last executing test programs: 13m34.978411812s ago: executing program 2 (id=162): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r3, 0x40146f2c, &(0x7f00000000c0)={0x8001, 0x0, 0x3, 0x13, 0x4}) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x10b442, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000002c0)) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r3, 0x40026f34, &(0x7f0000000280)=0x1) prctl$PR_GET_SECCOMP(0x15) 13m33.824434887s ago: executing program 2 (id=166): epoll_create1(0x0) memfd_create(0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x28}}, 0x0) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, 0x0) creat(0x0, 0xd931d3864d39dcdb) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000000040)) timer_settime(0x0, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000180)="e5", 0x1) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) 13m32.146034034s ago: executing program 2 (id=171): syz_open_dev$vim2m(&(0x7f0000000080), 0x5, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x8) r0 = syz_open_procfs(0x0, 0x0) socket(0x10, 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r2, 0x6, 0xd, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x18) r3 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) fanotify_mark(r3, 0x1, 0x1000, r3, &(0x7f0000000240)='./file0\x00') socket$nl_xfrm(0x10, 0x3, 0x6) socket$igmp(0x2, 0x3, 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'hsr0\x00'}) socket$nl_sock_diag(0x10, 0x3, 0x4) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x803, 0x300, 0x0, 0x101, 0x300}}) preadv(r0, &(0x7f0000000340), 0x0, 0x2c2, 0xca) 13m27.362839007s ago: executing program 2 (id=183): openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x6b7, 0x80, 0x800, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x800) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x0) 13m25.214329353s ago: executing program 2 (id=188): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000640)='./file1\x00', 0x0, &(0x7f0000000080)={[{@nobarrier}, {@nls={'nls', 0x3d, 'cp855'}}, {}]}, 0x1, 0x5c8, &(0x7f00000006c0)="$eJzs3c9rFO8ZAPBndpNNNoW4avxRWzBYKKKo2Y3YFgpNi5QcRIRevIZmNcFNlGQtq4eSFv8Qe0hPHnopQunBg+ce/AcCPRYKPYZe8mVmZzerxphokt18/Xzw3XnffWeeeedx5mVnNrABfLNm78fwWiQxe/VOK21vrE83Ntanlzr1iBiJiEL2L4bS6r8jii8iJqNd4ocRkeThkk/t53Xt1YV3d1uX261CXrL1i7tttzdreYmZfJAzBxjv7VfHS7pHmAa93Qk+CLY+73+HuPviIcZmH5JP/F9UIsYiYjSfBzonbuFoR3fwBuYCBAAAgEN0YjM2oxXj/R4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCf57/8neSl06pORdH7/v5S/F3n9WHvT7wEAAAAAAAAAwAG4uBmb0YrxTnsryb7zv5Q1JrLXH8TTWI16rMT1aMVcNKMZK1GNiEpPoFJrrtlcqe5hy9qOW9aO5ngBAAAAAAAA4HvqzzG7/f0/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMgiSi2F5kZaJTr0RhKCJGI6KUrrcW8c9O/Th70+8BAAAAwBE4sRmb0YrxTnsrye75z2b3/aPxNJajGYvRjEbUYz57FtC+6y9srE83Ntanl9Lycdxf/3dfw8giRvvZw857nsrWONPdYjZ+G7+LqzEZ92IlFuMPMRfNqMdk3M5qc5FEJX96UemMc+fxzrzXuve5sZ7PRlKOB7GYje16/D4eRyPmo5AdQ7bO7nv8U5qd5Fe5PeZoPl8mEcmP8iMbDJUsI8PdjEzluU+zcXL3TOzzPPlwT9UodJ9BTRxCzsfyZZrz0YHOea3n7Du7eyYirjX/fnGhsfxo4cHq1cE5pC/0YSamezJx7pvKRCnPRnsW3d9seSnbdjwW4248jvmox8/iVtSyMp0te/N6Zg/XWmF/19pPLueVUxFJub0cEGleT/bktXemq2R9ve9sZ+nUwc9IQxfySjEiGeqOaRB8mIlqTyZO756Jv2ylr6uN5UcrC3NP9ri/n+bLdG4eGai5uZSfvUNZ6/2zI+07vWNfNeub6PYVPuo70+373JVayj/DfRyplvWd27Gvvd35nr6dPuUAMPDGroyVyv8p/6v8svyivFC+M/qbkZ+P/LgUw2+H/lH8W+GvhV8mV+Jl/HH7/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPhyq8+eP5prNOorKioqKt1Kv2cmjsKN5tKTG6vPnl9bXJp7WH9YX745Vaveuln9xc0bDxYb9an2a79HyWHZvuj7PRIAAAAAAAAAAAD24yj+nLTfxwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDxMXs/htciierU9am0vbE+3UhLp769ZiEihtLl/yOKLyImo12i0hMu+dR+XtdeXXh3t3V5O1ahs35xt+32Zi0vMZMPcuYA47396nhJ9wjToLc7waHfvgsAAP//FQYeZg==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) fdatasync(r0) 13m23.860972282s ago: executing program 2 (id=192): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@errors_remount}]}, 0x2, 0x445, &(0x7f0000000b00)="$eJzs28+PE1UcAPDvTLeLCLgr4g9+qKto3PhjlwVUDh7UaOIBExM96HGzuxCksIZdEyFEwRg8GWPi3Xj0X/CkF2M8mXjVuyEhhgvgqWbaGbYtbdktLUX6+SQD78282fe+nXnte/PaAEbWVPZPErE1Iv6MiIl6trnAVP2/q5fPLly7fHYhiWr13X+SWrkrl88uFEWL87bkmek0Iv0iid1t6l05feb4fKWydCrPz66e+Gh25fSZF46dmD+6dHTp5P5Dhw4emHv5pf0v9iXOrE1Xdn26vGfnWx988/bhr5rib4mjT6a6HXy6Wu1zdcO1rSGdjA2xIWxIKSKyy1Wu9f+JKMXaxZuINz8fauOAgapWq9UtnQ+fqwJ3sSSa87o8jIrigz6b/xZb6yDg1cENP4bu0mv1CVAW99V8qx8ZizQvU26Z3/bTVES8f+7f77ItBvMcAgCgyU/Z+Of5duO/NB5qKHdfvjY0GRH3R8T2iHggInZExIMRtbIPR8QjG6y/dZHkxvFPerGnwNYpG/+9kq9tNY//itFfTJby3LZa/OXkyLHK0r78NZmO8qYsP9eljp/f+OPrTscax3/ZltVfjAXzdlwc29R8zuL86vytxNzo0vmIXWPt4k+urwQkEbEzInb1WMexZ3/Y0+nYzePvog/rTNXvI56pX/9z0RJ/Iem+Pjl7T1SW9s0Wd8WNfvv9wjud6r+l+Psgu/73tr3/r8c/mTSu165svI4Lf33ZcU7T6/0/nrxXS4/n+z6ZX109NRcxnhyuN7px//61c4t8UT6Lf3pv+/6/PdZeid0Rkd3Ej0bEYxHxeN72JyLiyYjY2yX+X19/6sPe4x+sLP7FDV3/tcR4tO5pnygd/+XHpkonb4j/Wvfrf7CWms73rOf9bz3t6u1uBgAAgP+fNCK2RpLOXE+n6cxM/fvyOyLSyvLK6nNHlj8+uVj/jcBklNPiSddEw/PQuXxaX8+fj4j6VwuK4wfy58bfljbX8jMLy5XFYQcPI25Lh/6f+bs07NYBA+f3WjC69H8YXfo/jC79H0ZXm/6/eRjtAG6/dp//nw2hHcDt19L/LfvBCDH/h9Gl/8Po0v9hJK1sjpv/SL5rovhLPZ5+1yaifEc0Y2CJSO+IZkgMKDHc9yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB++S8AAP///fHg0g==") r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x8, 0x80000) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) r2 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000280)='./file2\x00', 0x2808008, &(0x7f0000001600), 0x1, 0xbd9, &(0x7f0000000740)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() r4 = socket$igmp6(0xa, 0x3, 0x2) bind(r4, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x2, 0x2, 0x3, {0xa, 0x4e23, 0x10000, @private1, 0x5}}}, 0x80) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) openat(r2, 0x0, 0x80600, 0x50) fanotify_mark(r1, 0x105, 0x4800003a, r0, 0x0) 13m8.652525949s ago: executing program 32 (id=192): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@errors_remount}]}, 0x2, 0x445, &(0x7f0000000b00)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x8, 0x80000) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) r2 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000280)='./file2\x00', 0x2808008, &(0x7f0000001600), 0x1, 