 577.250704][T11061] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2023'. [ 577.425503][T11069] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2028'. [ 578.785728][T11094] netlink: 'syz.4.2037': attribute type 1 has an invalid length. [ 578.874431][T11094] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2037'. [ 578.895216][T11094] device macvlan2 entered promiscuous mode [ 578.896379][T11094] device bond9 entered promiscuous mode [ 578.896816][T11094] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 578.901785][T11094] device bond9 left promiscuous mode [ 580.333640][T11106] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2041'. [ 580.638683][T11120] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2046'. [ 581.870912][T11141] netlink: 'syz.0.2051': attribute type 1 has an invalid length. [ 581.947710][T11143] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2051'. [ 582.015304][T11141] device macvlan2 entered promiscuous mode [ 582.043461][T11141] device bond5 entered promiscuous mode [ 582.064836][T11141] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 582.220070][T11141] device bond5 left promiscuous mode [ 584.801838][T11167] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2059'. [ 584.881703][T11169] QAT: failed to copy from user cfg_data. [ 584.894013][T11169] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2057'. [ 585.430935][T11178] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2061'. [ 586.484354][T11188] netlink: 'syz.2.2066': attribute type 1 has an invalid length. [ 586.969251][T11193] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2068'. [ 586.990687][T11195] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2066'. [ 587.064192][T11188] device macvlan2 entered promiscuous mode [ 587.080768][T11204] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2072'. [ 587.082720][T11188] device bond3 entered promiscuous mode [ 587.126437][T11188] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 587.160814][T11188] device bond3 left promiscuous mode [ 587.209002][T11206] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 587.679301][T11224] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2078'. [ 588.377262][T11229] 9pnet: Insufficient options for proto=fd [ 588.587513][T11236] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2082'. [ 589.674172][T11242] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2085'. [ 591.075163][T11259] netlink: 'syz.2.2089': attribute type 1 has an invalid length. [ 591.196162][T11262] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2089'. [ 591.253140][T11259] device macvlan2 entered promiscuous mode [ 591.274952][T11259] device bond4 entered promiscuous mode [ 591.296333][T11259] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 591.482948][T11259] device bond4 left promiscuous mode [ 591.806393][T11263] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2090'. [ 592.265420][T11274] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2095'. [ 595.535815][T11313] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2106'. [ 595.947533][T11323] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2109'. [ 595.970271][T11324] netlink: 'syz.3.2110': attribute type 1 has an invalid length. [ 596.059251][T11327] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2110'. [ 596.093436][T11324] device macvlan2 entered promiscuous mode [ 596.113248][T11324] device bond7 entered promiscuous mode [ 596.129681][T11324] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 596.244541][T11324] device bond7 left promiscuous mode [ 597.693618][T11358] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2121'. [ 