last executing test programs: 15m58.70319377s ago: executing program 4 (id=157): bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0xc, 0x4, 0x4, 0x9}, 0x48) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') bpf$ENABLE_STATS(0x20, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ptrace$peek(0x7, 0x0, &(0x7f0000000280)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = socket(0x2, 0x80805, 0x0) flistxattr(r3, &(0x7f0000000240)=""/53, 0x35) sendmmsg$inet(r3, &(0x7f0000006d40)=[{{&(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000140)='j', 0x1}], 0x1}}, {{&(0x7f0000000840)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000002a00)=[{&(0x7f0000000880)='*', 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f0000000380), &(0x7f00000003c0)=0x4) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) 15m55.457059524s ago: executing program 4 (id=164): bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0xc, 0x4, 0x4, 0x9}, 0x48) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') bpf$ENABLE_STATS(0x20, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ptrace$peek(0x7, 0x0, &(0x7f0000000280)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = socket(0x2, 0x80805, 0x0) flistxattr(r3, &(0x7f0000000240)=""/53, 0x35) sendmmsg$inet(r3, &(0x7f0000006d40)=[{{&(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000140)='j', 0x1}], 0x1}}, {{&(0x7f0000000840)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000002a00)=[{&(0x7f0000000880)='*', 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f0000000380), &(0x7f00000003c0)=0x4) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r1, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c"], 0x48}}, 0x4084) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 15m54.519520121s ago: executing program 4 (id=170): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fchdir(0xffffffffffffffff) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000400)={0xf0f016, 0x2}) getdents64(r3, &(0x7f0000000200)=""/50, 0x32) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r5, 0x8b2a, &(0x7f0000000040)) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x70, 0xff00, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, &(0x7f0000001300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x108) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000040)=@e={0xff, 0xa, 0x0, 0x0, @SEQ_CONTROLLER=0xfe}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b8002944"], 0xfdef) 15m53.673532286s ago: executing program 4 (id=174): r0 = gettid() timer_create(0x8, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xffff, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x61) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) acct(&(0x7f0000000140)='./file0/file2\x00') 15m51.428570313s ago: executing program 4 (id=181): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) rt_sigprocmask(0x2, &(0x7f0000000180)={[0x8]}, &(0x7f0000000000), 0xfffffffffffffca3) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102392, 0x18ff8) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="f8000000190001000000000000000000e0000002000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000700000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000100000144000500"], 0xf8}}, 0x0) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) syz_mount_image$hfsplus(&(0x7f00000002c0), &(0x7f0000002900)='./file1\x00', 0x400, &(0x7f0000000c00)=ANY=[], 0x1, 0x6e5, &(0x7f0000000f80)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file2\x00', 0xc4042, 0x40) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0) sendfile(r3, r4, 0x0, 0x20fffe82) 15m49.140428242s ago: executing program 4 (id=190): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) io_uring_setup(0x3c93, &(0x7f0000000900)={0x0, 0xb7e2, 0x80, 0x1, 0xe0}) recvfrom(r3, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 15m48.133335727s ago: executing program 32 (id=190): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) io_uring_setup(0x3c93, &(0x7f0000000900)={0x0, 0xb7e2, 0x80, 0x1, 0xe0}) recvfrom(r3, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 14m38.56110447s ago: executing program 0 (id=353): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x50) socket(0x10, 0x3, 0x0) socket(0x1f, 0x6, 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_open_dev$hiddev(0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) syz_emit_ethernet(0x56, 0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) 14m36.525519175s ago: executing program 0 (id=360): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]}) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109"], 0x0) syz_clone(0x200011, 0x0, 0x0, 0x0, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) syz_usb_connect$midi(0x0, 0x81, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6f, 0x1, 0x1, 0x4, 0x0, 0x9, "", {{{0x9, 0x4, 0x0, 0x0, 0x5, 0x1, 0x3, 0x20, 0xf, [@midi_in_jack={0x6, 0x24, 0x2, 0x0, 0x4}, @ms_header={0x7, 0x24, 0x1, 0x6, 0x7}], [{{0x9, 0x5, 0x5, 0x10, 0x10, 0x4, 0x9, 0x82, {0xa, 0x25, 0x1, 0x6, "cc5c34a9a2e5"}}}, {{0x9, 0x5, 0x0, 0x4, 0x400, 0xf, 0xfa, 0x7, {0x8, 0x25, 0x1, 0x4, "087820f6"}}}, {{0x9, 0x5, 0x3, 0x10, 0x10, 0x80, 0x7, 0x7f, {0x5, 0x25, 0x1, 0x1, "e0"}}}, {{0x9, 0x5, 0x4, 0x10, 0x3ff, 0x8, 0xb4, 0x8, {0x7, 0x25, 0x1, 0x3, "a1fc18"}}}, {{0x9, 0x5, 0xf, 0x8, 0x400, 0x8, 0x6, 0xf, {0x5, 0x25, 0x1, 0x1, "c3"}}}]}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x250, 0x6c, 0x2, 0x9, 0x10, 0x9}, 0x5, &(0x7f00000002c0)={0x5, 0xf, 0x5}}) openat$fb0(0xffffff9c, &(0x7f0000000040), 0x80280, 0x0) keyctl$search(0xa, 0x0, &(0x7f0000000080)='user\x00', &(0x7f0000000180)={'syz', 0x3}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 14m33.507695251s ago: executing program 0 (id=367): socket$inet_smc(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x9, 0xffffffff}, 0x0) r2 = fsopen(&(0x7f0000000040)='cgroup\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10) socket$alg(0x26, 0x5, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000000c0)="5bdbd57a0e656889964df9937f561de9b944d1e381fed329742e239cb13cf2af711d48d2f15b3118abd8fd087f117830209a631f9dfbec5cbbbb2216a2d87dfb0d7dd906125a10053c8e288ac4445ff0e999d423cc25", 0x56}], 0x1, 0x0, 0x0, 0x240001d1}], 0x1, 0x45) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='status\x00') socket$rxrpc(0x21, 0x2, 0xa) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000044c0)=ANY=[@ANYBLOB="4c0000001f0001009e0e0000fedbdf25e0000002000000000000000000000000000004d50a0033011302000000000000000000000000000008000000000000000c0015005c073500"], 0x4c}}, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x22, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000fc0)=[@clear_death], 0x0, 0x0, 0x0}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) 14m28.645053797s ago: executing program 0 (id=384): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) 14m26.501496713s ago: executing program 0 (id=391): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fchdir(0xffffffffffffffff) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000400)={0xf0f016, 0x2}) getdents64(r3, &(0x7f0000000200)=""/50, 0x32) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(0xffffffffffffffff, 0x8b2a, &(0x7f0000000040)) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x70, 0xff00, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, &(0x7f0000001300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x108) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000040)=@e={0xff, 0xa, 0x0, 0x0, @SEQ_CONTROLLER=0xfe}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b8002944"], 0xfdef) 14m25.741046363s ago: executing program 0 (id=392): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') preadv(r5, 0x0, 0x0, 0x0, 0x3) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0xffffffffffffffb1) 14m10.27098633s ago: executing program 33 (id=392): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') preadv(r5, 0x0, 0x0, 0x0, 0x3) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0xffffffffffffffb1) 4m0.865026899s ago: executing program 3 (id=1949): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fchdir(0xffffffffffffffff) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) getdents64(r3, &(0x7f0000000200)=""/50, 0x32) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r4, 0x8b2a, &(0x7f0000000040)) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x70, 0xff00, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, &(0x7f0000001300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x108) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000040)=@e={0xff, 0xa, 0x0, 0x0, @SEQ_CONTROLLER=0xfe}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b8002944"], 0xfdef) 4m0.368038398s ago: executing program 3 (id=1952): bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000014c0), 0x3ffffffffffff42, 0x162, 0x0) 3m58.977425652s ago: executing program 3 (id=1956): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="c8000000020101020000000000000000000000006c00028006000340000400001400018008000100ac1414bb08000200ac1414aa0c000280050001000600000006000340000200000c00028005000100840000002c00018014000300fc01001000000000000000000000000114000400fe8800"/127], 0xc8}, 0x1, 0x0, 0x0, 0x4048040}, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0xe1}, 0x8) 3m56.929127925s ago: executing program 3 (id=1965): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 3m56.796300681s ago: executing program 3 (id=1966): connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci={0x1f, 0x0, 0x4}, 0x80) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000003c0)=0x3, 0xffffffffffffffc3) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) connect$llc(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0x30e2, &(0x7f0000000180)={0x0, 0xaefa, 0x0, 0x40, 0x22c}) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0xfc, 0x20, 0x81, 0x42, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) connect$llc(r0, 0x0, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/103) syz_mount_image$squashfs(&(0x7f0000000280), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[], 0x1, 0x228, &(0x7f0000002380)="$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") r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0) 3m55.259348949s ago: executing program 3 (id=1968): bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000014c0), 0x3ffffffffffff42, 0x162, 0x0) 3m39.062980844s ago: executing program 34 (id=1968): bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000014c0), 0x3ffffffffffff42, 0x162, 0x0) 27.019107277s ago: executing program 5 (id=2522): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_pid(r1, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r2, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10, &(0x7f0000000380), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b001400000000000000"], 0x38}, 0x4000000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee3, 0x8031, r0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000040)=0x51) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0xc1c0, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file3\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file7\x00', 0x0) write$proc_mixer(r7, &(0x7f0000000180)=ANY=[@ANYBLOB='SYNTH \'Mic\' 00000000000000000000\nIGAIN \'Capture Volume\' 00000000000000000000\nVOLUME\nLI'], 0x86) dup3(0xffffffffffffffff, r7, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(0xffffffffffffffff, 0x4161, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a3200000000a4000000060a010400000000000000000100000008000b40000000007c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000440001800c0001006269747769736500340002800800034000000002080001400000001408000240000000120c000800000001008faa00000c000480"], 0x118}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a000000", @ANYRES32=0x0, @ANYRES8=r3], 0xfc}}, 0x0) 20.812503746s ago: executing program 5 (id=2537): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) madvise(&(0x7f00001c1000/0x3000)=nil, 0x3000, 0x9) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x2, 0x5, 0x7, 0x3, 0x3, {0x400000080001, 0xff, 0x20ff, 0x8, 0xe, 0xd615, 0xdfb5, 0x3, 0xfffffffe, 0x6000, 0x0, 0x0, 0x0, 0x5, 0x2000001}}, {0x0, 0x14}}}, 0xa0) syz_clone3(&(0x7f0000000300)={0x100000400, &(0x7f0000000040), 0x0, 0x0, {0x11}, &(0x7f00000005c0)=""/199, 0xc7, 0x0, &(0x7f0000000240)=[0x0], 0x1}, 0x58) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 18.93084614s ago: executing program 5 (id=2543): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x4080}, 0x4000884) 17.424146103s ago: executing program 5 (id=2548): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_pid(r1, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r2, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10, &(0x7f0000000380), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b001400000000000000"], 0x38}, 0x4000000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee3, 0x8031, r0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000040)=0x51) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0xc1c0, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file3\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file7\x00', 0x0) write$proc_mixer(r7, &(0x7f0000000180)=ANY=[@ANYBLOB='SYNTH \'Mic\' 00000000000000000000\nIGAIN \'Capture Volume\' 00000000000000000000\nVOLUME\nLI'], 0x86) dup3(0xffffffffffffffff, r7, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(0xffffffffffffffff, 0x4161, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a3200000000a4000000060a010400000000000000000100000008000b40000000007c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000440001800c0001006269747769736500340002800800034000000002080001400000001408000240000000120c000800000001008faa00000c000480"], 0x118}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a000000", @ANYRES32=0x0, @ANYRES8=r3], 0xfc}}, 0x0) 10.512952562s ago: executing program 5 (id=2568): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0x4, 0xfffffffc, 0x8}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r5, 0x1000000b}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8", 0x21}, {&(0x7f0000000140)}], 0x2}, 0x4) 9.987049036s ago: executing program 6 (id=2569): r0 = syz_open_dev$media(&(0x7f0000000380), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000140)={0x80000000, 0x0, &(0x7f00000002c0)=[{{0x80000000, 0x0}}, {{0x80000000}, {0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f00000001c0)={{r2, r1, 0x1, [0x104, 0x7fff]}, {r3, r4, 0x4, [0x1, 0xfffff7fb]}, 0x1, [0x2, 0x3]}) 9.827565286s ago: executing program 7 (id=2572): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="c8000000020101020000000000000000000000006c00028006000340000400001400018008000100ac1414bb08000200ac1414aa0c000280050001000600000006000340000200000c00028005000100840000002c00018014000300fc010010"], 0xc8}, 0x1, 0x0, 0x0, 0x4048040}, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0xe1}, 0x8) 9.616848298s ago: executing program 6 (id=2573): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) getsockopt$inet_opts(r1, 0x0, 0x6, &(0x7f00000001c0)=""/169, &(0x7f00000000c0)=0xa9) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xb, 0xff, 0x5, 0x7f, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r3}, &(0x7f0000000100)=0x7d8, &(0x7f0000000500)='%pi6 \x00'}, 0x2a) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) ioctl$TIOCVHANGUP(r0, 0x5437, 0x200000000000000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x400802, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r5, 0xaea2, 0x5) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000006c00010029bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="9d26a39e0000f1ff130035007465616d5f736c6176655f30000000002c003480140013006361696630000000000000000012de0014003570"], 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x4000804) getgroups(0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 8.688073177s ago: executing program 7 (id=2575): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000000000000000000000000000711045000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000002c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c", 0x62}], 0x3, &(0x7f0000000540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x80}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000440)=""/106, 0x6a}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) r6 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0xdcb8, 0x10, 0x1, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x77, 0x10000}) io_uring_enter(r6, 0x3518, 0xaddf, 0x2, 0x0, 0x0) getpid() 7.447603589s ago: executing program 7 (id=2576): socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) set_mempolicy(0x1, 0x0, 0x7582) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r6, r5, 0x25, 0x4, @void}, 0x10) syz_emit_ethernet(0x43c, &(0x7f0000000740)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@val={0x88a8, 0x5, 0x0, 0x4}, {0x8100, 0x7, 0x1, 0x4}}, {@mpls_mc={0x8848, {[], @generic="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"}}}}, 0x0) 7.34137733s ago: executing program 6 (id=2577): r0 = io_uring_setup(0x667, &(0x7f0000000000)={0x0, 0xa14a, 0x1000, 0x2, 0x235}) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x800000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x7) r5 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={r4, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000001c0)=0x1) 7.292530081s ago: executing program 5 (id=2578): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_pid(r1, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r2, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10, &(0x7f0000000380), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b001400000000000000"], 0x38}, 0x4000000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee3, 0x8031, r0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000040)=0x51) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0xc1c0, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file3\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file7\x00', 