last executing test programs: 6m4.929191129s ago: executing program 2 (id=43): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) r1 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ETH_DST={0xa, 0x4, @broadcast}]}}]}, 0x40}}, 0x24004000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) futex_waitv(&(0x7f0000001e80)=[{0xfff, 0x0, 0x6}, {0x50, 0x0, 0x82}], 0x2, 0x0, 0x0, 0x1) syz_mount_image$xfs(&(0x7f0000000040), &(0x7f0000009740)='./file0\x00', 0x4000011, &(0x7f00000001c0)={[{@pquota}, {@bsdgroups}, {@pquota}, {@gqnoenforce}, {@nogrpid}, {@noalign}, {@inode64}, {@norecovery}]}, 0x1, 0x982b, &(0x7f0000009780)="$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") 6m2.401330959s ago: executing program 2 (id=50): r0 = socket$kcm(0xa, 0x5, 0x0) (async) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x10000000}) r2 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xd2\xd3\xcd\xfd\xbdnC\xec\x8aj\x99\xe2\xc4\xc6\x1c\x00\x91\xb7|g\xbe\xcee\xb8\x9b\\\x19\xdc\xc5Z\xb9k\xf6E@\xaa\x8d\xb0\xd0\xf8\xec\x01\xeb\x1c\xefl\xd2\xebh=%5\xda\xc8\xbe\x8d\xbe~+\xedu\x16\t\xc6b\xba\xdd\xd6\x86r\xe8\xd5o\x1a@_\\\x1c2\x05\xa74\xd5jI\x02\xd5\xaf\xf5i:T\x1a;T\xd9\xact;\xd6\x95\xb6\x95\x9b\x9cr\xc0.\x90\xc9\xcb\xc5\xd19G\xab\x96+\xd5\xed\xc1+\xba\x84\xd6RCw\xdc\xd1\x83\x926\x9a\xdb\xaaD%}\xdc\x7f2\x93\xbdp\xbb\x7f9k\\\xbd\x00\x80i\xb7=\xaaj\xbd]\xc0\x9d\x9e\xb1 \xd8\x19\xf8\xb5\x94\"\x18\x00\x81\x92\x12}C\x84\xe9\xc7\xbb\xda\xec)\xc9\xce\xe1[\x90\x9dK*\x9a\xd4\xf4\xc5\xc4\xa1\x99TR\x8d\v\xc8\xf2\xa7\xca 3\x98O\x0e\xc1\x1e\x04\xe2p\x19\xa00O\xc2j\xee\x11\xe1\xd0\xe1\xc1{\x8a\r\aZ\x98\xe1', 0x4) syz_open_dev$vim2m(&(0x7f0000000040), 0xfffffffffffffffb, 0x2) (async) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) (async, rerun: 64) sendmmsg(r0, &(0x7f0000002680)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="bf6f220e0f6e1930c1baabde71a48106cd1d22125b09d6", 0x17}, {&(0x7f0000000100)="0923d4cc48c886c592eb5b6ed22b8512995cc2a86298976d765132664d417216dc0945e93a38f566d611ff82dde1c0d3015fdba959ce91ac766988acbcdfed9fca4452f0", 0x44}], 0x2, &(0x7f0000000340)=[{0x20, 0x110, 0xfffffffc, "5657b372a32f90b3e33bff0eb0"}, {0x88, 0x19, 0x5, "ffff999fdf9b33e2e1eb7849c69da6840f228656391fa96d26f7833bb6a514a96684a846b60a3e72db1457b62b2b0137856337d4ea24b348829d64bf4e75fd4a98b1a6524f66767fc7dfa4c3dcbfffd49d88075b78707561ab7dfca570bff757c55e3858e0344f62fef8091930ca042c98b677a244"}, {0x1010, 0x88, 0x66f, "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"}, {0xa8, 0x104, 0x6, "f9923ad8642d33256bd5aff70c819a3cbb0ed1bac91b6ce2a71e67b02d71200c9857de73eea97f05e12613c2ad21d65f1c03bb0b049139c1c37a2ba132dcacbcc351f61f9aec16f4f342df38b5b69b3daa990af4c1e9f4b9b674aec812697e9fac0b3f874d7d0878656999b7ce551ee9436c1c76e54dca53c82f4152677437b97317a5e9d2afed05cea67fe94842738c88d7bb"}, {0x80, 0x109, 0x3, "3dc1c9ccb4c001df7abbcf97cb1fcbf379f084b1475fc93f4d8c13a8fc470b229124ed0709a653672b5f07bf023c83eeb863658b324cc685091e116f0f790d64070c175ff93e6720d692c30e3f768cb15169c560490ab4bf9c472ff54964c7da23e53120ca30b798f19f44"}, {0x1010, 0x115, 0x4, "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"}, {0x48, 0x88, 0x0, "263378c9d034eed233aac57114d0b86daa14ea4531885bb4a4d8d5b9ef66b34837ee24f1ea15bcd5a5024cc291abbf86e959"}, {0xf0, 0x110, 0xffff, "f7e61aa73caac38d6705a7baec0a54e17b559b1333b0ddc9a07bf1f7345f64191edb002e67bf3e4db3d2cace5cc7d834468d013e3252babf870528491d343d7def466f031e2f05dac3e8cc8a0ae5173ee2cec2250da3eecd2851206f002fe7715809ef423bab7f4dfeb0123be4e6d601c5d7672fba2c80fa96b5f2f190dc7fdd0ab3c67448ecb572c489d8cdd8567298434a32551b9b7bc38c1e380a98b3613772bca712cfa7dbc4084caae00fb4fa4dbda89ea816d5bf03b06d9ebcc8d47e0501bce7518757b8e0d783a63949cb208cf04cffd81c6a8f25fc1ff36d76446e"}], 0x2328}}], 0x1, 0x20000000) (rerun: 64) 6m1.2328508s ago: executing program 2 (id=54): write$nbd(0xffffffffffffffff, &(0x7f0000000000)={0x67446698, 0x1, 0x773f, 0x2, 0x2, "076f7746fda0d9ce961716036d51a8396af27ff8032b565d60a375a5de5bd329d44e63402807c24a8bb5507ab1ca6118dbf7732aa06fb14fcdb417d1e440cbd89ae3d395"}, 0x54) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5257}}, './file0\x00'}) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x22001a0a}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, ["", ""]}, 0x1c}}, 0x8040) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f00000001c0)=0x7f) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000200)={r0, r0, 0x0, r0}, 0x10) ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, &(0x7f0000000240)={0x8000, "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"}) r1 = io_uring_setup(0xe8e, &(0x7f0000000380)={0x0, 0x15cf, 0x200, 0x1, 0x197, 0x0, r0}) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000400)={0x9, r0, 0x2f, {0x5, 0x5}, 0xa4}, 0x1) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000440), 0x101000) read$FUSE(r0, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r0, &(0x7f00000024c0)={0x140, 0x0, r3, [{0x0, 0x1ff, 0x1, 0xffff, '.'}, {0x5, 0x7, 0x3, 0xaec, '@})'}, {0x0, 0x4, 0xd, 0xffffff00, '/dev/snd/seq\x00'}, {0x3, 0x2, 0x5, 0x6, '{A@&@'}, {0x1, 0x1, 0xb, 0xa, '@\x06V{/:/+^^!'}, {0x4, 0x8000000000000000, 0xd, 0x9, '/dev/snd/seq\x00'}, {0x1, 0x8, 0x1, 0xfffffff9, '\x00'}, {0x6, 0x800, 0x0, 0x7}, {0x3, 0x8, 0x4, 0x0, '\\+%('}]}, 0x140) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x50, r2, 0xbad02000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000002600)={{0x1, 0x1, 0x18, r0, {0x80}}, './file0\x00'}) pread64(r5, &(0x7f0000002640)=""/105, 0x69, 0x3) timer_create(0x5, &(0x7f00000026c0)={0x0, 0xb, 0x4, @tid=r4}, &(0x7f0000002700)) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000002780)=@generic={&(0x7f0000002740)='./file0\x00', r1}, 0x18) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002940)=@bpf_lsm={0x1d, 0xe, &(0x7f00000027c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x90ee}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10000}}]}, &(0x7f0000002840)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x1b, r0, 0x8, &(0x7f0000002880)={0x1, 0x5}, 0x8, 0x10, &(0x7f00000028c0)={0x3, 0xf, 0x9, 0x7}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000002900)=[{0x3, 0x3, 0x2, 0xa}], 0x10, 0x2}, 0x94) ioctl$FAT_IOCTL_GET_VOLUME_ID(r6, 0x80047213, &(0x7f0000002a00)) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000002a40)='bridge_slave_0\x00', 0x10) r7 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000002a80)={r6, r0, 0x36, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000002ac0)=r7, 0x4) r8 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$INCFS_IOC_CREATE_FILE(r8, 0xc058671e, &(0x7f0000002f80)={{'\x00', 0x3}, {0x10}, 0x4, 0x0, 0x0, &(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40)='./file0\x00', &(0x7f0000002b80)="beb7f590eaca8a8caa87f981159b4b81945df8423f1187d9a61cba157d83589062d4f4dfed30e5258f108392f2746342972558657668d16dfc9aeb75f59eb30059f008b28717a0d1e66393ca35b09d736725a0fc991eb5a8c942d094bfd93de572a3380b4f0ffd1a65b56d9064df2a1522aeb94b49acc12f4a5df793c6d1c74317012a6f7e7bedf40717a9b0ca4aa2e40dc7b2229e8a8dd83395c51e194ab3c836ed622be529a10e163c517812c23236e1a45a4dc2ead366c077801dbf9e3afdf4e171b0b43045344cfb4e2124d9ee660426dd0b986a0dbf12c96470358aacdafc5a09615d7313db32b2d924759fa5cddaa9f76ca6dadc099d5f300b159f0f198772a5cad2212811ef83ebc949b9d8c6ad785ace13242d504ac6d42e3141d77ea652f1504f638aaa77bd6ec81422ffd7f56ea61b29d3d7a5aca7eafd6cf1a3c37520bba1b4b372a0c4b8c16d01b8c024df817d6c6fd584eff66056e33e02a7c5f67a7ed374945fba1699048ea635ccd1e5522c838d0c5a8a02e02b16be1620e2e2f0d0e96cf877db99f56170ae4b1db997c3a82eb93617e3a0639f69a6705f28495d2122351d1deecb269dbc991afe9fede588ef9bd68557743c59b8fbc0bf26663d70baa9d029f1a24d7052595a5dee4d5afe887eece54129cb81ea547c3910d67f13e11bed4b799692ef148bffc3bf0ef418d13bf8ebd99ab5", 0x1fa, 0x0, &(0x7f0000002d80)={0x2, 0x107, {0x0, 0xc, 0x79, "1cc8e7c55a12a054916c62a8aba7874978087d029e8aa1a83d22133f14b12734939c75df02950aa666043c3301be00ae14fd7aa350ca0b307dbd67894ba833bbfc76671a32e21f1d22bdeea46ab25b560e24055e0952005815186be8c4757fdbd4126736fa612f76efe26c7e89843c23efbdbee5fc6d06d6d1", 0x81, "12ffc62ea6d93219b47332e99b86731d8a2158b8083a5547513d667375856a570f624c77a99f762f455a08fd46332ed51a43e3c64eea5abb40eac5e6309bba5d96d700704226f0d8ff99f0eb0ce2cdbd9826d5e1d42088b9676a00734e9ae13623209d74f077ca7c046be1ed59d37c4c34f76047d789a1b16ca8c57e0f5bb1085f"}, 0xc7, "faac701ffefbdc070116eb2d909b2e24ec8dd3698bd298c0d318d4ae2b01e3a89c69ba28bcae48d3d69cf65e47ed2e7bb54e119f35e0edc1a8d40ad73ac7dfdbba5bb8765bedb72bfcbd0aa233062f1982dcb3691d42f73b7f7f4e2ed28db4843acdfbd9f726871b428443df6124c08a22f736a3268c644aabf54b1d13ad55072b8e143f0c216fa6e5c34599c3a411d6bb9d4cf55bed8b19de918584e00f2de5cdd8c4dc09fac4dd2a2c37f26c0fd0862bf9270ce505ca49fe5e9d176cd8c108da41cdbdce50a0"}, 0x1da}) connect$tipc(r5, &(0x7f0000003000)=@nameseq={0x1e, 0x1, 0x0, {0x40, 0x4, 0x3}}, 0x10) read$FUSE(r5, &(0x7f0000003040)={0x2020}, 0x2020) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$USBDEVFS_DISCSIGNAL(r0, 0x8010550e, &(0x7f0000005140)={0x7, &(0x7f0000005080)="5ed2f6f76743a7a99389fca21ee1b2c3263e513461f3ba222c66583bc31f623a8a9fe9ae748ab154d991c6b23ce39e211117939ea59b2e7755989011ebb0d67d343bceb3d579db96b128c47fa7561e76d5e7beb694ac8328226ef012fa8751146b56b6408c8fe35cec7bd76381ac230f4c4592b813b4108dcfaa36004f73284ac1893bdcfdc9"}) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000051c0)=@filter={'filter\x00', 0xe, 0x4, 0x620, 0xffffffff, 0x230, 0x230, 0x300, 0xffffffff, 0xffffffff, 0x550, 0x550, 0x550, 0xffffffff, 0x4, &(0x7f0000005180), {[{{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@common=@rt={{0x138}, {0x8, [0x75d, 0x1], 0x7, 0x10, 0xa, [@remote, @private2={0xfc, 0x2, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x1f}, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @remote}, @ipv4={'\x00', '\xff\xff', @multicast1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @mcast2, @local], 0x10}}, @common=@icmp6={{0x28}, {0x10, "b165", 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x9}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, @private1, [0xff000000, 0xffff00, 0xffffffff, 0xff], [0xff, 0x0, 0xff000000, 0xffffffff], 'veth1_to_hsr\x00', 'rose0\x00', {}, {}, 0x3b, 0x5, 0x3, 0x48}, 0x0, 0x228, 0x250, 0x0, {}, [@common=@rt={{0x138}, {0x3c2, [0x8001, 0x800], 0x9e2, 0x20, 0x7, [@local, @local, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x19}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, @local, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x28}, @rand_addr=' \x01\x00', @mcast2, @loopback]}}, @common=@hbh={{0x48}, {0xfffffffe, 0xc, 0x1, [0x9d9, 0x5, 0x0, 0x9, 0x100, 0x7, 0x11, 0x6, 0x3, 0x3, 0xf, 0xcfb9, 0x3, 0x1, 0x4, 0x7], 0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x680) ioctl$HIDIOCINITREPORT(r0, 0x4805, 0x0) 6m1.040067688s ago: executing program 2 (id=55): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x2bc3c1f, 0xffffffffffffffff, 0x7, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$tcp_congestion(r0, 0x0, 0xee0000) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x80100, 0x10) open_tree(r1, &(0x7f0000000380)='./file0/../file0\x00', 0x1101) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x4a3, &(0x7f0000000580)="$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") 6m0.561548894s ago: executing program 2 (id=56): syz_mount_image$f2fs(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x441, 0x0) write$cgroup_devices(r0, 0x0, 0x9) fallocate(r0, 0x3, 0x0, 0x8003) 5m59.660845121s ago: executing program 2 (id=58): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x7ffffffff000, 0x3, &(0x7f0000fee000/0x2000)=nil) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001380)=ANY=[@ANYBLOB="f8000000160010d554bd7000fedbdf257f00000100000000000000000000aa77fc020000000000000000000000140000002300004e2100000a00a08087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000004d36c000000ac1e0001000000000000000000000000c0ffffffffffffff03000000000000000700000000000000ffffffffffffff7f0080000000000000010000000000000094000000000000000100000000000000ff7f000000000000040000000000000009000000000000000a5da14b0000000000020000010400000300000025bd700000000000020000203a000000000000003b01000008000000"], 0xf8}, 0x1, 0x0, 0x0, 0x40800}, 0x48001) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040080}, 0x4000) r3 = syz_mount_image$cramfs(&(0x7f0000000240), &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2200400, &(0x7f0000002fc0)=ANY=[@ANYRES32=0x0, @ANYRES8=0x0, @ANYRESHEX, @ANYBLOB="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", @ANYRES64], 0x1, 0x14f, &(0x7f0000000280)="$eJzszjFLclEcx/Hf4d5HfSqToMCCTGjokph2w5qiNBKE7ELh0lJgNxIUI6Gcwoi2hqDVwQqaxLdgWYulEPYmWpwdi+M1Imhp/32Wy/mec/7nri42NXiBExe6VrKZg0MzlzN3vRtGPLr5Xq2GZbcB6PzYt87fh4F9+VWB9ikg86MT2EulzZlkNi3X7TCgAYj0Y1n2oGxDQJ9sw9bZWVj3tUmgNmI1/Zc212tjKhBxWU3O+7gGpuQ8O4BU2rRbv4d80VcpP6836jH/9N24gvOYb+Jfb++re8wLPTp6O+BWkDCfbhAR8t5boO5/DVTKrWYjvmYsAdD1eQEUgqGW8dKIhQqXULftR8CWAAS+37HB7VETDpwJ4Ko7q/0gnABqpY6RGVwo9d53HCteQOSLyR1Frv8DigYBIiIiIiIiIiIiIiIiIiKiv/oMAAD//2BhXwk=") statx(r3, &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x400, 0x200, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x7, {[@local=@item_012={0x1, 0x2, 0xa, "d0"}, @local=@item_4={0x3, 0x2, 0x8, "471a58a5"}]}}, 0x0}, 0x0) fchown(r3, r4, 0x0) faccessat(r3, &(0x7f0000000000)='./file2\x00', 0xa) statfs(&(0x7f00000000c0)='./file2\x00', &(0x7f00000008c0)=""/231) ioctl$GIO_UNISCRNMAP(r2, 0x4b69, &(0x7f0000000600)=""/112) 5m58.339484213s ago: executing program 32 (id=58): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x7ffffffff000, 0x3, &(0x7f0000fee000/0x2000)=nil) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001380)=ANY=[@ANYBLOB="f8000000160010d554bd7000fedbdf257f00000100000000000000000000aa77fc020000000000000000000000140000002300004e2100000a00a08087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000004d36c000000ac1e0001000000000000000000000000c0ffffffffffffff03000000000000000700000000000000ffffffffffffff7f0080000000000000010000000000000094000000000000000100000000000000ff7f000000000000040000000000000009000000000000000a5da14b0000000000020000010400000300000025bd700000000000020000203a000000000000003b01000008000000"], 0xf8}, 0x1, 0x0, 0x0, 0x40800}, 0x48001) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040080}, 0x4000) r3 = syz_mount_image$cramfs(&(0x7f0000000240), &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2200400, &(0x7f0000002fc0)=ANY=[@ANYRES32=0x0, @ANYRES8=0x0, @ANYRESHEX, @ANYBLOB="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", @ANYRES64], 0x1, 0x14f, &(0x7f0000000280)="$eJzszjFLclEcx/Hf4d5HfSqToMCCTGjokph2w5qiNBKE7ELh0lJgNxIUI6Gcwoi2hqDVwQqaxLdgWYulEPYmWpwdi+M1Imhp/32Wy/mec/7nri42NXiBExe6VrKZg0MzlzN3vRtGPLr5Xq2GZbcB6PzYt87fh4F9+VWB9ikg86MT2EulzZlkNi3X7TCgAYj0Y1n2oGxDQJ9sw9bZWVj3tUmgNmI1/Zc212tjKhBxWU3O+7gGpuQ8O4BU2rRbv4d80VcpP6836jH/9N24gvOYb+Jfb++re8wLPTp6O+BWkDCfbhAR8t5boO5/DVTKrWYjvmYsAdD1eQEUgqGW8dKIhQqXULftR8CWAAS+37HB7VETDpwJ4Ko7q/0gnABqpY6RGVwo9d53HCteQOSLyR1Frv8DigYBIiIiIiIiIiIiIiIiIiKiv/oMAAD//2BhXwk=") statx(r3, &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x400, 0x200, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x7, {[@local=@item_012={0x1, 0x2, 0xa, "d0"}, @local=@item_4={0x3, 0x2, 0x8, "471a58a5"}]}}, 0x0}, 0x0) fchown(r3, r4, 0x0) faccessat(r3, &(0x7f0000000000)='./file2\x00', 0xa) statfs(&(0x7f00000000c0)='./file2\x00', &(0x7f00000008c0)=""/231) ioctl$GIO_UNISCRNMAP(r2, 0x4b69, &(0x7f0000000600)=""/112) 5m26.469210646s ago: executing program 0 (id=97): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x38, r3, 0x1, 0x0, 0x25dfdbfb, {{0x2}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x80, 0x2e}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0xd37697ff280d3c0e}, 0x4000) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000009c0)={0x108, 0x10, 0x701, 0x0, 0x0, {0x8a}, [@generic="300d1029b38f6472b17c1053185c599f3ab108586eb679a03cb524e81d43ec2549019e0f996135193594b1f785b19bb0dffb66140e37592fb7cf89cb2d0f051c5dffa852bec412919a77e1783589e482d2634a6c990a6481ca9c4c9dc55c1f2765abe560f103f27b0b1e9771081251c334792225134efe8d8ad9ee2d2507ad0aa77e1e9eb0f7b1d90ac4f0bd1b3df871fbe3c69ccd2f9160e2430ed7d84f86f3023e5e67ef033079858eda898b1ca69ee0f91ee09f058e5496d674db08349c1d8683532fec9a1ff6f9204f3b7e118b56ebaa39521c8898c956e2220c8c760d11be5665a04cd9aaddccb6d8323ecc94efb94b"]}, 0x108}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="1fe8ffff0000000000003b000000", @ANYRES32=r11, @ANYBLOB="21003300d0800000080211000000080211000001505050505050"], 0x40}}, 0x0) r12 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r12, 0x0, 0x0) syz_usb_control_io(r12, 0x0, &(0x7f0000000540)={0x84, &(0x7f00000003c0)={0x0, 0xe, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$cdc_ecm(0x3, 0x9d, &(0x7f0000000400)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8b, 0x1, 0x1, 0x4, 0x20, 0x7f, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x2, 0x6, 0x0, 0xa, {{0x6, 0x24, 0x6, 0x0, 0x0, "10"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0xed, 0x1, 0x2}, [@mdlm={0x15, 0x24, 0x12, 0xe0}, @network_terminal={0x7, 0x24, 0xa, 0x2e, 0x9e, 0x9, 0xf}, @mdlm_detail={0x2a, 0x24, 0x13, 0x7, "5b34cd1ab83a5cbb8f4f877e17a27ae815e739883edee838dc1ac884f71b4d7ccb0dedf675a5"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0xfa, 0x0, 0x1}}], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x7, 0x2, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xeb, 0xcb, 0x4c}}}}}]}}]}}, &(0x7f00000007c0)={0x0, 0x0, 0x25, &(0x7f00000000c0)={0x5, 0xf, 0x25, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0x0, 0x7, 0xfff8, 0x4}, @wireless={0xb, 0x10, 0x1, 0xc, 0xc8, 0x9e, 0xff, 0x3e3f, 0x40}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xd, 0x8, 0x5, 0x10}]}, 0x8, [{0x0, 0x0}, {0x0, 0x0}, {0x26, &(0x7f0000000280)=@string={0x26, 0x3, "850f74bf2623d64a94b018e5ec1482495051fb4d3d45e889029dee3e038ccd0b539eef83"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x812}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x400a}}, {0x0, 0x0}, {0xdf, &(0x7f0000000600)=@string={0xdf, 0x3, "8b4a1e69ce04c951d9e2726b3f7f7291b14a2ed0a9968786940bee7ac310784cb752960c787a93c78bf83350b06f53a2379a01e9f65b9d69085e96bb4679a880dcf7546964561faf7e9c059e6710a87cb04c8881af4cc3901f93ef4399060a2676d2149cde493d60c50ba797482b81c67c8487cf7b8e7962340a5bc0f83e128e3bc3e3ba48b564a87ffe0c7770161f769de0ee39363327dd91108b25968c256a350059c6eaf8fb541f86931ad7aa6ec58cf3184931c6f4bf1afde2ca89bd5a9266faaf357bcd0e6cb03facc1801998c7333a916c231ec64ce370395d8f"}}, {0x89, &(0x7f0000000900)=@string={0x89, 0x3, "bf30229f6507930f0d02592af9d8a546c61a5f1e26a968de0142c93381bb272dada97e32d12a96467a954c74847fe269ac3d720ee435f76c343352c48a1c4342f85eee87c2a0925ac1f4c4f82676af986ed0d88f58ef0deb2fffe7c8913e00000000000040000000000000002f80d3578b712933b322675e75ff596ba3e16f7a95aaafc1e69f94"}}]}) syz_usb_control_io$cdc_ncm(r12, 0x0, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00800000000000000c002b8005000100", @ANYRES32, @ANYBLOB="08001b"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000124d5240e316e9f958000000000109021b00010000000009047800018fa68d0009058a3b6c"], 0x0) 5m23.076876845s ago: executing program 0 (id=107): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f00000001c0)={[{@treelog}, {@nodatacow}, {@max_inline={'max_inline', 0x3d, [0x6d, 0x33, 0x78, 0x39, 0x65, 0x36]}}, {@space_cache}, {@nodatasum}, {@nobarrier}, {@flushoncommit}, {@noautodefrag}, {@ref_verify}, {@noenospc_debug}, {@clear_cache}, {@commit={'commit', 0x3d, 0x3}}, {@ssd}, {@nobarrier}, {@max_inline={'max_inline', 0x3d, [0x38, 0x36, 0x38, 0x35, 0x32, 0x25]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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") (async) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f00000001c0)={[{@treelog}, {@nodatacow}, {@max_inline={'max_inline', 0x3d, [0x6d, 0x33, 0x78, 0x39, 0x65, 0x36]}}, {@space_cache}, {@nodatasum}, {@nobarrier}, {@flushoncommit}, {@noautodefrag}, {@ref_verify}, {@noenospc_debug}, {@clear_cache}, {@commit={'commit', 0x3d, 0x3}}, {@ssd}, {@nobarrier}, {@max_inline={'max_inline', 0x3d, [0x38, 0x36, 0x38, 0x35, 0x32, 0x25]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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") link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000000)={[{@fat=@discard}, {@fat=@nfs}, {@dots}, {@dots}, {}, {@fat=@tz_utc}, {@nodots}]}, 0x1, 0x194, &(0x7f0000000300)="$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") (async) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000000)={[{@fat=@discard}, {@fat=@nfs}, {@dots}, {@dots}, {}, {@fat=@tz_utc}, {@nodots}]}, 0x1, 0x194, &(0x7f0000000300)="$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") ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "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", "0615e456c196e819a321fdb3690bfab19538829a732a01781564ef7738cb5b82a704b3952f81c68bb4ceeaad63206f88201638e87c4981cbf9332cbc9c4d69e392bd33237ece7ad91e44edac0da8dacad81adf2e08c21ad6b44ce1f90bd618c255ca40cdb411485fb48a51d329c816b3488c7d032ef69c502c6e1236bd381efd410165988847c1dcb98a18ca2b853910e52044fa3b3026cb88de269537c8f26ffc3b15cbf279832bfc90bd95939043182e88050dfd2a4784a5d1453610fb1f1c2bac36c3ecd3e6fb756ef8880debeef3636afd981d8af4ab119928448f90351aec113335eacf52a18c87738d9679d31ce0108dc556e597655ba11bacc032a16fbefc64776f363610a15b37bcd36e6a7cba931151b9c9ba5779d550e9ab21603a43a25f3b4895d8dc4f3ce0e7d5e964e888169ea79a0848e9338b3d34d62e963fbf98834f4455419907f0ffdb76373af77a34edee5789f56e7f01bdab9614a0d460f791a06e6cf5243bf2b3a1624a80ec7e1116f1c81f5ef4b895be74bf67eea9193428b58a8b62b7976d3d2e59796c46ec918c83cd49c3f43dbd2967586966c19ace7b0bef5f94eb333b362649f1bfa114f8b1f126e97ec672cff77e2130823fa7a1df6760c6a8917815e9f0a409ed32b133df7dc9afceffcd472b35145c83c9167764d25ce214133c6170adeb6653b30b226a3b6ff1363ac862a540c7fab584cd051ce7ee951e0f121d43cff75afbdec6bc6f6e8f7db58c8086751320d22ee8582e915cabc536e3767e9a9230c9ae8b92398f0ca2a7141fa4588af7afde10e5ec2a6fe85ba5712e126629d4e3998fc4721cb638f2ef8356049e3448466e2c400d5e8baf843fa399907cb526b791c5350ce29204cb6fe50b892a69ec6dbecc28f032a745738faa12c2a34222942fef0ec0511da5fe0b565ceac429da7cc25cfe0320b40a514723e2392a6a361032343edb79fd83cd0a354837153542fd61b3156b54c566036e493250c3a3214738e3cacc24a50d5dfd17d5008b4ca629c3062f3417cb67c48b8b888ae51256bb4e6c68e95a71a00383ad9df263f6a775ded64fef20ed5cb5f31c33cb86f839d00a12e40cd31219113619c4e0585454cb1776278bfd7f5c4275792afb790e83ff0fc6925355c7aee7a070477d9ec2292366e39b9dc66f7adcf449a1a718e5217183faf0f679efc5cef20bcdcf2d12ea0684084ec0d693256e280025b23b5a08b7b1ebe7d41fb045793f971d6ee066604818cb09d86c1eda99a44c35476a113fd5d1a7543f8fd9424ebb78dd9e00d719502a6eafa743a061fa3fa55e4deaa0a011b6b9d633f10e0c9446b5a2e3f6d6014ab00695366c1a6bf0c32f703aebb7988c7d4d322681458e85626302c70f37628835e1fcfff4da3099c0b4af433eb9a51f9609f2c0c09a98b18880c846b34d6ac0210f073765666100976ee1d928893f983580ea47a012144633b98e02c3041969534ab985eb3a73e0bac892dac949f85db949285a6a7a490b1075467226af23df82d8dd09b7282490fbb3ada9ed4cae8f761aefbe0701de6b132f12044c58ac1c2607c8f51361de5bed021dea13fd0a440263cf0b304522a324b581ab274e7bdae5994316657b5c0ab0220d9b08739729f7a35d436878c182aec4f08dd161c11ee5b7937fae7835e8bfe98a44c8d4bbb2e0eee0cb5d7c93517e96a9fc8132e60f3ef7c735bea1934b37df451f981c8d9210e61278c871e6dad6ceb89aa4d7245658a63e65cec7b81d307426a60a31cc917844a14e1d9ad83bef1c9f736d1836687c950d1275caece0d46ab9f3b0e95d9cf560eb8134e8346b35e0a6f60e6a87a14c4aeb3e0d06158390660a52a6e44b524c1e16de2bf99870f78fc81d267072bc63e97d3f26d23fd59799ff2c847d6a724cebc2377a582ba73d99a610a095c28d66c60910ac64b7d18847fa98fd8528b72e0a149b082c731575b2e2763e67c821ba29eecd8b8c87981c4fb1fbbaaa4e8aa077ec98de1362fc7af7a0ac5e3297fd0d924124b2e255b5cc4f6b0873f3d34418d5ae0d6f734628f38cb9b856b2db3fbb2fafb75e83eabc51a348e55789e997fa25cbe6e5031bd2e3544e2686f964a65d1abf7f96a20a8b270b1522ace4adf6fdade5cd3f101574960d13267e2382f70027ebe5ef7f9418e14e6a8a130d2aec2253c8fe21825e3295774db0c9b1340ea28a96589ba0d9f79aa61b92aea6f704ef7f716d849b8c77e6922e198a086d8133491d0bb85b925825a6d307d7cc8f09c655aa3edabf84c75560dfb279ee3e8b825323279edc58c3161e72cf9ae02ef80d500da922c0abeb8b164abd9c17ef7c02e89000d67b0c2ddd078cacbf37c4826be3845948d598980d63c1d7aade89d0637d80a4c102a35eb027a08ef90cc20d17fc514926914e68e5de54b861200ffa4ce1cbc16e4ecf342a1176cdb561f7dea38b3ae0fd81260f72d34e6f33d364cf313d3b3161410dcbf5f0f0579a1d235b49bb5d27f85825b94f1899e7846d0292ad912d934574f9d55d2152dbfb39d662e6e0f2496182d012af8b4bebbdfa1d68e3e988869fb5cd9612db97e6cc574444f4b5025ec9827bafc55341bf6ad3fd4fab2ee43f343cb9bcec0c38384b5699e5c6d5973ba591978275c51a40200d340b9ed3681f08c69f58320f538f9cd78a34eb6ed55710d2478ea4bd15813921817b42f88f1bb038433b519668f0a2e8693b9a19c7bcf96eec04bda625b31c32f4286be922ab2c87aa30310c8f46551450d5bc26b5fbfdedaae0f756384023bb9a28d3200cfeaedd63d6afe076513e8ad73d04607cd4ede16344e60d87b5357e82b1089258c56d851a435e23ce0919825e04471dd61a44c43e87c2959d4e89311a30ee8be010094d0ef109bb210dda58b21b685b9e9c078c9ded6117d9a88dd7799291969851cd4c3f22b5f870a275a692188dafcf6e89ba87b0eb61011de031fda25fb3349901d40da2bbdb76eda417c9fafd90fb23504ab150ca0033b65ccd4e990cb2ba86ba3aaa79d0df4f2e4e4afa565e66d28aa167f835d080bf1d41d0e52dbf81c671f8eacae234bf4fc328302671fab46613b73daf2ace80aff2f80f6a9d84b82480178cc612aa90adfc80ab3bba7d1527fc6ab04f009011bf093494a0d329df4e53d855b1c0ff6a25d22052b3a778e1ca2fbe59c9eeedf99e13682d06da269560524ffa0f404b73b946edf900ee958ceba09a051e27a620fb78e7a352c182c8c2981ce822eeaf6323965b4b3f322d40d406a158b6f3cf5d74822de952fefc341d0dead6c1c8fed8e48e0a85b51c1dcc7796d3f45bb1f50467a475da76c356c9e031b096867da1dbb89c3a038d475dbcdb2df1278d5dba55c2fb5ba6a9778c2a244198491f0f711cdb2ef0332f347afffb1b098b4c59041ccb0c286bb2dd40e7ec713f6ffe0b1067678c748615dae3c1e090f3739a9035767fb9972580d19fdef49a5071f99c3706b8fa4991f430721cf3ca11af0e3bd7c4d0cd0ab5b7d98ee66730c20a098110e4a15ce0bfc88c41fe375f261fe3557e14eb5ff4a2cdf6a008fd7b6702951b8456e940fbd269a0f3ed515ac03cfecce67027d579e1226bd7b7381827453550343566508d38790ee838c3bf85c6c91a45e7a44752f57313533a3e82e4042e65d346afb20c0527575f79080aef4e1aa8d5868d190c8d37bdae7592e41bed37b9d4c30d8126d3debde02de325f5ef1e48133e2a41cd55347bd23dcce57a00189619db629c530dc112d22ac72bce353681264bc5690569c5c1cb1350c96748ad025175be40b3ba84408d0f56762cc720e96c128447be7128748e185be2640115556bac6423d060207e629b0144e501c1c49c6abd15c7982b01e22da2ad04bb28df1a27f31e18040c16406071d798bb40d901d001e22cc5ed870d08702f49f0021814cdd814901a13c7ab061bb4b8172c639b3449e24f656fee58186e69e6874ea95d946da781b49ca080ffb4a3c87746c661f43e9be52d0ba2ee368b9c143687c8846abac599069decf41e69fddcadf31c5f715917df12df4eedbfcc5805fe8e661b8fcd7b130d7bcc4a9a152de93a15dddacf3cf52479956185a3c5000d18ddceac36d5858c0d8761bca7446e3d30f3e8f48d5e8f86a60cbe46f038b1028ffd35590bdacfeebb86e28d42a923bdc3f9a307b919341a2a7dda096d41070db245c2c424aebe4a4bb9863169454d09f25fd0aa2da7bfc97ad7aca886dd998e041133e07899ad48f7cda600de48ac3951152dfbe6331b8acae24cfd2dd2b14696c75040685c756942a0d049ee9863a2e480388f93876f3910ecb3a59fa16c25b2b3636a542f92744495e10a4ce37f19f5c2256e2d61775d388e2a86b52f76add2f956aa02501f5badb94da12595b2bbf88b05dc70caae6766fd3df4f299d0ff71c8787249b255ea49b3d33b3f1a8c9403cb75d64264465c3578538382b23d721f8a49134020ca2d9e887d9949624ac6d63322b6507e277a0020db9bfa2928736b96c72fa3406a95adfe6b374ffa27001d37d3bbe725e75c257834572026c511f57dce67153a4008f9e75e07ed9237f62cfb5800ee667c137fc78bc4fd4ebf4d228979ab0ccafbcd8b8daad76fb2abcfc585377ea6e19f170db898b950a7b0f4e75466a2ba26e7d60e0a6f5c54a3fe78677f3362c5b01ae791b62ee8a5d0fd65b739ece4f3b758d05a8e4e4ea7e4866ee67750ce2769f72a9f45780eadfae73b42d4dd4c614c797c694ece8af88cc732edabfa26ace57de54835c7551154dfa3be11a0d3b5845ac97b2da84410a652e72cd563acbb2b02bb59370cebaaa80014e3ad280944eae6fbf8d5f85237257bb5b8e5ec3e52dc06f8394176b325a577804e9eb78d7015172d17ed15f905f705d56687f53988bb207c74fbeb2b03a700258e835362886239f4d8f1c2cf6d4d10ff26d2579ea40a5fb99e5b6d01cdeda050d3faa78ed674f2899be08332086c8bf0410a7d06099c50a2d949d49a0f21b43bcdfbdf435875cf5a9def46db63746574ee8a5b1fbcef411154e914dd9e5bb1b1bd2944581083fb66a017e7972df3daefc487e4198cb281d3a80637d52b41738b7f1a57c867d5b2ee5d72465657593339506fd0c3807cd6445eb54cfb5ca9d35ef93eec6383224ebf85197eb6ed75f6c324f6a0345a25be6bb52ed347e57ccb059b903fb7db4e9f46513a4158ce29c1f5d6081b556bbc471e89225cad81aed34dae0f90ee8e7237b3b286e29b49d7a1700c537b28571f7d7e2a55e10792d6f7779ddefa3febdea5693048372a45903c04f1035a96c6cfbe6f6c2b754581aac02f8a70e698be6e37fd411cf4b76317b47683f6b0f80dfdeef3a9767c7e5c30dff786093a21477431fea04580239537"}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mount(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x40, 0x0) rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)='./file0/file0\x00') 5m21.93746841s ago: executing program 0 (id=110): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x149380, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x5, "ff00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x13) r2 = mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) mq_getsetattr(r2, 0x0, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pwritev(r3, &(0x7f0000000940)=[{&(0x7f0000000240)="01000000", 0x4}, {&(0x7f0000000280)="f697079a16", 0x5}], 0x2, 0xfff, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0xad0, 0x4, 0x5}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r4, 0x58, &(0x7f00000002c0)}, 0x10) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000340)={0xfd8e, 0x80, 0x2, 0x2c, 0x4, "94a8c7276b626a3f"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x4) 5m21.39513881s ago: executing program 0 (id=113): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0xc001, &(0x7f0000000f00)=ANY=[@ANYBLOB="6c617374626c6f636b3d30303030303030303030303030303030303030302c756d61736b3d30303030303030303030303030303030303030303030302c756e64656c6574652c6c6f6e6761642c73686f727461642c7569643d666f726765742c756e64656c6574652c696f636861727365743d757466382c73686f727461642c696f636861727365743d64656661756c742c7569643d666f726765742c6e6f7374726963742c73657373696f6e3d30303030303030303030303030303030303030302c706172746974696f6e3d30303030303030303030303030303030303030362c00b2e01f5c0b5c8fb2623d8f888e41dfceb3ecf959d23d90b071660660b17884bd109d37086024cf83fa"], 0x2, 0xc29, &(0x7f0000001040)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x180, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000a40)={[{@jqfmt_vfsv1}, {@nobarrier}, {@nodioread_nolock}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resgid}, {@data_journal}, {@grpid}, {@lazytime}]}, 0xfc, 0x572, &(0x7f0000003780)="$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") r3 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000700), 0x10) sendfile(r1, r3, 0x0, 0x6) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) sendfile(r2, r2, 0x0, 0x40008) r4 = signalfd(r2, &(0x7f0000000380)={[0x4]}, 0x8) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000500)={0x2, 0x1, &(0x7f00000003c0)=""/35, &(0x7f0000000400)=""/145, &(0x7f0000000900)=""/263, 0x1000}) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(0xffffffffffffffff, &(0x7f00000054c0)={0x2020}, 0x2020) r6 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000540)={&(0x7f0000000200)=[0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x5, 0x2, 0x8}) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r10, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) rmdir(&(0x7f0000000040)='./file0/../file0/file0\x00') read$FUSE(r10, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r10, &(0x7f0000000100)={0x50, 0xffffffffffffffda, r11, {0x7, 0x2b, 0x2, 0x184405, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50) syz_fuse_handle_req(r10, &(0x7f000000c280)="897c6500ff3035465c7acb4e06980b05687c1480c7aafe631c0543db2bf0d6f539506e8782da06c1ca018774d72e9e5a3418ab66ee78dad68457b17ec9d47bf7d8272d607c1c0a4bd906f0cee7f8451828d2458596bdd6a459ba18ebaf61b38f5d66c27fa8a024ad7832a85e58689a4c254c94cbcf7208fce6e61d9566459789d15a6f91dd7db7c54cc3a94da956fb290a8a15f849270bc459d9d9f47801be86dd5c9d18382081a993b7bfde5c28adca4c7132fd6be743b076033b5859891703eb65fa256d6f47450b6edacbd05a9bd8b372e90cfc30f32826566dac6c48e6ef001881cbc30482f9ec469e476a101da496b8c0785eaf875d3608b0c49e9d39baaa1041f903a805f0f24aa63722fa2d87b98595fa5cfaf8b79c458de43ee39904e7cac7540a934b4108957785d58807abff186949f1b94cd21b724aff34ac45c7066dcdbd68ea7b766af9d045cd7fafeafc5c5a0c3400ef4e0c71a6fdd5b8d68a6f317644cda9d2fd2c839a82b97b3d909b54c672227bef573c9de1991d65a63017f724d1f7f1575e69db53318a7fd7065b303e751518c8eef04f642dbd4dfa349040a7b5401050ffc2b4ef62803a7c8eaba99e011dfac24d81b2b61e0b0581e53bf520f623eca17f0545c5e59ff15b527475f970f589894ae589145fa4283f7225088ccfeba1d72e9128f8c223ae1840f2edae3dbcdf7e560d5cdf4f71c9ada1931c0f8312c000101b264aaddb9fab166ba8d8903d6098eca20935ca607ea79e936798b3dfb22a7e159abb234cf21f3733dbf263a8ff116092f251659108892b2e21e1b428fd225096a5040270b2d70347013eaa1fd8e452942200283aab092c4ffc5b8b427b5d691a5a773e09da20539ff0f8214331c5d84107ae8a59aeb58efe22d7a079e446f1dfb07510377799bfdc7ee59cabcd76af0fe8a427ac8258ff33bbad5a8061f1cfdfbf375d73d676cc7916d6658ce46a0b17ad6350150f98e3512b513e25ca73f5f5df0a1fb9582ace7906c493fe1fd2889d9aac0b7c29c2b6c205537627bad64df433336a5ace32ca871e51b4dab0fbb00886a1fa81a98b74de0a26cebf65723515ebb807fc3c161ed42d1a7b6b55717613577ea437f3a2967c66ce45ff85a6a35b7cd40625fc575b107d7394e3d2db51d58347276c33e21f50b5a6b5672bf9fda63139bb75aead1fe4ee9a4064af5a5958466aa39faa6d821489fa415224c8d69d3b5922236832c2b1e4f6b8863b32f9aea83fb522a2de081d674502b48f73ce6db98d84136059b4a6676bc85ac6b7626329afa9bc7d3f9f2caa3c4d872744e0a8e02d72a75c6c545b8ec8e15b6fb0fe4185bd0d154960e6fef05ba40e5fe2968eb1301dcc52a03337179e74ba1522af93d77827845f8941c69ed8bb84567e3c63f1cc378a542f1de7007b688ff0a9c69d5861f0b85402c30a2fd391c52bafbe65f8e82135fd38361d7c0b43c982b2f3e7cb09c40c7e215114f4243d670cd576bcd93c1e959345170c75d6c3cf89cf8c2c70dc792e646e7c649d4c5f36bb016c7acd466ad58473d40dfef36394e581065a8581ab852250403cf372ac0065bf757fa3f445424ac0d82aec1938a2ea116bdfd306baa1cb06c62a4a97d66ab1b9489469cb8ba842da12e310caed02c5ef05c0be1e1e8c9c8b87d6871c94c57d164d08672b205c948086a06a545b266b7ad902a908681eb188bc51b6190b5cb9d8ca59b8c4c6e7369c00d6f6119fd5d437239e3d3c89cb81e09e560fb817590106015f08e7b09f1e1e65bfab3b8489fa058e24081978b9e25463d9945bfbca81c08885d4b6d4c62e217bd9e19460762f36c66bc948fe31cde089626fbb310e3c78a8d3f2eac21d374d9b58d887235d3a95721168e4b9475849071d60ecfe7ea5d6c4bf60da3747612ef59bb651270f326c0af31bc8c71361f851de34ccb3c8071b96f1128d7ee79b41246e566edd0272dbd3ccfe472b38e5e03d3ef83218bd498e6de8b4d92cb6f82716449ede7ba845028eccdb9137be8a622ac88ac53118fbc39637fa7a93cd3abc6f7671c7804420d66e94720acbcac916950f9baca77fef4217155ccc2cd0507339a0486f9f468eb28772986ee768c63eba671bf8c52e48a2a5dc2cc24fe925368706c2d712dd1064692b0fb2a32ddfbd4a0ffcf9c2abcedaae6e527bc1d42637aff2a275b76a7a7f010e42e1cc1d27141f6c3585a2bf58c6c5789ce61551d10118a000e3764631ec0b7f4b1a6f22a678133a30940b79dc76f863dd9f6e0d7776300898c97cef286c731c2050928c492439256e481652bff0d202db3cfdc54c9816ceea7895357bfa0362fad79afd09ed55189294d6ead7e898ac091cddbe7efcedb314bc02a18dd5bbddc42e089124758bb491fd1536aab27c5c124567bc325e7028bced5a179a011d1cb9a5ffb61d7af863e91ec8e60495561188b74d158ba1418228d44e92915a22eb1c166ef7d6179e84381ed950ffd747f13e24172942d922ca3109fb8b1e4e6264fa4a4eec75ad0d0e22579d90f45d6cd157300e38ae665eb56457202e25a8dd5877ba99725de288660badd2704345d9bad208c903ba27ea167dd45a77f77b6502b525b2973270582858183c784c324c1366fbba8d410c38bf75b41e067f6a9a017c56595161db4fc5639393fdafb1f148d3f416c1adc5fe1ab9cebe4689855c9b4bda6dcba5d5fa858a1b87d2ad23cdf54dbdf4d14aa4462da0b6f1107f4afa0091c2643508861a4d9f133ba77751941bb8fb756abf1a104205b80d47a3b4a59724d959c8b5833da4f56fb6613231f230a9378c9af741e94fd2c7213ac1d7625559b3f032f6c8df3ab441929720fe43d7c548cc661eed5b3c62b3c61f538ea3228376e2a18c6da2ad906322f64fb4865cde8e1889a8e5237fd6a39bbd6662f1dedc22fbd74e4376fa610cd710703dbd3924a38beae69783d1d5abf36122cbb87129ba719042748f060f4303a3199c5891c5040fd8cdb9761b006bf64cdcb65e5cc50a29994b8c1c34b83760ece12ed9ed7c3d2a7f8911cdf23a1afe0d7db1bf342aa0123dd5cd31339f5c8e160c4efef882602b3eccbe76fb690162b8bfb8a31910bcdf9a4a5dde76c2ac2fcd8678add7a000cfdcab398eb2171c026313eb6eb56b4b87bf8ef93f7f8a1c0bcc3775b681d4229ea561cb52281d8ba4315c3694ed08433596884d5a7ce3a8b1f82359846b7136726e2fe37bf4f7b7e2206cdcdb0705ced9f0dcaaa2ed3a78ea70d2cfeab668eb321400fc955e9aeb7bbcf86cd03f02dd443503a1480d9d9f899f53bd747a95293786798fc59fceb09e686a9328da4f929b6201841bbbefaffcf3386abdf69540e3b46a643ec10f0acf21f27c0053dc13f18485dbc898729dfbeaaa4887b58cd442d7ffa941808cd9658595be8650a815b088621278d89f0d8a4252566b923df3a3cd65c0e4af08fad385927251b31d35f75eaf25e6cf13a579aeeb0bcc0a14ca4a20a6831d532be0b2af3821792a2df95131b7fafef245aa19b214053342aa820c35858d13f84e496294529411015c41ed447b5b51dc44a45d52552a2be1abfc157f3ace7bfa32d5b931421d5a152dd66b7bf549311b08325e5a7201f793037b38990bedeca8a647c08d2478670f8fc2b4e8983ea18bcd514daeeeeb9d7a778f783c76edf01bd4beda4b77b612cd2e865c2e4f58ca7ae06147bf66ae6aee221cf9b9505dc07e6fb6cf4f82dc8c406c78e270210c11cf2531011ed678d9dfe1f49c9a69a95a9f3b0e5b624d9c2664d787ab911b75a4a38d63e9d6c353f8aaf433ff961fe5e34d84936ead0d0bc7954caf84e541f5c6f3f20c9eed21eb0316b82c0dc5182540e63a0af25565496792153d6395adc2b8d68b8bcd93dd110ff5685879db4384ec390d44b89663d43a5de3bdc0e103b7c1b355dc5f6fe3518c93628780ba03f156badea65d1d0af8433c9e8a975fdd19453da662a33fa9f0f5fa15fdb216b483fb48370a967246e0b763df8b3bc7924a6c76c4b114f803dbfa3b312e6815b4eb67be167283a9e482d9a5beac250089d069d4c386b7fda5fc228404a0f58b12ca4dc131c381b49b42b570bcfc0dd663f24afaf65a26a21f6d92f52c9f8de36cb76bacbaa0eef98ba6b7dbbc2629a03bb2b6f83fc5adaf20c217bc8d0f0d2421e01472532bcb546aeb2d483c8f95011a3ba1d2fd8086a717cb015dd53064ef4a80b6d6fdc12d9069223fdf2aa9b192a0e0bdb38436f49d9eedfef3665815633fee4344aff11162526362b70b18e1dbedbb5d8c4698860beccf667851878a25a1e766caae2861f2e23404aac859e62fdfeac06a6057554828d7035806e8ab3ee2fa6d711e5811db61231a22f4672f6a11b27641f350bcab78792362e6ebc1c054a643bbbf2746678c14dc567d1f73e37005c8ab6374c4d8d3106384a2d32c5fcf05cb9ba97cb7fa1aff11505a701bead543e555f3901ef3b693d5b9ebf49518c3509af042b7e84b1b867c22b7e08725220e4338fd074edce428212e6a3563a08e2ccd8ab71910256532904542e93d5c7deb5bf5d49beb3202d4da4f643649e55edbb91188cdcf0883a40c6ed6b8a086fb5c50dc08fee00308420121d4c7431b3cfb80f9c1e099423ac451d67b12e930d9e391d0a799c7d4b54a0d56ea0aae00c1d009e21fb5459416b464b227d66ccc1a68da59d64c1583dee54bbcd7d61ffe541fd0fb7452adba91906918966a7d58019ad1f8fdebeceeed7018837b6e4272eefeec8385abe7207fb2d7061fa6cdc478165a98971f9729b818a73edefed976d5c7c0a651c091cfd1174c020e39330a79144271fe4cbc61ea0ffa274d0d87d06dd08c1d5f8a0364d46ef7b54426bc286330c75fa257afeb2715c2ae511ff53b1189cc59ab80b1325fbdcedfdb8f36ed71f70091116e16b52188b794e637755027caac8db8554f8674b844964c710cacd7a9d6b06baf6fef76159a380e639b0d3e66080a7cf7f86baac01dbe47fe687fcef2f3bfbf6f8fba045181dee688360a11ee56e5fc73ed31c0e2924ae57f0cc93c63a30662a65c5d5f17123ae28cc5b74dd13ed81b03dc7fa61dc575668868c0df12d3553269f04ba79084d070abcdbd4745de80e90e4e3e524f27249b5c4a2f2d4c8b331b0cb6d4efe62a298daacc6eacdfe008c1f912795dbdc37098c42db860953120fda709baa6d46f52eaba781505e68561ca0f281e850532ef8e7c779883e312806e1c357bdef8d0dda005e710cfa6eb8686e8bf3bff036b3fcdc4036541d93530ce6f598442c24170b307ef05f23c93aa0ec96831b532d8120402214a940d1fa01ed649061a4a71308be189cffd729a196754fb8a75f23851189589be1b819f0612cad3dc94ccee88f4ab9ef6ac9c7daad8cf94f5ed9496c4c824e5b4f66ce32a80e7a6ef069a32f6812e656aa5f5742bd432afdf026c86e8f28212c1139dad47d7fc07e5c1a83e993daaa4a4bb5f0c9435ccab2a10f867ffe259dba7a1d9168619b1e3048860a5122e4a5d0b00372eaae861a0cc88549852fffa76e6d78739b654d67df15ea97a9a46b7c382d83191a673aa619b4a10ec05bc681379b0d6df824cb6fe158e9d89ae5dd1ef66976f67972b553db52eb6feef836dca6026293f83a61e117754a7424a3da63bd82d017f87f0603e2a9b8fc550aae611681935ae91f7ca2b5341b05a25208bd28f1a202a7f2a213b1d7411ffb557470aec00c4d13c70163f22a038a189710dd19a47e8db4a87c3fd329a63abca172a9810edad2d8e19ef85b57ea4287cfb3d740d7ea3fa9c80d06e1aa84b317f678ddb3c147ba5e0db432125f59ca4944c8e9050281ca82a3ecf67b2a5df678697a52a7297af1ecb03c586af7b91d74e881964ed95f7be12fa07e2a4e71aab8b913a13996fa33e915144bf00e49b8e7adec5b2c4b8165f54ba3155230e241ee023af77a295ab87c40f63f6092ccee05cb08a265abe8f57c9919bf45064b6c2240ba8011db223a283a4e2292d9b59df8c9a4fdc763f0631007db9976f351717db0e6b5f9c6e5f227c2efa1ae5fe0be1af0b22fc164f9f9678a01fe8b059749fe8a2972455732da1989c609d191544ef9fbb3e58da93ec4a582430523f260b776e4d747312747d18a9bae14740f5dcd35fd1072f8a4d81573b5882203be856b62d7e1d87081a9e431872c9d68864197bbc61f15dd8aeae950d34d6ce97182deebd2ad64cabd1c723baf512acfc7e94675b31369bd60e155af79b97bb734312569f736dcd5b5a78223ffaa0f7e93e1a112cb9f6a5b88fe3cf12c30024c16c6b8380fdf086c662665d3751c11617cc4dbd5b8bc7543301a23fbc90ba8d060193cdc2b68c31c734d516707b759f7db009c8f06e69b40154e1cd8ae444afb28134acdf871136b4fd78bd86d7faaaf618afb25e92d1ee37cdff0595278f9565f5eb109e181e9cacec2f22e32e9f34774ee223fdb992febcc5dbc5cceeda16cbcf1434730d859e7e03d36ff17636a7a7e66956b515894da114f3040909f90ce3cfbb2d7d46e37049c0fb124e0683d662eb427cd7b851ada229451e6e3aaee64b9964ced3036bde5d9d80eb062474f96ecfb9b65fcafc719494ac12ab7df245475f2a5e7f85ca4789833ca373e6214d39176c8f51dde87a4cfe5414a20f68bb9f34709979b99533ba3435c4aa56e525195e10ffd00f8e41aee30a909c07b973bbf733d45500b539ebe2206d438216690998d9e256db1b7ac6bef3e810785e1986985c945a2b820323a592721fcfa444934d0faf8aa439d5efca5dcd77b72d1eb91b3790d50d0a7483e354c415f81d99c133d648c1293e795b3c43f9b47e23ef982e10072ea5baafb0df675e69af1807b225afa0cec3eafbde8535d3ecaa0ea6ddbffe4465207425bb003670320324df0aeeb16b38a043f9c0e85673b36def332fd68b2b1e6edda621d0cadebbced8c7fc8f890489115b457249e8d8103676b3207a472804d33e0fe511ac56cd8dc5333b2333892f87b455940ada78fcf5075c358fce990e6f65f095eb416d876ce6f120b8b02cfa6b176ee269c942f881247c3e464cce2aa65c39137607c585aeb4b5f24f5f8e058c9c8b48003c1809da3e8aad1bee7955c3a976d43fe132e2b16f4758a0a9884e51d13b930675a4361ff366b0fed190ad7b2a00385528951e39cd44ea06d8921b9d613d7626221154cf86249a550198fe4e5b05ad3052b474291da0a0a2f701759859bc0392adf243ad5eca89e6d18e28dff99ef95743bcabe75504be8c715cd6360facf3bb06cb97c29989d4f6ff5083573cefe6ef0b39a252a2678112fa88e5b06c9a6bfc9597cc96e5a49710c4fc120fb0da4945b9d94e46de1e9989d0fc3d8d20df23d815b660c799a903f651b0d013f7fe158f1d297f7fcb6a48780ca5525f1d081ada0aafa83552318b848783306549750b6254cf676c7b934cf7fdab992717f0cdc089b34278f3fb151cadde14d0d3250e85a4b0ff2a2778a219aa40563d3ef575285484424b6d0e7cc8392342e4848c6fc8cb20fa1b450cc4c1fea19f3bbdd9e342e6c49cd7ac893b1eda2e93d1d74d20969465946b398fbc733757741ac822c4a118632cd242a439fc37512cf79b7c629504ccc1e7f2f11798955c3262b5e9695625ba74d8050e20f51d4769e1ab938f487f1bc4b55b5abcaa3ec079c2d0972b2ae9bfb7c5423b959119292ea05f1d79d35afe47e49d97c946b193bffc0a8f607f18a6845cecbbdd98cd351db2b2dce05a4848ba84a6a497b4618950130cb7e76c03d0976eb2fb41d3a42a1430063ed8e5b8c67e80fd4fc1148911958babbcbff33a6505de209b0d9320017fd736fd027a16564008ab2e1f48a6dd66c9256730e9fda0a606875d0871b2b9b0bc2ed4e1b696dbf0283c8dc72cf4338e595266f5390bc3a21f988353118f2948fc75d050ea076b73508d9ed89bade0ba305c1f4e5daf9d40d2f5e7ababed8d1b1d919c61a6d3fb149c1a9b44e38585a2fe322f83d73a3aecb44da3f0e82942d75d62ed3f91eb44f3411df014f88839e4cb1e21b9b259d4eb4adaf6b0be433d0ed4c87ec77dde5ee9d566e3dd8d928fc1875c63af26c59daba5ae267d9bd5da72b99a03e6a33cc48ed961ab484ff4a46c2d5fa597e626e00b530d7b9a9705e4e08d03f3a7f2a5a5233ad6340e3b5c89db81ca713b6d7d855c6324955f85109b204566f50178cd88abe3fcba25de905e8ea0b75ad51831761ed9b1af2470f976f05ec73bf74d137c207270cfd614170518cdc449aeeb663e114359c8124eaf2499d8cf5dc84a0872301db2e57b50bd285060ec4390d99d4ae3674ca3bb8679c1b08e566ba4f30daec8684a980055eb43cb5a1306c4b52a154682aa96637e06c869278aa2f74ef7345632c11265ef8ac97e953745302556881ba0cb590fef271c0abb193fb84d18ee3f24d9976ae816b857d6f68d1fdfe10b312c799fe014debf875d04bff8b4f387859e97c6bf13f7083c28a2045a0b5eb09c94e781a165965e8617c0efed1701ea9667aeca26d9577ea7b1242e1d91b25d6a66756cc627648a293b9f4345966bc469fafaeddc1118d0972bd5c7751a1f51e5989fd952f314ae10417c97b41e60ebfbc47e496486fa4a89fd16aea7fa1eabebd26eb2a37a3e2b351e0c9d2f67b2e5be0f921adc9b6045b045948e5103af0e5050b9c0799b513c00865deebda730de538f956ceb6164e08bd6f58655a294b4b44fc65309b30f9c00f92ef5bd5b911a3d830f72c258b19521bb8e80db02129954efb61423f518d2c5f36587303890cad9a93fa4f4bcd0e24c67db679c67ea59c1350b8442577632d5e8735833f3daf5a74bc7bd82659a81beba8c889632efe03cd24187aee856cf659e16e195464f52f2b984fc7a299e7b2aa53979a147ebed35705d5e89691666536f2febacfcef9b32d14952f958b72512869e4f6a0a34176918217888b1eb8b89322ebb6bb1dead2b4744e728479880db70e6147edaff6c3f083f18e0696bdbd78cf0bda14d9f42e5c1077ced00041aadff90470aacec0e48e2a5f2a0ed37818a173b96061e8c5bf24c0bde9e09f9e0ddb8e13306ef1d4eb8043ebadde5d7553e5212ecd4691eb426251f9d6720b8276ac543dde02399a35d974b22c1727d4b6df01957cae47443b706d43165e01d6932b136f561ce837431254cfb2a6e7d8070a2d3805aaa15b3c10ccd0cda2e9b418ce9ef380e5d08217752e12b3b892d03a9495c83d78d674612fde5a67738b2d4649ce44606ecce6bf3bd1293eca246a83643e4f1c7ba362b110e07c8479f216e3d4afc4fcb8d0820c8ab702a66d8183e83174597035e92b9b500dee08c80b927b42c3689c7c9617b4112c9e54cbfa51e989b5fd42b80c595d3edd265f138e8128cfbbb0e4f53aa0aa95a2ecda4518b2e564c42d5de7671560843d08103b9bdceac5fdeb0b1266f72f491265dd2b2b80a225a50955167da1812364ea340d82f61535401bae6f3140a8795d7c318a64cee4676627244930957b2f0b227be21b72d90027e6a5a7af3c59470c74dcdb71d1ef090a0f49c91acd604c792385c8f4e085765292822ee5eca03885fd6bfeaca9b3bbbdeac939f7846a487c5a483ed1e4fbf37c93886ea27bb35c812089b900b77c7c924147e97b6a71533610750bc84921012aa8158b213f7601d934a20bdd1f757b0a33042a683af6b9069f3900059d7f80f9fdcc9f33ece8cf7888dc9e24f1fc6ca0ecccf161c5334c60f440feb3acfc3d115011c176dfa05314c5bcf089e3c82bbe7680a3eefdcdbf3ac27265b779db4f49bade0128eda6e29bc5933ef454601db1b49628fd39ab938794fa46a33937a086ece7050d31a21524e2f0cacb307ed4412a2078636f9cc8e11c5c31cc0f9edd7be6d1e31a1513a58e25215f5a24245cb988589e6d5e5119f4f6557c697fad7d1c3a7e3bae064db4382701e33e48c5b6a52fe9141a385ef2325c6f7781134607e98bfd02c43d6deefaa861700388b40d98e941cfb2ddec209f977e8b9f93d29fdbf85e3010ce7cd622e8c75ce3df535e392052b6d65d5042d2a6e78bbfe5ee146e8b18d4bc7fb024dbba57cbe0402205593766a313950cb719d00c67bb6b3bcaa1015b89e820f11475afce655947113a7c3dcbb52427f090df994fbf076db867e0ab3f6125fb8884c1d13ff3e99fab5fa8b9f0b72cb44db4d0a48d9ec17f9733764e213c40a15ad821ec60e4a88cb2fd9dd9a4f35e6a708f4b74067f4be3f03a95261f6b191df53fa5bb5164e4a164630ad9ce39087aa950ad9e60cd2c44fa2237c49abf858c97737fd21180fd0b9542767150fbed3f39a29e6c3484d9437e15d2439f2a54b2a1ac7e63e6c436658abc3f1dd52d984f6c6901768a8cf2ec98ebf44e90e0fc0c24f8957c62e05d8eacecaf25b178fd710af609a8a1bc4d7955b5f0cb4f48a37685e6304ea5843573a1abff37b5106916c83c8f23f939a0dc43aea8d196191ed6e18dd793990d1f37d7de0bf8fac6f469843724eaab86be8a483be281b8ecf4aa29d9c571951cde8cd8c2aaf4d597ac2cb48f23fad145916920a55d655924940573b64dbd42a280cddc4810434f930183fdbbdc72db1491a4c9d44daf9b1bc2fecd855508648063040faeb125da0e68e6cd2002181118eecff0be1dd8eae726af5d451630cd65119c52abd6dded97f931202f186a18c4ba34bc2c3f6d765e2d8f445e959f26ffb55827cf3ff2cc0289f17b82c8caa5a2d3d54306a300f0ef42bbe4ea9e32c5d4b1173942745cdcfe4f5d1619eefaf8dc600afbc9171d516f7f4b35331d0b9be005132ffad5e9df59710278b842afb626a78b8b8b37fc3a894dc705b2d4e0940cb264e9dc87eaa148e6faf78125462f28a0f1d7b3c65a291b85713fa71ffc478f6601e8716c35489f4a54ed0c70bcfd5502cc91374dc3c982075c5180398bc6b195b36e79dcc4087cb990cc9d964a150e0dcc887d496bdd27c3f298736b9ad8345ba2df46021964cf43c38f9d2e94b77bee2b7bf059e0870ff9f17b9ef1320c0aa88a2fa9781e9017ab64643de9a3df9ed4b8cfd8fa080a2e494409520b795eb1517d224a05e450c4c8ae0e9fd29c0e72d3a592cce55f6dd5107f21214e1a3f9a5448384de06149f959ec0c92790f0ff229ab4971171f1c528ae6d095ec007bf5e7f55d623a68194e9ea8edc3af418075338328f24e7504341c22bef72c2963fc9c3237ba990d29c2c8aa3007395f6d96e95b40ee1b18dbad550bf39d0d98268cb74dde76d987c3169c9067495fb1b88508bbb7e94cbb7dfc15c03b1d5b163132c8a468906f02d422a8cf98d0b432b5779dd962074b72dd27439b2e94312f573435e5aa84664432c1914839cd6e172186ce93eeb1d7cb0659696d9d550eb3b185f8c6ee16e53f78233cbe709f99d2879d63d93f7d0ed133241d2f1ab1eb2c56605ca0f0e01c39ab0ba2370fe5c4e68de0561b517ff9a10023c386236398372c7176e35443e2cf5dd6cbed9f23395f231e6a54f65626cb5860a8b72122c34664119e7c47204ef4a70583a00", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x90, 