0xbd9, &(0x7f0000000740)="$eJzs3M1rHOcZAPBnRp+25a5cSql7sUopNpSuZReZ2hRqF5deeii014CFvDJC6w8kBUeyIKvkHwhJzoFcAklMgg/x2ZcEcs0lca4xOQRMUKwEQkgUZj8kWdqVLGtXo8i/H7ya92Nm3ufRSDvzwu4G8Mwayn6kEUcj4lISUaj3pxHRW631R1Rq+y0tzo99tzg/lsTy8v++TiKJiEeL82ONcyX17aF6oz8iPvlnEr9+eeO807Nzk6Plcmmq3j45c/XGyenZub9MXB29UrpSunbqzN9GTo+cGT470rZcv//i/N1v//DvLys/vPPj7W9eeyuJ8zFQH1ubRz3rHRuKoZXfyVrdETHahvPvBV31fNbmmXRvcVDa4aAAAGgpXfMM99soRFesPrwV4sNPcw0OAAAAaIvlrohlAAAAYJ9LrP8BAABgn2u8D+DR4vxYo+T7joTd9fBCRAzW8l+ql9pId1Sq2/7oiYiDj5JY+7HWpHbYjg1FxIPPz76flWjyOeROqyxExO+aXf+kmv9g/ZPQ6/NPI2K4DfMPrWv/kvI/34b5884fgGfTvQu1G9nG+1+68vwTTe5/3U3uXU8j7/tf4/lvacPz32r+XS2e//77hHPcevuNm63Gsvz/fvdf7zVKNn+23VFS2/BwIeL33c3yT1byT1rkf2mLcydRO0Xhp5ulVvvknf/ymxHHo3n+Dcnm3090cnyiXBqu/Ww6x8LHI++2mj/v/LPrf7BF/ptc//6s78ZjZ2r9pT7PXbx4Z0Nnffet80+/6k3+X6311nteGJ2ZmToV0Zv8Z2P/6c3zbezTOEeW/4k/bv7/3+zvP3tNqNT/NrJUFurbrP3Sujn/cfvWB63iaaz/8rz+l7d//at9rzzhHH/66NUT6/sa36+1dv2blWz+B0ltLQwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADWlEDESSFiMiqdbTtFiMOBQRv4mDafn69Myfx68/f+1yNhYxGD3p+ES5NBwRhVo7ydqnqvXV9ul17b9GxJGIeL1woNoujl0vX847eQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFYcioiBSNJiRKQRsVRI02Ix76gAAACAthvMOwAAAACg46z/AQAAYP+z/gcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDDjhy7dz+JiMq5A9WS6a2P9eQaGdBpad4BALnpyjsAIDfdeQcA5Gaba3yPC7APJVuM9zftzV49+joSDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB70/Gj9+4nEVE5d6BaMr31sZ6mRxzbxeiATkrzDgDITddmg927Fwew+576X/xwe+MAdl/zNT7wLEm2GO9f3afy+Ehfx2ICAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYO8ZqJYkLUZEWq2nabEYcTgiBqMnGZ8ol4Yj4lcR8Vmhpy9r9+UdNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG03PTs3OVoul6aeppLs7HAVlVaVF/dGGLtbSfZGGLVK3q9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADkYXp2bnK0XC5NTecdCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJC36dm5ydFyuTT1BJU729l5TSXvHAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyM/PAQAA///E/w3d") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() r4 = socket$igmp6(0xa, 0x3, 0x2) bind(r4, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x2, 0x2, 0x3, {0xa, 0x4e23, 0x10000, @private1, 0x5}}}, 0x80) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) openat(r2, 0x0, 0x80600, 0x50) fanotify_mark(r1, 0x105, 0x4800003a, r0, 0x0) 17.501223743s ago: executing program 1 (id=1966): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x101000, 0x108) name_to_handle_at(r1, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000"], 0x0, 0x200) open_tree(r1, &(0x7f00000002c0)='./file0/file0/file0\x00', 0x800) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348154ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9464a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610d2ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac7a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca00", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0x9, 0xfffffffffffffffd, 0x6, 0x0, {0x40, 0x0, 0x5, 0xfffc, 0x0, 0x1, 0x0, 0xffffffff, 0x120, 0x2000, 0xa8, r3, r4, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d00129522fb"], 0x50) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r2, {0x7, 0x29, 0x0, 0xffffffff9046dce8, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r5 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x3002a8d, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000104000000000000fcfffdff85000000300000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000000)=0x4) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/mdstat\x00', 0x0, 0x0) lseek(r6, 0x7fff, 0x1) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="5000000012000100feffffff00000000020300004e234e2248000000ffff0000000000010000000000000000070000000000008000000000", @ANYRES32=0x0, @ANYBLOB="050000001306000008000000000000000400031b79a252419700"], 0x50}}, 0x20004010) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000580)={'syztnl2\x00', &(0x7f0000000680)={'tunl0\x00', 0x0, 0x0, 0x80, 0x0, 0x5, {{0x22, 0x4, 0x3, 0x3, 0x88, 0x66, 0x0, 0xfe, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x31}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ssrr={0x89, 0x17, 0x6d, [@broadcast, @local, @loopback, @local, @local]}, @cipso={0x86, 0x46, 0x3, [{0x0, 0x10, "6b89f1b2eaf5eb4e0695b41bfae9"}, {0x2, 0x10, "13fdf36e8e2ac718ac5f61077ff2"}, {0x0, 0x11, "49734354fe2fde5e20f570e9e69dd7"}, {0x5, 0x4, "c782"}, {0x1, 0xb, "d26de18662947e83c5"}]}, @ssrr={0x89, 0x17, 0x2b, [@multicast1, @multicast2, @multicast2, @multicast1, @broadcast]}]}}}}}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa041, 0xd) openat$snapshot(0xffffffffffffff9c, 0x0, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x1000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$inet(0xffffffffffffffff, 0x0, 0x0) 16.843288317s ago: executing program 1 (id=1969): semget$private(0x0, 0x1, 0x400) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, 0x0, 0x0) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/wireless\x00') preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000380)=""/71, 0x47}], 0x1, 0x15c, 0x0) 16.135147292s ago: executing program 1 (id=1971): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x2d8, 0x98, 0x2d8, 0x98, 0x138, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1fb, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000300)) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 15.093603155s ago: executing program 4 (id=1973): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0xec}, 0x1, 0x0, 0x0, 0x4004}, 0x40) syz_io_uring_setup(0xf00, &(0x7f0000000180)={0x0, 0x9937, 0x1, 0x0, 0x851}, &(0x7f0000000400), &(0x7f0000000200), &(0x7f00000000c0)=0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r1, @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff00000000000000008500000050000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r1], 0x20}, 0x1, 0x0, 0x0, 0x4040002}, 0x4000080) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa00, 0x642, 0x1, 0x2800, 0xd59f83, 0x19f2, 0x3, 0x6, 0x3, 0x5, 0x2800, 0x2800, 0x2, 0x100, 0xd, 0x27, {0x8, 0xffffffff}, 0xd0, 0x9}}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ptrace$peeksig(0x4209, 0x0, &(0x7f0000000580)={0x4}, &(0x7f00000005c0)) r6 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r6, 0x0, 0x4, &(0x7f0000000400)="8907", 0x2) r7 = dup(r5) write$UHID_INPUT(r7, &(0x7f00000030c0)={0x18, {"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", 0x1000}}, 0x1006) ioctl$KDFONTOP_SET_DEF(r5, 0x4b72, &(0x7f00000009c0)={0x2, 0x0, 0x11, 0x1b, 0x6, 0x0}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) r8 = syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_XRUN(r8, 0x4148, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 13.170100666s ago: executing program 4 (id=1978): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, 0x6e) unshare(0x20000400) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b2, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x11, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x3000, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x1ffc, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x10000, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x1000000, 0x2e4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4c2e, 0x80020, 0x0, 0x312}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) 12.487884901s ago: executing program 4 (id=1980): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x101000, 