0x0) write$proc_mixer(r7, &(0x7f0000000180)=ANY=[@ANYBLOB='SYNTH \'Mic\' 00000000000000000000\nIGAIN \'Capture Volume\' 00000000000000000000\nVOLUME\nLI'], 0x86) dup3(0xffffffffffffffff, r7, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(0xffffffffffffffff, 0x4161, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a3200000000a4000000060a010400000000000000000100000008000b40000000007c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000440001800c0001006269747769736500340002800800034000000002080001400000001408000240000000120c000800000001008faa00000c000480"], 0x118}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a000000", @ANYRES32=0x0, @ANYRES8=r3], 0xfc}}, 0x0) 6.284985525s ago: executing program 6 (id=2580): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffffd}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) add_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) 5.426621418s ago: executing program 1 (id=2581): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) getsockopt$inet_opts(r1, 0x0, 0x6, &(0x7f00000001c0)=""/169, &(0x7f00000000c0)=0xa9) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xb, 0xff, 0x5, 0x7f, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r3}, &(0x7f0000000100)=0x7d8, &(0x7f0000000500)='%pi6 \x00'}, 0x2a) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) ioctl$TIOCVHANGUP(r0, 0x5437, 0x200000000000000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x400802, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r5, 0xaea2, 0x5) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000006c00010029bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="9d26a39e0000f1ff130035007465616d5f736c6176655f30000000002c003480140013006361696630000000000000000012de0014003570"], 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x4000804) getgroups(0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 4.987496677s ago: executing program 2 (id=2582): socket$kcm(0x11, 0x200000000000002, 0x300) ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0xa, 0x300) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x28, 0x67, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x6071, 0x0, 0xe7}}}}}}, 0x0) 4.308883462s ago: executing program 2 (id=2583): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fchdir(0xffffffffffffffff) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000400)={0xf0f016, 0x2}) getdents64(r3, &(0x7f0000000200)=""/50, 0x32) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r4, 0x8b2a, &(0x7f0000000040)) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x70, 0xff00, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, &(0x7f0000001300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x108) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000040)=@e={0xff, 0xa, 0x0, 0x0, @SEQ_CONTROLLER=0xfe}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb22"], 0xfdef) 4.308423182s ago: executing program 1 (id=2584): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x8}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000300)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) close(0x3) 2.779527371s ago: executing program 7 (id=2585): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800"/11], &(0x7f0000000280)='GPL\x00', 0x5}, 0x94) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000000002}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) sendmmsg$inet6(r1, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={r0, 0xe0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) 2.716259889s ago: executing program 1 (id=2586): kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ff"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r1, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280050019"], 0x48}}, 0x4084) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) 2.539286277s ago: executing program 2 (id=2587): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 000040'], 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 2.435450058s ago: executing program 7 (id=2588): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) getsockopt$inet_opts(r1, 0x0, 0x6, &(0x7f00000001c0)=""/169, &(0x7f00000000c0)=0xa9) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{}, &(0x7f0000000780)=0x7d8, &(0x7f0000000180)='%pK \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{}, &(0x7f0000000100)=0x7d8, &(0x7f0000000500)='%pi6 \x00'}, 0x2a) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) ioctl$TIOCVHANGUP(r0, 0x5437, 0x200000000000000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x400802, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r4, 0xaea2, 0x5) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000006c00010029bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="9d26a39e0000f1ff130035007465616d5f736c6176655f30000000002c003480140013006361696630000000000000000012de0014003570"], 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x4000804) getgroups(0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.656517464s ago: executing program 2 (id=2589): socket$inet_smc(0x2b, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x9, 0xffffffff}, 0x0) r0 = fsopen(&(0x7f0000000040)='cgroup\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10) socket$alg(0x26, 0x5, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x240001d1}], 0x1, 0x45) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='status\x00') socket$rxrpc(0x21, 0x2, 0xa) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000044c0)=ANY=[@ANYBLOB="4c0000001f0001009e0e0000fedbdf25e0000002000000000000000000000000000004d50a0033011302000000000000000000000000000008000000000000000c0015005c073500"], 0x4c}}, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x22, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000fc0)=[@clear_death], 0x0, 0x0, 0x0}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000004ac0)={0x2020}, 0xff67) 1.154344222s ago: executing program 1 (id=2590): r0 = io_uring_setup(0x667, &(0x7f0000000000)={0x0, 0xa14a, 0x1000, 0x2, 0x235}) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x800000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r5 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r5, 0xffff) fcntl$addseals(r5, 0x409, 0x7) r6 = ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000000)={r5, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000001c0)=0x1) 1.145376771s ago: executing program 2 (id=2591): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@txtime={{0x18, 0x1, 0x41, 0x6}}], 0x18}}], 0x2, 0x0) 937.322883ms ago: executing program 2 (id=2592): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000200), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYRES64=r3, @ANYBLOB="3bf81bb9e9"], 0x20000600}}, 0x0) sendmsg$sock(r4, &(0x7f0000001940)={&(0x7f00000002c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000000000), 0x5, &(0x7f00000008c0)=[@timestamping={{0x14}}], 0x18}, 0x0) 215.33151ms ago: executing program 1 (id=2593): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x80, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={0x0, r1, 0x0, 0x3}}, 0x20) 101.497599ms ago: executing program 1 (id=2594): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x24, r4, 0x1, 0x70bd2a, 0x65dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x44001}, 0xc800) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, 0x0, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f00000001c0)={0x1, 'ipvlan1\x00', {}, 0x4}) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@sack_info={r6, 0x2, 0x10001}, 0xc) 100.540118ms ago: executing program 7 (id=2595): socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) set_mempolicy(0x1, 0x0, 0x7582) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r6, r5, 0x25, 0x4, @void}, 0x10) syz_emit_ethernet(0x43c, &(0x7f0000000740)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@val={0x88a8, 0x5, 0x0, 0x4}, {0x8100, 0x7, 0x1, 0x4}}, {@mpls_mc={0x8848, {[], @generic="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"}}}}, 0x0) 82.846035ms ago: executing program 6 (id=2596): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448d4, &(0x7f0000000080)={0x0, 0x1fc, "408b7c", 0x3, 0x80}) 0s ago: executing program 6 (id=2597): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={{0x14}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) keyctl$clear(0x7, 0xfffffffffffffffb) mount$9p_virtio(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x1, 0x6}, 0xc) chdir(0x0) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f00000001c0)={'mpc624\x00', [0x408, 0x7ff, 0xffffffff, 0x0, 0x0, 0x1, 0x8, 0x7, 0xa, 0xfc, 0x2, 0x1, 0x684b, 0x4000004, 0x6, 0x93, 0x1, 0x1a447, 0x3, 0x40000006, 0x100, 0x2, 0xf24, 0x6, 0xb, 0xa, 0x5, 0xc, 0x4004, 0x10000, 0x6]}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) timer_create(0xc34373f6749da572, 0x0, &(0x7f0000000300)) r3 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) read$FUSE(r3, 0x0, 0x0) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001206", 0x2e}], 0x1}, 0x48000) kernel console output (not intermixed with test programs): packet: 16 [ 635.458496][ T4235] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 635.470971][ T4235] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 635.499061][ T4235] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 635.531415][ T4235] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 635.561606][ T4235] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 635.612604][ T4235] usb 4-1: config 1 interface 0 has no altsetting 0 [ 635.619474][ T4235] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 635.649772][ T4235] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.652666][ T8083] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 635.696459][T10142] loop1: detected capacity change from 0 to 8 [ 635.715896][ T4235] ums-sddr09 4-1:1.0: USB Mass Storage device detected [ 635.763428][T10142] SQUASHFS error: xz decompression failed, data probably corrupt [ 635.771241][T10142] SQUASHFS error: Failed to read block 0x108: -5 [ 635.777696][T10142] SQUASHFS error: Unable to read metadata cache entry [106] [ 635.785011][T10142] SQUASHFS error: Unable to read inode 0x11f [ 635.878744][T10146] loop1: detected capacity change from 0 to 256 [ 635.927917][ T4235] scsi host1: usb-storage 4-1:1.0 [ 635.942794][ T8083] usb 3-1: Using ep0 maxpacket: 16 [ 636.093941][ T8083] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 636.110529][ T8083] usb 3-1: config 0 interface 0 has no altsetting 0 [ 636.127763][ T8083] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 636.147375][ T8083] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.179867][ T8083] usb 3-1: config 0 descriptor?? [ 636.798116][ T8083] hid-generic 0003:1E71:2009.0002: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 636.970933][ T9] scsi 1:0:0:0: Direct-Access Sandisk ImageMate SDDR09 0177 PQ: 0 ANSI: 0 [ 637.014796][ T9] sd 1:0:0:0: Attached scsi generic sg1 type 0 [ 637.257321][ T4416] usb 4-1: USB disconnect, device number 22 [ 637.263663][T10147] sddr09: could not read card info [ 637.269518][ T8027] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 637.287513][ T8027] sd 1:0:0:0: [sdb] 0-byte physical blocks [ 637.296785][ T8083] usb 3-1: USB disconnect, device number 13 [ 637.313519][ T8027] sd 1:0:0:0: [sdb] Write Protect is off [ 637.326936][ T8027] sd 1:0:0:0: [sdb] Asking for cache data failed [ 637.353333][ T8027] sd 1:0:0:0: [sdb] Assuming drive cache: write through [ 637.363649][T10160] ALSA: mixer_oss: invalid OSS volume 'LI' [ 637.370105][T10160] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1354'. [ 637.429776][T10160] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1354'. [ 637.460742][ T8027] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 638.081269][T10168] x_tables: ip_tables: osf match: only valid for protocol 6 [ 638.877299][T10164] loop2: detected capacity change from 0 to 4096 [ 638.983371][T10164] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 639.138274][ T4378] udevd[4378]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 639.808540][ T23] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 640.052286][ T23] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 640.204239][T10185] loop1: detected capacity change from 0 to 256 [ 641.221467][T10193] loop3: detected capacity change from 0 to 256 [ 643.305063][T10214] loop5: detected capacity change from 0 to 2048 [ 643.518277][T10214] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 644.976132][T10210] loop1: detected capacity change from 0 to 40427 [ 645.078550][T10239] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1375'. [ 645.148406][T10240] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 645.157298][T10240] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 645.166076][T10240] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 645.174807][T10240] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 645.308981][T10210] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 645.326090][T10240] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 645.335280][T10240] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 645.344260][T10240] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 645.353431][T10240] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 645.363384][T10210] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 645.411860][T10210] F2FS-fs (loop1): Found nat_bits in checkpoint [ 645.652390][T10210] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 645.670502][T10248] loop2: detected capacity change from 0 to 256 [ 645.688363][T10210] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 645.849664][T10250] loop5: detected capacity change from 0 to 256 [ 647.058906][ T8083] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 647.452758][ T8083] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 647.512915][ T8083] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 647.547343][ T8083] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 647.589414][ T8083] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.681029][T10255] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 648.175387][T10266] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 648.232050][T10266] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 648.293965][T10266] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 648.301728][T10266] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 650.016449][T10284] loop6: detected capacity change from 0 to 2048 [ 650.559711][T10290] loop5: detected capacity change from 0 to 8 [ 650.599475][T10284] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 650.634319][T10288] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1386'. [ 650.686206][ T8083] usb 3-1: USB disconnect, device number 14 [ 650.725300][T10290] SQUASHFS error: xz decompression failed, data probably corrupt [ 650.733198][T10290] SQUASHFS error: Failed to read block 0x108: -5 [ 650.739516][T10290] SQUASHFS error: Unable to read metadata cache entry [106] [ 650.746805][T10290] SQUASHFS error: Unable to read inode 0x11f [ 650.801719][T10287] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 650.810564][T10287] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 650.819264][T10287] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 650.827962][T10287] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 650.881057][T10287] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 650.890059][T10287] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 650.898941][T10287] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 650.907939][T10287] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 651.434501][T10296] loop5: detected capacity change from 0 to 256 [ 651.477322][T10288] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 651.486119][T10288] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 651.495152][T10288] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 651.503985][T10288] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 651.694516][T10288] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 651.703728][T10288] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 651.712804][T10288] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 651.721698][T10288] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 652.288563][T10301] loop6: detected capacity change from 0 to 256 [ 652.350334][T10302] ALSA: mixer_oss: invalid OSS volume 'LI' [ 652.356839][T10302] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1388'. [ 652.405063][T10292] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1388'. [ 653.161958][T10312] loop2: detected capacity change from 0 to 256 [ 654.319045][T10333] loop3: detected capacity change from 0 to 8 [ 654.393928][T10333] SQUASHFS error: xz decompression failed, data probably corrupt [ 654.401713][T10333] SQUASHFS error: Failed to read block 0x108: -5 [ 654.408270][T10333] SQUASHFS error: Unable to read metadata cache entry [106] [ 654.415566][T10333] SQUASHFS error: Unable to read inode 0x11f [ 654.777730][T10340] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1402'. [ 654.807345][T10340] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 654.816171][T10340] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 654.824970][T10340] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 654.833724][T10340] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 654.859523][T10340] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 654.868658][T10340] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 654.877624][T10340] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 654.886540][T10340] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 655.050567][T10339] loop6: detected capacity change from 0 to 2048 [ 655.227566][T10339] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 