599.160616][T11360] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2122'. [ 599.335529][T11362] device syzkaller0 entered promiscuous mode [ 599.356689][T11365] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2124'. [ 600.689338][T11400] netlink: 'syz.0.2136': attribute type 1 has an invalid length. [ 600.726730][T11400] device macvlan2 entered promiscuous mode [ 600.743561][T11400] device bond6 entered promiscuous mode [ 600.749568][T11400] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 600.778935][T11400] device bond6 left promiscuous mode [ 601.212555][T11433] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2145'. [ 601.246890][T11433] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2145'. [ 601.404411][T11442] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2150'. [ 601.485898][T11442] Unknown options in mask b7f2 [ 602.358509][T11455] netlink: 'syz.4.2152': attribute type 1 has an invalid length. [ 602.490561][T11455] device macvlan2 entered promiscuous mode [ 602.513079][T11455] device bond10 entered promiscuous mode [ 602.560788][T11455] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 602.587089][T11455] device bond10 left promiscuous mode [ 603.965948][T11479] netlink: 7 bytes leftover after parsing attributes in process `syz.4.2161'. [ 608.627586][T11540] user requested TSC rate below hardware speed [ 608.928607][ T144] kworker/dying (144) used greatest stack depth: 19920 bytes left [ 610.346390][T11566] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2188'. [ 610.395233][T11563] QAT: failed to copy from user cfg_data. [ 610.458289][ T26] audit: type=1326 audit(1773276673.704:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11559 comm="syz.2.2187" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f81dea4a799 code=0x0 [ 610.612582][ T4263] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 611.352161][ T4263] usb 5-1: Using ep0 maxpacket: 32 [ 611.674892][ T4263] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 611.990680][T11580] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2191'. [ 612.019077][ T4263] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 612.031693][ T4263] usb 5-1: config 0 has no interface number 0 [ 612.038784][ T4263] usb 5-1: config 0 interface 184 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 612.066856][ T4263] usb 5-1: config 0 interface 184 has no altsetting 0 [ 613.033019][ T4263] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 613.045886][ T4263] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.054184][ T4263] usb 5-1: Product: syz [ 613.058359][ T4263] usb 5-1: Manufacturer: syz [ 613.066181][ T4263] usb 5-1: SerialNumber: syz [ 613.073118][ T4263] usb 5-1: config 0 descriptor?? [ 613.243610][ T4263] smsc75xx v1.0.0 [ 613.247280][ T4263] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 613.265026][ T4263] smsc75xx: probe of 5-1:0.184 failed with error -22 [ 613.308670][T11613] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2201'. [ 613.329495][ T4263] usb 5-1: USB disconnect, device number 12 [ 613.478684][T11623] QAT: failed to copy from user cfg_data. [ 613.491331][T11623] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2208'. [ 616.420718][T11668] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2221'. [ 616.432298][ T4193] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 616.741108][ T4193] usb 3-1: Using ep0 maxpacket: 16 [ 616.922733][ T4193] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 255, changing to 7 [ 618.397118][ T4193] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 95, changing to 7 [ 618.707891][ T4193] usb 3-1: string descriptor 0 read error: -71 [ 618.721063][ T4193] usb 