0x108) name_to_handle_at(r1, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000"], 0x0, 0x200) open_tree(r1, &(0x7f00000002c0)='./file0/file0/file0\x00', 0x800) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348154ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9464a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610d2ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac7a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca00", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0x9, 0xfffffffffffffffd, 0x6, 0x0, {0x40, 0x0, 0x5, 0xfffc, 0x0, 0x1, 0x0, 0xffffffff, 0x120, 0x2000, 0xa8, r3, r4, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d00129522fb"], 0x50) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r2, {0x7, 0x29, 0x0, 0xffffffff9046dce8, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r5 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x3002a8d, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000104000000000000fcfffdff85000000300000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000000)=0x4) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/mdstat\x00', 0x0, 0x0) lseek(r6, 0x7fff, 0x1) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="5000000012000100feffffff00000000020300004e234e2248000000ffff0000000000010000000000000000070000000000008000000000", @ANYRES32=0x0, @ANYBLOB="050000001306000008000000000000000400031b79a252419700"], 0x50}}, 0x20004010) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000580)={'syztnl2\x00', &(0x7f0000000680)={'tunl0\x00', 0x0, 0x0, 0x80, 0x0, 0x5, {{0x22, 0x4, 0x3, 0x3, 0x88, 0x66, 0x0, 0xfe, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x31}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ssrr={0x89, 0x17, 0x6d, [@broadcast, @local, @loopback, @local, @local]}, @cipso={0x86, 0x46, 0x3, [{0x0, 0x10, "6b89f1b2eaf5eb4e0695b41bfae9"}, {0x2, 0x10, "13fdf36e8e2ac718ac5f61077ff2"}, {0x0, 0x11, "49734354fe2fde5e20f570e9e69dd7"}, {0x5, 0x4, "c782"}, {0x1, 0xb, "d26de18662947e83c5"}]}, @ssrr={0x89, 0x17, 0x2b, [@multicast1, @multicast2, @multicast2, @multicast1, @broadcast]}]}}}}}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa041, 0xd) openat$snapshot(0xffffffffffffff9c, 0x0, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x1000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$inet(0xffffffffffffffff, 0x0, 0x0) 11.668565109s ago: executing program 4 (id=1983): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x9, 0xfffffb5b, 0x0, 0xd, 0x400}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xfc}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000640)=""/73, 0x49}], 0x1}, 0x120) setsockopt$inet_int(r2, 0x0, 0x20, &(0x7f0000000000), 0x4) syz_emit_vhci(0x0, 0x20) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=r3, @ANYBLOB="01002abd7000ffdbdf250300000008000100000000000c000600030000000000000008000100000000007c0007"], 0xd4}, 0x1, 0x0, 0x0, 0x4000010}, 0x2048800) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) 10.694252039s ago: executing program 0 (id=1985): r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0xfffffffffffffff7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x468, 0x3fe, 0x50565559, 0x4, 0x8, 0x46, 0x7, 0x3, 0x0, 0x2, 0x0, 0x7}}) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101701) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(r1, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) socket$netlink(0x10, 0x3, 0xa) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, 0x0, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r3, &(0x7f0000000300)=""/102400, 0x19000) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x42014}, 0x80000) r5 = socket$alg(0x26, 0x5, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmsg$ETHTOOL_MSG_PAUSE_SET(r6, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x85}, 0x81) recvmmsg$unix(r6, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 10.516581103s ago: executing program 1 (id=1986): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) 10.278771429s ago: executing program 0 (id=1988): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0xec}, 0x1, 0x0, 0x0, 0x4004}, 0x40) syz_io_uring_setup(0xf00, &(0x7f0000000180)={0x0, 0x9937, 0x1, 0x0, 0x851}, &(0x7f0000000400), &(0x7f0000000200), &(0x7f00000000c0)=0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r1, @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff00000000000000008500000050000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r1], 0x20}, 0x1, 0x0, 0x0, 0x4040002}, 0x4000080) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa00, 0x642, 0x1, 0x2800, 0xd59f83, 0x19f2, 0x3, 0x6, 0x3, 0x5, 0x2800, 0x2800, 0x2, 0x100, 0xd, 0x27, {0x8, 0xffffffff}, 0xd0, 0x9}}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ptrace$peeksig(0x4209, 0x0, &(0x7f0000000580)={0x4}, &(0x7f00000005c0)) r6 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r6, 0x0, 0x4, &(0x7f0000000400)="8907", 0x2) r7 = dup(r5) write$UHID_INPUT(r7, &(0x7f00000030c0)={0x18, {"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", 0x1000}}, 0x1006) ioctl$KDFONTOP_SET_DEF(r5, 0x4b72, &(0x7f00000009c0)={0x2, 0x0, 0x11, 0x1b, 0x6, 0x0}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) r8 = syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_XRUN(r8, 0x4148, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 9.465852126s ago: executing program 1 (id=1989): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60fca33f00007300fe800000000000000000000000000000fe800000000000000000007faa9d865100e4"], 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r2}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r3, r2, 0x25, 0x8, @void}, 0x10) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x68c81, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, &(0x7f00000000c0)={0xdddd1000, 0x3000}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r7, 0x84, 0x7f, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000080)}], 0x1) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x40050}, 0x4000880) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) 7.373377111s ago: executing program 0 (id=1991): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prlimit64(0x0, 0xe, &(0x7f0000000780)={0x60, 0x887}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(0x0, 0x204, 0x82) r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=ANY=[@ANYBLOB="84010000", @ANYRES16=r5, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b8008000a0090"], 0x184}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) bind$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0xb}, 0x14) socket$nl_netfilter(0x10, 0x3, 0xc) 4.850582765s ago: executing program 0 (id=1993): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x2d8, 