655.357876][T10341] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 655.366911][T10341] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 655.375824][T10341] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 655.384809][T10341] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 655.914166][T10341] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 655.923374][T10341] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 655.932418][T10341] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 655.941498][T10341] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 656.478878][T10353] loop6: detected capacity change from 0 to 256 [ 657.582122][T10364] loop2: detected capacity change from 0 to 256 [ 657.792725][ T4230] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 658.044151][ T4230] usb 4-1: device descriptor read/64, error -71 [ 658.322585][ T4230] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 658.712601][ T4230] usb 4-1: device descriptor read/64, error -71 [ 658.835657][ T4230] usb usb4-port1: attempt power cycle [ 659.912541][ T4230] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 660.257060][ T4230] usb 4-1: device not accepting address 25, error -71 [ 660.618426][T10396] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1417'. [ 660.631341][T10396] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 660.640142][T10396] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 660.648912][T10396] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 660.657620][T10396] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 660.670901][T10396] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 660.679897][T10396] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 660.688833][T10396] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 660.697747][T10396] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 660.733949][T10397] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 660.742925][T10397] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 660.751662][T10397] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 660.760413][T10397] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 660.895859][T10397] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 660.904919][T10397] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 660.913956][T10397] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 660.922922][T10397] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 661.316003][T10404] loop1: detected capacity change from 0 to 256 [ 661.363237][T10400] loop6: detected capacity change from 0 to 2048 [ 661.409920][T10400] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 663.234378][T10423] loop5: detected capacity change from 0 to 8 [ 663.339971][T10423] SQUASHFS error: xz decompression failed, data probably corrupt [ 663.348313][T10423] SQUASHFS error: Failed to read block 0x108: -5 [ 663.354810][T10423] SQUASHFS error: Unable to read metadata cache entry [106] [ 663.362147][T10423] SQUASHFS error: Unable to read inode 0x11f [ 664.915241][T10445] loop2: detected capacity change from 0 to 256 [ 666.029520][T10456] loop6: detected capacity change from 0 to 2048 [ 666.128405][T10456] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 666.894782][T10464] loop3: detected capacity change from 0 to 256 [ 667.201019][T10467] loop1: detected capacity change from 0 to 8 [ 669.010676][T10467] SQUASHFS error: xz decompression failed, data probably corrupt [ 669.018765][T10467] SQUASHFS error: Failed to read block 0x108: -5 [ 669.025526][T10467] SQUASHFS error: Unable to read metadata cache entry [106] [ 669.033032][T10467] SQUASHFS error: Unable to read inode 0x11f [ 669.679578][T10477] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1442'. [ 669.700866][T10477] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 669.709613][T10477] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 669.718460][T10477] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 669.727225][T10477] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 669.740360][T10477] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 669.749569][T10477] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 669.758519][T10477] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 669.767420][T10477] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 669.837516][T10480] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 669.848240][T10480] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 669.856965][T10480] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 669.865688][T10480] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 669.962972][T10480] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 669.971886][T10480] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 669.980828][T10480] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 669.989774][T10480] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 670.340008][T10495] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1447'. [ 670.975069][T10495] ALSA: mixer_oss: invalid OSS volume 'LI' [ 672.279443][T10513] loop6: detected capacity change from 0 to 8 [ 672.374256][T10513] SQUASHFS error: xz decompression failed, data probably corrupt [ 672.382428][T10513] SQUASHFS error: Failed to read block 0x108: -5 [ 672.388959][T10513] SQUASHFS error: Unable to read metadata cache entry [106] [ 672.396404][T10513] SQUASHFS error: Unable to read inode 0x11f [ 674.496665][T10534] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1458'. [ 674.514385][T10534] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 674.523132][T10534] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 674.531989][T10534] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 674.540800][T10534] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 674.553990][T10534] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 674.562927][T10534] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 674.571768][T10534] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 674.580654][T10534] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 674.652616][ T23] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 674.852538][ T23] usb 6-1: device descriptor read/64, error -71 [ 675.992678][ T23] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 676.212687][ T23] usb 6-1: device descriptor read/64, error -71 [ 676.399029][ T23] usb usb6-port1: attempt power cycle [ 676.863224][ T23] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 677.032818][ T23] usb 6-1: device descriptor read/8, error -71 [ 677.335700][T10557] loop2: detected capacity change from 0 to 256 [ 677.675023][T10569] loop6: detected capacity change from 0 to 256 [ 678.381574][T10567] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1470'. [ 678.426174][T10564] device syzkaller0 entered promiscuous mode [ 678.443807][T10567] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 678.452685][T10567] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 678.461366][T10567] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 678.470121][T10567] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 678.488087][T10567] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 678.497187][T10567] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 678.506114][T10567] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 678.514989][T10567] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 682.436715][ T8083] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 682.632568][ T8083] usb 2-1: device descriptor read/64, error -71 [ 682.922516][ T8083] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 683.122623][ T8083] usb 2-1: device descriptor read/64, error -71 [ 683.136922][T10617] loop6: detected capacity change from 0 to 256 [ 683.151024][T10618] ALSA: mixer_oss: invalid OSS volume 'LI' [ 683.179362][T10618] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1481'. [ 683.215005][T10618] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1481'. [ 683.247647][ T8083] usb usb2-port1: attempt power cycle [ 683.352697][T10620] loop2: detected capacity change from 0 to 256 [ 684.452778][ T8083] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 684.474443][T10627] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1486'. [ 684.486392][T10627] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 684.495658][T10627] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 684.504357][T10627] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 684.513060][T10627] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 684.524555][T10627] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 684.533500][T10627] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 684.542376][T10627] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 684.551527][T10627] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 684.563770][ T8083] usb 2-1: device descriptor read/8, error -71 [ 684.834211][ T8083] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 685.152709][ T8083] usb 2-1: device descriptor read/8, error -71 [ 685.231197][T10637] loop2: detected capacity change from 0 to 2048 [ 685.272952][ T8083] usb usb2-port1: unable to enumerate USB device [ 685.370011][T10637] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 685.694061][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.701867][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.690900][T10666] loop2: detected capacity change from 0 to 256 [ 688.840807][T10673] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1500'. [ 689.693499][ T8085] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 690.012765][ T8085] usb 2-1: device descriptor read/64, error -71 [ 690.611525][ T8085] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 690.732923][T10694] loop6: detected capacity change from 0 to 2048 [ 690.788535][T10694] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 690.869763][ T8085] usb 2-1: device descriptor read/64, error -71 [ 691.003065][ T8085] usb usb2-port1: attempt power cycle [ 691.628713][ T8085] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 691.764541][ T8085] usb 2-1: device descriptor read/8, error -71 [ 692.174355][ T8085] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 692.962638][ T8085] usb 2-1: device descriptor read/8, error -71 [ 693.022558][T10721] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1512'. [ 693.049097][T10721] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 693.058236][T10721] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 693.067152][T10721] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 693.075866][T10721] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 693.087328][T10721] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 693.096349][T10721] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 693.105265][T10721] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 693.114152][T10721] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 693.133093][ T8085] usb usb2-port1: unable to enumerate USB device [ 693.358884][T10728] loop6: detected capacity change from 0 to 256 [ 693.463422][T10729] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1514'. [ 693.869365][T10729] ALSA: mixer_oss: invalid OSS volume 'LI' [ 696.629018][ T8083] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 697.556172][T10778] loop5: detected capacity change from 0 to 256 [ 697.808441][T10781] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1528'. [ 698.060640][T10781] ALSA: mixer_oss: invalid OSS volume 'LI' [ 698.285436][ T8083] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 698.302596][ T8083] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 698.311617][ T8083] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 698.342522][ T8083] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.363474][ T8083] usb 2-1: config 0 descriptor?? [ 698.517025][T10788] loop3: detected capacity change from 0 to 256 [ 698.665384][T10762] udc-core: couldn't find an available UDC or it's busy [ 698.782657][T10762] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 700.746849][ T4230] usb 2-1: USB disconnect, device number 23 [ 702.579191][T10834] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1542'. [ 702.831183][T10834] ALSA: mixer_oss: invalid OSS volume 'LI' [ 702.892855][T10837] loop5: detected capacity change from 0 to 256 [ 704.144225][T10846] loop5: detected capacity change from 0 to 256 [ 705.226061][T10851] loop3: detected capacity change from 0 to 8 [ 705.752624][T10851] SQUASHFS error: xz decompression failed, data probably corrupt [ 705.802568][T10851] SQUASHFS error: Failed to read block 0x108: -5 [ 705.896227][T10851] SQUASHFS error: Unable to read metadata cache entry [106] [ 705.932619][T10851] SQUASHFS error: Unable to read inode 0x11f [ 706.202617][ T4412] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 706.602876][ T4412] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 706.735505][ T4412] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 706.967829][ T4412] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 707.320746][T10891] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1554'. [ 707.635837][T10893] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1553'. [ 707.666113][T10890] loop3: detected capacity change from 0 to 256 [ 707.769607][ T4412] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.779588][ T4412] usb 2-1: config 0 descriptor?? [ 707.815459][T10891] ALSA: mixer_oss: invalid OSS volume 'LI' [ 708.111774][T10860] udc-core: couldn't find an available UDC or it's busy [ 708.230682][T10860] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 708.357617][T10904] loop5: detected capacity change from 0 to 2048 [ 708.498306][T10904] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 709.082032][ T5864] usb 2-1: USB disconnect, device number 24 [ 710.118551][T10918] loop5: detected capacity change from 0 to 256 [ 710.483746][T10921] loop1: detected capacity change from 0 to 8 [ 710.782265][T10921] SQUASHFS error: xz decompression failed, data probably corrupt [ 710.814360][T10921] SQUASHFS error: Failed to read block 0x108: -5 [ 710.838713][T10921] SQUASHFS error: Unable to read metadata cache entry [106] [ 710.865437][T10921] SQUASHFS error: Unable to read inode 0x11f [ 712.181581][T10952] loop3: detected capacity change from 0 to 256 [ 712.356984][T10954] loop5: detected capacity change from 0 to 256 [ 712.980886][T10964] loop6: detected capacity change from 0 to 2048 [ 713.078012][T10964] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 714.085986][ T7] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 714.548134][T10979] loop2: detected capacity change from 0 to 256 [ 714.673361][ T7] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 714.784177][T10980] loop5: detected capacity change from 0 to 8 [ 714.790557][ T7] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 714.807528][ T7] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 714.817677][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 714.828146][ T7] usb 2-1: config 0 descriptor?? [ 715.099812][T10980] SQUASHFS error: xz decompression failed, data probably corrupt [ 715.140740][T10980] SQUASHFS error: Failed to read block 0x108: -5 [ 715.152686][T10980] SQUASHFS error: Unable to read metadata cache entry [106] [ 715.160013][T10980] SQUASHFS error: Unable to read inode 0x11f [ 715.278056][T10967] udc-core: couldn't find an available UDC or it's busy [ 715.403663][T10967] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 715.413665][ T4232] usb 2-1: USB disconnect, device number 25 [ 715.553604][T10992] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1579'. [ 715.621682][T10993] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 715.630483][T10993] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 715.639242][T10993] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 715.648025][T10993] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 716.557444][T10993] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 716.566416][T10993] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 716.575449][T10993] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 716.584422][T10993] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 716.612317][T10995] loop1: detected capacity change from 0 to 256 [ 719.127977][T11023] loop1: detected capacity change from 0 to 2048 [ 719.204435][T11023] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 721.333171][ T8085] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 721.732800][ T8085] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 721.862567][ T8085] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 722.027946][ T8085] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 722.037572][ T8085] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 722.054221][ T8085] usb 2-1: config 0 descriptor?? [ 722.094959][ T8085] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 722.852982][T11037] udc-core: couldn't find an available UDC or it's busy [ 722.862335][T11037] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 722.968510][T11054] loop2: detected capacity change from 0 to 256 [ 723.471557][ T4234] usb 2-1: USB disconnect, device number 26 [ 728.062012][T11120] loop1: detected capacity change from 0 to 2048 [ 728.169382][T11120] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 730.734320][T11148] loop6: detected capacity change from 0 to 8 [ 732.558276][T11148] SQUASHFS error: xz decompression failed, data probably corrupt [ 732.646878][T11148] SQUASHFS error: Failed to read block 0x108: -5 [ 732.714688][T11148] SQUASHFS error: Unable to read metadata cache entry [106] [ 732.742359][T11148] SQUASHFS error: Unable to read inode 0x11f [ 733.671378][T11189] loop6: detected capacity change from 0 to 256 [ 734.630309][T11193] loop3: detected capacity change from 0 to 2048 [ 734.929467][T11193] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 736.249166][T11216] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1632'. [ 