3-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 618.771169][ T4193] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.780092][T11683] netlink: 'syz.4.2227': attribute type 1 has an invalid length. [ 620.027574][ T4193] usb 3-1: can't set config #1, error -71 [ 620.062342][ T4193] usb 3-1: USB disconnect, device number 14 [ 620.108643][T11689] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2227'. [ 620.191397][T11694] device macvlan2 entered promiscuous mode [ 620.235815][T11694] device bond11 entered promiscuous mode [ 620.253979][T11694] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 620.282948][T11694] device bond11 left promiscuous mode [ 621.136242][T11714] fuse: Bad value for 'group_id' [ 622.712088][T11742] loop2: detected capacity change from 0 to 8 [ 623.032239][T11742] SQUASHFS error: xz decompression failed, data probably corrupt [ 623.040417][T11742] SQUASHFS error: Failed to read block 0x108: -5 [ 623.046946][T11742] SQUASHFS error: Unable to read metadata cache entry [106] [ 623.054369][T11742] SQUASHFS error: Unable to read inode 0x11f [ 623.808306][T11736] loop4: detected capacity change from 0 to 32768 [ 624.174313][T11736] JBD2: Ignoring recovery information on journal [ 624.275803][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.283341][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.413623][T11736] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 625.223589][ T4183] ocfs2: Unmounting device (7,4) on (node local) [ 626.312674][T11786] overlayfs: overlapping lowerdir path [ 629.196619][T11848] loop4: detected capacity change from 0 to 256 [ 629.396422][T11852] syz.1.2280 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 629.472424][T11848] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 633.188320][T11905] loop3: detected capacity change from 0 to 64 [ 633.266995][T11905] hfs: unable to locate alternate MDB [ 633.300471][T11905] hfs: continuing without an alternate MDB [ 633.335500][T11906] xt_connbytes: Forcing CT accounting to be enabled [ 633.342458][T11906] set match dimension is over the limit! [ 633.394780][ T26] audit: type=1800 audit(1773276696.654:40): pid=11905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2300" name="file1" dev="loop3" ino=21 res=0 errno=0 [ 633.449594][ T4273] hfs: new node 0 already hashed? [ 633.482358][ T4273] ------------[ cut here ]------------ [ 633.487856][ T4273] WARNING: CPU: 0 PID: 4273 at fs/hfs/bnode.c:530 hfs_bnode_create+0x3d1/0x450 [ 633.511992][ T4273] Modules linked in: [ 633.515933][ T4273] CPU: 0 PID: 4273 Comm: kworker/u4:8 Not tainted syzkaller #0 [ 633.543321][ T4273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 633.555184][ T4273] Workqueue: writeback wb_workfn (flush-7:3) [ 633.568000][ T4273] RIP: 0010:hfs_bnode_create+0x3d1/0x450 [ 633.579410][ T4273] Code: 97 3f 8a 89 ee e8 6f 65 82 07 e9 57 fd ff ff e8 a5 c4 49 ff 4c 89 ef e8 7d 7a 96 07 48 c7 c7 40 98 3f 8a 89 ee e8 4f 65 82 07 <0f> 0b eb b7 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 63 fc ff ff 4c [ 633.621493][ T4273] RSP: 0018:ffffc9000327ee90 EFLAGS: 00010246 [ 633.650059][ T4273] RAX: 000000000000001f RBX: ffff88806058e000 RCX: 54a0eb5868c08f00 [ 633.670381][ T4273] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 633.688751][ T4273] RBP: 0000000000000000 R08: ffff8880b9033d7f R09: 1ffff110172067af [ 633.704701][ T4273] R10: dffffc0000000000 R11: ffffed10172067b0 R12: 0000000000000000 [ 633.723375][ T4273] R13: ffff88806058e0e0 R14: ffff88807c317500 R15: dffffc0000000000 [ 633.740446][ T4273] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 633.771224][ T4273] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 633.795533][ T4273] CR2: 0000001b32419ff8 