0x0, 0x0, {0x4, 0x40000, 0x2000000000000, 0x80, 0x1, 0xfffffffd, {0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x2, 0xfffffffe, 0x4000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000840)={0x80000000, 0x2, 0x0, 'queue1\x00', 0xf}) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYRES32=r9, @ANYRES16=r7, @ANYRESDEC, @ANYRES32=r12, @ANYRES16, @ANYRES64=r8], 0x4c}}, 0x800) 5m19.831559328s ago: executing program 0 (id=116): socket(0x10, 0x2, 0x0) syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000002a40)={[{}, {@uid}, {@creator={'creator', 0x3d, "e152ecf5"}}, {@nodecompose}, {@umask={'umask', 0x3d, 0x10001}}, {@umask={'umask', 0x3d, 0xde5}}]}, 0x3, 0x6b2, &(0x7f0000000280)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) open$dir(&(0x7f0000002c80)='./file0\x00', 0x80002, 0x182) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000000a00)={0x2020}, 0x2020) recvmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/114, 0x72}, {&(0x7f0000002ac0)=""/135, 0x87}, {&(0x7f0000002b80)=""/127, 0x7f}, {&(0x7f0000002c00)=""/78, 0x4e}], 0x4, &(0x7f0000000240)=""/44, 0x2c}, 0x20) 5m17.405985986s ago: executing program 0 (id=121): syz_usb_connect(0x17aff7a88c855ce9, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x6, [{0x0, 0x0}, {0x0, 0x0}, {0x34, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x2, &(0x7f00000001c0)=ANY=[]}]}) (async) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000340)={0x84, &(0x7f0000000240)=ANY=[@ANYBLOB="a01302000000afbd"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000080)={0x20, 0xa, 0xf, "5f13ba3b11720c3f4b2950ce9f43b7"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0xc008, &(0x7f0000000540)=ANY=[@ANYRES8=0x0, @ANYRESOCT=0x0, @ANYRESDEC, @ANYRES16, @ANYBLOB="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"], 0x41, 0x2f5, &(0x7f0000000b40)="$eJzs3E1rE10UwPGTNG3SlDZZPDygIr3oRjdDG/dCkBbEgFIb8QWEaTPRkDEJmVCJiI0rt34NQ5fdSEHrB+jGnSs34qYbwU1BaySZiZ20kzaNttOS/w/KPZ17T+blTsKZgZnNu6+f5LOWltUrEowoCYrUZFsk3owci+MiEpCAtJoRe2HEbmpyeez7p/NKRJKp1MycUrPJ+SsJpdTE5Lunz1curFfG7qxOrIVlI/5w81viy8b/G2c2f80/zlkqZ6lCsaJ0tVD8XNEXTENlclZeU+qWaeiWoXIFyyjb/cWKs1oplapKL2TGo6WyYVlKL1RV3qiqSlFVylWlP9JzBaVpmhqPyuDYmmw1pcPmpetzc3qyz5Uu9pmHf259395yuf3l+dDo7EnXj26bAADASdWu/8Pu+n+rs/4POG3QXf87alJr1v+3792/0UP9vzbSpf4v7qn/nesL6ejPmkXq/35F9i5K14f6r/9xSpRHReorsvONfvlgZaoVUP8DAAAAAAAAAAAAAAAAAAAAAHAabDUasUajEWu2QbHj5l/YeWCk/b/f24mj4Z5/e65DzVln/geE68G9iIj5aim9lLZbuz+ZlZyYYsiUxORn63xw2PHs9dRMQLXE5b257OQvL6WHOvOnJSZx7/xpO1915g9L1J2fkJj8552f8MwfkUsXXfmaxOTjohTFlEzrvN7JfzGt1LWbqV35o5LxeGIOAAAAAIDTSFN/eF6/a1q3fju/l/sDU57X5yE5G/J33wEAAAAAGBRW9VleN02jfGDwxsk4cPBXZ2DPn/y3wfAh9qLX4G0rCHT75MihDt0RBO13Mu87eNQZ1NHl3J5Z9nHj+w0mfVl7qHnSu5ZEuw6eGPI64PsFYeetzM0l241dY66unvvh3wE/1p8hAAAAAMdgp+j3e0sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABhcx/E6Mb/3EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgpfgcAAP//06IWPQ==") (async) unshare(0x22000600) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fstatfs(r1, 0x0) (async) connect$unix(0xffffffffffffffff, 0x0, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) 5m16.984386448s ago: executing program 33 (id=121): syz_usb_connect(0x17aff7a88c855ce9, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x6, [{0x0, 0x0}, {0x0, 0x0}, {0x34, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x2, &(0x7f00000001c0)=ANY=[]}]}) (async) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000340)={0x84, &(0x7f0000000240)=ANY=[@ANYBLOB="a01302000000afbd"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000080)={0x20, 0xa, 0xf, "5f13ba3b11720c3f4b2950ce9f43b7"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0xc008, &(0x7f0000000540)=ANY=[@ANYRES8=0x0, @ANYRESOCT=0x0, @ANYRESDEC, @ANYRES16, @ANYBLOB="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"], 0x41, 0x2f5, &(0x7f0000000b40)="$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") (async) unshare(0x22000600) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fstatfs(r1, 0x0) (async) connect$unix(0xffffffffffffffff, 0x0, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) 2m27.685634957s ago: executing program 4 (id=582): syz_emit_vhci(&(0x7f0000001040)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_pkts={{0x13, 0x9}, {0x2, [{0xc8, 0x5}, {0xc8, 0xf}]}}}, 0xc) 2m27.295018937s ago: executing program 4 (id=584): unshare(0x22020400) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0) 2m26.685680308s ago: executing program 4 (id=586): r0 = io_uring_setup(0x21e9, &(0x7f0000002400)={0x0, 0xffffffbc, 0x0, 0x2, 0x176}) semtimedop(0x0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(0x0, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 2m25.979715384s ago: executing program 4 (id=588): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x8930, &(0x7f0000000080)="61d7f5023792c1817c84c538aa3a") 2m25.213320928s ago: executing program 4 (id=589): r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0xa002a002}) 2m24.970119556s ago: executing program 4 (id=590): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000481000/0x1000)=nil) 2m9.368632077s ago: executing program 34 (id=590): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000481000/0x1000)=nil) 16.047869143s ago: executing program 7 (id=1099): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) execve(&(0x7f0000000140)='./file2\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xfffffffe}, 0x0) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201010200000010f3044d074000010203010902240001010330"], &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x418}}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1462e287aac843b20ff2e7179ea4dbfc1ca8476fd4515f1c2735de36fde20c4dc9c23e9f29c6bf8e231481c40c8dc160b75aae7ce6dc8c867943f6571c706624d4411b131379f246d2648739cee9a7366cff8623584d92495f5b32c1f806352d6264152adf7370c6fa3da27d3df1d9d42fb71d3fa71039d9a5fdd34b7def781a9ff2564a3abd1b001993d78389d1a2d6fbe3ceea194f3f99b189b73dcee2729f67b20c89f1ae5fd6562d58c674dfc791b791", @ANYRES64=r2, @ANYRESHEX=r0, @ANYRES32=r0], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1ff}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r3, 0xc0884123, 0x0) r4 = syz_usb_connect(0x5, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000096d5c4004233e0205000000030109021200010000000003000000003710eb00"], 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000600)={0x44, &(0x7f00000004c0)=ANY=[@ANYBLOB="400001666e45b28a25e898f503f6678a77ec05000085ac10e3cc8b393d46dc7a26a1b7cab053832c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000006c0)=ANY=[@ANYBLOB="20090a000000f533f0a37c33f9ea2ca70063ab0e328862c63836b6959eeeb3b123e676567d0ea982dcf15d4f706f65cb8f99091e9dfb79ab9c7c8070022292775ef6a03ac8330d470dba6ead87227a93ed92ef5329dbf4a4552b33bf102ce03cf5ee45659e6bf065ed8ff547fe9f0a72f5553660349189d77efff9f12cc37eff741e56e104b75ab1115dd2f406929cfcfe87b305e5b1f4fab49095ec8f31a2bf51a763ab26e695847f554cd74bc351ab52f99f3393ff62e19ded14217f5f215568b9d88f71bbb50454"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40002122) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3, 0x90010, 0xffffffffffffffff, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f0000001dc0)=ANY=[@ANYBLOB="0c02000058c7db8ce4459d064c11199730e02b6f17e911cda2690926bd442c0fec1fa0f9acae902b9fac6eba51032e759516245b2a8bbaac4c78d78b09edc27851fdad935136007f00d03154dc36c67852d1f4ba9e671a953880a87faa026ccc3769142513843971c2260b125bd8578f16d465a8701eebd7ca12daa9bbc3062069c0228ddbdb21fb9438c0a3f29388bc31f812f57a246b9f0cf922fa08af48115f40e845bcae4fd7402b404178147cc5551157729498767cf4900697c615b5", @ANYRES16=r8], 0x60c}, 0x1, 0x0, 0x0, 0x48000}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000007c0)="140000091ef50729ff8764bce1e80000000000003ba6e47bace76b0c0bbe2db26d819fb8ed122c01ac94c3a0c463c8f15ccbe1f8eecb268fa55e05a4dfb57d9262e678885df13a82cc821cb9c2588a66b824d900b0b116e02cf1b43266b28d8c9c01ba069350c4e585c23fa175531a4970f058183cdec51bff35c0175c70a2e98897351089a7b053d628f33cd1d068d8f549aae026c31d00637ba127461d2cccdd15645fd483de07626af48b155b4a5a65199f675fff6adb5d8357c7cc6b4974715fa050", 0xc4}], 0x1}, 0x40804) setsockopt$IP_VS_SO_SET_FLUSH(r7, 0x0, 0x485, 0x0, 0x0) socket$inet6(0xa, 0x800, 0x0) 11.066302504s ago: executing program 7 (id=1107): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x10b200, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) syz_io_uring_setup(0x1e1e, 0x0, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x200000000000000) 10.199767712s ago: executing program 3 (id=1115): r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/stat\x00', 0x0, 0x0) r4 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r4, 0x627, 0x4c1, 0x43, 0x0, 0x30) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000500)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.833523491s ago: executing program 6 (id=1121): r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10000, 0x0, 0x4, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = fanotify_init(0x200, 0x101000) readv(r5, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/136, 0x88}], 0x1) 6.75057788s ago: executing program 6 (id=1123): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x4885, 0x0, 0x0, 0x1d}, &(0x7f0000000840)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, 0x0, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x2000, 0x1}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) 6.58402249s ago: executing program 7 (id=1125): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) userfaultfd(0x801) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x22, 0x2, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) dup2(0xffffffffffffffff, 0xffffffffffffffff) r6 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x40000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x6, 0x0, 0x0, r7}) r8 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001500)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) r9 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r9, 0x107, 0x8, &(0x7f0000000000), 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000030c0)=ANY=[@ANYBLOB], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r10, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847", 0x0, 0x71, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r4) 5.245549104s ago: executing program 3 (id=1127): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtfilter={0xd4, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xe, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xa8, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x7, 0xef, 0x8, 0x8, 0x5, 0x9, 0x7, 0x0, [{0x1000, 0x4, 0x401, 0x6}, {0x8, 0x7, 0x1009, 0x5}, {0xfffffff9, 0x43, 0x7ffd, 0x5}, {0x7fde, 0x40, 0x51, 0x3ff}, {0x8, 0xb, 0x1, 0x42}, {0x6, 0x400004, 0x8, 0x8}, {0x8001, 0x0, 0x0, 0x8001}, {0x1, 0x1800000, 0xa525}]}}, @TCA_U32_LINK={0x8, 0x3, 0x1000000}, @TCA_U32_CLASSID={0x8, 0x1, {0xa, 0xfff2}}]}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x80}, 0x40) 4.957805556s ago: executing program 1 (id=1129): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x6c, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r2, {0xc, 0xc}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x3c, 0x2, [@TCA_CGROUP_EMATCHES={0x38, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x8000, 0x1, 0xe3a2}, {0x4, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1}}}, @TCF_EM_CONTAINER={0x10, 0x2, 0x0, 0x0, {{0xb, 0x0, 0x4}, "19"}}]}]}]}}]}, 0x6c}}, 0x20040054) 4.745728962s ago: executing program 3 (id=1131): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'veth1_to_bond\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x6, r1}, 0x14) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000000)=""/24, 0x0, 0x8000000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='statm\x00') dup3(r0, r3, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f00000000c0)={0x0, r3}) sendto$inet6(r3, 0x0, 0x0, 0x3b04, 0x0, 0x0) 4.594041551s ago: executing program 3 (id=1133): r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10000, 0x0, 0x4, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = fanotify_init(0x200, 0x101000) readv(r5, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/136, 0x88}], 0x1) 4.539329341s ago: executing program 1 (id=1134): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, 0x0) 4.33732769s ago: executing program 1 (id=1135): r0 = io_uring_setup(0x5ef5, &(0x7f00000002c0)={0x0, 0xe6c, 0x100, 0xfffffffb, 0x8000001}) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x9, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) sendmmsg$inet(r1, &(0x7f0000008b80)=[{{0x0, 0x0, 0x0}}], 0x1a000, 0x40000) close_range(r0, 0xffffffffffffffff, 0x0) 4.119734138s ago: executing program 1 (id=1136): r0 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x10000, 0x0) syz_genetlink_get_family_id$tipc2(0x0, r0) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000200)=@userptr={0x0, 0x3, 0x4, 0x2, 0x0, {0x0, 0x2710}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, "0200"}, 0xfffffffe, 0x2, {0x0}, 0xffff}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x2a, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0xc) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) 4.089484135s ago: executing program 7 (id=1137): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 3.745391105s ago: executing program 7 (id=1138): r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) read$FUSE(r1, &(0x7f0000003340)={0x2020}, 0x2020) 3.564451789s ago: executing program 7 (id=1140): socket(0x40000000015, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) socket$kcm(0x2a, 0x2, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe2(&(0x7f0000000380), 0x4080) r2 = syz_open_dev$vim2m(&(0x7f0000000200), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000400)={0xa00965, 0x2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000002c0)={0x0, &(0x7f0000000140)}) openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a8, 0x3a0, 0x150, 0x150, 0x0, 0xf8010000, 0x468, 0x238, 0x238, 0x468, 0x238, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'veth1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) write$binfmt_elf64(r5, &(0x7f0000000580)=ANY=[], 0x78) recvmmsg(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/8, 0xc}}], 0x4b, 0x0, 0x0) 3.341127752s ago: executing program 3 (id=1142): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x2000, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c00000010004b0429bd7000faffffff7a000000", @ANYRES32=0x0, @ANYBLOB="08b0010006820000400012800b0001006272696467650000300002800c002200000000040000000005002400010000000600080088a80000080005000100000005002b00050000000a000100"], 0x6c}, 0x1, 0x0, 0x0, 0x40001}, 0x20000000) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001) sendmsg(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000780)="a9", 0xffd1}], 0x11}, 0x800) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x1002, &(0x7f00000001c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000040)=[&(0x7f00000010c0)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x2}]) ioctl$SNDCTL_SEQ_OUTOFBAND(r3, 0x40085112, &(0x7f0000000280)=@n={0x1, 0xa0, @generic=0x3, 0x10}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10, 0xffffffffffffffff, 0x0) io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x71}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="05000000010000004000000040000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000000000000000000000000000a09141ab575b19457a1ea931ce436c0209ca0ba394f7ccd728957cf4e8042b10ef547de8f0e9d5144acf07528bc6dd9d72a09c22beffd7d174e779aad3183c3ccf4d8c73ad07bafae61ed40d05cc563c1fa8c483351d6cf2063ad0525efb52e83bf39c51c2f37f5b2f4c28328974aa114f0980e0c4ef016337f35bab8cc2f6ca930f7aa9a1", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r5, &(0x7f0000000080), &(0x7f00000000c0)=""/65}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000001000000400000004000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r6}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r6, &(0x7f0000000080), &(0x7f00000000c0)=""/65}, 0x20) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x0, 0x11022, 0x0) 3.218462869s ago: executing program 6 (id=1144): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd9, 0x72, 0xa4, 0x40, 0x20b7, 0x1540, 0xb75a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) gettid() r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000026c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x20000100, 0xfffffff4, 0x9, 0x5, 0x1, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3.065412896s ago: executing program 5 (id=1145): syz_open_procfs(0x0, 0x0) r0 = syz_io_uring_setup(0x891, &(0x7f0000000140)={0x0, 0x8c36, 0x8, 0x2, 0xbfdffdfb}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuseblk(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x19424, 0x0) 2.431249017s ago: executing program 5 (id=1146): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000080)=@t={0x81, 0x3, 0x0, 0xfc}) 2.19468858s ago: executing program 5 (id=1147): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000001900010025bd700095cbdf250a801400fd01"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x24040884) 2.077443472s ago: executing program 3 (id=1148): socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$loop(&(0x7f0000000040), 0x7, 0x20080) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r2 = epoll_create1(0x0) fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) syz_open_dev$usbfs(&(0x7f0000000100), 0x775, 0x8000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) dup(r3) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r5, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, r1, 0x0, 0x0, 0x200000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r1, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) r6 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r6, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x2000000) 2.005084131s ago: executing program 1 (id=1149): r0 = landlock_create_ruleset(&(0x7f0000000000)={0x1080, 0x1}, 0x18, 0x0) r1 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x2) r2 = syz_clone(0x11, 0x0, 0xb, 0x0, 0x0, 0x0) r3 = getpgid(r2) r4 = syz_pidfd_open(r3, 0x0) pidfd_send_signal(r4, 0x0, 0x0, 0x4) 1.656160148s ago: executing program 5 (id=1150): sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x60a80, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2a}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) writev(r1, &(0x7f0000001a80)=[{&(0x7f0000000600)="52d55b4341bb24c62011f1200ff14a3ba96a1ea0c117a349c340a6acfb7e35aa09ee307c891915258e7338e53f285760905ceb91dfc5ddc88f7e6224d9ab5c0bf3274a839b8002c1450b7f92ad7002a4655cc648b2a5229c6cff546cc1a08c257c267a901d76c38dec1187ffa9db344a8b907342aaa3a629a2f7205f7a8a59e606fbb3190b9399e38980e189e1d267e2246d992aae698e6e3ee5266c35dd3903d163e7bfa2e84af5580fe8", 0xab}, {&(0x7f00000016c0)="52c2fd1eb9c6134c00f88eec863a423c08f781d82cef1c40fff7fd6ea3f677c28951fbd5126fe1748a953d9cfcd6e68e414bff7ad07e", 0x36}, {&(0x7f00000018c0)="34f875621a807147e187ff464760a652d757b02994332615702787d0055a9c61b91c92e247e1117c4d4e4b3403f336adc2e0aa9a0d114c639f47d57046f7a5a54f464ec98c", 0x45}, {&(0x7f00000019c0)="a3f31bf5a2bf6c3edd4aa56a71877ae4810a8a4d62e063493f0ca1af46aad81ef14a39986449fb551969dbfca66e657913145d7a04f71ce777a0ccec88e60765c90fd7b4ff6e005c266f860967fb3966b714d069188fe846710a50dcb241c5d250f8e6f74f2300bcda112bfe986050ef9efb49bc85f553a3c76b17ee8c53fac7", 0x80}], 0x4) 1.41353539s ago: executing program 1 (id=1151): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) gettid() syz_usb_control_io(r0, 0x0, 0x0) 1.320847317s ago: executing program 5 (id=1152): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10000, 0x0, 0x4, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = fanotify_init(0x200, 0x101000) readv(r5, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/136, 0x88}], 0x1) 832.610414ms ago: executing program 6 (id=1153): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x40400) fchmod(r0, 0x129) 528.396474ms ago: executing program 6 (id=1154): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x34, 0x1, 0x2, "1c13ebdaf2f20d55806b26b1d750185fd75a206da058e85b2197edb1439b1cc2", 0x32314d48}) 293.355183ms ago: executing program 6 (id=1155): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x161141) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xf691, 0x10100, 0x0, 0x356}, &(0x7f00000008c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x70a, 0x41e3, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "cfc85eb51b0ace6a", "4617a9f6040839230fb7fead776dd8dc", "3f4051c4", "a44a889722b66244"}, 0x28) recvmmsg(r5, &(0x7f0000003d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000400)=""/247, 0xf7}], 0x1}, 0x3}], 0x1, 0x40010020, 0x0) socket$inet_udp(0x2, 0x2, 0x0) lseek(0xffffffffffffffff, 0x9, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed, 0x0}, 0x94) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r9 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r7, 0x0, 0x25, 0x0, @val=@iter={0x0}}, 0x40) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0xf0ffffffffffff}, 0x0) close(r9) r10 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r10, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) 0s ago: executing program 5 (id=1156): ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x34, 0x7, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x200008d1}, 0xd0) kernel console output (not intermixed with test programs): 81 interface 51 has no altsetting 0 [ 190.082143][ T10] usb 6-1: config 81 interface 74 has no altsetting 0 [ 190.110586][ T10] usb 6-1: New USB device found, idVendor=2c7c, idProduct=0129, bcdDevice=33.3b [ 190.273292][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.297894][ T10] usb 6-1: Product: âˆ¯å«‚æ„™æ¯«ç·æ°Œá±®é‹ªç¾Žæ¶îŠ‚é¡Šáž½ç˜…æ€æ¹åž¶æƒã“¡êª¾æ­ì¦¤ì·¾ìºªê£žî¿¥ë‡»ê›žá…Šè£¾æ«¸á§¿ê‰¥î›†â…·à¦²â´¤á„Žã‘¤å¹»ï­· [ 190.795702][ T7250] loop1: detected capacity change from 0 to 512 [ 190.846787][ T10] usb 6-1: Manufacturer: 倊 [ 190.851549][ T10] usb 6-1: SerialNumber: Ó¿ [ 190.876188][ T7250] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.893794][ T7250] ext4 filesystem being mounted at /50/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 191.137432][ T7256] netlink: 24 bytes leftover after parsing attributes in process `syz.3.231'. [ 191.500906][ T7266] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 191.579481][ T10] option 6-1:81.173: GSM modem (1-port) converter detected [ 191.601228][ T7266] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 191.686234][ T10] usb 6-1: USB disconnect, device number 6 [ 191.741434][ T10] option 6-1:81.173: device disconnected [ 191.847504][ T7264] loop4: detected capacity change from 0 to 16 [ 191.858358][ T7261] netlink: 'syz.3.231': attribute type 2 has an invalid length. [ 191.866028][ T7261] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 192.363721][ T5841] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.715774][ T7264] erofs (device loop4): mounted with root inode @ nid 36. [ 193.320400][ T7284] loop1: detected capacity change from 0 to 32768 [ 193.386678][ T7284] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 193.395796][ T7284] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 193.499233][ T7284] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 193.536349][ T6714] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 193.558660][ T6714] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 193.783285][ T6714] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 224ms [ 193.829792][ T6714] gfs2: fsid=syz:syz.0: jid=0: Done [ 193.856441][ T7284] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 194.072923][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.089600][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.230039][ T7301] loop6: detected capacity change from 0 to 512 [ 194.250181][ T7301] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 194.367692][ T7301] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.410770][ T7301] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.490164][ T30] audit: type=1800 audit(1753066704.132:9): pid=7284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.235" name="bus" dev="loop1" ino=9378 res=0 errno=0 [ 195.085646][ T6514] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.302648][ T7292] loop4: detected capacity change from 0 to 32768 [ 195.331087][ T7292] XFS: ikeep mount option is deprecated. [ 195.415665][ T7292] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 195.647582][ T7329] tap0: tun_chr_ioctl cmd 1074025680 [ 197.056407][ T7340] trusted_key: encrypted_key: insufficient parameters specified [ 197.308094][ T7292] XFS (loop4): Ending clean mount [ 197.383773][ T7292] XFS (loop4): Quotacheck needed: Please wait. [ 197.570375][ T7292] XFS (loop4): Quotacheck: Done. [ 197.692918][ T6468] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 197.708616][ T5931] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 197.943306][ T7354] overlay: Unknown parameter '/' [ 198.110774][ T5931] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 198.251526][ T5931] usb 6-1: config 0 has no interface number 0 [ 198.404065][ T5931] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 198.473826][ T5931] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.524604][ T5931] usb 6-1: Product: syz [ 198.569661][ T5931] usb 6-1: Manufacturer: syz [ 198.590264][ T5931] usb 6-1: SerialNumber: syz [ 198.629340][ T5931] usb 6-1: config 0 descriptor?? [ 199.062346][ T5931] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 199.356337][ T5931] asix 6-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 199.415860][ T5931] asix 6-1:0.251: probe with driver asix failed with error -71 [ 199.484633][ T5931] usb 6-1: USB disconnect, device number 7 [ 199.808197][ T7401] loop5: detected capacity change from 0 to 256 [ 199.838874][ T7401] vfat: Unknown parameter 'ÿÿ' [ 201.170519][ T7363] loop1: detected capacity change from 0 to 32768 [ 201.343297][ T5857] Bluetooth: hci4: command 0x0406 tx timeout [ 201.349468][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 201.400238][ T7409] loop4: detected capacity change from 0 to 262144 [ 201.433845][ T7409] F2FS-fs (loop4): invalid crc value [ 201.537260][ T7409] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 201.667273][ T7409] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 201.789762][ T7418] loop5: detected capacity change from 0 to 1024 [ 202.615871][ T7418] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.676709][ T7417] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 1 with error 28 [ 202.692575][ T7417] EXT4-fs (loop5): This should not happen!! Data will be lost [ 202.692575][ T7417] [ 202.702293][ T7417] EXT4-fs (loop5): Total free blocks count 0 [ 202.708363][ T7417] EXT4-fs (loop5): Free/Dirty block details [ 202.714413][ T7417] EXT4-fs (loop5): free_blocks=0 [ 202.719489][ T7417] EXT4-fs (loop5): dirty_blocks=0 [ 202.726269][ T7417] EXT4-fs (loop5): Block reservation details [ 202.732359][ T7417] EXT4-fs (loop5): i_reserved_data_blocks=0 [ 202.797512][ T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 202.961874][ T6236] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.028648][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 203.055865][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.096667][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.130234][ T10] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 203.165689][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.215819][ T10] usb 5-1: config 0 descriptor?? [ 204.232986][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 204.258884][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 204.305951][ T10] usb 5-1: USB disconnect, device number 5 [ 204.450330][ T7436] loop5: detected capacity change from 0 to 1024 [ 204.514236][ T7442] 9pnet_fd: Insufficient options for proto=fd [ 204.531032][ T7436] EXT4-fs: Ignoring removed orlov option [ 204.536814][ T7436] EXT4-fs: Ignoring removed nomblk_io_submit option [ 204.600699][ T7436] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 2304 [ 204.999347][ T7460] loop1: detected capacity change from 0 to 64 [ 205.125262][ T7464] trusted_key: encrypted_key: insufficient parameters specified [ 207.649925][ T7457] loop5: detected capacity change from 0 to 32768 [ 207.724629][ T7457] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 207.745056][ T7457] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 208.014041][ T7457] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 208.056623][ T5931] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 208.076369][ T5931] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 208.119136][ T7501] loop1: detected capacity change from 0 to 64 [ 208.287377][ T7501] hfs: unable to load codepage "ep" [ 208.364548][ T5931] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 288ms [ 208.518371][ T5931] gfs2: fsid=syz:syz.0: jid=0: Done [ 208.601676][ T7457] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 208.852974][ T7457] gfs2: fsid=syz:syz.0: can't create logd thread: -4 [ 209.707730][ T9] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 209.728782][ T7527] loop5: detected capacity change from 0 to 256 [ 209.741307][ T7528] loop1: detected capacity change from 0 to 1024 [ 209.754690][ T7527] exfat: Deprecated parameter 'utf8' [ 209.767281][ T7527] exfat: Deprecated parameter 'utf8' [ 209.850621][ T7527] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d) [ 209.896648][ T9] usb 7-1: too many configurations: 19, using maximum allowed: 8 [ 209.938618][ T9] usb 7-1: config index 0 descriptor too short (expected 46446, got 162) [ 209.952207][ T7534] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 209.967183][ T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 210.023396][ T9] usb 7-1: config index 1 descriptor too short (expected 46446, got 162) [ 210.046126][ T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 210.093300][ T9] usb 7-1: config index 2 descriptor too short (expected 46446, got 162) [ 210.118639][ T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 210.152479][ T9] usb 7-1: config index 3 descriptor too short (expected 46446, got 162) [ 210.170065][ T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 210.198221][ T9] usb 7-1: config index 4 descriptor too short (expected 46446, got 162) [ 210.217223][ T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 210.234610][ T7540] fuse: Bad value for 'fd' [ 210.255006][ T9] usb 7-1: config index 5 descriptor too short (expected 46446, got 162) [ 210.264065][ T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 210.294018][ T9] usb 7-1: config index 6 descriptor too short (expected 46446, got 162) [ 210.324493][ T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 210.333775][ T7542] loop1: detected capacity change from 0 to 2048 [ 210.362638][ T9] usb 7-1: config index 7 descriptor too short (expected 46446, got 162) [ 210.397068][ T7542] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.397144][ T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 210.434383][ T7542] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 210.456762][ T9] usb 7-1: string descriptor 0 read error: -71 [ 210.465279][ T9] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 210.475140][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.501167][ T7542] loop6: detected capacity change from 0 to 524287999 [ 210.509684][ T9] usb 7-1: can't set config #1, error -71 [ 210.535242][ T9] usb 7-1: USB disconnect, device number 2 [ 210.577605][ T30] audit: type=1800 audit(1753066720.142:10): pid=7542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.284" name="file0" dev="loop1" ino=13 res=0 errno=0 [ 210.616842][ T7542] netlink: 'syz.1.284': attribute type 1 has an invalid length. [ 210.639544][ T7542] netlink: 'syz.1.284': attribute type 2 has an invalid length. [ 210.670172][ T6342] Buffer I/O error on dev loop6, logical block 65535999, async page read [ 210.908517][ T7551] netlink: 8 bytes leftover after parsing attributes in process `syz.5.285'. [ 211.104284][ T7555] FAULT_INJECTION: forcing a failure. [ 211.104284][ T7555] name failslab, interval 1, probability 0, space 0, times 0 [ 211.117413][ T7555] CPU: 1 UID: 0 PID: 7555 Comm: syz.4.263 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 211.117446][ T7555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 211.117458][ T7555] Call Trace: [ 211.117466][ T7555] [ 211.117473][ T7555] dump_stack_lvl+0x189/0x250 [ 211.117498][ T7555] ? __pfx____ratelimit+0x10/0x10 [ 211.117526][ T7555] ? __pfx_dump_stack_lvl+0x10/0x10 [ 211.117547][ T7555] ? __pfx__printk+0x10/0x10 [ 211.117576][ T7555] ? __pfx___might_resched+0x10/0x10 [ 211.117599][ T7555] should_fail_ex+0x414/0x560 [ 211.117629][ T7555] should_failslab+0xa8/0x100 [ 211.117658][ T7555] kmem_cache_alloc_noprof+0x73/0x3c0 [ 211.117684][ T7555] ? ptlock_alloc+0x20/0x70 [ 211.117714][ T7555] ptlock_alloc+0x20/0x70 [ 211.117739][ T7555] pte_alloc_one+0x7d/0x170 [ 211.117777][ T7555] __pte_alloc+0x25/0x1a0 [ 211.117801][ T7555] __handle_mm_fault+0x49b3/0x5440 [ 211.117844][ T7555] ? __pfx___handle_mm_fault+0x10/0x10 [ 211.117872][ T7555] ? lock_vma_under_rcu+0xf8/0x710 [ 211.117900][ T7555] ? lock_vma_under_rcu+0xf8/0x710 [ 211.117918][ T7555] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 211.117944][ T7555] handle_mm_fault+0x40a/0x8e0 [ 211.117981][ T7555] do_user_addr_fault+0xa81/0x1390 [ 211.118017][ T7555] ? rcu_is_watching+0x15/0xb0 [ 211.118037][ T7555] ? trace_page_fault_user+0x84/0x1e0 [ 211.118068][ T7555] exc_page_fault+0x76/0xf0 [ 211.118099][ T7555] asm_exc_page_fault+0x26/0x30 [ 211.118117][ T7555] RIP: 0033:0x7f02b5450d46 [ 211.118134][ T7555] Code: f0 72 6e 48 63 cd 48 01 c1 49 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 <47> 0f b6 0c 08 45 84 c9 74 08 45 88 0c 00 49 8b 47 10 48 83 c0 01 [ 211.118150][ T7555] RSP: 002b:00007f02b63224a0 EFLAGS: 00010246 [ 211.118167][ T7555] RAX: 0000000000000001 RBX: 00007f02b6322540 RCX: 0000000000000101 [ 211.118180][ T7555] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 00007f02b63225e0 [ 211.118192][ T7555] RBP: 0000000000000102 R08: 00007f02aae00000 R09: 0000000000000000 [ 211.118204][ T7555] R10: 0000000000000000 R11: 00007f02b6322550 R12: 0000000000000001 [ 211.118215][ T7555] R13: 00007f02b562c7c0 R14: 0000000000000000 R15: 00007f02b63225e0 [ 211.118245][ T7555] [ 211.118526][ T7555] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 211.343251][ T7555] loop4: detected capacity change from 0 to 16 [ 211.351901][ T5928] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 211.573930][ T7555] erofs (device loop4): mounted with root inode @ nid 36. [ 212.114695][ T7551] loop5: detected capacity change from 0 to 32768 [ 212.123901][ T7551] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.285 (7551) [ 212.156800][ T7551] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 212.167046][ T7551] BTRFS info (device loop5): using crc32c (crc32c-lib) checksum algorithm [ 212.176281][ T7551] BTRFS info (device loop5): using free-space-tree [ 212.185291][ T5928] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 212.198271][ T5928] usb 2-1: config 0 has no interface number 0 [ 212.208501][ T5928] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 212.243106][ T5928] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.292694][ T5928] usb 2-1: Product: syz [ 212.312784][ T5928] usb 2-1: Manufacturer: syz [ 212.332465][ T5928] usb 2-1: SerialNumber: syz [ 212.364418][ T5928] usb 2-1: config 0 descriptor?? [ 212.371720][ T6342] Buffer I/O error on dev loop6, logical block 65535999, async page read [ 212.406670][ T7551] BTRFS info (device loop5): rebuilding free space tree [ 212.893082][ T5928] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 213.320367][ T5928] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 213.349041][ T5928] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 213.367374][ T5928] usb 2-1: media controller created [ 213.424572][ T5928] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 213.811736][ T5928] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 213.830423][ T5841] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.912567][ T7592] loop4: detected capacity change from 0 to 4096 [ 213.976466][ T7592] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 214.001145][ T5928] usb 2-1: USB disconnect, device number 11 [ 214.114156][ T6236] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 214.152228][ T7602] loop6: detected capacity change from 0 to 256 [ 214.218035][ T7604] loop1: detected capacity change from 0 to 256 [ 214.246780][ T7604] exfat: Unknown parameter 'keeÿ' [ 214.431763][ T7602] netlink: 12 bytes leftover after parsing attributes in process `syz.6.292'. [ 214.771940][ T7557] netlink: 52 bytes leftover after parsing attributes in process `syz.3.286'. [ 215.315376][ T7620] fuse: Bad value for 'fd' [ 215.996449][ T7631] FAULT_INJECTION: forcing a failure. [ 215.996449][ T7631] name failslab, interval 1, probability 0, space 0, times 0 [ 216.009619][ T7631] CPU: 1 UID: 0 PID: 7631 Comm: syz.4.298 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 216.009644][ T7631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 216.009656][ T7631] Call Trace: [ 216.009663][ T7631] [ 216.009671][ T7631] dump_stack_lvl+0x189/0x250 [ 216.009696][ T7631] ? __pfx____ratelimit+0x10/0x10 [ 216.009724][ T7631] ? __pfx_dump_stack_lvl+0x10/0x10 [ 216.009744][ T7631] ? __pfx__printk+0x10/0x10 [ 216.009771][ T7631] ? __pfx___might_resched+0x10/0x10 [ 216.009789][ T7631] ? fs_reclaim_acquire+0x7d/0x100 [ 216.009811][ T7631] should_fail_ex+0x414/0x560 [ 216.009842][ T7631] should_failslab+0xa8/0x100 [ 216.009871][ T7631] kmem_cache_alloc_noprof+0x73/0x3c0 [ 216.009896][ T7631] ? __anon_vma_prepare+0xcb/0x4a0 [ 216.009927][ T7631] __anon_vma_prepare+0xcb/0x4a0 [ 216.009959][ T7631] do_wp_page+0x3938/0x5800 [ 216.010004][ T7631] ? __pfx_do_wp_page+0x10/0x10 [ 216.010025][ T7631] ? do_raw_spin_lock+0x121/0x290 [ 216.010050][ T7631] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 216.010082][ T7631] __handle_mm_fault+0x1033/0x5440 [ 216.010122][ T7631] ? __pfx___handle_mm_fault+0x10/0x10 [ 216.010147][ T7631] ? lock_vma_under_rcu+0xf8/0x710 [ 216.010173][ T7631] ? lock_vma_under_rcu+0xf8/0x710 [ 216.010190][ T7631] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 216.010214][ T7631] handle_mm_fault+0x40a/0x8e0 [ 216.010249][ T7631] do_user_addr_fault+0xa81/0x1390 [ 216.010283][ T7631] ? rcu_is_watching+0x15/0xb0 [ 216.010302][ T7631] ? trace_page_fault_user+0x84/0x1e0 [ 216.010331][ T7631] exc_page_fault+0x76/0xf0 [ 216.010360][ T7631] asm_exc_page_fault+0x26/0x30 [ 216.010377][ T7631] RIP: 0033:0x7f02b5450ca3 [ 216.010393][ T7631] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 216.010408][ T7631] RSP: 002b:00007f02b63224a0 EFLAGS: 00010206 [ 216.010425][ T7631] RAX: 0000000000000400 RBX: 00007f02b6322540 RCX: 00007f02aae00000 [ 216.010437][ T7631] RDX: 00007f02b63226e0 RSI: 0000000000000003 RDI: 00007f02b63225e0 [ 216.010449][ T7631] RBP: 00000000000000f9 R08: 0000000000000009 R09: 00000000000001b4 [ 216.010459][ T7631] R10: 00000000000001c2 R11: 00007f02b6322540 R12: 0000000000000001 [ 216.010470][ T7631] R13: 00007f02b562c7c0 R14: 00000000000000e2 R15: 00007f02b63225e0 [ 216.010498][ T7631] [ 216.010514][ T7631] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 216.253091][ T7631] loop4: detected capacity change from 0 to 16 [ 216.554708][ T7631] erofs (device loop4): mounted with root inode @ nid 36. [ 219.347270][ T7663] loop6: detected capacity change from 0 to 4096 [ 219.364118][ T7665] input: syz1 as /devices/virtual/input/input6 [ 219.535868][ T7670] netlink: 'syz.1.306': attribute type 4 has an invalid length. [ 219.561071][ T7670] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.306'. [ 219.676019][ T7676] loop4: detected capacity change from 0 to 256 [ 219.807271][ T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 220.018013][ T9] usb 7-1: config 0 has an invalid interface number: 29 but max is 0 [ 220.031875][ T7676] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 220.046909][ T9] usb 7-1: config 0 has no interface number 0 [ 220.067485][ T9] usb 7-1: config 0 interface 29 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 220.105757][ T9] usb 7-1: config 0 interface 29 altsetting 0 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 220.142010][ T9] usb 7-1: New USB device found, idVendor=07fa, idProduct=0847, bcdDevice=60.e8 [ 220.151777][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.196587][ T9] usb 7-1: Product: syz [ 220.201205][ T9] usb 7-1: Manufacturer: syz [ 220.205831][ T9] usb 7-1: SerialNumber: syz [ 220.364159][ T9] usb 7-1: config 0 descriptor?? [ 220.380966][ T7672] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 220.391994][ T9] HFC-S_USB 7-1:0.29: probe with driver HFC-S_USB failed with error -5 [ 220.592658][ T9] usb 7-1: USB disconnect, device number 3 [ 220.645981][ T7701] loop5: detected capacity change from 0 to 256 [ 220.847433][ T7702] netlink: 12 bytes leftover after parsing attributes in process `syz.5.313'. [ 221.144179][ T7710] trusted_key: encrypted_key: insufficient parameters specified [ 222.026342][ T7720] loop1: detected capacity change from 0 to 4096 [ 222.173074][ T7720] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 222.212101][ T7720] ntfs3(loop1): Failed to load $Extend (-22). [ 222.218287][ T7720] ntfs3(loop1): Failed to initialize $Extend. [ 222.257576][ T7720] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 222.473704][ T5831] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 222.744323][ T7698] loop4: detected capacity change from 0 to 32768 [ 223.236393][ T7733] overlayfs: failed to resolve './file0': -2 [ 223.425674][ T7737] loop1: detected capacity change from 0 to 1024 [ 225.378395][ T7746] Mount JFS Failure: -22 [ 225.705536][ T7755] netlink: 104 bytes leftover after parsing attributes in process `syz.1.322'. [ 225.903323][ T7755] loop1: detected capacity change from 0 to 4096 [ 226.159415][ T7757] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 226.190740][ T30] audit: type=1800 audit(1753066735.802:11): pid=7755 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.322" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 226.340182][ T30] audit: type=1800 audit(1753066735.962:12): pid=7763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.322" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 226.535196][ T5931] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 226.837427][ T5931] usb 6-1: Using ep0 maxpacket: 16 [ 226.844879][ T5931] usb 6-1: config index 0 descriptor too short (expected 59154, got 18) [ 226.856147][ T5931] usb 6-1: config 0 has no interfaces? [ 227.447598][ T5931] usb 6-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 227.533191][ T7772] loop1: detected capacity change from 0 to 1024 [ 227.587464][ T5931] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.595608][ T5931] usb 6-1: Product: syz [ 227.600731][ T5931] usb 6-1: Manufacturer: syz [ 227.605350][ T5931] usb 6-1: SerialNumber: syz [ 227.626462][ T5931] usb 6-1: config 0 descriptor?? [ 227.634551][ T7772] EXT4-fs: Ignoring removed orlov option [ 227.662907][ T7772] EXT4-fs: Ignoring removed nomblk_io_submit option [ 227.781995][ T7772] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.563799][ T7774] overlayfs: failed to resolve './file0': -2 [ 232.484388][ T5841] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.076151][ T6706] usb 6-1: USB disconnect, device number 8 [ 233.247461][ T9] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 233.543189][ T5850] Bluetooth: hci2: command 0x0406 tx timeout [ 234.234994][ T9] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 234.254504][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.296361][ T9] usb 7-1: config 0 descriptor?? [ 234.521658][ T7847] loop1: detected capacity change from 0 to 512 [ 234.528852][ T7847] EXT4-fs: Ignoring removed oldalloc option [ 234.577214][ T7847] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.339: Parent and EA inode have the same ino 15 [ 234.599246][ T7847] EXT4-fs (loop1): 1 orphan inode deleted [ 234.606758][ T7847] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.683905][ T7863] vcan0: tx drop: invalid sa for name 0x0000000000100000 [ 234.728950][ T7860] loop5: detected capacity change from 0 to 128 [ 235.003617][ T9] ath6kl: mismatched byte count 0 vs. expected 12 [ 235.068749][ T9] ath6kl: Failed to init ath6kl core: -22 [ 235.075072][ T9] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 235.301908][ T7830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.437556][ T7830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.462465][ T9] usb 7-1: USB disconnect, device number 4 [ 235.831509][ T5841] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.498625][ T7924] smc: net device bond0 applied user defined pnetid SYZ2 [ 238.535656][ T7927] netlink: 8 bytes leftover after parsing attributes in process `syz.1.357'. [ 238.542130][ T7925] netlink: 8 bytes leftover after parsing attributes in process `syz.1.357'. [ 238.582556][ T7925] netlink: 4 bytes leftover after parsing attributes in process `syz.1.357'. [ 238.596392][ T7925] netlink: 'syz.1.357': attribute type 11 has an invalid length. [ 238.606940][ T7927] netlink: 4 bytes leftover after parsing attributes in process `syz.1.357'. [ 238.619973][ T7925] netlink: 'syz.1.357': attribute type 13 has an invalid length. [ 238.628889][ T7927] netlink: 'syz.1.357': attribute type 11 has an invalid length. [ 238.683882][ T7927] netlink: 'syz.1.357': attribute type 13 has an invalid length. [ 239.710605][ T7945] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 239.841150][ T7933] loop6: detected capacity change from 0 to 32768 [ 239.918008][ T7943] syz_tun: entered promiscuous mode [ 239.930068][ T7943] batadv_slave_0: entered promiscuous mode [ 239.946168][ T7944] loop4: detected capacity change from 0 to 4096 [ 239.978477][ T7943] hsr1: entered allmulticast mode [ 240.006880][ T7943] syz_tun: entered allmulticast mode [ 240.046231][ T7943] batadv_slave_0: entered allmulticast mode [ 240.137599][ T7944] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 240.250972][ T7965] vlan2: entered allmulticast mode [ 240.256212][ T7965] dummy0: entered allmulticast mode [ 240.302668][ T7933] bcachefs (loop6): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 240.302695][ T7933] allowing incompatible features above 0.0: (unknown version) [ 240.302707][ T7933] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 240.350600][ T7933] bcachefs (loop6): Using encoding defined by superblock: utf8-12.1.0 [ 240.358927][ T7933] bcachefs (loop6): initializing new filesystem [ 240.560045][ T7933] bcachefs (loop6): going read-write [ 241.104694][ T7944] ntfs3(loop4): This driver is compiled without CONFIG_NTFS3_64BIT_CLUSTER (like windows driver). [ 241.104694][ T7944] Volume contains 64 bits run: vcn 0, lcn ffffe00000009000, len 13. [ 241.104694][ T7944] Activate CONFIG_NTFS3_64BIT_CLUSTER to process this case [ 241.179379][ T7944] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 241.192663][ T7978] loop1: detected capacity change from 0 to 256 [ 241.210780][ T7933] bcachefs (loop6): initializing freespace [ 241.256052][ T7944] ntfs3(loop4): Failed to load $Secure (-95). [ 241.318466][ T7944] ntfs3(loop4): Failed to initialize $Secure (-95). [ 241.332464][ T7978] FAT-fs (loop1): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 242.189210][ T6514] bcachefs (loop6): clean shutdown complete, journal seq 8 [ 242.293049][ T67] FAT-fs (loop1): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 242.510738][ T7996] loop1: detected capacity change from 0 to 1024 [ 242.543528][ T7996] hfsplus: Unknown parameter '' [ 242.809484][ T8005] loop1: detected capacity change from 0 to 128 [ 242.832835][ T7975] loop5: detected capacity change from 0 to 32768 [ 242.855843][ T8005] EXT4-fs: Ignoring removed nobh option [ 242.914040][ T7944] loop4: detected capacity change from 0 to 32768 [ 242.921740][ T8005] EXT4-fs error (device loop1): __ext4_fill_super:5500: inode #2: comm syz.1.373: iget: checksum invalid [ 242.955322][ T8005] EXT4-fs (loop1): get root inode failed [ 242.982390][ T8005] EXT4-fs (loop1): mount failed [ 243.272226][ T8017] netlink: 8 bytes leftover after parsing attributes in process `syz.1.376'. [ 245.994018][ T8050] loop1: detected capacity change from 0 to 16 [ 246.015669][ T7975] workqueue: Failed to create a rescuer kthread for wq "bcachefs": -EINTR [ 246.022765][ T8052] loop4: detected capacity change from 0 to 512 [ 246.040490][ T8050] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 246.116494][ T8050] bridge2: entered promiscuous mode [ 246.137173][ T8050] bridge2: entered allmulticast mode [ 246.194926][ T8050] team0: Port device bridge2 added [ 246.427533][ T6712] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 246.597180][ T6712] usb 2-1: Using ep0 maxpacket: 8 [ 246.631970][ T6712] usb 2-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 246.641342][ T6712] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.670968][ T6712] usb 2-1: Product: syz [ 246.680968][ T6712] usb 2-1: Manufacturer: syz [ 246.692321][ T6712] usb 2-1: SerialNumber: syz [ 246.714113][ T6712] usb 2-1: config 0 descriptor?? [ 246.735118][ T6712] usb 2-1: bad CDC descriptors [ 246.752750][ T6712] usb 2-1: unsupported MDLM descriptors [ 247.443135][ T7975] bcachefs: bch2_fs_get_tree() error: ENOMEM_fs_other_alloc [ 247.517158][ T10] usb 2-1: USB disconnect, device number 12 [ 247.794511][ T8093] loop4: detected capacity change from 0 to 8192 [ 248.081613][ T8086] loop6: detected capacity change from 0 to 32768 [ 248.131466][ T8086] btrfs: Unknown parameter 'noinode_cache' [ 248.155366][ T8101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.226572][ T8101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.147927][ T5931] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 249.307197][ T5931] usb 5-1: device descriptor read/64, error -71 [ 249.487468][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 249.568039][ T5931] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 249.818644][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 249.837165][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 249.846075][ T9] usb 2-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 250.623041][ T8131] loop6: detected capacity change from 0 to 131072 [ 250.644322][ T5931] usb 5-1: device descriptor read/64, error -71 [ 250.752653][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.792087][ T9] usb 2-1: config 0 descriptor?? [ 251.052538][ T5931] usb usb5-port1: attempt power cycle [ 251.068133][ T8131] F2FS-fs (loop6): Test dummy encryption mode enabled [ 251.094549][ T8117] netlink: 'syz.1.390': attribute type 5 has an invalid length. [ 251.111067][ T8131] F2FS-fs (loop6): invalid crc value [ 251.195075][ T8131] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 251.206475][ T8131] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 251.242114][ T8131] fscrypt: AES-256-XTS using implementation "xts-aes-aesni-avx" [ 251.310901][ T30] audit: type=1800 audit(1753066760.922:13): pid=8131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.393" name="file1" dev="loop6" ino=11 res=0 errno=0 [ 252.422546][ T8169] loop5: detected capacity change from 0 to 1024 [ 252.848252][ T9] Bluetooth: Can't get state to change to load ram patch err [ 252.856248][ T9] Bluetooth: Loading patch file failed [ 252.862494][ T9] ath3k 2-1:0.0: probe with driver ath3k failed with error -71 [ 253.070356][ T9] usb 2-1: USB disconnect, device number 13 [ 253.528560][ T8182] netlink: 4 bytes leftover after parsing attributes in process `syz.4.401'. [ 253.967645][ T8188] loop1: detected capacity change from 0 to 512 [ 253.982224][ T8187] loop5: detected capacity change from 0 to 512 [ 253.986018][ T8178] loop4: detected capacity change from 0 to 4096 [ 254.034659][ T8187] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 254.058122][ T8178] ntfs3: Unknown parameter 'nohide_dot_file—šANRpŒzÎs' [ 254.090732][ T8188] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.402: attempt to clear invalid blocks 2 len 1 [ 254.096321][ T8187] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 254.443913][ T8188] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 254.473313][ T8188] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.402: invalid indirect mapped block 1819239214 (level 0) [ 254.502708][ T8187] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ee018, mo2=0002] [ 254.636569][ T8188] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.402: invalid indirect mapped block 1819239214 (level 1) [ 254.658007][ T8187] System zones: 1-12 [ 254.662402][ T8187] EXT4-fs (loop5): 1 truncate cleaned up [ 254.699155][ T8187] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.799379][ T8188] EXT4-fs (loop1): 1 truncate cleaned up [ 254.983670][ T8188] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.547338][ T9] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 255.559922][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.567803][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.739168][ T9] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 255.885527][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 256.000771][ T9] usb 6-1: config 0 has no interface number 0 [ 256.033330][ T9] usb 6-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 256.088497][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.096540][ T9] usb 6-1: Product: syz [ 256.117251][ T9] usb 6-1: Manufacturer: syz [ 256.121983][ T9] usb 6-1: SerialNumber: syz [ 256.163322][ T9] usb 6-1: config 0 descriptor?? [ 256.188574][ T5928] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 256.200128][ T9] ims_pcu 6-1:0.41: probe with driver ims_pcu failed with error -22 [ 256.747676][ T5928] usb 2-1: config 0 has an invalid interface number: 170 but max is 0 [ 256.772010][ T5928] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 256.804846][ T5928] usb 2-1: config 0 has no interface number 0 [ 256.860674][ T5928] usb 2-1: config 0 interface 170 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 257.116664][ T5928] usb 2-1: config 0 interface 170 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 257.247543][ T5841] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.269876][ T5928] usb 2-1: New USB device found, idVendor=07b0, idProduct=0007, bcdDevice=17.c6 [ 257.285033][ T8222] netlink: 132 bytes leftover after parsing attributes in process `syz.6.407'. [ 257.335699][ T8217] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 257.363233][ T5928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.419713][ T5928] usb 2-1: config 0 descriptor?? [ 257.506841][ T10] usb 6-1: USB disconnect, device number 9 [ 257.527828][ T5928] usb 2-1: can't set config #0, error -71 [ 257.540388][ T5928] usb 2-1: USB disconnect, device number 14 [ 257.568865][ T8225] loop4: detected capacity change from 0 to 16 [ 257.606991][ T8225] erofs (device loop4): mounted with root inode @ nid 36. [ 257.690140][ T6236] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.873321][ T30] audit: type=1326 audit(1753066767.502:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8228 comm="syz.1.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f664b98e9a9 code=0x7fc00000 [ 258.153472][ T8246] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(11) [ 258.160123][ T8246] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 258.187498][ T8246] vhci_hcd vhci_hcd.0: Device attached [ 258.216082][ T8249] loop4: detected capacity change from 0 to 512 [ 258.252585][ T8246] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(13) [ 258.259252][ T8246] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 258.319023][ T8249] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.377031][ T8249] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 258.427171][ T5928] usb 43-1: new high-speed USB device number 2 using vhci_hcd [ 259.316605][ T8259] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(16) [ 259.323309][ T8259] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 260.574025][ T8259] vhci_hcd vhci_hcd.0: Device attached [ 260.655149][ T8246] vhci_hcd vhci_hcd.0: Device attached [ 260.668277][ T8266] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 260.804094][ T8246] vhci_hcd vhci_hcd.0: pdev(5) rhport(4) sockfd(15) [ 260.810710][ T8246] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 260.841336][ T8246] vhci_hcd vhci_hcd.0: Device attached [ 260.860297][ T8246] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 260.910111][ T8259] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 261.037699][ T8246] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 261.054025][ T8246] vhci_hcd vhci_hcd.0: port 0 already used [ 261.073475][ T8253] vhci_hcd: connection closed [ 261.075073][ T8260] vhci_hcd: connection closed [ 261.075810][ T8247] vhci_hcd: connection reset by peer [ 261.141756][ T8275] netlink: 104 bytes leftover after parsing attributes in process `syz.3.414'. [ 261.217153][ T8276] netlink: 24 bytes leftover after parsing attributes in process `syz.3.414'. [ 262.041517][ T3555] vhci_hcd: stop threads [ 262.045934][ T3555] vhci_hcd: release socket [ 263.183584][ T3555] vhci_hcd: disconnect device [ 263.190014][ T3555] vhci_hcd: stop threads [ 263.194389][ T3555] vhci_hcd: release socket [ 263.199432][ T3555] vhci_hcd: disconnect device [ 263.204504][ T3555] vhci_hcd: stop threads [ 263.220069][ T8267] vhci_hcd: connection closed [ 263.225092][ T3555] vhci_hcd: release socket [ 263.252408][ T3555] vhci_hcd: disconnect device [ 263.268472][ T3555] vhci_hcd: stop threads [ 263.276254][ T3555] vhci_hcd: release socket [ 263.285353][ T3555] vhci_hcd: disconnect device [ 263.311005][ T8262] pimreg: entered allmulticast mode [ 263.421271][ T8263] pimreg: left allmulticast mode [ 263.617393][ T8289] lo: entered allmulticast mode [ 264.638943][ T8306] loop6: detected capacity change from 0 to 8 [ 264.667029][ T8306] cramfs: empty filesystem [ 264.689218][ T6468] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.701716][ T6413] udevd[6413]: incorrect cramfs checksum on /dev/loop6 [ 264.742115][ T8311] netlink: 'syz.5.419': attribute type 10 has an invalid length. [ 264.763796][ T8312] loop1: detected capacity change from 0 to 128 [ 264.809580][ T6413] udevd[6413]: incorrect cramfs checksum on /dev/loop6 [ 264.866312][ T8317] netlink: 'syz.3.423': attribute type 9 has an invalid length. [ 264.894343][ T8312] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 264.948072][ T8312] qnx6: superblock #1 checksum error [ 265.022316][ T8321] netlink: 'syz.6.424': attribute type 2 has an invalid length. [ 265.110987][ T5928] vhci_hcd: vhci_device speed not set [ 265.181552][ T8329] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(11) [ 265.188288][ T8329] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 265.216177][ T8329] vhci_hcd vhci_hcd.0: Device attached [ 265.253893][ T8329] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(13) [ 265.260531][ T8329] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 265.626155][ T8329] vhci_hcd vhci_hcd.0: Device attached [ 265.675694][ T5928] usb 43-1: new low-speed USB device number 3 using vhci_hcd [ 265.808706][ T8339] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(16) [ 265.815352][ T8339] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 265.908239][ T8329] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 265.977283][ T8339] vhci_hcd vhci_hcd.0: Device attached [ 266.044156][ T8339] vhci_hcd vhci_hcd.0: pdev(5) rhport(4) sockfd(18) [ 266.050807][ T8339] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 266.059314][ T8329] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 266.077100][ T30] audit: type=1326 audit(1753066775.712:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8344 comm="syz.6.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f235fd8e9a9 code=0x7ffc0000 [ 266.117066][ T8339] vhci_hcd vhci_hcd.0: Device attached [ 266.132924][ T8329] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 266.169122][ T8329] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 266.180105][ T8352] loop4: detected capacity change from 0 to 8 [ 266.187362][ T30] audit: type=1326 audit(1753066775.712:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8344 comm="syz.6.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7f235fd8e9a9 code=0x7ffc0000 [ 266.251144][ T8352] SQUASHFS error: lzo decompression failed, data probably corrupt [ 266.280739][ T30] audit: type=1326 audit(1753066775.712:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8344 comm="syz.6.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f235fd8e9a9 code=0x7ffc0000 [ 266.306641][ T8352] SQUASHFS error: Failed to read block 0x91: -5 [ 266.331346][ T8352] SQUASHFS error: Unable to read metadata cache entry [8f] [ 266.375886][ T8352] SQUASHFS error: Unable to read inode 0x11f [ 266.405894][ T8329] vhci_hcd vhci_hcd.0: port 0 already used [ 266.415428][ T30] audit: type=1326 audit(1753066775.712:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8344 comm="syz.6.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f235fd8e9a9 code=0x7ffc0000 [ 266.622577][ T8346] vhci_hcd: connection closed [ 266.638167][ T8330] vhci_hcd: connection reset by peer [ 266.648629][ T8340] vhci_hcd: connection closed [ 266.653379][ T8333] vhci_hcd: connection closed [ 266.716132][ T67] vhci_hcd: stop threads [ 266.987141][ T30] audit: type=1326 audit(1753066775.712:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8344 comm="syz.6.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f235fd8e9e3 code=0x7ffc0000 [ 267.010496][ T67] vhci_hcd: release socket [ 267.015038][ T67] vhci_hcd: disconnect device [ 267.047136][ T67] vhci_hcd: stop threads [ 267.056975][ T67] vhci_hcd: release socket [ 267.070836][ T67] vhci_hcd: disconnect device [ 267.085954][ T67] vhci_hcd: stop threads [ 267.090567][ T30] audit: type=1326 audit(1753066776.722:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8344 comm="syz.6.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f235fd8d45f code=0x7ffc0000 [ 267.137361][ T67] vhci_hcd: release socket [ 267.157706][ T67] vhci_hcd: disconnect device [ 267.191641][ T67] vhci_hcd: stop threads [ 267.234176][ T67] vhci_hcd: release socket [ 267.286107][ T67] vhci_hcd: disconnect device [ 267.712371][ T8370] trusted_key: encrypted_key: insufficient parameters specified [ 267.847846][ T8372] loop5: detected capacity change from 0 to 64 [ 267.849028][ T5165] Bluetooth: hci3: command 0x0406 tx timeout [ 267.995787][ T8372] hfs: unable to locate alternate MDB [ 268.027318][ T8372] hfs: continuing without an alternate MDB [ 268.516782][ T8383] loop1: detected capacity change from 0 to 2048 [ 268.547169][ T30] audit: type=1326 audit(1753066778.182:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8344 comm="syz.6.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f235fd8ea37 code=0x7ffc0000 [ 268.627587][ T8345] loop6: detected capacity change from 0 to 32768 [ 268.644424][ T30] audit: type=1326 audit(1753066778.252:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8344 comm="syz.6.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f235fd8d310 code=0x7ffc0000 [ 268.692305][ T8383] hpfs: hpfs_map_sector(): read error [ 268.727801][ T8345] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 268.757567][ T30] audit: type=1326 audit(1753066778.252:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8344 comm="syz.6.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f235fd8e5ab code=0x7ffc0000 [ 268.911513][ T30] audit: type=1326 audit(1753066778.312:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8344 comm="syz.6.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f235fd8d60a code=0x7ffc0000 [ 268.977250][ T5931] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 269.149361][ T8399] can0: slcan on ttyS3. [ 269.500392][ T8345] XFS (loop6): Ending clean mount [ 269.548433][ T8382] can0 (unregistered): slcan off ttyS3. [ 269.550355][ T5931] usb 6-1: Using ep0 maxpacket: 16 [ 269.583319][ T5931] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 269.637193][ T5931] usb 6-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 269.698926][ T5931] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.740741][ T6514] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 269.768013][ T5931] usb 6-1: config 0 descriptor?? [ 269.787349][ T5931] gspca_main: spca501-2.14.0 probing 0000:0000 [ 270.245798][ T5931] gspca_spca501: reg write: error -71 [ 270.277134][ T5931] spca501 6-1:0.0: Reg write failed for 0x02,0xa048,0x00 [ 270.284303][ T5931] spca501 6-1:0.0: probe with driver spca501 failed with error -22 [ 270.356999][ T5931] usb 6-1: USB disconnect, device number 10 [ 270.565628][ T8419] loop6: detected capacity change from 0 to 128 [ 270.739137][ T8419] ext4: Unknown parameter 'smackfshat' [ 270.947231][ T5928] vhci_hcd: vhci_device speed not set [ 271.119057][ T5165] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 271.507602][ T8419] netlink: 8 bytes leftover after parsing attributes in process `syz.6.440'. [ 272.809787][ T8453] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 272.809822][ T8453] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 273.027490][ T5850] Bluetooth: hci1: command 0x0406 tx timeout [ 273.192508][ T8458] loop6: detected capacity change from 0 to 8192 [ 273.416711][ T8474] 9pnet_fd: Insufficient options for proto=fd [ 273.647214][ T5928] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 274.358940][ T5928] usb 7-1: config 0 has an invalid interface number: 200 but max is 0 [ 274.375582][ T5928] usb 7-1: config 0 has no interface number 0 [ 274.382094][ T5928] usb 7-1: config 0 interface 200 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 274.396615][ T5928] usb 7-1: config 0 interface 200 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 274.413075][ T5928] usb 7-1: config 0 interface 200 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 274.441123][ T5928] usb 7-1: config 0 interface 200 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1023 [ 274.481984][ T5928] usb 7-1: config 0 interface 200 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1023 [ 274.523949][ T5928] usb 7-1: config 0 interface 200 altsetting 0 has a duplicate endpoint with address 0x82, skipping [ 274.564558][ T5928] usb 7-1: config 0 interface 200 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 274.603034][ T8492] loop1: detected capacity change from 0 to 2048 [ 274.617888][ T5928] usb 7-1: config 0 interface 200 altsetting 0 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 274.646566][ T5928] usb 7-1: config 0 interface 200 altsetting 0 has a duplicate endpoint with address 0x8, skipping [ 274.669457][ T5928] usb 7-1: Dual-Role OTG device on HNP port [ 274.675768][ T5928] usb 7-1: New USB device found, idVendor=05d1, idProduct=1021, bcdDevice=7d.14 [ 274.723997][ T5928] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.746754][ T8492] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 274.780354][ T5928] usb 7-1: Product: syz [ 274.784672][ T5928] usb 7-1: Manufacturer: syz [ 274.797905][ T5928] usb 7-1: SerialNumber: syz [ 274.805312][ T5928] usb 7-1: config 0 descriptor?? [ 274.824141][ T8473] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 274.832759][ T8473] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 274.844869][ T8473] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 274.863674][ T5928] ftdi_sio 7-1:0.200: FTDI USB Serial Device converter detected [ 274.878961][ T8500] netlink: 'syz.3.458': attribute type 1 has an invalid length. [ 274.879901][ T5928] ftdi_sio ttyUSB0: unknown device type: 0x7d14 [ 274.892901][ T8500] netlink: 40 bytes leftover after parsing attributes in process `syz.3.458'. [ 274.896429][ T8500] netlink: 'syz.3.458': attribute type 1 has an invalid length. [ 274.934725][ T8500] netlink: 40 bytes leftover after parsing attributes in process `syz.3.458'. [ 274.940335][ T8499] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 274.977035][ T6714] lo speed is unknown, defaulting to 1000 [ 275.024411][ T5841] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.069276][ T5928] usb 7-1: USB disconnect, device number 5 [ 275.096184][ T5928] ftdi_sio 7-1:0.200: device disconnected [ 276.151332][ T8504] loop5: detected capacity change from 0 to 32768 [ 276.380510][ T8530] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(11) [ 276.387159][ T8530] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 276.477218][ T8530] vhci_hcd vhci_hcd.0: Device attached [ 276.482953][ T8538] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(14) [ 276.489572][ T8538] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 276.535546][ T8538] vhci_hcd vhci_hcd.0: Device attached [ 276.546326][ T8542] overlayfs: failed to clone upperpath [ 276.578003][ T8545] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 276.604415][ T8504] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nocow [ 276.604440][ T8504] allowing incompatible features above 0.0: (unknown version) [ 276.604454][ T8504] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 276.620990][ T8530] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(13) [ 276.621031][ T8530] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 276.621095][ T8530] vhci_hcd vhci_hcd.0: Device attached [ 276.670216][ T8538] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(20) [ 276.670245][ T8538] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 276.670329][ T8538] vhci_hcd vhci_hcd.0: Device attached [ 276.671853][ T8530] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 276.672896][ T8530] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 276.673590][ T8530] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 276.680807][ T8530] vhci_hcd vhci_hcd.0: pdev(6) rhport(7) sockfd(31) [ 276.680831][ T8530] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 276.680952][ T8530] vhci_hcd vhci_hcd.0: Device attached [ 276.727123][ T6706] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 276.735292][ T8548] vhci_hcd: connection closed [ 276.736929][ T8539] vhci_hcd: connection closed [ 276.737349][ T8543] vhci_hcd: connection closed [ 276.737528][ T2958] vhci_hcd: stop threads [ 276.737555][ T2958] vhci_hcd: release socket [ 276.737570][ T2958] vhci_hcd: disconnect device [ 276.737765][ T2958] vhci_hcd: stop threads [ 276.737774][ T2958] vhci_hcd: release socket [ 276.739070][ T2958] vhci_hcd: disconnect device [ 276.739280][ T2958] vhci_hcd: stop threads [ 276.739290][ T2958] vhci_hcd: release socket [ 276.739304][ T2958] vhci_hcd: disconnect device [ 276.751739][ T8533] vhci_hcd: connection reset by peer [ 276.751949][ T3555] vhci_hcd: stop threads [ 276.751959][ T3555] vhci_hcd: release socket [ 276.751996][ T3555] vhci_hcd: disconnect device [ 276.756412][ T8514] loop1: detected capacity change from 0 to 40427 [ 276.994810][ T8514] F2FS-fs (loop1): invalid crc value [ 277.161052][ T8514] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 277.172496][ T8504] bcachefs (loop5): Using encoding defined by superblock: utf8-12.1.0 [ 277.218305][ T8504] bcachefs (loop5): initializing new filesystem [ 277.239965][ T8514] F2FS-fs (loop1): Start