736.317892][T11217] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 736.326691][T11217] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 736.335473][T11217] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 736.344189][T11217] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 736.415943][T11217] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 736.424935][T11217] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 736.433903][T11217] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 736.442814][T11217] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 737.550359][T11235] loop3: detected capacity change from 0 to 8 [ 740.539104][T11246] loop1: detected capacity change from 0 to 256 [ 740.626084][T11248] loop6: detected capacity change from 0 to 1024 [ 740.727122][T11246] FAT-fs (loop1): Directory bread(block 64) failed [ 740.733949][T11248] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option [ 740.741296][T11248] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 740.772584][T11246] FAT-fs (loop1): Directory bread(block 65) failed [ 740.779355][T11246] FAT-fs (loop1): Directory bread(block 66) failed [ 740.822799][T11246] FAT-fs (loop1): Directory bread(block 67) failed [ 740.829457][T11246] FAT-fs (loop1): Directory bread(block 68) failed [ 740.843309][T11252] loop3: detected capacity change from 0 to 2048 [ 740.856710][T11248] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 740.903065][T11248] System zones: 0-1, 3-36 [ 740.930752][T11252] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 740.931635][T11246] FAT-fs (loop1): Directory bread(block 69) failed [ 740.979021][T11248] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 741.017185][T11246] FAT-fs (loop1): Directory bread(block 70) failed [ 741.346013][T11246] FAT-fs (loop1): Directory bread(block 71) failed [ 741.356470][T11246] FAT-fs (loop1): Directory bread(block 72) failed [ 741.366741][T11246] FAT-fs (loop1): Directory bread(block 73) failed [ 742.584431][T11271] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1646'. [ 742.839847][T11271] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 742.848682][T11271] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 742.857503][T11271] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 742.866266][T11271] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 743.362241][T11263] loop2: detected capacity change from 0 to 32768 [ 743.530324][T11263] XFS (loop2): Mounting V5 Filesystem [ 743.797671][T11263] XFS (loop2): Ending clean mount [ 743.880803][T11263] XFS (loop2): Quotacheck needed: Please wait. [ 743.958340][T11263] XFS (loop2): Quotacheck: Done. [ 744.083227][T11263] XFS (loop2): User initiated shutdown received. [ 744.090116][T11263] XFS (loop2): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x101/0x150 (fs/xfs/xfs_fsops.c:485). Shutting down filesystem. [ 744.112501][T11263] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 745.790881][T11306] loop3: detected capacity change from 0 to 8 [ 745.898615][T11306] SQUASHFS error: xz decompression failed, data probably corrupt [ 745.906944][T11306] SQUASHFS error: Failed to read block 0x108: -5 [ 745.913435][T11306] SQUASHFS error: Unable to read metadata cache entry [106] [ 745.920768][T11306] SQUASHFS error: Unable to read inode 0x11f [ 746.264927][ T4193] XFS (loop2): Unmounting Filesystem [ 746.655436][T11314] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 746.697765][T11315] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1657'. [ 747.124723][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.135219][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.580187][T11323] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1660'. [ 749.117799][T11334] loop2: detected capacity change from 0 to 256 [ 749.400990][T11344] loop5: detected capacity change from 0 to 256 [ 749.620918][T11347] loop2: detected capacity change from 0 to 8 [ 749.735647][T11347] SQUASHFS error: xz decompression failed, data probably corrupt [ 749.743705][T11347] SQUASHFS error: Failed to read block 0x108: -5 [ 749.750106][T11347] SQUASHFS error: Unable to read metadata cache entry [106] [ 749.757711][T11347] SQUASHFS error: Unable to read inode 0x11f [ 750.410763][ C1] vxcan0: j1939_tp_rxtimer: 0xffff8880616fbc00: rx timeout, send abort [ 750.421853][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff8880616fbc00: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 750.843110][T11351] loop2: detected capacity change from 0 to 1024 [ 750.868172][T11351] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 750.915960][T11351] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 751.051321][T11351] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 751.059736][T11351] System zones: 0-1, 3-36 [ 751.066028][T11354] syz.3.1669 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 751.102924][T11351] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 751.212664][T11355] loop3: detected capacity change from 0 to 1024 [ 751.425712][T11355] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #3: comm syz.3.1669: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 3(4), depth 0(0) [ 751.477862][T11355] EXT4-fs error (device loop3): ext4_quota_enable:6445: comm syz.3.1669: Bad quota inode: 3, type: 0 [ 751.562918][T11355] EXT4-fs warning (device loop3): ext4_enable_quotas:6486: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 751.623632][T11355] EXT4-fs (loop3): mount failed [ 751.741069][T11366] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 752.192849][T11369] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1673'. [ 752.227293][T11369] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 752.236103][T11369] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 752.245241][T11369] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 752.254015][T11369] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 752.266088][T11369] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 752.275391][T11369] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 752.284341][T11369] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 752.293312][T11369] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 752.319026][T11373] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 752.327969][T11373] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 752.336715][T11373] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 752.345472][T11373] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 752.677762][T11373] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 752.686729][T11373] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 752.695687][T11373] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 752.704595][T11373] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 753.217651][T11381] loop3: detected capacity change from 0 to 2048 [ 753.507038][T11381] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 754.189293][T11387] loop6: detected capacity change from 0 to 256 [ 755.230695][T11397] loop6: detected capacity change from 0 to 256 [ 756.092561][ T4232] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 756.372896][ T4232] usb 6-1: no configurations [ 756.378336][ T4232] usb 6-1: can't read configurations, error -22 [ 756.552784][ T4232] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 757.124507][T11426] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1688'. [ 757.192760][T11430] loop6: detected capacity change from 0 to 1024 [ 757.392746][ T4232] usb 6-1: no configurations [ 757.397512][ T4232] usb 6-1: can't read configurations, error -22 [ 757.556176][T11430] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option [ 757.617719][T11430] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 757.784101][T11430] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 757.865690][T11430] System zones: 0-1, 3-36 [ 757.960459][T11430] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 758.010899][ T4232] usb usb6-port1: attempt power cycle [ 758.229548][T11446] loop1: detected capacity change from 0 to 256 [ 758.300169][T11403] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 758.313601][T11446] exfat: Bad value for 'umask' [ 758.715147][ T4232] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 759.574533][T11452] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 759.802591][ T4232] usb 6-1: device descriptor read/8, error -71 [ 760.418419][T11461] loop2: detected capacity change from 0 to 256 [ 761.156995][T11469] loop1: detected capacity change from 0 to 8 [ 762.116697][T11469] SQUASHFS error: xz decompression failed, data probably corrupt [ 762.124709][T11469] SQUASHFS error: Failed to read block 0x108: -5 [ 762.131118][T11469] SQUASHFS error: Unable to read metadata cache entry [106] [ 762.138524][T11469] SQUASHFS error: Unable to read inode 0x11f [ 762.579121][T11470] ALSA: mixer_oss: invalid OSS volume 'C' [ 762.711820][T11472] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1701'. [ 764.265592][ T26] audit: type=1800 audit(1773275372.466:12): pid=11493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1709" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 766.432187][T11518] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1715'. [ 766.454408][T11518] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 766.463176][T11518] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 766.471860][T11518] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 766.480624][T11518] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 766.554888][T11523] loop3: detected capacity change from 0 to 2048 [ 766.639298][T11518] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 766.648293][T11518] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 766.657235][T11518] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 766.666102][T11518] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 766.689788][T11523] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 767.416748][T11495] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 768.016750][T11524] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 768.025852][T11524] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 768.034657][T11524] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 768.043484][T11524] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 768.857516][T11539] loop1: detected capacity change from 0 to 1024 [ 768.892724][T11539] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 768.900079][T11539] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 768.933254][T11524] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 768.942234][T11524] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 768.951182][T11524] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 768.960248][T11524] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 768.984749][T11539] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 769.006980][T11539] System zones: 0-1, 3-36 [ 769.097892][T11539] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 772.078137][T11582] loop5: detected capacity change from 0 to 2048 [ 772.146953][T11582] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 772.186575][T11590] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1735'. [ 773.025895][T11595] loop1: detected capacity change from 0 to 256 [ 773.510440][T11601] loop2: detected capacity change from 0 to 1024 [ 773.781145][T11601] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 773.884397][T11607] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1738'. [ 773.955067][T11608] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 773.964015][T11608] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 773.973072][T11608] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 773.981768][T11608] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 774.045226][T11601] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 774.124704][T11601] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 774.138435][T11601] System zones: 0-1, 3-36 [ 774.143777][T11608] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 774.152831][T11608] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 774.161996][T11608] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 774.171174][T11608] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 774.294217][T11601] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 778.220613][T11651] loop2: detected capacity change from 0 to 256 [ 778.223722][T11649] loop1: detected capacity change from 0 to 2048 [ 778.299602][T11649] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 779.143947][T11658] loop1: detected capacity change from 0 to 256 [ 780.983368][T11681] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1760'. [ 781.774206][T11686] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1763'. [ 782.093323][ T7] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 782.109457][T11695] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 782.132606][T11695] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 782.245860][T11695] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 782.332748][ T7] usb 6-1: Using ep0 maxpacket: 8 [ 782.390748][T11695] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 782.453429][ T7] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 782.852806][ T7] usb 6-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 782.893203][ T7] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.907950][T11701] loop6: detected capacity change from 0 to 2048 [ 782.931091][ T7] usb 6-1: Product: syz [ 782.935750][ T7] usb 6-1: Manufacturer: syz [ 782.940556][ T7] usb 6-1: SerialNumber: syz [ 782.963707][ T7] usb 6-1: config 0 descriptor?? [ 783.006854][T11701] EXT4-fs (loop6): Ignoring removed oldalloc option [ 783.079582][T11701] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c028, mo2=0002] [ 783.107812][T11701] System zones: 0-7 [ 783.160333][T11706] kvm: pic: non byte write [ 783.176606][T11701] EXT4-fs (loop6): mounted filesystem without journal. Opts: debug,nodioread_nolock,barrier=0x0000000000000007,oldalloc,nojournal_checksum,min_batch_time=0x000000000000c619,errors=remount-ro,. Quota mode: none. [ 783.236119][T11701] EXT4-fs error (device loop6): ext4_find_extent:929: inode #2: comm syz.6.1768: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 783.295723][T11701] EXT4-fs (loop6): Remounting filesystem read-only [ 783.385234][ T7] msi2500 6-1:0.0: Registered as swradio24 [ 783.401388][ T7] msi2500 6-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 783.458096][ T7] usb 6-1: USB disconnect, device number 19 [ 783.567594][T11721] device syzkaller0 entered promiscuous mode [ 783.679227][T11733] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1776'. [ 784.176049][T11739] loop5: detected capacity change from 0 to 2048 [ 784.444223][T11739] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 787.093245][T11777] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1789'. [ 787.164970][T11782] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 787.173875][T11782] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 787.182727][T11782] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 787.191508][T11782] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 787.322371][T11782] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 787.332913][T11782] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 787.341821][T11782] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 787.350732][T11782] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 789.202651][T11815] binder: 11814:11815 ioctl c0306201 0 returned -14 [ 789.244188][T11815] binder: 11814:11815 unknown command 1074553619 [ 789.251140][T11816] loop2: detected capacity change from 0 to 2048 [ 789.297759][T11816] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 789.311996][T11815] binder: 11814:11815 ioctl c0306201 200000000040 returned -22 [ 790.873240][T11831] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1803'. [ 790.942266][T11832] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 790.951050][T11832] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 790.959954][T11832] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 790.968731][T11832] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 791.430353][T11832] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 791.439599][T11832] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 791.448744][T11832] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 791.457846][T11832] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 791.777839][T11843] device syzkaller0 entered promiscuous mode [ 794.582597][ T4420] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 794.933203][T11873] loop3: detected capacity change from 0 to 2048 [ 794.993414][ T4420] usb 6-1: unable to get BOS descriptor or descriptor too short [ 795.033943][T11873] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 795.072781][ T4420] usb 6-1: config 63 has an invalid interface number: 66 but max is 0 [ 795.085208][ T4420] usb 6-1: config 63 has an invalid descriptor of length 115, skipping remainder of the config [ 795.135818][ T4420] usb 6-1: config 63 has no interface number 0 [ 795.155731][ T4420] usb 6-1: config 63 interface 66 has no altsetting 0 [ 795.477313][ T26] audit: type=1326 audit(1773275403.674:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11881 comm="syz.2.1818" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0522483799 code=0x0 [ 795.505835][ T4420] usb 6-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 795.515524][ T4420] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 795.533382][ T4420] usb 6-1: Product: syz [ 795.537655][ T4420] usb 6-1: Manufacturer: syz [ 795.544447][ T4420] usb 6-1: SerialNumber: syz [ 795.844029][T11878] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1816'. [ 795.846855][T11883] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 795.861953][T11883] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 