0x98, 0x2d8, 0x98, 0x138, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1fb, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1a, &(0x7f0000000300)=""/20, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000023c0)={0x24, r3, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x20}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x24}}, 0x18) ioctl(0xffffffffffffffff, 0x8b22, 0x0) sendmsg$nl_generic(r0, 0x0, 0xc000) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_NODES(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x0) 4.030909253s ago: executing program 0 (id=1996): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x2d8, 0x98, 0x2d8, 0x98, 0x138, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1fb, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000300)) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 3.916841125s ago: executing program 1 (id=1997): bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8000000000000001}, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, 0x6e) r3 = socket(0x2, 0x2, 0x1) bind$unix(r3, &(0x7f0000000000)=@abs, 0x6e) 3.915707085s ago: executing program 5 (id=1998): r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0xfffffffffffffff7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x468, 0x3fe, 0x50565559, 0x4, 0x8, 0x46, 0x7, 0x3, 0x0, 0x2, 0x0, 0x7}}) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101701) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(r1, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) socket$netlink(0x10, 0x3, 0xa) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, 0x0, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r3, &(0x7f0000000300)=""/102400, 0x19000) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x42014}, 0x80000) r5 = socket$alg(0x26, 0x5, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmsg$ETHTOOL_MSG_PAUSE_SET(r6, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x85}, 0x81) recvmmsg$unix(r6, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 3.674028271s ago: executing program 4 (id=2000): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) 3.510652934s ago: executing program 5 (id=2001): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 3.174252511s ago: executing program 5 (id=2004): syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) r0 = gettid() timer_create(0x3, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) fsmount(r2, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x8) close(0x3) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x40400, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x7}, &(0x7f0000000080)=0x8) 3.134487732s ago: executing program 4 (id=2005): sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r6, &(0x7f0000002600)=""/4113, 0x1011) 2.479987976s ago: executing program 3 (id=2006): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x2d8, 0x98, 0x2d8, 0x98, 0x138, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1fb, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1a, &(0x7f0000000300)=""/20, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000023c0)={0x24, r3, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x20}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x24}}, 0x18) ioctl(0xffffffffffffffff, 0x8b22, 0x0) sendmsg$nl_generic(r0, 0x0, 0xc000) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_NODES(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.757446822s ago: executing program 5 (id=2007): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x6, 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000001380)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f00000043c0)={r1, 0x0, "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", "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"}) bind$tipc(0xffffffffffffffff, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000019300)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="000000000000000000000015000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000ffffffff00"/28], 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000400"], 0x48) read$FUSE(0xffffffffffffffff, &(0x7f0000002380)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x10, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x1fd, 0x1, 0x0, 0x2000, &(0x7f0000b07000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x4048aecb, &(0x7f0000000000)) 1.756904192s ago: executing program 3 (id=2008): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) 1.473868928s ago: executing program 3 (id=2009): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x7f, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000010540)={r0, &(0x7f0000010440)='$]&*@*-!\x00', 0x40400, 0x0, 0x9, &(0x7f00000104c0)={@_ha_fsid}, 0x0}) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000003c40)='/dev/comedi4\x00', 0x840, 0x0) ioctl$COMEDI_CMDTEST(r1, 0x8050640a, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0900000001000000080000004000000042153f8b4e97681aa63146000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) read$msr(0xffffffffffffffff, &(0x7f00000003c0)=""/225, 0xe1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, 0x0, 0x80) r3 = syz_open_procfs(0x0, 0x0) r4 = syz_io_uring_setup(0x31bc, &(0x7f0000000540)={0x0, 0xc3af, 0x8, 0x1, 0x278}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000040)=@IORING_OP_GETXATTR={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007480), 0x0, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0}}) io_uring_enter(r4, 0x1, 0x1, 0x1, 0x0, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r8, 0xffffffffffffffff, 0x2f, 0x0, @void}, 0x10) pread64(r3, &(0x7f0000000f80)=""/212, 0xd4, 0xffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newnexthop={0x24, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x1000001, 0x4c032, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f0000000040)={0x0, 0x0, 0x12, 0x1}, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, 0xffffffffffffffff, 0x0) 635.851326ms ago: executing program 3 (id=2010): syz_ublk_setup_io_uring(0x22cf, &(0x7f0000000240)={0x0, 0xd58c, 0x10, 0x3, 0x108}, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000180)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x88802, 0x0) syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) r1 = socket(0x2b, 0x1, 0x1) listen(r1, 0x5) syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) getdents64(0xffffffffffffffff, &(0x7f0000000140)=""/46, 0x2e) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x9b) r2 = socket$inet6(0xa, 0x2, 0x0) close(r2) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4) sendmsg$inet6(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000dc0)=ANY=[], 0x28}, 0x1400c0c0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) 