checkpoint disabled! [ 277.261373][ T8514] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 277.317003][ T8550] vhci_hcd: connection closed [ 277.330447][ T2958] vhci_hcd: stop threads [ 277.334775][ T2958] vhci_hcd: release socket [ 277.357597][ T2958] vhci_hcd: disconnect device [ 277.415388][ T8504] bcachefs (loop5): going read-write [ 277.579002][ T8573] trusted_key: encrypted_key: insufficient parameters specified [ 278.073904][ T8504] bcachefs (loop5): initializing freespace [ 278.138084][ T8504] bcachefs (loop5): loop5: Superblock write was silently dropped! (seq 0 expected 42) [ 278.446850][ T6236] bcachefs (loop5): clean shutdown complete, journal seq 8 [ 280.894187][ T8599] loop1: detected capacity change from 0 to 32768 [ 281.440854][ T8599] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 281.440879][ T8599] allowing incompatible features above 0.0: (unknown version) [ 281.440891][ T8599] features: atomic_nlink [ 281.493069][ T8599] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0 [ 281.527148][ T8599] bcachefs (loop1): initializing new filesystem [ 281.543687][ T8639] loop6: detected capacity change from 0 to 1024 [ 281.634036][ T8599] bcachefs (loop1): going read-write [ 281.847497][ T6706] vhci_hcd: vhci_device speed not set [ 282.119276][ T8599] bcachefs (loop1): initializing freespace [ 282.634467][ T8657] loop5: detected capacity change from 0 to 256 [ 282.665091][ T8657] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 282.745005][ T8657] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 282.784027][ T8657] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 282.937928][ T8665] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(11) [ 282.944579][ T8665] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 282.950291][ T8599] lo speed is unknown, defaulting to 1000 [ 283.002421][ T8665] vhci_hcd vhci_hcd.0: Device attached [ 283.030117][ T8670] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(14) [ 283.036831][ T8670] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 283.066755][ T8670] vhci_hcd vhci_hcd.0: Device attached [ 283.087397][ T8665] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(13) [ 283.089492][ T8657] exFAT-fs (loop5): abnormal access to deleted dentry [ 283.094018][ T8665] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 283.110680][ T8665] vhci_hcd vhci_hcd.0: Device attached [ 283.130008][ T8665] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 283.177502][ T8665] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(19) [ 283.184134][ T8665] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 283.216752][ T8665] vhci_hcd vhci_hcd.0: Device attached [ 283.227420][ T8670] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 283.248801][ T8665] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 283.271956][ T8665] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 283.323547][ T8665] vhci_hcd vhci_hcd.0: pdev(6) rhport(7) sockfd(31) [ 283.330186][ T8665] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 283.397272][ T6706] usb 45-1: new low-speed USB device number 3 using vhci_hcd [ 283.508480][ T8665] vhci_hcd vhci_hcd.0: Device attached [ 283.621827][ T8675] vhci_hcd: connection closed [ 283.622031][ T8677] vhci_hcd: connection closed [ 283.628410][ T8666] vhci_hcd: connection reset by peer [ 283.638600][ T8671] vhci_hcd: connection closed [ 283.672852][ T3001] vhci_hcd: stop threads [ 283.698279][ T3001] vhci_hcd: release socket [ 283.709023][ T3001] vhci_hcd: disconnect device [ 283.721699][ T3001] vhci_hcd: stop threads [ 283.748542][ T3001] vhci_hcd: release socket [ 283.792503][ T3001] vhci_hcd: disconnect device [ 283.819667][ T3001] vhci_hcd: stop threads [ 283.840267][ T3001] vhci_hcd: release socket [ 283.853224][ T5841] bcachefs (loop1): clean shutdown complete, journal seq 10 [ 283.858126][ T3001] vhci_hcd: disconnect device [ 283.909734][ T3001] vhci_hcd: stop threads [ 283.919133][ T3001] vhci_hcd: release socket [ 283.932582][ T3001] vhci_hcd: disconnect device [ 284.091924][ T8697] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 284.105803][ T8663] loop4: detected capacity change from 0 to 32768 [ 284.115682][ T8697] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 284.166607][ T8697] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 284.195190][ T8663] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 284.209186][ T8697] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 284.256398][ T8681] vhci_hcd: connection closed [ 284.260676][ T2958] vhci_hcd: stop threads [ 284.296780][ T8697] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 284.320618][ T8697] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 284.321381][ T2958] vhci_hcd: release socket [ 284.351430][ T2958] vhci_hcd: disconnect device [ 284.356204][ T8697] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 284.375046][ T8697] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 284.403191][ T8697] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 284.419761][ T8697] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 284.419867][ T8663] XFS (loop4): Ending clean mount [ 284.647115][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 284.647132][ T30] audit: type=1800 audit(1753066794.282:28): pid=8663 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.475" name="file1" dev="loop4" ino=9286 res=0 errno=0 [ 285.745168][ T6468] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 286.574808][ T8739] trusted_key: encrypted_key: insufficient parameters specified [ 288.513337][ T8759] loop6: detected capacity change from 0 to 128 [ 288.548681][ T6706] vhci_hcd: vhci_device speed not set [ 288.584939][ T8759] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 288.682047][ T8759] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 288.766497][ T8759] EXT4-fs warning (device loop6): ext4_dirblock_csum_verify:375: inode #2: comm syz.6.486: No space for directory leaf checksum. Please run e2fsck -D. [ 288.832399][ T8759] EXT4-fs error (device loop6): htree_dirblock_to_tree:1051: inode #2: comm syz.6.486: Directory block failed checksum [ 288.868165][ T8759] EXT4-fs warning (device loop6): ext4_dirblock_csum_verify:375: inode #2: comm syz.6.486: No space for directory leaf checksum. Please run e2fsck -D. [ 288.927670][ T8759] EXT4-fs error (device loop6): __ext4_find_entry:1626: inode #2: comm syz.6.486: checksumming directory block 0 [ 289.008371][ T8769] loop4: detected capacity change from 0 to 256 [ 289.025339][ T8769] exfat: Deprecated parameter 'utf8' [ 289.048111][ T8777] netlink: 24 bytes leftover after parsing attributes in process `syz.3.489'. [ 289.071445][ T8769] exfat: Unknown parameter 'iocharsetacinuit' [ 289.075716][ T8770] EXT4-fs warning (device loop6): ext4_dirblock_csum_verify:375: inode #2: comm syz.6.486: No space for directory leaf checksum. Please run e2fsck -D. [ 289.143688][ T8769] syzkaller1: entered promiscuous mode [ 289.177289][ T8770] EXT4-fs error (device loop6): __ext4_find_entry:1626: inode #2: comm syz.6.486: checksumming directory block 0 [ 289.188380][ T8769] syzkaller1: entered allmulticast mode [ 289.453103][ T6514] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 289.497982][ T5928] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 289.610043][ T8766] loop1: detected capacity change from 0 to 32768 [ 289.713171][ T8766] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.478 (8766) [ 289.812607][ T8766] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 289.847490][ T8766] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm [ 289.867383][ T5928] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 21004, setting to 1024 [ 289.883283][ T8766] BTRFS info (device loop1): using free-space-tree [ 289.932171][ T5928] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 289.991659][ T5928] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 290.018993][ T5928] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 290.029190][ T5928] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 290.042845][ T5928] usb 5-1: Product: syz [ 290.048110][ T5928] usb 5-1: Manufacturer: syz [ 290.053315][ T5928] usb 5-1: SerialNumber: syz [ 290.188748][ T8774] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 290.302765][ T6714] usb usb46-port1: attempt power cycle [ 290.372100][ T8766] BTRFS info (device loop1): rebuilding free space tree [ 290.552701][ T5928] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 290.679340][ T5841] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 290.821575][ T905] usb 5-1: USB disconnect, device number 9 [ 290.848414][ T905] usblp0: removed [ 290.914175][ T6714] usb usb46-port1: unable to enumerate USB device [ 290.928398][ T5928] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 291.725840][ T5928] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 291.762291][ T5928] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 291.792868][ T5928] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 291.816812][ T5928] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 291.844732][ T5928] usb 7-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 291.857512][ T5928] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.869979][ T5928] usb 7-1: config 0 descriptor?? [ 291.930534][ T8829] netlink: 'syz.5.499': attribute type 1 has an invalid length. [ 292.077949][ T6714] usb 7-1: USB disconnect, device number 6 [ 292.899317][ T8857] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 294.169125][ T8881] loop6: detected capacity change from 0 to 2048 [ 294.198453][ T8881] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 294.270331][ T905] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 294.465291][ T905] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 294.549266][ T905] usb 5-1: New USB device found, idVendor=22b8, idProduct=4b48, bcdDevice=3f.f0 [ 294.585876][ T905] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.603348][ T905] usb 5-1: Product: syz [ 294.660259][ T905] usb 5-1: Manufacturer: syz [ 294.664941][ T905] usb 5-1: SerialNumber: syz [ 294.924595][ T8904] loop6: detected capacity change from 0 to 256 [ 294.940426][ T8862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.976265][ T8862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.976402][ T8904] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 295.021414][ T8862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.063445][ T8862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.076799][ T8904] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 295.106191][ T8862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.166434][ T8862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.205942][ T8862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.231339][ T8904] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 295.474018][ T8862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.540033][ T8862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.814576][ T8917] xt_ecn: cannot match TCP bits for non-tcp packets [ 295.979765][ T8862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.011402][ T30] audit: type=1800 audit(1753066805.462:29): pid=8917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.511" name="file1" dev="loop6" ino=1048628 res=0 errno=0 [ 297.619312][ T8920] netlink: 44 bytes leftover after parsing attributes in process `syz.5.514'. [ 297.680425][ T905] qmi_wwan 5-1:1.0: skipping garbage [ 297.708126][ T905] qmi_wwan 5-1:1.0: probe with driver qmi_wwan failed with error -22 [ 297.727466][ T905] usb 5-1: USB disconnect, device number 10 [ 299.002567][ T8947] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 300.142512][ T8972] netlink: 8 bytes leftover after parsing attributes in process `syz.5.524'. [ 300.487296][ T30] audit: type=1800 audit(1753066810.122:30): pid=8978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.526" name="nullb0" dev="tmpfs" ino=709 res=0 errno=0 [ 302.410446][ T9018] program syz.4.538 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 302.592201][ T9022] x_tables: duplicate underflow at hook 1 [ 303.894107][ T9044] input: syz0 as /devices/virtual/input/input7 [ 304.868783][ T9058] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 304.888545][ T9058] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 305.293081][ T9058] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 305.307364][ T9058] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 305.356942][ T9058] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 305.369016][ T9058] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 305.388441][ T9058] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 305.441729][ T9058] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 305.509851][ T9058] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 305.524410][ T9058] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 306.144396][ T6714] IPVS: starting estimator thread 0... [ 306.157274][ T10] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 306.267836][ T9082] IPVS: using max 46 ests per chain, 110400 per kthread [ 306.337982][ T10] usb 2-1: config 0 has no interfaces? [ 306.877721][ T9088] block device autoloading is deprecated and will be removed. [ 306.941579][ T5850] Bluetooth: hci0: command 0x0406 tx timeout [ 307.233082][ T9093] netlink: 'syz.3.551': attribute type 12 has an invalid length. [ 307.255687][ T9093] netlink: 132 bytes leftover after parsing attributes in process `syz.3.551'. [ 307.306270][ T10] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 307.330662][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.355932][ T5850] Bluetooth: hci4: command 0x0406 tx timeout [ 307.386876][ T10] usb 2-1: Product: syz [ 307.408544][ T10] usb 2-1: Manufacturer: syz [ 307.427552][ T5850] Bluetooth: hci3: command 0x0406 tx timeout [ 307.435279][ T5857] Bluetooth: hci2: command 0x0406 tx timeout [ 307.599057][ T5850] Bluetooth: hci1: command 0x0406 tx timeout [ 307.822221][ T10] usb 2-1: SerialNumber: syz [ 308.054615][ T10] usb 2-1: config 0 descriptor?? [ 308.506374][ T9116] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 309.027432][ T5850] Bluetooth: hci0: command 0x0406 tx timeout [ 309.427284][ T5850] Bluetooth: hci4: command 0x0406 tx timeout [ 309.519528][ T5857] Bluetooth: hci2: command 0x0406 tx timeout [ 309.525671][ T5850] Bluetooth: hci3: command 0x0406 tx timeout [ 309.677422][ T5850] Bluetooth: hci1: command 0x0406 tx timeout [ 310.147208][ T9171] pimreg: entered allmulticast mode [ 310.284859][ T9148] syz.4.555 (9148): drop_caches: 2 [ 310.306212][ T905] usb 2-1: USB disconnect, device number 15 [ 311.770152][ T9199] netlink: 'syz.4.566': attribute type 10 has an invalid length. [ 311.807529][ T9199] team0: Port device team_slave_0 removed [ 314.501537][ T9222] netlink: 12 bytes leftover after parsing attributes in process `syz.1.573'. [ 314.568117][ T9222] netlink: 12 bytes leftover after parsing attributes in process `syz.1.573'. [ 314.672987][ T5850] Bluetooth: hci2: unexpected event for opcode 0x2027 [ 315.347423][ T905] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 315.517449][ T905] usb 7-1: Using ep0 maxpacket: 16 [ 316.552201][ T30] audit: type=1326 audit(1753066826.172:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9253 comm="syz.5.585" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd558f8e9a9 code=0x0 [ 316.966125][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.975051][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.218753][ T905] usb 7-1: unable to get BOS descriptor or descriptor too short [ 318.226574][ T905] usb 7-1: too many configurations: 211, using maximum allowed: 8 [ 318.281787][ T905] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 318.292927][ T905] usb 7-1: can't read configurations, error -71 [ 318.459456][ T9277] fuse: Bad value for 'user_id' [ 318.464390][ T9277] fuse: Bad value for 'user_id' [ 318.718717][ T5850] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 318.727252][ T5850] Bluetooth: hci2: Injecting HCI hardware error event [ 318.738378][ T5850] Bluetooth: hci2: hardware error 0x00 [ 318.812080][ T9283] netlink: 28 bytes leftover after parsing attributes in process `syz.6.593'. [ 319.407221][ T905] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 319.657338][ T905] usb 7-1: Using ep0 maxpacket: 32 [ 319.675763][ T905] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 319.691481][ T905] usb 7-1: config 0 has no interface number 0 [ 319.708812][ T905] usb 7-1: config 0 interface 184 has no altsetting 0 [ 319.734643][ T905] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 319.747207][ T905] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.773027][ T905] usb 7-1: Product: syz [ 319.781754][ T9299] lo speed is unknown, defaulting to 1000 [ 319.789959][ T905] usb 7-1: Manufacturer: syz [ 319.833997][ T905] usb 7-1: SerialNumber: syz [ 319.863536][ T905] usb 7-1: config 0 descriptor?? [ 319.975191][ T905] smsc75xx v1.0.0 [ 319.980966][ T905] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 320.001771][ T905] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -22 [ 320.708947][ T9302] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 320.799756][ T5850] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 322.468884][ T5928] usb 7-1: USB disconnect, device number 8 [ 322.957317][ T5928] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 323.114559][ T5850] Bluetooth: hci1: unexpected subevent 0x03 length: 232 > 9 [ 323.122357][ T5928] usb 7-1: unable to get BOS descriptor or descriptor too short [ 323.135764][ T5928] usb 7-1: too many configurations: 127, using maximum allowed: 8 [ 323.166464][ T5928] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 323.179863][ T5928] usb 7-1: can't read configurations, error -71 [ 323.283630][ T30] audit: type=1326 audit(1753066832.922:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9318 comm="syz.3.604" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f74f5f8e9a9 code=0x0 [ 324.227264][ T5928] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 324.489439][ T5928] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 324.545736][ T5928] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 324.570331][ T5928] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 324.745874][ T5928] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 324.889711][ T5928] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.997396][ T5928] usb 7-1: config 0 descriptor?? [ 325.511320][ T5928] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 325.564559][ T9345] netlink: 4 bytes leftover after parsing attributes in process `syz.3.611'. [ 326.122417][ C0] plantronics 0003:047F:FFFF.0004: hid_field_extract() called with n (132) > 32! (syz.6.607) [ 326.372974][ T6712] usb 7-1: USB disconnect, device number 10 [ 326.549135][ T9346] fido_id[9346]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 327.192953][ T9356] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 327.461105][ T5977] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 327.619918][ T5977] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 327.655099][ T5977] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 327.756499][ T5977] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 327.824936][ T9369] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 327.883440][ T5977] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 327.893204][ T5977] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.964399][ T5977] usb 2-1: Product: syz [ 327.979535][ T5977] usb 2-1: Manufacturer: syz [ 327.986817][ T5977] usb 2-1: SerialNumber: syz [ 328.030012][ T5977] hub 2-1:1.0: bad descriptor, ignoring hub [ 328.045340][ T5977] hub 2-1:1.0: probe with driver hub failed with error -5 [ 328.725997][ T5977] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 16 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 329.169742][ T9336] delete_channel: no stack [ 330.307726][ T5977] usb 2-1: USB disconnect, device number 16 [ 330.424612][ T5977] usblp0: removed [ 330.635123][ T9423] netlink: 8 bytes leftover after parsing attributes in process `syz.6.626'. [ 330.651902][ T9423] netlink: 8 bytes leftover after parsing attributes in process `syz.6.626'. [ 330.662905][ T9423] netlink: 8 bytes leftover after parsing attributes in process `syz.6.626'. [ 330.710243][ T9423] netlink: 8 bytes leftover after parsing attributes in process `syz.6.626'. [ 332.931895][ T9442] bridge_slave_0: left allmulticast mode [ 332.937840][ T9442] bridge_slave_0: left promiscuous mode [ 332.945960][ T9442] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.040293][ T9442] bridge_slave_1: left allmulticast mode [ 333.179250][ T9442] bridge_slave_1: left promiscuous mode [ 333.185000][ T9442] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.297576][ T9442] bond0: (slave bond_slave_0): Releasing backup interface [ 333.431435][ T9442] bond0: (slave bond_slave_1): Releasing backup interface [ 333.701744][ T9442] team0: Port device team_slave_0 removed [ 333.768266][ T9442] team0: Port device team_slave_1 removed [ 333.795239][ T9442] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 333.828368][ T9442] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 333.876149][ T9442] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 333.902017][ T9442] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 334.261126][ T9464] netlink: 36 bytes leftover after parsing attributes in process `syz.3.634'. [ 334.317111][ T9464] netlink: 16 bytes leftover after parsing attributes in process `syz.3.634'. [ 334.336044][ T9464] netlink: 36 bytes leftover after parsing attributes in process `syz.3.634'. [ 334.447877][ T9464] netlink: 36 bytes leftover after parsing attributes in process `syz.3.634'. [ 334.817970][ T9473] af_packet: tpacket_rcv: packet too big, clamped from 624 to 4294967272. macoff=96 [ 335.440042][ T5857] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 335.451173][ T5857] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 335.460500][ T5857] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 335.484966][ T5857] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 335.493147][ T5857] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 335.567399][ T9483] lo speed is unknown, defaulting to 1000 [ 335.747242][ T6712] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 335.981435][ T6712] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 336.027518][ T6712] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 336.130531][ T6712] usb 7-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 336.205217][ T6712] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 336.245856][ T6712] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.309627][ T6712] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 336.332038][ T6712] usb 7-1: invalid MIDI out EP 0 [ 336.462214][ T9483] chnl_net:caif_netlink_parms(): no params data found [ 336.618562][ T9469] udevd[9469]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 336.678205][ T6712] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 336.774428][ T6712] usb 7-1: USB disconnect, device number 11 [ 337.191638][ T9483] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.213634][ T9483] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.277286][ T9483] bridge_slave_0: entered allmulticast mode [ 337.315444][ T9483] bridge_slave_0: entered promiscuous mode [ 337.387460][ T9483] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.394639][ T9483] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.457338][ T9483] bridge_slave_1: entered allmulticast mode [ 337.465121][ T9483] bridge_slave_1: entered promiscuous mode [ 337.624383][ T5857] Bluetooth: hci5: command tx timeout [ 337.961448][ T9483] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 338.063864][ T9483] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 