795.870728][T11883] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 795.879656][T11883] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 795.999180][T11883] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 796.008364][T11883] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 796.017551][T11883] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 796.026530][T11883] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 796.172719][ T4420] usb 6-1: Found UVC 0.07 device syz (174f:8acf) [ 796.179366][ T4420] usb 6-1: No valid video chain found. [ 796.283113][T11887] loop3: detected capacity change from 0 to 256 [ 796.350624][ T4420] usb 6-1: USB disconnect, device number 20 [ 796.477687][T11878] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 796.486514][T11878] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 796.495543][T11878] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 796.504345][T11878] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 796.633205][T11878] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 796.642223][T11878] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 796.651407][T11878] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 796.660472][T11878] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 798.616784][T11916] loop2: detected capacity change from 0 to 2048 [ 799.551369][T11916] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 801.828274][T11945] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1838'. [ 801.898494][T11946] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 801.907419][T11946] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 801.916522][T11946] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 801.925917][T11946] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 802.055770][T11952] binder: 11949:11952 ioctl c018620c 200000000280 returned -22 [ 803.155636][T11946] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 803.164790][T11946] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 803.173726][T11946] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 803.182710][T11946] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 803.536518][T11967] loop1: detected capacity change from 0 to 2048 [ 803.576583][T11967] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 803.687192][T11970] QAT: failed to copy from user cfg_data. [ 803.712111][T11970] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1846'. [ 803.722399][T11970] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 805.184121][T11976] loop3: detected capacity change from 0 to 256 [ 806.334484][T11996] loop2: detected capacity change from 0 to 256 [ 808.377054][T12000] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1857'. [ 808.522219][T12004] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 808.531049][T12004] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 808.539893][T12004] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 808.548675][T12004] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 808.549645][T12015] loop1: detected capacity change from 0 to 2048 [ 808.565600][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.572046][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.608324][T12004] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 808.617419][T12004] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 808.626366][T12004] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 808.635269][T12004] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 808.682852][T12015] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 809.377341][T12006] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 809.386262][T12006] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 809.395095][T12006] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 809.403811][T12006] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 809.422189][T12006] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 809.431946][T12006] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 809.440982][T12006] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 809.449862][T12006] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 810.095547][T12038] loop5: detected capacity change from 0 to 256 [ 810.234621][T12043] loop1: detected capacity change from 0 to 8 [ 813.733119][T12043] SQUASHFS error: xz decompression failed, data probably corrupt [ 813.810131][T12043] SQUASHFS error: Failed to read block 0x108: -5 [ 813.826750][T12043] SQUASHFS error: Unable to read metadata cache entry [106] [ 813.840520][T12043] SQUASHFS error: Unable to read inode 0x11f [ 814.381698][T12065] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1877'. [ 815.303126][T12067] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 815.312004][T12067] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 815.321014][T12067] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 815.330054][T12067] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 815.351156][T12073] loop2: detected capacity change from 0 to 256 [ 816.178806][T12067] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 816.188052][T12067] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 816.197231][T12067] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 816.206425][T12067] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 816.306305][T12065] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 816.315195][T12065] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 816.324214][T12065] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 816.332933][T12065] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 816.409175][T12065] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 816.418438][T12065] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 816.427556][T12065] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 816.436707][T12065] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 816.646347][T12082] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1882'. [ 817.099718][T12101] loop3: detected capacity change from 0 to 8 [ 817.941318][T12101] SQUASHFS error: xz decompression failed, data probably corrupt [ 817.949598][T12101] SQUASHFS error: Failed to read block 0x108: -5 [ 817.956075][T12101] SQUASHFS error: Unable to read metadata cache entry [106] [ 817.963802][T12101] SQUASHFS error: Unable to read inode 0x11f [ 819.314960][T12108] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 819.339941][T12108] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 819.349559][T12108] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 819.357379][T12108] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 819.416490][T12118] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1894'. [ 819.523108][T12121] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1895'. [ 819.590927][T12122] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 819.599758][T12122] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 819.608501][T12122] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 819.617257][T12122] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 819.931253][T12122] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 819.940639][T12122] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 819.949871][T12122] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 819.958948][T12122] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 820.757354][T12148] loop6: detected capacity change from 0 to 8 [ 820.812282][T12148] SQUASHFS error: xz decompression failed, data probably corrupt [ 820.820584][T12148] SQUASHFS error: Failed to read block 0x108: -5 [ 820.827147][T12148] SQUASHFS error: Unable to read metadata cache entry [106] [ 820.834722][T12148] SQUASHFS error: Unable to read inode 0x11f [ 822.986491][ T26] audit: type=1800 audit(1773275431.184:14): pid=12152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1905" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 823.162492][T12155] loop1: detected capacity change from 0 to 256 [ 824.702411][T12175] QAT: failed to copy from user cfg_data. [ 824.715421][T12175] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1911'. [ 825.619470][T12187] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1914'. [ 825.703219][T12179] QAT: failed to copy from user cfg_data. [ 825.766018][T12179] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1913'. [ 825.776569][T12179] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 826.732592][ T8085] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 828.073016][T12207] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1921'. [ 828.131631][T12207] bridge0: port 2(bridge_slave_1) entered disabled state [ 828.139272][T12207] bridge0: port 1(bridge_slave_0) entered disabled state [ 828.423720][ T4232] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 828.454828][T12214] ALSA: mixer_oss: invalid OSS volume 'LI' [ 828.462393][T12214] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1923'. [ 829.192869][ T4232] usb 7-1: Using ep0 maxpacket: 8 [ 829.382944][ T8085] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 829.390545][ T8085] usb 2-1: can't read configurations, error -71 [ 829.822701][ T4232] usb 7-1: unable to read config index 0 descriptor/all [ 829.943146][ T4232] usb 7-1: can't read configurations, error -71 [ 831.102680][T12232] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 831.175749][T12237] loop6: detected capacity change from 0 to 256 [ 831.188340][T12232] F2FS-fs (loop2): Unable to read 1th superblock [ 831.204225][T12232] blk_update_request: I/O error, dev loop2, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 831.229027][T12232] F2FS-fs (loop2): Unable to read 2th superblock [ 831.331982][T12237] exfat: Bad value for 'umask' [ 831.379735][T12245] QAT: failed to copy from user cfg_data. [ 831.395466][T12245] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1931'. [ 831.406617][T12245] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 833.246893][T12254] loop6: detected capacity change from 0 to 256 [ 833.266756][T12254] exfat: Bad value for 'umask' [ 833.286228][T12257] loop2: detected capacity change from 0 to 256 [ 834.267164][T12274] loop3: detected capacity change from 0 to 7 [ 834.299083][T12274] Dev loop3: unable to read RDB block 7 [ 834.372666][T12274] loop3: unable to read partition table [ 834.378687][T12274] loop3: partition table beyond EOD, truncated [ 834.409577][T12274] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 835.250275][T12286] loop5: detected capacity change from 0 to 256 [ 835.363747][T12286] exfat: Bad value for 'umask' [ 838.307880][T12309] loop6: detected capacity change from 0 to 256 [ 838.683538][T12309] exfat: Bad value for 'umask' [ 838.799283][T12310] QAT: failed to copy from user cfg_data. [ 838.815068][T12310] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1948'. [ 838.837721][T12310] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 840.115084][T12337] loop2: detected capacity change from 0 to 1024 [ 840.148606][T12338] loop5: detected capacity change from 0 to 256 [ 840.183022][T12337] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 840.201985][T12337] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 840.230983][T12337] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 840.242034][T12337] System zones: 0-1, 3-36 [ 840.305072][T12337] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 841.935924][T12361] loop1: detected capacity change from 0 to 256 [ 842.113226][T12361] exfat: Bad value for 'umask' [ 842.593260][T12372] loop3: detected capacity change from 0 to 8 [ 842.771127][T12372] SQUASHFS error: xz decompression failed, data probably corrupt [ 842.779335][T12372] SQUASHFS error: Failed to read block 0x108: -5 [ 842.785846][T12372] SQUASHFS error: Unable to read metadata cache entry [106] [ 842.793250][T12372] SQUASHFS error: Unable to read inode 0x11f [ 845.138298][T12398] 9pnet: p9_errstr2errno: server reported unknown error [ 846.211423][T12408] device syzkaller0 entered promiscuous mode [ 847.512086][T12427] loop2: detected capacity change from 0 to 256 [ 847.589016][T12432] loop5: detected capacity change from 0 to 256 [ 847.593300][T12427] exfat: Bad value for 'umask' [ 849.402650][ T8085] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 849.492608][T12450] device syzkaller0 entered promiscuous mode [ 849.682663][ T8085] usb 3-1: Using ep0 maxpacket: 16 [ 849.844587][ T8085] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 849.900314][ T8085] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 850.136737][ T8085] usb 3-1: config 0 descriptor?? [ 850.276898][ T8085] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 850.416367][T12458] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1993'. [ 850.467881][T12458] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 850.476837][T12458] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 850.485597][T12458] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 850.494374][T12458] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 850.516811][T12458] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 850.526162][T12458] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 850.535118][T12458] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 850.544022][T12458] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 851.074798][T12459] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 851.083612][T12459] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 851.092340][T12459] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 851.101147][T12459] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 851.602773][T12459] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 851.611800][T12459] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 851.621237][T12459] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 851.630301][T12459] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 851.905598][T12473] loop1: detected capacity change from 0 to 256 [ 851.955828][T12473] exfat: Bad value for 'umask' [ 853.393518][ T8085] usb 3-1: USB disconnect, device number 15 [ 853.659069][T12491] xt_TPROXY: Can be used only with -p tcp or -p udp [ 853.725559][ T4196] Bluetooth: hci0: unknown advertising packet type: 0x75 [ 853.725701][ T4196] Bluetooth: hci0: Malicious advertising data. [ 855.897981][T12513] loop1: detected capacity change from 0 to 256 [ 855.944267][T12513] exfat: Bad value for 'umask' [ 858.553958][T12543] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2017'. [ 858.746699][T12549] loop6: detected capacity change from 0 to 8 [ 859.920883][T12549] SQUASHFS error: xz decompression failed, data probably corrupt [ 859.929160][T12549] SQUASHFS error: Failed to read block 0x108: -5 [ 859.935801][T12549] SQUASHFS error: Unable to read metadata cache entry [106] [ 859.943256][T12549] SQUASHFS error: Unable to read inode 0x11f [ 861.954168][T12543] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 862.053034][T12543] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 862.078455][ T26] audit: type=1800 audit(1773275470.274:15): pid=12566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2026" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 862.944357][T12543] bond0 (unregistering): Released all slaves [ 864.198486][ T4420] Bluetooth: hci1: command 0x0409 tx timeout [ 865.025731][T12562] chnl_net:caif_netlink_parms(): no params data found [ 866.451972][ T4420] Bluetooth: hci1: command 0x041b tx timeout [ 866.697825][T12562] bridge0: port 1(bridge_slave_0) entered blocking state [ 866.705100][T12562] bridge0: port 1(bridge_slave_0) entered disabled state [ 866.713330][T12562] device bridge_slave_0 entered promiscuous mode [ 866.722074][T12562] bridge0: port 2(bridge_slave_1) entered blocking state [ 866.729299][T12562] bridge0: port 2(bridge_slave_1) entered disabled state [ 866.737494][T12562] device bridge_slave_1 entered promiscuous mode [ 866.759693][T12562] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 866.844484][T12562] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 867.621568][ T26] audit: type=1800 audit(1773275475.814:16): pid=12607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2036" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 868.664430][ T4420] Bluetooth: hci1: command 0x040f tx timeout [ 868.733796][T12562] team0: Port device team_slave_0 added [ 868.894914][T12562] team0: Port device team_slave_1 added [ 869.000439][T12628] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2040'. [ 869.024566][T12562] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 869.031531][T12562] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 869.057404][ C0] vkms_vblank_simulate: vblank timer overrun [ 869.572965][T12562] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 869.797020][T12562] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 869.804714][T12562] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 869.838254][T12562] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 870.004371][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.010797][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.164442][T12562] device hsr_slave_0 entered promiscuous mode [ 870.426776][T12562] device hsr_slave_1 entered promiscuous mode [ 870.461498][T12562] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 870.529357][T12562] Cannot create hsr debugfs directory [ 870.595800][T12379] bridge0: port 3(syz_tun) entered disabled state [ 870.636509][T12379] device syz_tun left promiscuous mode [ 870.649696][T12379] bridge0: port 3(syz_tun) entered disabled state [ 870.751743][ T4236] Bluetooth: hci1: command 0x0419 tx timeout [ 873.531887][T12562] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 873.593053][T12562] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 873.678417][T12562] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 873.787571][T12562] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 