569.754247ms ago: executing program 5 (id=2011): r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0xfffffffffffffff7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x468, 0x3fe, 0x50565559, 0x4, 0x8, 0x46, 0x7, 0x3, 0x0, 0x2, 0x0, 0x7}}) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101701) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(r1, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) socket$netlink(0x10, 0x3, 0xa) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) connect$inet(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r3, &(0x7f0000000300)=""/102400, 0x19000) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x42014}, 0x80000) r5 = socket$alg(0x26, 0x5, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmsg$ETHTOOL_MSG_PAUSE_SET(r6, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x85}, 0x81) recvmmsg$unix(r6, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 361.712342ms ago: executing program 3 (id=2012): r0 = socket$inet6(0xa, 0x1, 0x0) syz_emit_vhci(0x0, 0xd) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) getrlimit(0x9, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r1], 0x48) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x22301, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x1ff, @mcast2, 0x2}, {0xa, 0x4e20, 0x1, @mcast2, 0xc693}, 0xffffffffffffffff, 0xa}}, 0x48) r4 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002ac0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x168, 0x12, 0x60a, 0x0, 0x202, 0x270, 0x2e8, 0x2e8, 0x270, 0x2c0, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @mcast2, [0x4000000], [0x4000000, 0x0, 0xff000000], 'veth1_to_bond\x00', 'xfrm0\x00', {}, {}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x12e, 0x8, 0x4, '\x00', {0x7}}}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty, [], 0x0, 0x0, 0x0, 0x0, 0xffff5666, 0x2, 0x0, 0x0, 0x800}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) 202.859255ms ago: executing program 5 (id=2013): socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000b00)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000006540), 0x8) r0 = syz_ublk_setup_io_uring(0x20, &(0x7f00000000c0)={0x0, 0x0, 0x100, 0x0, 0x2a6}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r4 = openat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x711001, 0x4, 0x28}, 0x18) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000180)=@userptr={0x5, 0x1, 0x4, 0x800, 0x4, {0x77359400}, {0x1, 0x8, 0x2, 0x1, 0xe, 0x8, "ae06e6eb"}, 0x800, 0x2, {&(0x7f00000000c0)}, 0x9f13, 0x0, r4}) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000000180)) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0, 0x0, {0x11e6}}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x1000000, 0x10}}}, 0x0) gettid() fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 23.752069ms ago: executing program 3 (id=2014): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 0s ago: executing program 0 (id=2015): timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) kernel console output (not intermixed with test programs): .0007: unknown main item tag 0x0 [ 341.574951][ T4317] elan 0003:04F3:0755.0007: failed to start in urb: -90 [ 341.604405][ T4317] elan 0003:04F3:0755.0007: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 341.754820][ T4317] usb 1-1: USB disconnect, device number 6 [ 341.911616][ T7017] fido_id[7017]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 343.624268][ T4316] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 343.823945][ T4316] usb 6-1: Using ep0 maxpacket: 32 [ 343.831266][ T4316] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 343.999304][ T7045] UBIFS error (pid: 7045): cannot open "ubifs", error -22 [ 344.663775][ T4316] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 344.784055][ T4316] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 344.793211][ T4316] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.843269][ T4316] usb 6-1: config 0 descriptor?? [ 345.477238][ T4316] ft260 0003:0403:6030.0008: unknown main item tag 0x0 [ 345.493766][ T4316] ft260 0003:0403:6030.0008: unknown main item tag 0x0 [ 345.521613][ T4316] ft260 0003:0403:6030.0008: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.5-1/input0 [ 345.688348][ T4316] ft260 0003:0403:6030.0008: chip code: 0000 0000 [ 345.889003][ T4316] ft260 0003:0403:6030.0008: failed to retrieve system status [ 345.890465][ T7058] netlink: 12 bytes leftover after parsing attributes in process `syz.4.651'. [ 345.916557][ T4316] ft260: probe of 0003:0403:6030.0008 failed with error -5 [ 346.365258][ T4316] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 346.533776][ T4485] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 346.554144][ T4316] usb 1-1: Using ep0 maxpacket: 16 [ 346.569968][ T4316] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 346.629075][ T7069] netlink: 128 bytes leftover after parsing attributes in process `syz.1.654'. [ 347.407012][ T4485] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 347.418858][ T4316] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 347.433218][ T4485] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 347.454190][ T4316] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 347.468660][ T4485] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 347.475261][ T4316] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.487881][ T4485] usb 5-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 347.499522][ T4485] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 347.513141][ T4485] usb 5-1: config 168 interface 0 has no altsetting 0 [ 347.521565][ T4485] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 347.529385][ T4485] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 347.540864][ T4485] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 347.552004][ T4485] usb 5-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 347.563042][ T4485] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 347.577126][ T4485] usb 5-1: config 168 interface 0 has no altsetting 0 [ 347.591885][ T4485] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 347.608275][ T4316] usb 1-1: config 0 descriptor?? [ 347.654279][ T4485] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 347.704360][ T4485] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 347.730940][ T4485] usb 5-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 347.768442][ T4485] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 347.975898][ T4485] usb 5-1: config 168 interface 0 has no altsetting 0 [ 348.006222][ T4362] usb 6-1: USB disconnect, device number 2 [ 348.040514][ T4485] usb 5-1: string descriptor 0 read error: -22 [ 348.076609][ T4485] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 348.086358][ T4485] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.138700][ T4485] adutux 5-1:168.0: interrupt endpoints not found [ 348.149995][ T4316] corsair 0003:1B1C:1B02.0009: unknown main item tag 0x0 [ 348.182612][ T4316] corsair 0003:1B1C:1B02.0009: unknown main item tag 0x0 [ 349.051980][ T4316] corsair 0003:1B1C:1B02.0009: unknown main item tag 0x0 [ 349.103756][ T4316] corsair 0003:1B1C:1B02.0009: unknown main item tag 0x0 [ 349.110916][ T4316] corsair 0003:1B1C:1B02.0009: unknown main item tag 0x0 [ 349.336999][ T4316] corsair 0003:1B1C:1B02.0009: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.0-1/input0 [ 349.433155][ T4324] usb 5-1: USB disconnect, device number 8 [ 349.456929][ T7080] Cannot find add_set index 0 as target [ 349.475953][ T4316] corsair 0003:1B1C:1B02.0009: Failed to get K90 initial state (error -71). [ 349.566448][ T4316] usb 1-1: USB disconnect, device number 7 [ 350.024894][ T7085] fido_id[7085]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 350.094030][ T7093] UBIFS error (pid: 7093): cannot open "ubifs", error -22 [ 351.884167][ T7101] netlink: 12 bytes leftover after parsing attributes in process `syz.4.663'. [ 352.641722][ T7109] netlink: 128 bytes leftover after parsing attributes in process `syz.3.665'. [ 353.222967][ T7110] netlink: 12 bytes leftover after parsing attributes in process `syz.5.666'. [ 353.323077][ T7110] tipc: Started in network mode [ 353.369760][ T7110] tipc: Node identity 4246, cluster identity 4711 [ 353.385048][ T7118] loop4: detected capacity change from 0 to 256 [ 353.424690][ T7110] tipc: Node number set to 16966 [ 353.514578][ T7115] device team0 entered promiscuous mode [ 353.520374][ T7115] device team_slave_0 entered promiscuous mode [ 353.684493][ T7115] device team_slave_1 entered promiscuous mode [ 353.783826][ T4362] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 354.153371][ T4362] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 354.165489][ T4362] usb 2-1: config 0 has no interface number 0 [ 354.171777][ T4362] usb 2-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 354.187504][ T4362] usb 2-1: config 0 interface 2 altsetting 2 has an invalid endpoint with address 0x0, skipping [ 354.199307][ T4362] usb 2-1: config 0 interface 2 has no altsetting 0 [ 354.221603][ T4362] usb 2-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f7.3f [ 354.241631][ T4362] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.260216][ T4362] usb 2-1: Product: syz [ 354.272309][ T4362] usb 2-1: Manufacturer: syz [ 354.288344][ T4362] usb 2-1: SerialNumber: syz [ 354.343071][ T4362] usb 2-1: config 0 descriptor?? [ 354.357087][ T7120] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 354.689597][ T4362] usb 2-1: invalid MIDI in EP 0 [ 354.883996][ T7143] UBIFS error (pid: 7143): cannot open "ubifs", error -22 [ 355.350135][ T4362] snd-usb-audio: probe of 2-1:0.2 failed with error -22 [ 355.412677][ T4426] udevd[4426]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 355.437912][ T4362] usb 2-1: USB disconnect, device number 12 [ 355.702485][ T7150] netlink: 12 bytes leftover after parsing attributes in process `syz.1.678'. [ 356.610322][ T4420] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 357.313727][ T7161] netlink: 156 bytes leftover after parsing attributes in process `syz.4.679'. [ 357.637659][ T7165] netlink: 128 bytes leftover after parsing attributes in process `syz.0.680'. [ 358.500916][ T7170] loop5: detected capacity change from 0 to 256 [ 358.771104][ T7172] loop1: detected capacity change from 0 to 1024 [ 358.811656][ T7172] EXT4-fs: Ignoring removed i_version option [ 358.839088][ T7172] EXT4-fs: Ignoring removed bh option [ 358.913862][ T7172] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 359.193841][ T7182] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 359.546916][ T26] audit: type=1800 audit(1783541938.206:14): pid=7183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.684" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 360.215086][ T4281] EXT4-fs (loop1): unmounting filesystem. [ 360.743893][ T4319] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 360.935603][ T4319] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 360.951388][ T4319] usb 6-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 360.971411][ T4319] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.009560][ T4319] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 361.765134][ T7213] netlink: 128 bytes leftover after parsing attributes in process `syz.0.695'. [ 362.114402][ T4319] stv0680 6-1:4.0: STV(e): camera ping failed!! [ 362.534004][ T4319] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 362.542242][ T4319] stv0680 6-1:4.0: last error: 0, command = 0x0 [ 362.558992][ T4319] usb 6-1: USB disconnect, device number 3 [ 362.699973][ T7219] loop0: detected capacity change from 0 to 1024 [ 362.737349][ T7219] EXT4-fs: Ignoring removed i_version option [ 362.744066][ T7219] EXT4-fs: Ignoring removed bh option [ 362.769832][ T7219] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 363.132105][ T26] audit: type=1800 audit(1783541941.926:15): pid=7226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.696" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 363.745751][ T7228] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 363.916806][ T7230] loop4: detected capacity change from 0 to 256 [ 364.791994][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 365.120102][ T7245] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 365.965372][ T7256] netlink: 56 bytes leftover after parsing attributes in process `syz.3.706'. [ 365.974524][ T7256] netlink: 32 bytes leftover after parsing attributes in process `syz.3.706'. [ 366.174489][ T4484] usb 2-1: new low-speed USB device number 13 using dummy_hcd [ 366.439458][ T4484] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 366.555106][ T4484] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 366.605423][ T4484] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 366.620288][ T4484] usb 2-1: config 0 interface 0 has no altsetting 0 [ 366.628018][ T4484] usb 2-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 366.638889][ T4484] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.683227][ T4484] usb 2-1: config 0 descriptor?? [ 366.691882][ T7255] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 367.324595][ T4484] usbhid 2-1:0.0: can't add hid device: -71 [ 367.333345][ T4484] usbhid: probe of 2-1:0.0 failed with error -71 [ 367.378707][ T4484] usb 2-1: USB disconnect, device number 13 [ 367.557349][ T7272] loop4: detected capacity change from 0 to 1024 [ 367.585052][ T7272] EXT4-fs: Ignoring