CR3: 000000001fb86000 CR4: 00000000003506f0 [ 633.813374][ T4273] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 633.821542][ T4273] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 633.833015][ T4273] Call Trace: [ 633.836376][ T4273] [ 633.839364][ T4273] ? do_raw_spin_unlock+0x11d/0x230 [ 633.846205][ T4273] hfs_bmap_alloc+0x5b8/0x670 [ 633.850976][ T4273] ? hfs_bmap_reserve+0x420/0x420 [ 633.857654][ T4273] hfs_btree_inc_height+0xfd/0xac0 [ 633.864595][ T4273] ? hfs_brec_insert+0x6f6/0xbd0 [ 633.869717][ T4273] ? hfs_brec_insert+0xbd0/0xbd0 [ 633.878300][ T4273] ? do_raw_spin_unlock+0x11d/0x230 [ 633.885128][ T4273] hfs_brec_insert+0x744/0xbd0 [ 633.890015][ T4273] ? hfs_brec_keylen+0x350/0x350 [ 633.896635][ T4273] __hfs_ext_write_extent+0x2a1/0x470 [ 633.903427][ T4273] hfs_ext_write_extent+0x17b/0x200 [ 633.908898][ T4273] ? verify_lock_unused+0x140/0x140 [ 633.915596][ T4273] ? hfs_ext_keycmp+0x310/0x310 [ 633.920629][ T4273] ? writeback_sb_inodes+0x418/0x1680 [ 633.927558][ T4273] hfs_write_inode+0xd8/0xa20 [ 633.942167][ T4273] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 633.947573][ T4273] ? __writeback_single_inode+0x471/0xda0 [ 633.954786][ T4273] ? __lock_acquire+0x7d10/0x7d10 [ 633.959824][ T4273] ? do_raw_spin_lock+0x128/0x2f0 [ 633.966264][ T4273] ? __rwlock_init+0x140/0x140 [ 633.971064][ T4273] __writeback_single_inode+0x6c3/0xda0 [ 633.978026][ T4273] writeback_sb_inodes+0xa4e/0x1680 [ 633.985773][ T4273] ? queue_io+0x550/0x550 [ 633.990198][ T4273] ? rcu_is_watching+0x11/0xa0 [ 633.997038][ T4273] wb_writeback+0x45d/0xbe0 [ 634.001634][ T4273] ? rcu_lock_release+0x20/0x20 [ 634.007850][ T4273] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 634.015205][ T4273] ? mark_lock+0x94/0x320 [ 634.019546][ T4273] ? _raw_spin_unlock_irq+0x1f/0x40 [ 634.026192][ T4273] wb_workfn+0x43a/0xf20 [ 634.030464][ T4273] ? inode_wait_for_writeback+0x220/0x220 [ 634.037893][ T4273] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 634.045782][ T4273] ? read_lock_is_recursive+0x10/0x10 [ 634.051231][ T4273] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 634.058486][ T4273] ? _raw_spin_unlock+0x40/0x40 [ 634.064696][ T4273] ? _raw_spin_unlock_irq+0x1f/0x40 [ 634.069906][ T4273] process_one_work+0x85f/0x1010 [ 634.076290][ T4273] ? worker_detach_from_pool+0x240/0x240 [ 634.083257][ T4273] ? lockdep_hardirqs_off+0x70/0x100 [ 634.088634][ T4273] ? _raw_spin_lock_irq+0xb7/0xf0 [ 634.096313][ T4273] ? _raw_spin_lock_irqsave+0x100/0x100 [ 634.103324][ T4273] ? wq_worker_running+0x97/0x170 [ 634.108367][ T4273] worker_thread+0xaa6/0x1290 [ 634.114518][ T4273] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 634.120433][ T4273] kthread+0x436/0x520 [ 634.124890][ T4273] ? rcu_lock_release+0x20/0x20 [ 634.129843][ T4273] ? kthread_blkcg+0xd0/0xd0 [ 634.136386][ T4273] ret_from_fork+0x1f/0x30 [ 634.140839][ T4273] [ 634.144181][ T4273] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 634.151459][ T4273] CPU: 0 PID: 4273 Comm: kworker/u4:8 Not tainted syzkaller #0 [ 634.159006][ T4273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 634.169177][ T4273] Workqueue: writeback wb_workfn (flush-7:3) [ 634.175191][ T4273] Call Trace: [ 634.178464][ T4273] [ 634.181383][ T4273] dump_stack_lvl+0x188/0x250 [ 634.186047][ T4273] ? show_regs_print_info+0x20/0x20 [ 634.191231][ T4273] ? load_image+0x400/0x400 [ 634.195722][ T4273] panic+0x2e5/0x810 [ 634.199609][ T4273] ? bpf_jit_dump+0xd0/0xd0 [ 634.204104][ T4273] ? ret_from_fork+0x1f/0x30 [ 634.208692][ T4273] ? hfs_bnode_create+0x3d1/0x450 [ 634.213708][ T4273] __warn+0x248/0x2b0 [ 634.217686][ T4273] ? hfs_bnode_create+0x3d1/0x450 [ 634.222706][ T4273] report_bug+0x1b7/0x2e0 [ 634.227043][ T4273] handle_bug+0x3a/0x70 [ 634.231184][ T4273] exc_invalid_op+0x16/0x40 [ 634.235668][ T4273] asm_exc_invalid_op+0x16/0x20 [ 634.240516][ T4273] RIP: 0010:hfs_bnode_create+0x3d1/0x450 [ 634.246304][ T4273] Code: 97 3f 8a 89 ee e8 6f 65 82 07 e9 57 fd ff ff e8 a5 c4 49 ff 4c 89 ef e8 7d 7a 96 07 48 c7 c7 40 98 3f 8a 89 ee e8 4f 65 82 07 <0f> 0b eb b7 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 63 fc ff ff 4c [ 634.265902][ T4273] RSP: 0018:ffffc9000327ee90 EFLAGS: 00010246 [ 634.271955][ T4273] RAX: 000000000000001f RBX: ffff88806058e000 RCX: 54a0eb5868c08f00 [ 634.279919][ T4273] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 634.287876][ T4273] RBP: 0000000000000000 R08: ffff8880b9033d7f R09: 1ffff110172067af [ 634.295836][ T4273] R10: dffffc0000000000 R11: ffffed10172067b0 R12: 0000000000000000 [ 634.303798][ T4273] R13: ffff88806058e0e0 R14: ffff88807c317500 R15: dffffc0000000000 [ 634.311775][ T4273] ? do_raw_spin_unlock+0x11d/0x230 [ 634.316960][ T4273] hfs_bmap_alloc+0x5b8/0x670 [ 634.321621][ T4273] ? hfs_bmap_reserve+0x420/0x420 [ 634.326630][ T4273] hfs_btree_inc_height+0xfd/0xac0 [ 634.331750][ T4273] ? hfs_brec_insert+0x6f6/0xbd0 [ 634.336672][ T4273] ? hfs_brec_insert+0xbd0/0xbd0 [ 634.341588][ T4273] ? do_raw_spin_unlock+0x11d/0x230 [ 634.346768][ T4273] hfs_brec_insert+0x744/0xbd0 [ 634.351519][ T4273] ? hfs_brec_keylen+0x350/0x350 [ 634.356454][ T4273] __hfs_ext_write_extent+0x2a1/0x470 [ 634.361826][ T4273] hfs_ext_write_extent+0x17b/0x200 [ 634.367011][ T4273] ? verify_lock_unused+0x140/0x140 [ 634.372204][ T4273] ? hfs_ext_keycmp+0x310/0x310 [ 634.377075][ T4273] ? writeback_sb_inodes+0x418/0x1680 [ 634.382452][ T4273] hfs_write_inode+0xd8/0xa20 [ 634.387137][ T4273] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 634.392510][ T4273] ? __writeback_single_inode+0x471/0xda0 [ 634.398236][ T4273] ? __lock_acquire+0x7d10/0x7d10 [ 634.403249][ T4273] ? do_raw_spin_lock+0x128/0x2f0 [ 634.408259][ T4273] ? __rwlock_init+0x140/0x140 [ 634.413023][ T4273] __writeback_single_inode+0x6c3/0xda0 [ 634.418580][ T4273] writeback_sb_inodes+0xa4e/0x1680 [ 634.423793][ T4273] ? queue_io+0x550/0x550 [ 634.428115][ T4273] ? rcu_is_watching+0x11/0xa0 [ 634.432873][ T4273] wb_writeback+0x45d/0xbe0 [ 634.437491][ T4273] ? rcu_lock_release+0x20/0x20 [ 634.442327][ T4273] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 634.448308][ T4273] ? mark_lock+0x94/0x320 [ 634.452623][ T4273] ? _raw_spin_unlock_irq+0x1f/0x40 [ 634.457832][ T4273] wb_workfn+0x43a/0xf20 [ 634.462076][ T4273] ? inode_wait_for_writeback+0x220/0x220 [ 634.467803][ T4273] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 634.473812][ T4273] ? read_lock_is_recursive+0x10/0x10 [ 634.479174][ T4273] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 634.485063][ T4273] ? _raw_spin_unlock+0x40/0x40 [ 634.489920][ T4273] ? _raw_spin_unlock_irq+0x1f/0x40 [ 634.495112][ T4273] process_one_work+0x85f/0x1010 [ 634.500058][ T4273] ? worker_detach_from_pool+0x240/0x240 [ 634.505682][ T4273] ? lockdep_hardirqs_off+0x70/0x100 [ 634.510954][ T4273] ? _raw_spin_lock_irq+0xb7/0xf0 [ 634.515964][ T4273] ? _raw_spin_lock_irqsave+0x100/0x100 [ 634.521497][ T4273] ? wq_worker_running+0x97/0x170 [ 634.526507][ T4273] worker_thread+0xaa6/0x1290 [ 634.531175][ T4273] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 634.537054][ T4273] kthread+0x436/0x520 [ 634.541106][ T4273] ? rcu_lock_release+0x20/0x20 [ 634.545945][ T4273] ? kthread_blkcg+0xd0/0xd0 [ 634.550529][ T4273] ret_from_fork+0x1f/0x30 [ 634.554933][ T4273] [ 634.558222][ T4273] Kernel Offset: disabled [ 634.562721][ T4273] Rebooting in 86400 seconds..