873.991551][T12676] loop6: detected capacity change from 0 to 256 [ 874.063241][T12676] exfat: Bad value for 'umask' [ 874.481328][ T23] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 875.677110][T12562] 8021q: adding VLAN 0 to HW filter on device bond0 [ 875.854640][ T23] usb 6-1: Using ep0 maxpacket: 32 [ 876.012847][T12692] QAT: failed to copy from user cfg_data. [ 876.028188][T12692] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2057'. [ 876.243160][ T23] usb 6-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 876.266218][T12692] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 876.287384][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 876.305878][T10975] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 876.338019][T10975] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 876.434307][ T23] usb 6-1: config 0 descriptor?? [ 876.465633][T12562] 8021q: adding VLAN 0 to HW filter on device team0 [ 876.600115][ T23] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 876.643168][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 876.698829][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 876.773086][ T4276] bridge0: port 1(bridge_slave_0) entered blocking state [ 876.780204][ T4276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 876.792744][ T23] gspca_vc032x: reg_r err -71 [ 876.797456][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 876.823166][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 876.828490][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 876.873046][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 876.905368][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 877.047086][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 877.052908][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 877.058218][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 877.063583][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 877.068879][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 877.074227][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 877.079733][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 877.085093][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 877.090452][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 877.096582][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 877.136544][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 877.446180][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 877.466075][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 877.471398][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 877.474438][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 877.477332][ T23] gspca_vc032x: Unknown sensor... [ 877.490034][ T23] vc032x: probe of 6-1:0.0 failed with error -22 [ 877.502317][ T23] usb 6-1: USB disconnect, device number 21 [ 877.636575][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 877.718575][ T4291] bridge0: port 2(bridge_slave_1) entered blocking state [ 877.725697][ T4291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 877.780106][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 877.877870][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 878.074983][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 878.267225][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 878.581333][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 878.599247][T12713] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 878.633360][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 878.673715][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 878.703390][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 878.715261][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 878.768860][T12562] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 878.801858][T12562] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 878.830334][ T8140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 878.842877][ T8140] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 880.619022][T12740] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2069'. [ 880.814057][ T8140] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 880.833392][ T8140] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 880.846201][T12562] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 881.132689][ T5864] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 881.395256][T10975] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 881.428991][T10975] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 881.483231][ T8140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 881.511428][ T8140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 881.564461][T12562] device veth0_vlan entered promiscuous mode [ 881.573059][ T5864] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 881.592555][ T5864] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 881.609301][ T5864] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 881.629317][ T5864] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 881.653218][ T5864] usb 6-1: config 0 descriptor?? [ 881.694213][ T5864] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 881.715308][ T5864] dvb-usb: bulk message failed: -22 (3/0) [ 881.727563][ T8140] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 881.751047][ T8140] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 881.769616][ T5864] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 881.795912][T12562] device veth1_vlan entered promiscuous mode [ 881.823775][ T8044] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 881.834637][ T5864] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 881.842116][ T5864] usb 6-1: media controller created [ 881.914578][T12742] dvb-usb: bulk message failed: -22 (4/0) [ 882.061402][ T5864] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 882.102910][ T8044] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 882.129552][ T8044] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 882.242759][T12562] device veth0_macvtap entered promiscuous mode [ 882.748155][ T5864] dvb-usb: bulk message failed: -22 (6/0) [ 882.754956][T12562] device veth1_macvtap entered promiscuous mode [ 882.769367][ T5864] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 882.824436][ T5864] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input6 [ 882.882886][ T8044] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 882.919235][ T5864] dvb-usb: schedule remote query interval to 150 msecs. [ 882.939154][ T5864] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 882.953396][ T8044] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 882.997174][ T5864] usb 6-1: USB disconnect, device number 22 [ 883.040036][T12562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 883.050645][T12562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 883.097557][T12562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 883.132597][T12562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 883.151986][T12562] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 883.182670][ T8044] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 883.191399][ T8044] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 883.226604][T12562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 883.237807][T12562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 883.258109][T12562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 883.270119][T12562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 883.284142][T12562] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 883.292347][ T8044] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 883.320040][ T8044] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 883.342133][T12562] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 883.358670][T12562] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 883.373857][T12562] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 883.377819][ T5862] usb 3-1: new low-speed USB device number 16 using dummy_hcd [ 883.386968][T12562] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 883.396082][ T5864] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 883.575013][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 883.592031][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 883.610091][T10975] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 883.642196][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 883.650911][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 883.669559][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 883.792729][ T5862] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 883.806597][ T5862] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 883.880128][T12786] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2022'. [ 883.950164][T12787] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 883.959214][T12787] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 883.968090][T12787] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 883.976861][T12787] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 884.707476][ T5862] usb 3-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 884.874310][ T5862] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 884.905680][ T5862] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 884.955857][ T5862] usb 3-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 885.044413][T12787] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 885.053354][T12787] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 885.062233][T12787] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 885.071327][T12787] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 885.080400][ T5862] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 885.090774][ T5862] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 885.129312][ T5862] usb 3-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 885.392667][ T5862] usb 3-1: string descriptor 0 read error: -22 [ 885.515612][ T5862] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 885.574889][ T5862] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 885.699446][ T5862] adutux 3-1:168.0: interrupt endpoints not found [ 885.830319][ T5862] usb 3-1: USB disconnect, device number 16 [ 888.106296][T12840] netlink: 'syz.6.2102': attribute type 1 has an invalid length. [ 888.424561][T12844] bond1: (slave gretap1): making interface the new active one [ 888.600767][T12844] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 889.108152][T12848] device macvlan2 entered promiscuous mode [ 889.297419][T12848] device bond1 entered promiscuous mode [ 889.362358][T12848] device gretap1 entered promiscuous mode [ 889.370160][T12848] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 889.378354][T12848] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 889.405398][T12848] device bond1 left promiscuous mode [ 889.410733][T12848] device gretap1 left promiscuous mode [ 889.435103][T12855] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2107'. [ 889.445479][T12855] netlink: 'syz.1.2107': attribute type 5 has an invalid length. [ 889.456207][T12855] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2107'. [ 889.471209][T12855] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 889.483455][T12855] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 889.493160][T12855] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 889.502374][T12855] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 889.511155][T12855] device geneve2 entered promiscuous mode [ 889.707062][T12867] netlink: 'syz.5.2111': attribute type 10 has an invalid length. [ 889.715270][ T4232] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 890.489595][T12873] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2113'. [ 890.523463][T12873] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2113'. [ 891.009614][T12873] ALSA: mixer_oss: invalid OSS volume 'LI' [ 891.832568][ T4232] usb 8-1: unable to get BOS descriptor or descriptor too short [ 891.952733][ T4232] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 891.980613][ T4232] usb 8-1: can't read configurations, error -71 [ 897.533409][ T5864] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 897.832721][ T5864] usb 8-1: Using ep0 maxpacket: 16 [ 897.867914][T12959] loop1: detected capacity change from 0 to 256 [ 897.933653][T12959] exfat: Bad value for 'umask' [ 898.122693][ T5864] usb 8-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 900.419698][ T5864] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.616156][ T5864] usb 8-1: Product: syz [ 901.620357][ T5864] usb 8-1: Manufacturer: syz [ 901.625321][ T5864] usb 8-1: SerialNumber: syz [ 901.631666][ T5864] usb 8-1: config 0 descriptor?? [ 901.681594][ T5864] ums-onetouch 8-1:0.0: USB Mass Storage device detected [ 901.912006][T12981] device syzkaller0 entered promiscuous mode [ 903.178082][ T5864] usb 8-1: USB disconnect, device number 4 [ 904.233126][T13009] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2150'. [ 907.017525][T13030] device syzkaller0 entered promiscuous mode [ 909.314096][T13056] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2164'. [ 909.341814][T13056] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 909.350632][T13056] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 909.359378][T13056] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 909.368536][T13056] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 909.396361][T13056] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 909.405936][T13056] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 909.414882][T13056] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 909.423825][T13056] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 911.149324][T13069] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 912.420616][T13074] device syzkaller0 entered promiscuous mode [ 912.779327][ T26] audit: type=1800 audit(1773275520.974:17): pid=13093 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2175" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 912.799761][ C0] vkms_vblank_simulate: vblank timer overrun [ 912.871571][T13095] trusted_key: encrypted_key: master key parameter 'd' is invalid [ 913.027165][T13100] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2177'. [ 913.039181][T13100] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2177'. [ 915.903234][ T26] audit: type=1800 audit(1773275524.104:18): pid=13134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2187" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 916.350005][T13156] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 916.356565][T13156] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 916.364348][T13156] vhci_hcd vhci_hcd.0: Device attached [ 916.652801][ T23] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 917.702225][T13157] vhci_hcd: connection reset by peer [ 917.722361][ T8140] vhci_hcd: stop threads [ 917.728018][ T8140] vhci_hcd: release socket [ 917.778836][ T8140] vhci_hcd: disconnect device [ 921.762589][ T23] vhci_hcd: vhci_device speed not set [ 922.396021][ T26] audit: type=1800 audit(1773275530.594:19): pid=13184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2199" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 922.537941][T13196] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 922.559237][T13193] device syzkaller0 entered promiscuous mode [ 922.595691][T13196] F2FS-fs (loop5): Unable to read 1th superblock [ 922.617086][T13196] blk_update_request: I/O error, dev loop5, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 922.650687][T13196] F2FS-fs (loop5): Unable to read 2th superblock [ 923.434888][T13215] ALSA: mixer_oss: invalid OSS volume 'LI' [ 923.441510][T13215] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2209'. [ 923.495436][T13211] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2209'. [ 925.842599][T13230] QAT: failed to copy from user cfg_data. [ 927.049104][ T26] audit: type=1800 audit(1773275535.244:20): pid=13238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2215" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0 [ 927.471823][T13246] hub 8-0:1.0: USB hub found [ 927.495936][T13246] hub 8-0:1.0: 1 port detected [ 929.324018][T13269] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2225'. [ 931.501394][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.509063][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.619017][T13278] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2227'. [ 931.881866][T13278] ALSA: mixer_oss: invalid OSS volume 'LI' [ 932.692272][T13280] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 932.700492][T13280] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 932.792648][T13280] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 932.802412][T13280] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 934.998979][T13315] loop1: detected capacity change from 0 to 256 [ 935.173142][ T4228] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 935.542544][ T4228] usb 8-1: Using ep0 maxpacket: 8 [ 935.619424][T13323] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2240'. [ 935.631652][T13323] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2240'. [ 936.174780][T13323] ALSA: mixer_oss: invalid OSS volume 'LI' [ 936.342812][ T4228] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 936.351223][ T4228] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 936.391827][ T4228] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 936.412167][ T4228] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 936.462560][ T4228] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 936.512556][ T4228] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 936.531974][ T4228] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 937.093388][ T4228] usb 8-1: GET_CAPABILITIES returned 0 [ 937.099778][ T4228] usbtmc 8-1:16.0: can't read capabilities [ 937.342627][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 937.355005][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 