removed i_version option [ 367.596071][ T7272] EXT4-fs: Ignoring removed bh option [ 367.673226][ T7272] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 368.074556][ T26] audit: type=1800 audit(1783541946.876:16): pid=7279 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.713" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 369.381783][ T7299] netlink: 56 bytes leftover after parsing attributes in process `syz.1.720'. [ 369.391740][ T7299] netlink: 32 bytes leftover after parsing attributes in process `syz.1.720'. [ 370.546943][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 370.593759][ T4324] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 371.033878][ T4324] usb 6-1: Using ep0 maxpacket: 32 [ 371.151571][ T7291] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 371.618138][ T4324] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 371.636124][ T4324] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 371.648261][ T4324] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 371.659408][ T4324] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.693893][ T4324] usb 6-1: config 0 descriptor?? [ 371.901962][ T7323] overlayfs: missing 'lowerdir' [ 373.943280][ T4324] usbhid 6-1:0.0: can't add hid device: -71 [ 373.952412][ T4324] usbhid: probe of 6-1:0.0 failed with error -71 [ 373.979166][ T4324] usb 6-1: USB disconnect, device number 4 [ 376.591151][ T7349] netlink: 56 bytes leftover after parsing attributes in process `syz.1.733'. [ 376.600381][ T7349] netlink: 32 bytes leftover after parsing attributes in process `syz.1.733'. [ 377.044072][ T7351] loop5: detected capacity change from 0 to 1024 [ 377.082274][ T7351] EXT4-fs: Ignoring removed i_version option [ 377.111177][ T7351] EXT4-fs: Ignoring removed bh option [ 377.209507][ T7351] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 377.541937][ T26] audit: type=1800 audit(1783541956.336:17): pid=7361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.734" name="file2" dev="loop5" ino=16 res=0 errno=0 [ 378.690294][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.696673][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.321365][ T7369] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 381.152403][ T7380] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 381.360938][ T5291] EXT4-fs (loop5): unmounting filesystem. [ 381.463819][ T4362] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 381.663649][ T4362] usb 5-1: Using ep0 maxpacket: 32 [ 381.679176][ T4362] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 381.749197][ T7386] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 382.015937][ T4362] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 382.058066][ T4362] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 382.095956][ T4362] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.152867][ T4362] usb 5-1: config 0 descriptor?? [ 383.423858][ T4362] ft260 0003:0403:6030.000A: unknown main item tag 0x0 [ 383.436276][ T4362] ft260 0003:0403:6030.000A: unknown main item tag 0x0 [ 383.445384][ T4362] ft260 0003:0403:6030.000A: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.4-1/input0 [ 383.518256][ T7400] netlink: 56 bytes leftover after parsing attributes in process `syz.5.746'. [ 383.527508][ T7400] netlink: 12 bytes leftover after parsing attributes in process `syz.5.746'. [ 383.536608][ T7400] netlink: 8 bytes leftover after parsing attributes in process `syz.5.746'. [ 383.546212][ T7400] netlink: 8 bytes leftover after parsing attributes in process `syz.5.746'. [ 384.019006][ T4362] ft260 0003:0403:6030.000A: chip code: 0000 0000 [ 384.052174][ T4362] ft260 0003:0403:6030.000A: failed to retrieve status: -32 [ 384.460655][ T7381] i2c i2c-1: adapter quirk: too many messages (addr 0x2000, size 0, write) [ 384.653807][ T4362] usb 5-1: reset high-speed USB device number 9 using dummy_hcd [ 385.165276][ T7411] loop1: detected capacity change from 0 to 256 [ 386.246300][ T4485] usb 5-1: USB disconnect, device number 9 [ 389.370974][ T6676] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 389.518879][ T7451] netlink: 56 bytes leftover after parsing attributes in process `syz.1.758'. [ 389.528049][ T7451] netlink: 12 bytes leftover after parsing attributes in process `syz.1.758'. [ 389.537173][ T7451] netlink: 8 bytes leftover after parsing attributes in process `syz.1.758'. [ 389.546313][ T7451] netlink: 8 bytes leftover after parsing attributes in process `syz.1.758'. [ 390.913623][ T4362] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 391.179490][ T7466] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 391.242150][ T4362] usb 1-1: Using ep0 maxpacket: 32 [ 391.299114][ T4362] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 391.439623][ T4362] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 391.450528][ T4362] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 391.688425][ T4362] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.723656][ T4362] usb 1-1: config 0 descriptor?? [ 393.106328][ T4362] ft260 0003:0403:6030.000B: unknown main item tag 0x0 [ 393.781426][ T4362] ft260 0003:0403:6030.000B: unknown main item tag 0x0 [ 393.795040][ T4362] ft260 0003:0403:6030.000B: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0 [ 393.873384][ T7482] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 393.889134][ T4362] ft260 0003:0403:6030.000B: chip code: 0000 0000 [ 394.032189][ T4362] ft260 0003:0403:6030.000B: failed to retrieve status: -32 [ 394.256726][ T7457] i2c i2c-1: adapter quirk: too many messages (addr 0x2000, size 0, write) [ 394.818809][ T4362] usb 1-1: USB disconnect, device number 8 [ 395.097342][ T7492] UBIFS error (pid: 7492): cannot open "ubifs", error -22 [ 395.710526][ T7502] netlink: 12 bytes leftover after parsing attributes in process `syz.5.768'. [ 395.923300][ T7495] fido_id[7495]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 396.213747][ T4363] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 396.301709][ T7507] netlink: 56 bytes leftover after parsing attributes in process `syz.5.770'. [ 396.310827][ T7507] netlink: 12 bytes leftover after parsing attributes in process `syz.5.770'. [ 396.319938][ T7507] netlink: 8 bytes leftover after parsing attributes in process `syz.5.770'. [ 396.329034][ T7507] netlink: 8 bytes leftover after parsing attributes in process `syz.5.770'. [ 396.449593][ T4363] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 397.138611][ T4363] usb 1-1: config 0 has no interface number 0 [ 397.174053][ T4363] usb 1-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 397.246338][ T4363] usb 1-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 397.318586][ T4363] usb 1-1: config 0 interface 2 altsetting 2 endpoint 