338.403955][ T9483] team0: Port device team_slave_0 added [ 338.412361][ T9483] team0: Port device team_slave_1 added [ 338.535957][ T9483] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 338.548236][ T9483] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.581140][ T9483] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 338.615923][ T9483] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 338.641387][ T9483] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.976285][ T9483] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 339.668001][ T5857] Bluetooth: hci5: command tx timeout [ 340.071618][ T9483] hsr_slave_0: entered promiscuous mode [ 340.125152][ T9483] hsr_slave_1: entered promiscuous mode [ 340.964951][ T9598] binder: BINDER_SET_CONTEXT_MGR already set [ 341.000878][ T9598] binder: 9597:9598 ioctl 4018620d 2000000001c0 returned -16 [ 341.048200][ T9483] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 341.133582][ T9483] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 341.230663][ T9483] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 341.290645][ T9483] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 341.752535][ T5857] Bluetooth: hci5: command tx timeout [ 341.796664][ T9483] 8021q: adding VLAN 0 to HW filter on device bond0 [ 341.840983][ T9483] 8021q: adding VLAN 0 to HW filter on device team0 [ 341.862229][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.869431][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.999590][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.006756][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 342.721296][ T6714] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 342.917270][ T6714] usb 2-1: Using ep0 maxpacket: 8 [ 342.925005][ T6714] usb 2-1: config 0 has an invalid interface number: 246 but max is 0 [ 343.007146][ T6714] usb 2-1: config 0 has no interface number 0 [ 343.041350][ T6714] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 343.098944][ T6714] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.141808][ T6714] usb 2-1: Product: syz [ 343.156285][ T6714] usb 2-1: Manufacturer: syz [ 343.211077][ T6714] usb 2-1: SerialNumber: syz [ 343.242690][ T6714] usb 2-1: config 0 descriptor?? [ 343.847272][ T5857] Bluetooth: hci5: command tx timeout [ 344.024122][ T6714] msi2500 2-1:0.246: Registered as swradio24 [ 344.054312][ T6714] msi2500 2-1:0.246: SDR API is still slightly experimental and functionality changes may follow [ 344.480316][ T9483] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 344.893049][ T30] audit: type=1800 audit(1753066854.532:33): pid=9675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.675" name="file1" dev="tmpfs" ino=737 res=0 errno=0 [ 345.622554][ T9483] veth0_vlan: entered promiscuous mode [ 345.748847][ T9483] veth1_vlan: entered promiscuous mode [ 345.937157][ T6714] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 346.060068][ T9483] veth0_macvtap: entered promiscuous mode [ 346.088959][ T9483] veth1_macvtap: entered promiscuous mode [ 346.361611][ T6714] usb 7-1: config 0 has no interfaces? [ 346.498932][ T9483] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 346.526631][ T6714] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 346.556966][ T6714] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.565881][ T6714] usb 7-1: Product: syz [ 346.578294][ T6714] usb 7-1: Manufacturer: syz [ 346.582932][ T6714] usb 7-1: SerialNumber: syz [ 346.614780][ T6714] usb 7-1: config 0 descriptor?? [ 346.638084][ T9483] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 346.715709][ T9146] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.760513][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.850680][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.114973][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.419657][ T5928] usb 2-1: USB disconnect, device number 17 [ 347.703829][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.726470][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.884010][ T9146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.905729][ T9146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.091515][ T30] audit: type=1326 audit(1753066857.652:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9699 comm="syz.3.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74f5f8e9a9 code=0x7ffc0000 [ 348.209811][ T30] audit: type=1326 audit(1753066857.652:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9699 comm="syz.3.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f74f5f8e9a9 code=0x7ffc0000 [ 348.251917][ T9702] mmap: syz.3.682 (9702) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 348.441172][ T30] audit: type=1326 audit(1753066857.662:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9699 comm="syz.3.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74f5f8e9a9 code=0x7ffc0000 [ 348.628084][ T30] audit: type=1326 audit(1753066857.662:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9699 comm="syz.3.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74f5f8e9a9 code=0x7ffc0000 [ 348.729520][ T30] audit: type=1326 audit(1753066857.662:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9699 comm="syz.3.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f74f5f8e9a9 code=0x7ffc0000 [ 349.163724][ T30] audit: type=1326 audit(1753066857.662:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9699 comm="syz.3.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74f5f8e9a9 code=0x7ffc0000 [ 349.224065][ T30] audit: type=1326 audit(1753066857.662:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9699 comm="syz.3.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f74f5f8e9a9 code=0x7ffc0000 [ 349.327692][ T30] audit: type=1326 audit(1753066857.662:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9699 comm="syz.3.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74f5f8e9a9 code=0x7ffc0000 [ 349.375045][ T30] audit: type=1326 audit(1753066857.662:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9699 comm="syz.3.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f74f5f8e9a9 code=0x7ffc0000 [ 349.466934][ T9702] pim6reg: entered allmulticast mode [ 349.477379][ T9717] pim6reg: left allmulticast mode [ 349.628081][ T6706] usb 7-1: USB disconnect, device number 12 [ 353.764183][ T9780] fuse: Bad value for 'fd' [ 354.048260][ T9785] netlink: 12 bytes leftover after parsing attributes in process `syz.6.711'. [ 354.093523][ T9785] netlink: 40 bytes leftover after parsing attributes in process `syz.6.711'. [ 354.469139][ T5928] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 355.069139][ T5928] usb 2-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da [ 355.098060][ T5928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.234733][ T5928] usb 2-1: config 0 descriptor?? [ 355.269206][ T5928] pwc: Philips SPC 900NC USB webcam detected. [ 355.714695][ T5928] pwc: send_video_command error -71 [ 355.720147][ T5928] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 355.732482][ T5928] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 355.877634][ T5928] usb 2-1: USB disconnect, device number 18 [ 356.666101][ T6714] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 356.907736][ T6714] usb 2-1: config index 0 descriptor too short (expected 65183, got 72) [ 356.921148][ T6714] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 356.941324][ T6714] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.985836][ T6714] usb 2-1: Product: syz [ 357.007275][ T6714] usb 2-1: Manufacturer: syz [ 357.081677][ T6714] usb 2-1: SerialNumber: syz [ 357.130168][ T6714] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 357.228425][ T6706] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 357.486579][ T9815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.567570][ T9815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.576995][ T9815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.592869][ T9815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.658762][ T9833] netlink: 8 bytes leftover after parsing attributes in process `syz.6.726'. [ 357.709631][ T9815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.718923][ T9815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.838893][ T6714] usb 2-1: USB disconnect, device number 19 [ 358.402538][ T6706] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 358.422982][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 358.422997][ T30] audit: type=1326 audit(1753066868.062:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9836 comm="syz.7.727" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f888738e9a9 code=0x0 [ 358.492570][ T6706] ath9k_htc: Failed to initialize the device [ 358.541856][ T6714] usb 2-1: ath9k_htc: USB layer deinitialized [ 359.037109][ T6714] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 359.217117][ T6714] usb 2-1: Using ep0 maxpacket: 32 [ 359.258253][ T6714] usb 2-1: config index 0 descriptor too short (expected 241, got 72) [ 359.361161][ T6714] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 359.462274][ T6714] usb 2-1: config 0 interface 0 altsetting 0 has 6 endpoint descriptors, different from the interface descriptor's value: 5 [ 359.639048][ T6714] usb 2-1: New USB device found, idVendor=110a, idProduct=2210, bcdDevice=bd.da [ 359.707110][ T6714] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.910665][ T6714] usb 2-1: config 0 descriptor?? [ 360.051556][ T6714] usb 2-1: can't set config #0, error -71 [ 360.181146][ T6714] usb 2-1: USB disconnect, device number 20 [ 361.813080][ T9855] syz.1.735 (9855): drop_caches: 2 [ 363.039889][ T9899] tipc: Started in network mode [ 363.057680][ T9899] tipc: Node identity 8e09bc36c75f, cluster identity 4711 [ 363.073422][ T9899] tipc: Enabled bearer , priority 0 [ 363.100966][ T9899] syzkaller0: entered promiscuous mode [ 363.120547][ T9899] syzkaller0: entered allmulticast mode [ 363.209211][ T5928] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 363.367245][ T5928] usb 2-1: Using ep0 maxpacket: 32 [ 363.379747][ T5928] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 363.393245][ T5928] usb 2-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 363.411128][ T5928] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.462850][ T5928] usb 2-1: Product: syz [ 363.478458][ T5928] usb 2-1: Manufacturer: syz [ 363.509131][ T5928] usb 2-1: SerialNumber: syz [ 364.217221][ T6706] tipc: Resetting bearer [ 364.219778][ T5928] tipc: Node number set to 1230421046 [ 364.803560][ T6706] tipc: Disabling bearer [ 366.561705][ T6712] usb 2-1: USB disconnect, device number 21 [ 366.826256][ T9961] binder: BINDER_SET_CONTEXT_MGR already set [ 366.854865][ T9961] binder: 9959:9961 ioctl 4018620d 2000000001c0 returned -16 [ 367.625407][ T9978] netlink: 12 bytes leftover after parsing attributes in process `syz.7.778'. [ 367.644548][ T9961] syz.6.771 (9961): drop_caches: 2 [ 368.497176][ T905] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 368.765650][ T905] usb 7-1: Using ep0 maxpacket: 32 [ 369.108289][ T905] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 369.147130][ T905] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 369.201565][ T9999] lo speed is unknown, defaulting to 1000 [ 369.251821][ T905] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 369.308358][ T905] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.408439][ T905] usb 7-1: config 0 descriptor?? [ 372.703175][ T905] usbhid 7-1:0.0: can't add hid device: -71 [ 372.730398][ T905] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 372.847599][ T905] usb 7-1: USB disconnect, device number 13 [ 374.034849][ T30] audit: type=1326 audit(1753066883.672:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10048 comm="syz.7.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888738e9a9 code=0x7ffc0000 [ 374.115308][ T30] audit: type=1326 audit(1753066883.672:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10048 comm="syz.7.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888738e9a9 code=0x7ffc0000 [ 374.187875][ T30] audit: type=1326 audit(1753066883.722:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10048 comm="syz.7.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f888738e9a9 code=0x7ffc0000 [ 374.237082][ T30] audit: type=1326 audit(1753066883.722:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10048 comm="syz.7.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888738e9a9 code=0x7ffc0000 [ 374.363235][ T30] audit: type=1326 audit(1753066883.722:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10048 comm="syz.7.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888738e9a9 code=0x7ffc0000 [ 374.395304][ T30] audit: type=1326 audit(1753066883.732:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10048 comm="syz.7.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7f888738e9a9 code=0x7ffc0000 [ 374.418079][ T30] audit: type=1326 audit(1753066883.732:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10048 comm="syz.7.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888738e9a9 code=0x7ffc0000 [ 374.440888][ T30] audit: type=1326 audit(1753066883.732:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10048 comm="syz.7.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888738e9a9 code=0x7ffc0000 [ 376.998108][T10087] netlink: 64859 bytes leftover after parsing attributes in process `syz.7.811'. [ 378.309057][T10116] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 378.393978][T10116] team0: Port device batadv1 added [ 378.399828][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.420979][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.377696][T10180] netlink: 4 bytes leftover after parsing attributes in process `syz.7.836'. [ 384.399245][T10180] netlink: 4 bytes leftover after parsing attributes in process `syz.7.836'. [ 386.067930][ T6706] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 386.264306][ T6706] usb 2-1: config 0 has no interfaces? [ 386.274842][ T6706] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 386.307164][ T6706] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.367091][ T6706] usb 2-1: Product: syz [ 386.384507][ T6706] usb 2-1: Manufacturer: syz [ 386.404972][ T6706] usb 2-1: SerialNumber: syz [ 386.431546][ T6706] usb 2-1: config 0 descriptor?? [ 386.676739][T10197] netlink: 24 bytes leftover after parsing attributes in process `syz.1.842'. [ 386.685892][T10197] netlink: 24 bytes leftover after parsing attributes in process `syz.1.842'. [ 387.727292][ T6706] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 388.045059][ T6706] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 388.146609][ T6706] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 388.190600][ T6706] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 388.252488][ T6706] usb 7-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 388.327696][ T6706] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.362508][ T6706] usb 7-1: config 0 descriptor?? [ 388.794344][ T6706] kye 0003:0458:5011.0005: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 388.886329][ T6706] hid_parser_main: 21 callbacks suppressed [ 388.886354][ T6706] kye 0003:0458:5011.0005: unknown main item tag 0x0 [ 389.022053][ T6706] kye 0003:0458:5011.0005: unknown main item tag 0x0 [ 389.067079][ T6706] kye 0003:0458:5011.0005: unknown main item tag 0x0 [ 389.103080][ T6706] kye 0003:0458:5011.0005: unknown main item tag 0x0 [ 389.113193][ T6714] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 389.130970][ T6706] kye 0003:0458:5011.0005: unknown main item tag 0x0 [ 389.197210][ T6706] kye 0003:0458:5011.0005: hidraw0: USB HID vff.fe Device [HID 0458:5011] on usb-dummy_hcd.6-1/input0 [ 389.238584][ T5928] usb 2-1: USB disconnect, device number 22 [ 389.311425][ T6706] kye 0003:0458:5011.0005: tablet-enabling feature report not found [ 389.347453][ T6714] usb 8-1: config 0 has no interfaces? [ 389.355604][ T6714] usb 8-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 389.368617][ T6714] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.407653][ T6706] kye 0003:0458:5011.0005: tablet enabling failed [ 389.414277][ T6714] usb 8-1: Product: syz [ 389.467527][ T6714] usb 8-1: Manufacturer: syz [ 389.472169][ T6714] usb 8-1: SerialNumber: syz [ 389.488255][ T6706] usb 7-1: USB disconnect, device number 14 [ 389.503783][T10234] fido_id[10234]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 389.571752][ T6714] usb 8-1: config 0 descriptor?? [ 390.260885][T10253] binder: BINDER_SET_CONTEXT_MGR already set [ 390.307276][T10253] binder: 10252:10253 ioctl 4018620d 2000000001c0 returned -16 [ 390.871292][T10253] syz.6.863 (10253): drop_caches: 2 [ 393.282930][ T6714] usb 8-1: USB disconnect, device number 2 [ 394.110018][T10301] binder: BINDER_SET_CONTEXT_MGR already set [ 394.167232][T10301] binder: 10300:10301 ioctl 4018620d 2000000001c0 returned -16 [ 394.413383][T10301] syz.1.877 (10301): drop_caches: 2 [ 395.227147][ T9] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 395.393906][ T9] usb 8-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 395.404238][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.433681][ T9] usb 8-1: Product: syz [ 395.448951][ T9] usb 8-1: Manufacturer: syz [ 395.463333][ T9] usb 8-1: SerialNumber: syz [ 395.491565][ T9] usb 8-1: config 0 descriptor?? [ 395.846231][T10317] tipc: Enabled bearer , priority 0 [ 395.853582][T10317] syzkaller0: entered promiscuous mode [ 395.863093][T10317] syzkaller0: entered allmulticast mode [ 396.085346][T10317] tipc: Resetting bearer [ 396.096581][T10313] tipc: Resetting bearer [ 396.248018][T10313] tipc: Disabling bearer [ 396.370452][ T9] usb 8-1: Firmware version (0.0) predates our first public release. [ 396.426887][ T9] usb 8-1: Please update to version 0.2 or newer [ 396.545288][ T9] usb 8-1: USB disconnect, device number 3 [ 397.257245][ T5928] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 397.447360][ T5928] usb 2-1: Using ep0 maxpacket: 32 [ 397.454377][ T5928] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 397.470536][ T5928] usb 2-1: config 0 has no interface number 0 [ 397.500994][ T5928] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 397.525901][ T5928] usb 2-1: config 0 interface 85 has no altsetting 0 [ 397.553643][ T5928] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 397.565985][ T5928] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.636912][ T5928] usb 2-1: Product: syz [ 397.704714][ T5928] usb 2-1: Manufacturer: syz [ 397.776342][ T5928] usb 2-1: SerialNumber: syz [ 397.824081][T10373] PKCS7: Unknown OID: [5] (bad) [ 397.829584][T10373] PKCS7: Only support pkcs7_signedData type [ 397.875152][ T5928] usb 2-1: config 0 descriptor?? [ 398.320865][ T5928] appletouch 2-1:0.85: Geyser mode initialized. [ 398.332871][ T5928] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input9 [ 398.732847][ T5928] usb 2-1: USB disconnect, device number 23 [ 398.738985][ C0] appletouch 2-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 398.922183][ T5928] appletouch 2-1:0.85: input: appletouch disconnected [ 402.576690][T10450] macvlan2: entered promiscuous mode [ 402.811643][T10450] macvlan2: entered allmulticast mode [ 402.847126][ T9] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 403.122368][ T9] usb 7-1: config 0 has no interfaces? [ 403.211397][ T9] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 403.278966][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.384465][ T9] usb 7-1: Product: syz [ 403.432527][ T9] usb 7-1: Manufacturer: syz [ 403.450780][ T9] usb 7-1: SerialNumber: syz [ 403.477498][ T9] usb 7-1: config 0 descriptor?? [ 403.713356][T10449] netlink: 52 bytes leftover after parsing attributes in process `syz.6.923'. [ 406.414840][T10482] netlink: 44 bytes leftover after parsing attributes in process `syz.3.931'. [ 407.180117][ T9] usb 7-1: USB disconnect, device number 15 [ 407.515615][T10493] lo speed is unknown, defaulting to 1000 [ 408.557143][T10528] netlink: 44 bytes leftover after parsing attributes in process `syz.3.943'. [ 409.009552][ T5857] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 409.247163][ T9] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 409.366675][T10546] input: syz0 as /devices/virtual/input/input10 [ 409.629937][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 409.638423][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 62320, setting to 1024 [ 409.677899][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 409.740607][ T9] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 409.750888][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.766143][ T9] usb 2-1: Product: syz [ 409.772642][ T9] usb 2-1: Manufacturer: syz [ 409.782928][ T9] usb 2-1: SerialNumber: syz [ 409.802510][ T9] usb 2-1: config 0 descriptor?? [ 409.808482][T10537] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 409.820864][ T9] hub 2-1:0.0: bad descriptor, ignoring hub [ 409.829995][ T9] hub 2-1:0.0: probe with driver hub failed with error -5 [ 410.090299][ T9] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input11 [ 410.947373][ T5977] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 411.154678][ T5977] usb 7-1: Using ep0 maxpacket: 16 [ 411.177389][ T5977] usb 7-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 411.189092][ T5977] usb 7-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 411.216027][ T5977] usb 7-1: Product: syz [ 411.232456][ T5977] usb 7-1: Manufacturer: syz [ 411.244225][ T5977] usb 7-1: SerialNumber: syz [ 411.316461][ T5977] usb 7-1: config 0 descriptor?? [ 411.545722][ T5977] usb 7-1: USB disconnect, device number 16 [ 411.746882][ T9515] udevd[9515]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 411.902604][ T6712] usb 2-1: USB disconnect, device number 24 [ 412.397454][T10575] netlink: 44 bytes leftover after parsing attributes in process `syz.5.957'. [ 417.048171][ T6712] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 417.206334][ T6712] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 417.230898][ T6712] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 417.297230][ T6712] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 417.487094][ T30] audit: type=1804 audit(1753066927.122:78): pid=10630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.974" name="/newroot/54/file1" dev="fuse" ino=1 res=1 errno=0 [ 417.505875][T10630] lo speed is unknown, defaulting to 1000 [ 417.549856][ T6712] usb 7-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 417.598268][ T6712] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.614259][ T30] audit: type=1800 audit(1753066927.122:79): pid=10630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.974" name="/" dev="fuse" ino=1 res=0 errno=0 [ 417.652676][ T6712] usb 7-1: config 0 descriptor?? [ 417.684185][T10625] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 417.715732][ T30] audit: type=1800 audit(1753066927.122:80): pid=10630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.974" name="/" dev="fuse" ino=1 res=0 errno=0 [ 418.250248][ T6712] aureal 0003:0755:2626.0006: unknown main item tag 0x6 [ 418.307090][ T6712] aureal 0003:0755:2626.0006: report_id 0 is invalid [ 418.487087][ T6712] aureal 0003:0755:2626.0006: item 0 2 1 8 parsing failed [ 418.495080][ T6712] aureal 0003:0755:2626.0006: probe with driver aureal failed with error -22 [ 418.533616][ T6712] usb 7-1: USB disconnect, device number 17 [ 420.049030][T10669] ptrace attach of "./syz-executor exec"[9483] was attempted by "./syz-executor exec"[10669] [ 421.327106][ T5977] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 421.720967][ T5977] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 421.739092][ T5977] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 421.804430][ T5977] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 421.868308][ T5977] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.922969][T10677] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 421.941219][ T5977] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 422.152898][T10677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 422.164261][T10677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 422.412003][ T5977] usb 7-1: USB disconnect, device number 18 [ 423.188244][T10703] syzkaller1: entered promiscuous mode [ 423.228234][T10703] syzkaller1: entered allmulticast mode [ 424.137451][ T5977] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 424.297390][ T5977] usb 2-1: Using ep0 maxpacket: 32 [ 424.325935][ T5977] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 424.335373][ T5977] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.432669][ T5977] usb 2-1: config 0 descriptor?? [ 424.491101][ T5977] gspca_main: sunplus-2.14.0 probing 041e:400b [ 424.893297][ T5977] gspca_sunplus: reg_w_riv err -71 [ 424.900098][ T5977] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 424.939867][ T5977] usb 2-1: USB disconnect, device number 25 [ 425.010697][T10723] lo speed is unknown, defaulting to 1000 [ 425.687357][T10723] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1006'. [ 427.178627][ T6706] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 427.277073][ T9] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 427.380985][ T6706] usb 7-1: Using ep0 maxpacket: 8 [ 427.388542][ T6706] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 427.402627][ T6706] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 427.433019][ T6706] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 427.443068][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 427.448291][ T9] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 427.460114][ T9] usb 8-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 427.488907][ T9] usb 8-1: New USB device strings: Mfr=241, Product=1, SerialNumber=3 [ 427.500737][ T6706] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 427.523852][ T9] usb 8-1: Product: syz [ 427.529381][ T6706] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 427.533712][ T9] usb 8-1: Manufacturer: syz [ 427.574796][ T9] usb 8-1: SerialNumber: syz [ 427.581932][ T6706] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 427.601814][ T9] usb 8-1: config 0 descriptor?? [ 427.602457][ T6706] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.626267][ T9] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 427.885788][ T6706] usb 7-1: usb_control_msg returned -32 [ 427.917116][ T6706] usbtmc 7-1:16.0: can't read capabilities [ 428.597710][ T6706] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 428.619955][T10768] usbtmc 7-1:16.0: usb_control_msg returned -71 [ 428.757186][ T6706] usb 2-1: Using ep0 maxpacket: 16 [ 428.765979][ T6706] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 428.781778][ T6706] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 428.809545][ T6706] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.825770][ T6713] usb 7-1: USB disconnect, device number 19 [ 428.906303][ T6706] usb 2-1: Product: syz [ 428.916277][T10770] tipc: Enabling of bearer rejected, failed to enable media [ 428.934076][ T6706] usb 2-1: Manufacturer: syz [ 428.941363][ T6706] usb 2-1: SerialNumber: syz [ 428.959894][ T6706] usb 2-1: config 0 descriptor?? [ 428.991225][ T6706] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 429.024445][ T6706] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 429.262406][ T9] gspca_zc3xx: reg_w_i err -71 [ 429.596508][ T6706] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 429.877305][ T9] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 429.887245][ T9] gspca_zc3xx 8-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 430.018156][ T9] usb 8-1: USB disconnect, device number 4 [ 430.058938][ T6706] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 430.089829][ T6706] em28xx 2-1:0.0: board has no eeprom [ 430.187379][ T6706] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 430.215419][ T6706] em28xx 2-1:0.0: dvb set to bulk mode. [ 430.237271][ T6712] em28xx 2-1:0.0: Binding DVB extension [ 430.272715][ T6706] usb 2-1: USB disconnect, device number 26 [ 430.289511][ T6706] em28xx 2-1:0.0: Disconnecting em28xx [ 430.429182][ T6712] em28xx 2-1:0.0: Registering input extension [ 430.454359][ T6706] em28xx 2-1:0.0: Closing input extension [ 430.497498][ T9] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 430.530260][ T6706] em28xx 2-1:0.0: Freeing device [ 430.667368][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 430.701390][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 430.721491][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 430.793516][ T9] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 430.817083][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.835743][ T9] usb 8-1: config 0 descriptor?? [ 430.861357][ T9] hub 8-1:0.0: USB hub found [ 431.071454][ T9] hub 8-1:0.0: 1 port detected [ 431.690939][ T9] hub 8-1:0.0: activate --> -90 [ 431.892587][ T6706] usb 8-1: USB disconnect, device number 5 [ 432.226217][T10810] tipc: Enabling of bearer rejected, failed to enable media [ 432.367119][ T6713] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 432.598730][ T6713] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 432.633046][ T6713] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.700912][ T6713] usb 2-1: config 0 descriptor?? [ 432.944977][ T6713] ath6kl: Failed to submit usb control message: -71 [ 432.957083][ T6713] ath6kl: unable to send the bmi data to the device: -71 [ 432.964146][ T6713] ath6kl: Unable to send get target info: -71 [ 432.998015][ T6713] ath6kl: Failed to init ath6kl core: -71 [ 433.047469][ T6713] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 433.234632][ T6713] usb 2-1: USB disconnect, device number 27 [ 433.339793][ T905] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 433.497244][ T905] usb 8-1: Using ep0 maxpacket: 16 [ 433.513587][ T905] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 433.566903][ T905] usb 8-1: config 0 has no interfaces? [ 433.824955][ T905] usb 8-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 433.839503][ T905] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.852460][ T905] usb 8-1: config 0 descriptor?? [ 434.168136][T10825] ip6gre1: entered promiscuous mode [ 434.193098][T10825] netlink: 56 bytes leftover after parsing attributes in process `syz.7.1036'. [ 436.513454][ T905] usb 8-1: USB disconnect, device number 6 [ 437.241836][T10867] lo speed is unknown, defaulting to 1000 [ 439.835755][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.842301][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.372607][T10955] tipc: Enabling of bearer rejected, failed to enable media [ 441.997199][ T905] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 442.340557][ T905] usb 8-1: config 0 has no interfaces? [ 442.485698][ T905] usb 8-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 442.551613][ T905] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.978864][ T905] usb 8-1: Product: syz [ 442.986224][ T905] usb 8-1: Manufacturer: syz [ 443.048983][ T905] usb 8-1: SerialNumber: syz [ 443.090777][ T905] usb 8-1: config 0 descriptor?? [ 443.634311][T10980] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1084'. [ 444.878813][T10992] tipc: Enabling of bearer rejected, failed to enable media [ 445.276484][T10999] tipc: Started in network mode [ 445.305399][T10999] tipc: Node identity 566485f6b3a7, cluster identity 4711 [ 445.371772][T10999] tipc: Enabled bearer , priority 0 [ 445.607322][T11001] syzkaller0: entered promiscuous mode [ 445.613177][T11001] syzkaller0: entered allmulticast mode [ 445.973147][ T6713] tipc: Resetting bearer [ 446.021654][ T6712] usb 8-1: USB disconnect, device number 7 [ 446.214109][ T6713] tipc: Disabling bearer [ 446.543675][ T6712] tipc: Node number set to 3854796278 [ 447.129167][ T30] audit: type=1326 audit(1753066956.772:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11025 comm="syz.1.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f664b98e9a9 code=0x7ffc0000 [ 447.411385][ T30] audit: type=1326 audit(1753066956.772:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11025 comm="syz.1.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f664b98e9a9 code=0x7ffc0000 [ 447.433650][ C1] vkms_vblank_simulate: vblank timer overrun [ 447.497244][ T5928] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 447.657067][ T5928] usb 8-1: Using ep0 maxpacket: 16 [ 447.689760][ T5928] usb 8-1: unable to get BOS descriptor or descriptor too short [ 447.708513][ T5928] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 447.721759][ T5928] usb 8-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 447.774558][ T5928] usb 8-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 447.788758][ T5928] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.860843][ T5928] usb 8-1: Product: syz [ 447.873134][ T5928] usb 8-1: Manufacturer: syz [ 447.890196][ T5928] usb 8-1: SerialNumber: syz [ 447.963829][ T30] audit: type=1326 audit(1753066956.772:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11025 comm="syz.1.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f664b98e9a9 code=0x7ffc0000 [ 447.986003][ C1] vkms_vblank_simulate: vblank timer overrun [ 447.987721][T11038] IPv6: Can't replace route, no match found [ 448.000431][ T905] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 448.159211][ T30] audit: type=1326 audit(1753066956.772:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11025 comm="syz.1.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f664b98e9a9 code=0x7ffc0000 [ 448.181486][ C1] vkms_vblank_simulate: vblank timer overrun [ 448.196105][ T905] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 448.219633][ T905] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.261156][T11029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 448.272016][T11029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 448.316621][ T5977] IPVS: starting estimator thread 0... [ 448.322323][ T905] usb 7-1: Product: syz [ 448.341712][ T905] usb 7-1: Manufacturer: syz [ 448.389073][ T905] usb 7-1: SerialNumber: syz [ 448.393380][ T30] audit: type=1326 audit(1753066956.772:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11025 comm="syz.1.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f664b98e9a9 code=0x7ffc0000 [ 448.415919][ C1] vkms_vblank_simulate: vblank timer overrun [ 448.458140][ T905] usb 7-1: config 0 descriptor?? [ 448.477168][T11040] IPVS: using max 29 ests per chain, 69600 per kthread [ 448.554468][ T30] audit: type=1326 audit(1753066956.772:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11025 comm="syz.1.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f664b98e9a9 code=0x7ffc0000 [ 448.623325][ T30] audit: type=1326 audit(1753066956.772:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11025 comm="syz.1.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f664b98e9a9 code=0x7ffc0000 [ 448.744659][T11035] tipc: Started in network mode [ 448.807646][T11035] tipc: Node identity e61c0532d616, cluster identity 4711 [ 448.815341][T11035] tipc: Enabled bearer , priority 0 [ 448.842689][T11042] syzkaller0: entered promiscuous mode [ 448.903674][T11042] syzkaller0: entered allmulticast mode [ 449.020873][T11042] tipc: Resetting bearer [ 449.043102][T11034] tipc: Resetting bearer [ 449.123581][T11034] tipc: Disabling bearer [ 449.288078][ T905] usb 7-1: Firmware version (0.0) predates our first public release. [ 449.324029][ T905] usb 7-1: Please update to version 0.2 or newer [ 449.690493][ T905] usb 7-1: USB disconnect, device number 20 [ 451.948170][ T5928] usb 8-1: USB disconnect, device number 8 [ 452.797167][ T6712] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 453.177049][ T6712] usb 2-1: Using ep0 maxpacket: 8 [ 453.228881][ T6712] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 453.270610][T11083] tipc: Enabled bearer , priority 0 [ 453.278078][ T6712] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 453.297706][ T6712] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 453.315307][ T6712] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 453.376958][T11083] syzkaller0: entered promiscuous mode [ 453.391648][ T6712] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 453.409145][T11083] syzkaller0: entered allmulticast mode [ 453.453385][T11083] netem: change failed [ 453.465440][ T6712] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.503767][T11083] tipc: Resetting bearer [ 453.685375][T11082] tipc: Resetting bearer [ 453.736700][ T6712] usb 2-1: GET_CAPABILITIES returned 0 [ 453.742690][ T6712] usbtmc 2-1:16.0: can't read capabilities [ 453.759762][T11082] tipc: Disabling bearer [ 454.095352][ T6714] usb 2-1: USB disconnect, device number 28 [ 456.758917][T11105] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 457.338687][T11105] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 457.597677][T11113] netlink: 'syz.7.1125': attribute type 4 has an invalid length. [ 457.657195][T11113] netlink: 17 bytes leftover after parsing attributes in process `syz.7.1125'. [ 458.018964][T11106] delete_channel: no stack [ 460.310260][ T905] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 460.347121][ T5928] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 460.544404][ T905] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 460.554117][ T905] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.570666][ T905] usb 7-1: Product: syz [ 460.586618][ T905] usb 7-1: Manufacturer: syz [ 460.607241][ T905] usb 7-1: SerialNumber: syz [ 460.639309][ T5928] usb 8-1: config 0 has no interfaces? [ 460.653481][ T5928] usb 8-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 460.662627][ T5928] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.685161][ T905] usb 7-1: config 0 descriptor?? [ 460.695425][ T5928] usb 8-1: Product: syz [ 460.707797][ T5928] usb 8-1: Manufacturer: syz [ 460.715987][ T5928] usb 8-1: SerialNumber: syz [ 460.735592][ T5928] usb 8-1: config 0 descriptor?? [ 460.931739][T11162] tipc: Enabled bearer , priority 0 [ 460.939085][T11162] syzkaller0: entered promiscuous mode [ 460.944596][T11162] syzkaller0: entered allmulticast mode [ 461.002192][T11162] tipc: Resetting bearer [ 461.021516][T11160] tipc: Resetting bearer [ 461.041328][T11171] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1147'. [ 461.347957][T11160] tipc: Disabling bearer [ 461.631577][ T905] usb 7-1: Firmware version (0.0) predates our first public release. [ 461.693642][ T905] usb 7-1: Please update to version 0.2 or newer [ 461.907739][ T905] usb 7-1: USB disconnect, device number 21 [ 462.057268][ T5928] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 462.268693][ T5928] usb 2-1: Using ep0 maxpacket: 32 [ 462.281707][ T5928] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 462.326347][ T5928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.372933][ T5928] usb 2-1: config 0 descriptor?? [ 462.403639][ T5857] Bluetooth: hci5: command 0x0406 tx timeout [ 462.486519][ T5928] gspca_main: sunplus-2.14.0 probing 041e:400b [ 463.507632][ T31] INFO: task syz.4.590:9273 blocked for more than 143 seconds. [ 463.635686][ T31] Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 [ 463.643327][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 463.653518][ T31] task:syz.4.590 state:D stack:25096 pid:9273 tgid:9273 ppid:6468 task_flags:0x400040 flags:0x00004004 [ 463.667541][ T31] Call Trace: [ 463.671015][ T31] [ 463.674061][ T31] __schedule+0x1737/0x4d30 [ 463.679352][ T31] ? __lock_acquire+0xab9/0xd20 [ 463.687930][ T31] ? schedule+0x165/0x360 [ 463.692478][ T5928] gspca_sunplus: reg_w_riv err -71 [ 463.702476][ T5928] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 463.711967][ T31] ? __pfx___schedule+0x10/0x10 [ 463.717483][ T5928] usb 2-1: USB disconnect, device number 29 [ 463.724587][ T31] ? schedule+0x91/0x360 [ 463.732585][ T31] schedule+0x165/0x360 [ 463.739594][ T31] schedule_preempt_disabled+0x13/0x30 [ 463.759728][ T31] rwsem_down_write_slowpath+0xbec/0x1030 [ 463.772472][ T31] ? rwsem_down_write_slowpath+0x7ec/0x1030 [ 463.792364][ T31] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 463.819581][ T31] ? __lock_acquire+0xab9/0xd20 [ 463.824577][ T31] ? userfaultfd_release_all+0x15a/0x5e0 [ 463.843063][ T31] down_write+0x1ab/0x1f0 [ 463.847717][ T31] ? __pfx_down_write+0x10/0x10 [ 463.852633][ T31] ? locks_remove_file+0x344/0xea0 [ 463.860890][ T31] userfaultfd_release_all+0x15a/0x5e0 [ 463.867471][ T31] ? ima_file_free+0x150/0x460 [ 463.873499][ T31] ? __pfx_userfaultfd_release_all+0x10/0x10 [ 463.879908][ T31] userfaultfd_release+0xe7/0x1b0 [ 463.886242][ T31] ? __pfx_userfaultfd_release+0x10/0x10 [ 463.914071][ T31] ? evm_file_release+0x108/0x1e0 [ 463.925011][ T31] ? __pfx_userfaultfd_release+0x10/0x10 [ 463.934686][ T31] __fput+0x44c/0xa70 [ 463.939055][ T31] task_work_run+0x1d4/0x260 [ 463.943759][ T31] ? __pfx_task_work_run+0x10/0x10 [ 463.949831][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 463.955415][ T31] exit_to_user_mode_loop+0xec/0x110 [ 463.961162][ T31] do_syscall_64+0x2bd/0x3b0 [ 463.965922][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.972482][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 463.979154][ T31] ? clear_bhb_loop+0x60/0xb0 [ 463.983961][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.990299][ T31] RIP: 0033:0x7f02b558e9a9 [ 463.994825][ T31] RSP: 002b:00007ffcccc0edd8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 464.003996][ T31] RAX: 0000000000000000 RBX: 00007f02b57b7ba0 RCX: 00007f02b558e9a9 [ 464.012756][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 464.021382][ T31] RBP: 00007f02b57b7ba0 R08: 000000000000008c R09: 00000008ccc0f0cf [ 464.107651][ T5928] usb 8-1: USB disconnect, device number 9 [ 464.158908][ T31] R10: 00007f02b57b7ac0 R11: 0000000000000246 R12: 000000000004de47 [ 464.167641][ T31] R13: 00007ffcccc0eed0 R14: ffffffffffffffff R15: 00007ffcccc0eef0 [ 464.175793][ T31] [ 464.185858][ T31] [ 464.185858][ T31] Showing all locks held in the system: [ 464.223795][ T31] 1 lock held by khungtaskd/31: [ 464.252855][ T31] #0: ffffffff8e13d8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 464.280299][ T31] 2 locks held by kworker/u8:3/49: [ 464.286161][ T31] #0: ffff888143ec4148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 464.309479][ T31] #1: ffffc90000b97bc0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 464.324642][ T31] 2 locks held by getty/5604: [ 464.335111][ T31] #0: ffff88814d56e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 464.350417][ T31] #1: ffffc900036c32f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 464.363283][ T31] 1 lock held by syz.4.590/9273: [ 464.373507][ T31] #0: ffff88807763e2a0 (&mm->mmap_lock){++++}-{4:4}, at: userfaultfd_release_all+0x15a/0x5e0 [ 464.386147][ T31] 1 lock held by syz.4.590/9274: [ 464.394336][ T31] 1 lock held by syz.4.590/9275: [ 464.401401][ T31] #0: ffff88807763e2a0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0xcc/0x2c0 [ 464.413997][ T31] 2 locks held by syz.3.1148/11174: [ 464.422562][ T31] [ 464.424988][ T31] ============================================= [ 464.424988][ T31] [ 464.442124][ T31] NMI backtrace for cpu 0 [ 464.442150][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 464.442177][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 464.442188][ T31] Call Trace: [ 464.442195][ T31] [ 464.442203][ T31] dump_stack_lvl+0x189/0x250 [ 464.442231][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 464.442253][ T31] ? __pfx__printk+0x10/0x10 [ 464.442291][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 464.442320][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 464.442348][ T31] ? __pfx__printk+0x10/0x10 [ 464.442378][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 464.442410][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 464.442438][ T31] watchdog+0xf93/0xfe0 [ 464.442470][ T31] ? watchdog+0x1de/0xfe0 [ 464.442502][ T31] kthread+0x70e/0x8a0 [ 464.442528][ T31] ? __pfx_watchdog+0x10/0x10 [ 464.442553][ T31] ? __pfx_kthread+0x10/0x10 [ 464.442577][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 464.442604][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 464.442630][ T31] ? __pfx_kthread+0x10/0x10 [ 464.442653][ T31] ret_from_fork+0x3f9/0x770 [ 464.442675][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 464.442699][ T31] ? __switch_to_asm+0x39/0x70 [ 464.442720][ T31] ? __switch_to_asm+0x33/0x70 [ 464.442742][ T31] ? __pfx_kthread+0x10/0x10 [ 464.442764][ T31] ret_from_fork_asm+0x1a/0x30 [ 464.442847][ T31] [ 464.442856][ T31] Sending NMI from CPU 0 to CPUs 1: [ 464.592789][ C1] NMI backtrace for cpu 1 [ 464.592807][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 464.592826][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 464.592837][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 464.592867][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 73 16 10 00 f3 0f 1e fa fb f4 c8 e8 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 464.592881][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 464.592896][ C1] RAX: 8943910c7a013d00 RBX: ffffffff81968a38 RCX: 8943910c7a013d00 [ 464.592909][ C1] RDX: 0000000000000001 RSI: ffffffff8d992221 RDI: ffffffff8be34680 [ 464.592921][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f5b R09: 1ffff110170e65eb [ 464.592933][ C1] R10: dffffc0000000000 R11: ffffed10170e65ec R12: ffffffff8fa2a730 [ 464.592962][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110039d5b40 [ 464.592973][ C1] FS: 0000000000000000(0000) GS:ffff888125ce3000(0000) knlGS:0000000000000000 [ 464.592987][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 464.592998][ C1] CR2: 00007f235ff83178 CR3: 0000000076484000 CR4: 00000000003526f0 [ 464.593032][ C1] Call Trace: [ 464.593038][ C1] [ 464.593044][ C1] default_idle+0x13/0x20 [ 464.593064][ C1] default_idle_call+0x74/0xb0 [ 464.593085][ C1] do_idle+0x1e8/0x510 [ 464.593105][ C1] ? __pfx_do_idle+0x10/0x10 [ 464.593131][ C1] cpu_startup_entry+0x44/0x60 [ 464.593148][ C1] start_secondary+0x101/0x110 [ 464.593171][ C1] common_startup_64+0x13e/0x147 [ 464.593202][ C1] [ 464.594248][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 464.762542][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 464.773821][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 464.783876][ T31] Call Trace: [ 464.787153][ T31] [ 464.790090][ T31] dump_stack_lvl+0x99/0x250 [ 464.794690][ T31] ? __asan_memcpy+0x40/0x70 [ 464.799289][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 464.804490][ T31] ? __pfx__printk+0x10/0x10 [ 464.809098][ T31] vpanic+0x281/0x750 [ 464.813083][ T31] ? __pfx_vpanic+0x10/0x10 [ 464.817587][ T31] ? vpanic+0x10/0x750 [ 464.821657][ T31] panic+0xb9/0xc0 [ 464.825378][ T31] ? __pfx_panic+0x10/0x10 [ 464.829798][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 464.835179][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 464.841340][ T31] watchdog+0xfd2/0xfe0 [ 464.845509][ T31] ? watchdog+0x1de/0xfe0 [ 464.849863][ T31] kthread+0x70e/0x8a0 [ 464.853937][ T31] ? __pfx_watchdog+0x10/0x10 [ 464.858616][ T31] ? __pfx_kthread+0x10/0x10 [ 464.863207][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 464.868408][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 464.873624][ T31] ? __pfx_kthread+0x10/0x10 [ 464.878215][ T31] ret_from_fork+0x3f9/0x770 [ 464.882808][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 464.887916][ T31] ? __switch_to_asm+0x39/0x70 [ 464.892681][ T31] ? __switch_to_asm+0x33/0x70 [ 464.897443][ T31] ? __pfx_kthread+0x10/0x10 [ 464.902036][ T31] ret_from_fork_asm+0x1a/0x30 [ 464.906812][ T31] [ 464.910237][ T31] Kernel Offset: disabled [ 464.914563][ T31] Rebooting in 86400 seconds..