937.364118][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 937.373220][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 937.382552][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 937.391632][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 937.400930][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 937.410029][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 937.419110][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 937.428187][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 937.437259][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 937.446334][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 937.455408][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 937.464485][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 937.473557][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 937.482626][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 937.491678][ C0] vkms_vblank_simulate: vblank timer overrun [ 937.520667][ T5864] usb 8-1: USB disconnect, device number 5 [ 938.899102][T13347] loop2: detected capacity change from 0 to 256 [ 938.936129][T13347] exfat: Bad value for 'umask' [ 941.829115][T13381] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2253'. [ 942.073505][T13381] ALSA: mixer_oss: invalid OSS volume 'LI' [ 942.442967][T13391] ALSA: mixer_oss: invalid OSS volume 'LI' [ 942.450710][T13391] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2256'. [ 942.462308][T13391] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2256'. [ 942.837176][T13388] loop5: detected capacity change from 0 to 8 [ 943.190174][T13388] SQUASHFS error: xz decompression failed, data probably corrupt [ 943.212762][T13388] SQUASHFS error: Failed to read block 0x108: -5 [ 943.220636][T13403] loop6: detected capacity change from 0 to 256 [ 943.438737][ T5396] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 943.622083][T13388] SQUASHFS error: Unable to read metadata cache entry [106] [ 943.639274][T13388] SQUASHFS error: Unable to read inode 0x11f [ 943.646093][T13403] exfat: Bad value for 'umask' [ 943.891279][ T5396] usb 2-1: Using ep0 maxpacket: 8 [ 945.702623][ T5396] usb 2-1: unable to get BOS descriptor or descriptor too short [ 945.790960][T13423] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2266'. [ 946.039071][T13423] ALSA: mixer_oss: invalid OSS volume 'LI' [ 946.062613][ T5396] usb 2-1: unable to read config index 0 descriptor/all [ 946.072542][ T5396] usb 2-1: can't read configurations, error -71 [ 948.447941][T13444] ALSA: mixer_oss: invalid OSS volume 'LI' [ 948.455780][T13444] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2271'. [ 951.965030][T13476] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 952.082665][T13476] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 952.104578][T13476] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 952.790361][T13476] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 953.028454][T13493] ALSA: mixer_oss: invalid OSS volume 'LI' [ 953.035221][T13493] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2284'. [ 959.155913][T13540] loop5: detected capacity change from 0 to 256 [ 959.274609][T13542] device syzkaller0 entered promiscuous mode [ 964.166781][T13583] ALSA: mixer_oss: invalid OSS volume 'LI' [ 964.174881][T13583] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2309'. [ 966.080314][T13588] loop7: detected capacity change from 0 to 8 [ 966.244368][T13595] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2312'. [ 966.254338][T13595] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2312'. [ 966.268960][T13588] SQUASHFS error: xz decompression failed, data probably corrupt [ 966.278671][T13595] ALSA: mixer_oss: invalid OSS volume 'LI' [ 966.322789][T13588] SQUASHFS error: Failed to read block 0x108: -5 [ 966.332045][T13598] loop5: detected capacity change from 0 to 1024 [ 966.350459][T13588] SQUASHFS error: Unable to read metadata cache entry [106] [ 966.374609][T13588] SQUASHFS error: Unable to read inode 0x11f [ 966.395966][T13598] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 966.416258][T13598] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 966.492631][T13598] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 966.626152][T13598] System zones: 0-1, 3-36 [ 966.641705][T13598] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 966.661744][ C0] vkms_vblank_simulate: vblank timer overrun [ 967.757995][T13612] device syzkaller0 entered promiscuous mode [ 967.770707][T13616] loop6: detected capacity change from 0 to 256 [ 968.351729][T13627] ALSA: mixer_oss: invalid OSS volume 'LI' [ 968.359597][T13627] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2321'. [ 968.381090][T13627] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2321'. [ 970.770290][T13643] QAT: failed to copy from user cfg_data. [ 970.785805][T13643] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2325'. [ 970.795440][T13643] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 971.781175][T13650] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2326'. [ 971.823123][T13650] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2326'. [ 971.950726][T13651] loop2: detected capacity change from 0 to 8 [ 972.046822][T13651] SQUASHFS error: xz decompression failed, data probably corrupt [ 972.186619][T13651] SQUASHFS error: Failed to read block 0x108: -5 [ 972.198441][T13651] SQUASHFS error: Unable to read metadata cache entry [106] [ 972.209031][T13651] SQUASHFS error: Unable to read inode 0x11f [ 972.330135][T13650] ALSA: mixer_oss: invalid OSS volume 'LI' [ 973.914368][T13670] ALSA: mixer_oss: invalid OSS volume 'LI' [ 973.914747][T13670] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2333'. [ 975.141300][T13688] QAT: failed to copy from user cfg_data. [ 975.162433][T13688] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2337'. [ 975.172215][T13688] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 975.969971][T13692] loop2: detected capacity change from 0 to 256 [ 976.103256][T13696] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2341'. [ 976.175203][T13697] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 976.184044][T13697] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 976.192831][T13697] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 976.201884][T13697] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 976.536491][T13697] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 976.545853][T13697] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 976.554935][T13697] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 976.563961][T13697] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 978.900641][T13720] ALSA: mixer_oss: invalid OSS volume 'LI' [ 978.908402][T13720] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2344'. [ 978.924938][T13720] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2344'. [ 980.163860][ T26] audit: type=1800 audit(1773275588.365:21): pid=13726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2348" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 980.320274][T13730] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2349'. [ 980.347061][T13730] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2349'. [ 980.771106][T13748] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2352'. [ 981.535994][T13748] ALSA: mixer_oss: invalid OSS volume 'LI' [ 983.669310][T13756] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2356'. [ 983.687120][T13760] loop1: detected capacity change from 0 to 256 [ 983.775858][T13767] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 983.784789][T13767] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 983.793568][T13767] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 983.802316][T13767] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 984.719300][T13767] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 984.728315][T13767] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 984.737261][T13767] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 984.746220][T13767] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 984.986315][T13780] loop5: detected capacity change from 0 to 8 [ 985.050827][T13780] SQUASHFS error: xz decompression failed, data probably corrupt [ 985.058765][T13780] SQUASHFS error: Failed to read block 0x108: -5 [ 985.065276][T13780] SQUASHFS error: Unable to read metadata cache entry [106] [ 985.072672][T13780] SQUASHFS error: Unable to read inode 0x11f [ 985.602669][ T4235] Bluetooth: hci1: command 0x0406 tx timeout [ 986.511880][ T26] audit: type=1800 audit(1773275594.706:22): pid=13785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2364" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 986.777545][T13790] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2365'. [ 986.831116][T13791] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2365'. [ 988.511814][T13805] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2368'. [ 988.898504][T13809] QAT: failed to copy from user cfg_data. [ 988.908452][T13809] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2369'. [ 988.917991][T13809] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 989.747007][T13805] ALSA: mixer_oss: invalid OSS volume 'LI' [ 990.376989][T13824] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2373'. [ 990.764472][T13825] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 990.773359][T13825] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 990.782099][T13825] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 990.790887][T13825] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 990.992593][T13825] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 991.001513][T13825] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 991.010474][T13825] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 991.019482][T13825] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 991.031412][T13832] loop5: detected capacity change from 0 to 256 [ 992.886148][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.892526][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.203240][T13854] ALSA: mixer_oss: invalid OSS volume 'LI' [ 994.210966][T13854] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2380'. [ 994.566660][T13857] device syzkaller0 entered promiscuous mode [ 994.838424][T13864] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2381'. [ 994.934068][T13864] ALSA: mixer_oss: invalid OSS volume 'LI' [ 995.350299][T13872] loop7: detected capacity change from 0 to 256 [ 995.415827][T13872] exfat: Bad value for 'umask' [ 996.929989][T13888] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2389'. [ 996.998951][T13889] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 997.007809][T13889] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 997.016617][T13889] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 997.025356][T13889] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 997.221841][T13889] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 997.230814][T13889] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 997.239797][T13889] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 997.248949][T13889] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 997.678324][T13901] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2391'. [ 998.810674][T13909] ALSA: mixer_oss: invalid OSS volume 'LI' [ 998.818514][T13909] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2393'. [ 998.831470][T13909] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2393'. [ 1000.266007][T13923] QAT: failed to copy from user cfg_data. [ 1000.276363][T13923] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2397'. [ 1000.285820][T13923] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 1000.364214][T13924] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2396'. [ 1000.600497][T13924] ALSA: mixer_oss: invalid OSS volume 'LI' [ 1002.392021][T13933] loop5: detected capacity change from 0 to 8 [ 1002.692402][T13944] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2401'. [ 1002.760114][T13945] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1002.768989][T13945] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1002.778301][T13945] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1002.787030][T13945] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1002.929366][T13933] SQUASHFS error: xz decompression failed, data probably corrupt [ 1002.982023][T13933] SQUASHFS error: Failed to read block 0x108: -5 [ 1002.997039][T13933] SQUASHFS error: Unable to read metadata cache entry [106] [ 1003.009341][T13933] SQUASHFS error: Unable to read inode 0x11f [ 1003.031352][T13945] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1003.040406][T13945] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1003.049439][T13945] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1003.058493][T13945] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1003.959489][T13953] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2404'. [ 1004.702960][T13954] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2404'. [ 1007.440430][T13991] loop2: detected capacity change from 0 to 8 [ 1007.492429][T13991] SQUASHFS error: xz decompression failed, data probably corrupt [ 1007.500238][T13991] SQUASHFS error: Failed to read block 0x108: -5 [ 1007.506670][T13991] SQUASHFS error: Unable to read metadata cache entry [106] [ 1007.513968][T13991] SQUASHFS error: Unable to read inode 0x11f [ 1008.000093][T13999] ALSA: mixer_oss: invalid OSS volume 'LI' [ 1008.007953][T13999] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2417'. [ 1009.489926][T14010] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2419'. [ 1009.507935][T14010] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2419'. [ 1010.479820][T14013] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2420'. [ 1010.525385][T14013] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1010.534250][T14013] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1010.543013][T14013] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1010.551703][T14013] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1010.579067][T14013] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1010.588080][T14013] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1010.597003][T14013] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1010.606167][T14013] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1011.532887][T14014] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1011.541761][T14014] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1011.550681][T14014] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1011.559630][T14014] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1011.779990][T14014] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1011.789005][T14014] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1011.797929][T14014] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1011.806834][T14014] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1011.885305][T14025] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2423'. [ 1012.125913][T14025] ALSA: mixer_oss: invalid OSS volume 'LI' [ 1015.358843][T14053] ALSA: mixer_oss: invalid OSS volume 'LI' [ 1015.366457][T14053] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2428'. [ 1015.409950][T14053] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2428'. [ 1016.522500][T14063] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2434'. [ 1016.773425][T14063] ALSA: mixer_oss: invalid OSS volume 'LI' [ 1016.885329][T14072] QAT: failed to copy from user cfg_data. [ 1016.897141][T14072] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2436'. [ 1016.908228][T14072] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 1019.045468][T14094] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2440'. [ 1019.118449][T14095] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1019.127424][T14095] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1019.136168][T14095] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1019.144926][T14095] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1019.311353][T14095] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1019.320440][T14095] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1019.329500][T14095] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1019.338855][T14095] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1021.701870][T14119] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2447'. [ 1021.713923][T14119] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2447'. [ 1022.071763][T14119] ALSA: mixer_oss: invalid OSS volume 'LI' [ 1023.947064][T14138] loop6: detected capacity change from 0 to 8 [ 1025.057563][T14138] SQUASHFS error: xz decompression failed, data probably corrupt [ 1025.065589][T14138] SQUASHFS error: Failed to read block 0x108: -5 [ 1025.072013][T14138] SQUASHFS error: Unable to read metadata cache entry [106] [ 1025.079376][T14138] SQUASHFS error: Unable to read inode 0x11f [ 1025.564237][T14148] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2454'. [ 1025.718230][T14152] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2457'. [ 1025.786422][T14153] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1025.795195][T14153] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1025.803932][T14153] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1025.812733][T14153] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1026.076387][T14153] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1026.085408][T14153] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1026.094503][T14153] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1026.103428][T14153] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1026.441058][T14145] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2454'. [ 1027.082231][T14173] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2462'. [ 1027.102085][T14173] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2462'. [ 1027.418472][T14173] ALSA: mixer_oss: invalid OSS volume 'LI' [ 1029.540882][T14204] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2470'. [ 1029.553679][T14204] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2470'. [ 1030.489506][T14207] loop5: detected capacity change from 0 to 8 [ 1031.860782][T14209] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2472'. [ 1031.904205][T14208] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1031.913631][T14208] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1031.922726][T14208] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1031.931553][T14208] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1031.969125][T14208] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1031.978390][T14208] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1031.987426][T14208] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1031.996430][T14208] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1032.215881][T14213] loop7: detected capacity change from 0 to 256 [ 1032.217649][T14207] SQUASHFS error: xz decompression failed, data probably corrupt [ 1032.281750][T14207] SQUASHFS error: Failed to read block 0x108: -5 [ 1032.299193][T14207] SQUASHFS error: Unable to read metadata cache entry [106] [ 1032.446692][T14207] SQUASHFS error: Unable to read inode 0x11f [ 1032.563488][T14220] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2474'. [ 1033.484277][T14209] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1033.493308][T14209] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1033.502239][T14209] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1033.511048][T14209] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1034.212914][T14209] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1034.222079][T14209] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1034.231159][T14209] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1034.240156][T14209] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1038.719004][T14268] loop1: detected capacity change from 0 to 8 [ 1038.758681][T14279] loop5: detected capacity change from 0 to 256 [ 1038.938970][T14268] SQUASHFS error: xz decompression failed, data probably corrupt [ 1038.946804][T14268] SQUASHFS error: Failed to read block 0x108: -5 [ 1038.953167][T14268] SQUASHFS error: Unable to read metadata cache entry [106] [ 1038.960456][T14268] SQUASHFS error: Unable to read inode 0x11f [ 1039.319530][T14288] loop2: detected capacity change from 0 to 1024 [ 1040.694821][T14288] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 1040.723119][T14288] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1040.906240][T14288] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 1040.950008][T14288] System zones: 0-1, 3-36 [ 1040.987438][T14313] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2496'. [ 1041.134282][T14288] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 1041.903949][T14327] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2500'. [ 1041.913610][T14327] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 1046.382543][T14360] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2507'. [ 1046.865689][T14365] loop2: detected capacity change from 0 to 256 [ 1047.328654][T14360] ALSA: mixer_oss: invalid OSS volume 'LI' [ 1047.750477][T14375] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2510'. [ 1047.787015][T14369] netlink: 'syz.6.2510': attribute type 5 has an invalid length. [ 1047.810291][T14369] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1047.819093][T14369] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1047.827870][T14369] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1047.836618][T14369] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1047.852938][T14369] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1047.861851][T14369] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1047.871059][T14369] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1047.879955][T14369] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1049.461384][T14393] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2515'. [ 1049.472868][T14393] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 1052.147212][T14416] loop2: detected capacity change from 0 to 8 [ 1052.274381][T14416] SQUASHFS error: xz decompression failed, data probably corrupt [ 1052.282721][T14416] SQUASHFS error: Failed to read block 0x108: -5 [ 1052.289331][T14416] SQUASHFS error: Unable to read metadata cache entry [106] [ 1052.296809][T14416] SQUASHFS error: Unable to read inode 0x11f [ 1053.218152][T14422] device syzkaller0 entered promiscuous mode [ 1054.325390][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.332022][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.600627][T14437] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2527'. [ 1054.654810][T14438] netlink: 'syz.2.2527': attribute type 5 has an invalid length. [ 1054.677106][T14438] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1054.685932][T14438] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1054.694794][T14438] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1054.703908][T14438] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1054.815352][T14438] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1054.824651][T14438] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1054.833594][T14438] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1054.842721][T14438] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1055.498277][T14441] QAT: failed to copy from user cfg_data. [ 1055.513766][T14441] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2528'. [ 1058.053302][T14458] loop2: detected capacity change from 0 to 8 [ 1058.134296][T14458] SQUASHFS error: xz decompression failed, data probably corrupt [ 1058.142083][T14458] SQUASHFS error: Failed to read block 0x108: -5 [ 1058.148874][T14458] SQUASHFS error: Unable to read metadata cache entry [106] [ 1058.156196][T14458] SQUASHFS error: Unable to read inode 0x11f [ 1058.395116][T14463] device syzkaller0 entered promiscuous mode [ 1059.379074][T14478] QAT: failed to copy from user cfg_data. [ 1059.392587][T14478] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2540'. [ 1059.402030][T14478] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 1060.128326][T14482] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2543'. [ 1061.044105][T14488] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2542'. [ 1061.098664][T14490] netlink: 'syz.1.2542': attribute type 5 has an invalid length. [ 1061.978395][T14505] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2547'. [ 1062.241928][T14505] bridge0: port 2(bridge_slave_1) entered disabled state [ 1062.250511][T14505] bridge0: port 1(bridge_slave_0) entered disabled state [ 1062.410290][T14507] loop1: detected capacity change from 0 to 8 [ 1062.547671][T14512] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2550'. [ 1063.542082][T14507] SQUASHFS error: xz decompression failed, data probably corrupt [ 1063.550214][T14507] SQUASHFS error: Failed to read block 0x108: -5 [ 1063.556655][T14507] SQUASHFS error: Unable to read metadata cache entry [106] [ 1063.564116][T14507] SQUASHFS error: Unable to read inode 0x11f [ 1063.599414][T14517] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1063.608553][T14517] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1063.617623][T14517] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1063.626459][T14517] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1063.948220][T14526] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2548'. [ 1063.975567][T14517] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1063.984537][T14517] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1063.993524][T14517] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1064.002404][T14517] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1064.122976][T14526] ALSA: mixer_oss: invalid OSS volume 'LI' [ 1064.262252][T14534] device syzkaller0 entered promiscuous mode [ 1064.832664][T14551] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2560'. [ 1064.905133][T14551] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1064.913993][T14551] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1064.922805][T14551] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1064.931503][T14551] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1064.962279][T14551] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1064.971405][T14551] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1064.980595][T14551] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1064.989723][T14551] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1069.263868][T14578] device syzkaller0 entered promiscuous mode [ 1069.271220][T14584] netlink: 'syz.1.2571': attribute type 1 has an invalid length. [ 1070.055721][T14588] bond1: (slave gretap1): making interface the new active one [ 1070.380438][T14588] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1072.911547][T14622] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2579'. [ 1076.737464][T14650] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2586'. [ 1079.137792][T14679] ------------[ cut here ]------------ [ 1079.172757][T14679] wlan0: Failed check-sdata-in-driver check, flags: 0x4 [ 1079.196608][T14679] WARNING: CPU: 1 PID: 14679 at net/mac80211/driver-ops.h:172 ieee80211_bss_info_change_notify+0x37b/0x550 [ 1079.694799][T14679] Modules linked in: [ 1079.878443][T14679] CPU: 1 PID: 14679 Comm: syz.1.2594 Not tainted syzkaller #0 [ 1079.922997][T14679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1079.937201][T14679] RIP: 0010:ieee80211_bss_info_change_notify+0x37b/0x550 [ 1079.944702][T14679] Code: 39 7e f8 49 8b 84 24 00 06 00 00 49 81 c4 20 06 00 00 48 85 c0 4c 0f 45 e0 48 c7 c7 20 20 39 8b 4c 89 e6 89 ea e8 05 86 71 00 <0f> 0b e9 07 fd ff ff e8 a9 2d 39 f8 0f 0b e9 b1 fe ff ff e8 9d 2d [ 1079.972783][T14679] RSP: 0018:ffffc90003e373a0 EFLAGS: 00010246 [ 1080.003980][T14679] RAX: 586daacd7e0c7800 RBX: 0000000002000000 RCX: 0000000000080000 [ 1080.012116][T14679] RDX: ffffc90005e01000 RSI: 0000000000006acf RDI: 0000000000006ad0 [ 1080.042624][T14679] RBP: 0000000000000004 R08: ffff8880b9133d7f R09: 1ffff110172267af [ 1080.073340][T14679] R10: dffffc0000000000 R11: ffffed10172267b0 R12: ffff888060ca4000 [ 1080.081751][T14679] R13: ffff888060ca5290 R14: ffff888024ec8e40 R15: ffff888060ca6268 [ 1080.102533][T14679] FS: 00007f42eb1446c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 1080.125316][T14679] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1080.134400][T14679] CR2: 00007f05224d0e80 CR3: 000000006116a000 CR4: 00000000003506f0 [ 1080.145554][T14679] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1080.160629][T14679] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1080.174338][T14679] Call Trace: [ 1080.179933][T14679] [ 1080.185219][T14679] ieee80211_set_mcast_rate+0x3b/0x50 [ 1080.195228][T14679] ? ieee80211_leave_ibss+0x20/0x20 [ 1080.205052][T14679] nl80211_set_mcast_rate+0x346/0x530 [ 1080.217216][T14679] ? nl80211_nan_change_config+0x6b0/0x6b0 [ 1080.234156][T14679] genl_rcv_msg+0xcea/0xf90 [ 1080.244804][T14679] ? genl_bind+0x380/0x380 [ 1080.254866][T14679] ? __dev_queue_xmit+0x1cbf/0x2f80 [ 1080.266994][T14679] ? verify_lock_unused+0x140/0x140 [ 1080.279059][T14679] ? dev_queue_xmit+0x20/0x20 [ 1080.289474][T14679] ? nl80211_nan_change_config+0x6b0/0x6b0 [ 1080.302103][T14679] netlink_rcv_skb+0x1f5/0x440 [ 1080.307085][T14679] ? genl_bind+0x380/0x380 [ 1080.311594][T14679] ? netlink_ack+0xb50/0xb50 [ 1080.316332][T14679] ? __lock_acquire+0x7d10/0x7d10 [ 1080.321531][T14679] ? down_read+0x1aa/0x2e0 [ 1080.326230][T14679] genl_rcv+0x24/0x40 [ 1080.330316][T14679] netlink_unicast+0x774/0x920 [ 1080.338506][T14679] netlink_sendmsg+0x8ba/0xbe0 [ 1080.343950][T14679] ? netlink_getsockopt+0x570/0x570 [ 1080.349311][T14679] ? aa_sock_msg_perm+0x94/0x150 [ 1080.354484][T14679] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1080.359958][T14679] ? security_socket_sendmsg+0x7c/0xa0 [ 1080.365612][T14679] ? netlink_getsockopt+0x570/0x570 [ 1080.370944][T14679] ____sys_sendmsg+0x5b7/0x8f0 [ 1080.383285][T14679] ? __sys_sendmsg_sock+0x30/0x30 [ 1080.392826][T14679] ? import_iovec+0x6f/0xa0 [ 1080.397582][T14679] ___sys_sendmsg+0x236/0x2e0 [ 1080.402418][T14679] ? __sys_sendmsg+0x2a0/0x2a0 [ 1080.408006][T14679] __se_sys_sendmsg+0x1af/0x290 [ 1080.413083][T14679] ? __x64_sys_sendmsg+0x80/0x80 [ 1080.418109][T14679] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1080.424308][T14679] ? lockdep_hardirqs_on+0x94/0x140 [ 1080.429699][T14679] do_syscall_64+0x4c/0xa0 [ 1080.434311][T14679] ? clear_bhb_loop+0x30/0x80 [ 1080.439208][T14679] ? clear_bhb_loop+0x30/0x80 [ 1080.447783][T14679] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1080.453831][T14679] RIP: 0033:0x7f42eceea799 [ 1080.458372][T14679] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1080.478193][T14679] RSP: 002b:00007f42eb144028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1080.486750][T14679] RAX: ffffffffffffffda RBX: 00007f42ed163fa0 RCX: 00007f42eceea799 [ 1080.494983][T14679] RDX: 000000000000c800 RSI: 00002000000007c0 RDI: 0000000000000005 [ 1080.503339][T14679] RBP: 00007f42ecf80c99 R08: 0000000000000000 R09: 0000000000000000 [ 1080.511525][T14679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1080.519970][T14679] R13: 00007f42ed164038 R14: 00007f42ed163fa0 R15: 00007ffca858c528 [ 1080.528280][T14679] [ 1080.531417][T14679] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1080.538688][T14679] CPU: 1 PID: 14679 Comm: syz.1.2594 Not tainted syzkaller #0 [ 1080.546142][T14679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1080.556199][T14679] Call Trace: [ 1080.559476][T14679] [ 1080.562405][T14679] dump_stack_lvl+0x188/0x250 [ 1080.567119][T14679] ? show_regs_print_info+0x20/0x20 [ 1080.572330][T14679] ? load_image+0x400/0x400 [ 1080.576842][T14679] panic+0x2e5/0x810 [ 1080.580806][T14679] ? bpf_jit_dump+0xd0/0xd0 [ 1080.585323][T14679] ? ieee80211_bss_info_change_notify+0x37b/0x550 [ 1080.591747][T14679] __warn+0x248/0x2b0 [ 1080.595742][T14679] ? ieee80211_bss_info_change_notify+0x37b/0x550 [ 1080.602166][T14679] report_bug+0x1b7/0x2e0 [ 1080.606582][T14679] handle_bug+0x3a/0x70 [ 1080.610743][T14679] exc_invalid_op+0x16/0x40 [ 1080.615254][T14679] asm_exc_invalid_op+0x16/0x20 [ 1080.620102][T14679] RIP: 0010:ieee80211_bss_info_change_notify+0x37b/0x550 [ 1080.627134][T14679] Code: 39 7e f8 49 8b 84 24 00 06 00 00 49 81 c4 20 06 00 00 48 85 c0 4c 0f 45 e0 48 c7 c7 20 20 39 8b 4c 89 e6 89 ea e8 05 86 71 00 <0f> 0b e9 07 fd ff ff e8 a9 2d 39 f8 0f 0b e9 b1 fe ff ff e8 9d 2d [ 1080.646745][T14679] RSP: 0018:ffffc90003e373a0 EFLAGS: 00010246 [ 1080.652804][T14679] RAX: 586daacd7e0c7800 RBX: 0000000002000000 RCX: 0000000000080000 [ 1080.660755][T14679] RDX: ffffc90005e01000 RSI: 0000000000006acf RDI: 0000000000006ad0 [ 1080.668707][T14679] RBP: 0000000000000004 R08: ffff8880b9133d7f R09: 1ffff110172267af [ 1080.676656][T14679] R10: dffffc0000000000 R11: ffffed10172267b0 R12: ffff888060ca4000 [ 1080.684637][T14679] R13: ffff888060ca5290 R14: ffff888024ec8e40 R15: ffff888060ca6268 [ 1080.692647][T14679] ieee80211_set_mcast_rate+0x3b/0x50 [ 1080.698001][T14679] ? ieee80211_leave_ibss+0x20/0x20 [ 1080.703184][T14679] nl80211_set_mcast_rate+0x346/0x530 [ 1080.708534][T14679] ? nl80211_nan_change_config+0x6b0/0x6b0 [ 1080.714320][T14679] genl_rcv_msg+0xcea/0xf90 [ 1080.718806][T14679] ? genl_bind+0x380/0x380 [ 1080.723201][T14679] ? __dev_queue_xmit+0x1cbf/0x2f80 [ 1080.728390][T14679] ? verify_lock_unused+0x140/0x140 [ 1080.733638][T14679] ? dev_queue_xmit+0x20/0x20 [ 1080.738311][T14679] ? nl80211_nan_change_config+0x6b0/0x6b0 [ 1080.744101][T14679] netlink_rcv_skb+0x1f5/0x440 [ 1080.748847][T14679] ? genl_bind+0x380/0x380 [ 1080.753332][T14679] ? netlink_ack+0xb50/0xb50 [ 1080.757905][T14679] ? __lock_acquire+0x7d10/0x7d10 [ 1080.762914][T14679] ? down_read+0x1aa/0x2e0 [ 1080.767310][T14679] genl_rcv+0x24/0x40 [ 1080.771268][T14679] netlink_unicast+0x774/0x920 [ 1080.776024][T14679] netlink_sendmsg+0x8ba/0xbe0 [ 1080.780778][T14679] ? netlink_getsockopt+0x570/0x570 [ 1080.785959][T14679] ? aa_sock_msg_perm+0x94/0x150 [ 1080.790884][T14679] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1080.796153][T14679] ? security_socket_sendmsg+0x7c/0xa0 [ 1080.801595][T14679] ? netlink_getsockopt+0x570/0x570 [ 1080.806774][T14679] ____sys_sendmsg+0x5b7/0x8f0 [ 1080.811526][T14679] ? __sys_sendmsg_sock+0x30/0x30 [ 1080.816532][T14679] ? import_iovec+0x6f/0xa0 [ 1080.821017][T14679] ___sys_sendmsg+0x236/0x2e0 [ 1080.825678][T14679] ? __sys_sendmsg+0x2a0/0x2a0 [ 1080.830455][T14679] __se_sys_sendmsg+0x1af/0x290 [ 1080.835315][T14679] ? __x64_sys_sendmsg+0x80/0x80 [ 1080.840254][T14679] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1080.846226][T14679] ? lockdep_hardirqs_on+0x94/0x140 [ 1080.851409][T14679] do_syscall_64+0x4c/0xa0 [ 1080.855806][T14679] ? clear_bhb_loop+0x30/0x80 [ 1080.860475][T14679] ? clear_bhb_loop+0x30/0x80 [ 1080.865139][T14679] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1080.871010][T14679] RIP: 0033:0x7f42eceea799 [ 1080.875405][T14679] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1080.894994][T14679] RSP: 002b:00007f42eb144028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1080.903395][T14679] RAX: ffffffffffffffda RBX: 00007f42ed163fa0 RCX: 00007f42eceea799 [ 1080.911344][T14679] RDX: 000000000000c800 RSI: 00002000000007c0 RDI: 0000000000000005 [ 1080.919292][T14679] RBP: 00007f42ecf80c99 R08: 0000000000000000 R09: 0000000000000000 [ 1080.927245][T14679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1080.935196][T14679] R13: 00007f42ed164038 R14: 00007f42ed163fa0 R15: 00007ffca858c528 [ 1080.943159][T14679] [ 1080.946456][T14679] Kernel Offset: disabled [ 1080.951050][T14679] Rebooting in 86400 seconds..