0x82 has invalid maxpacket 192, setting to 64 [ 397.385832][ T4363] usb 1-1: config 0 interface 2 has no altsetting 0 [ 397.503476][ T4363] usb 1-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f7.3f [ 397.589267][ T4363] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.684423][ T4363] usb 1-1: Product: syz [ 397.730888][ T4363] usb 1-1: Manufacturer: syz [ 397.792186][ T4363] usb 1-1: SerialNumber: syz [ 397.931360][ T4363] usb 1-1: config 0 descriptor?? [ 398.017737][ T7504] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 398.063128][ T7504] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 398.444683][ T4363] usb 1-1: USB disconnect, device number 9 [ 398.726513][ T4426] udevd[4426]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 398.939017][ T7521] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 400.651183][ T7536] UBIFS error (pid: 7536): cannot open "ubifs", error -22 [ 402.191408][ T7548] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 402.464803][ T7549] netlink: 12 bytes leftover after parsing attributes in process `syz.3.780'. [ 402.793700][ T4484] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 402.922631][ T7557] misc userio: Invalid payload size [ 402.993935][ T4484] usb 2-1: Using ep0 maxpacket: 32 [ 403.030927][ T4484] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 403.123284][ T7559] netlink: 'syz.4.783': attribute type 29 has an invalid length. [ 403.210300][ T4484] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 403.249622][ T7559] netlink: 'syz.4.783': attribute type 29 has an invalid length. [ 403.328566][ T4484] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 403.452261][ T4484] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.512926][ T4484] usb 2-1: config 0 descriptor?? [ 403.746370][ T7561] netlink: 56 bytes leftover after parsing attributes in process `syz.5.782'. [ 403.755354][ T7561] netlink: 12 bytes leftover after parsing attributes in process `syz.5.782'. [ 404.028974][ T4484] ft260 0003:0403:6030.000C: unknown main item tag 0x0 [ 404.063668][ T4484] ft260 0003:0403:6030.000C: unknown main item tag 0x0 [ 404.132865][ T4484] ft260 0003:0403:6030.000C: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0 [ 404.234591][ T4484] ft260 0003:0403:6030.000C: chip code: 0000 0000 [ 404.661149][ T4484] ft260 0003:0403:6030.000C: failed to retrieve status: -32 [ 404.892724][ T7543] i2c i2c-1: adapter quirk: too many messages (addr 0x2000, size 0, write) [ 405.022667][ T4484] usb 2-1: USB disconnect, device number 14 [ 405.213591][ T4338] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 405.324717][ T7577] fido_id[7577]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 405.421604][ T7580] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 405.437356][ T4338] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 405.448871][ T4338] usb 1-1: config 0 has no interface number 0 [ 405.464268][ T4338] usb 1-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 405.485472][ T4338] usb 1-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 405.499798][ T4338] usb 1-1: config 0 interface 2 altsetting 2 endpoint 0x82 has invalid maxpacket 192, setting to 64 [ 405.512423][ T4338] usb 1-1: config 0 interface 2 has no altsetting 0 [ 405.528313][ T4338] usb 1-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f7.3f [ 405.542809][ T4338] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.553384][ T4338] usb 1-1: Product: syz [ 405.579739][ T4338] usb 1-1: Manufacturer: syz [ 405.592939][ T4338] usb 1-1: SerialNumber: syz [ 405.620512][ T4338] usb 1-1: config 0 descriptor?? [ 405.639365][ T7572] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 405.647397][ T7572] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 406.708194][ T4338] usb 1-1: USB disconnect, device number 10 [ 406.961207][ T7593] UBIFS error (pid: 7593): cannot open "ubifs", error -22 [ 407.720843][ T4426] udevd[4426]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 408.335731][ T7601] netlink: 12 bytes leftover after parsing attributes in process `syz.1.794'. [ 408.804018][ T7609] misc userio: Invalid payload size [ 409.791663][ T7615] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 410.379289][ T7621] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 412.427387][ T7636] netlink: 8 bytes leftover after parsing attributes in process `syz.1.802'. [ 412.523932][ T4319] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 412.745325][ T4319] usb 4-1: Using ep0 maxpacket: 32 [ 412.760053][ T4319] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 412.801574][ T4319] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 412.843643][ T4319] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 412.898981][ T4319] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.942169][ T4319] usb 4-1: config 0 descriptor?? [ 413.513459][ T4319] ft260 0003:0403:6030.000D: unknown main item tag 0x0 [ 413.559882][ T4319] ft260 0003:0403:6030.000D: unknown main item tag 0x0 [ 413.596617][ T4319] ft260 0003:0403:6030.000D: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0 [ 413.708816][ T4319] ft260 0003:0403:6030.000D: chip code: 0000 0000 [ 414.116083][ T4319] ft260 0003:0403:6030.000D: failed to retrieve status: -32 [ 414.893690][ T4319] usb 4-1: reset high-speed USB device number 5 using dummy_hcd [ 415.290208][ T7656] UBIFS error (pid: 7656): cannot open "ubifs", error -22 [ 416.814392][ T4338] usb 4-1: USB disconnect, device number 5 [ 416.937935][ T7669] netlink: 8 bytes leftover after parsing attributes in process `syz.5.807'. [ 418.749071][ T7684] netlink: 56 bytes leftover after parsing attributes in process `syz.3.812'. [ 418.758426][ T7684] netlink: 12 bytes leftover after parsing attributes in process `syz.3.812'. [ 419.514784][ T7698] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 419.653689][ T4485] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 419.946956][ T7701] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 420.339594][ T4485] usb 4-1: Using ep0 maxpacket: 32 [ 420.350243][ T4485] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 420.380143][ T4485] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 420.396199][ T4485] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 420.407654][ T4334] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 420.423069][ T4485] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.486858][ T7703] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 420.514481][ T4485] usb 4-1: config 0 descriptor?? [ 420.928619][ T7709] netlink: 8 bytes leftover after parsing attributes in process `syz.5.821'. [ 420.959494][ T4485] ft260 0003:0403:6030.000E: unknown main item tag 0x0 [ 420.975006][ T4485] ft260 0003:0403:6030.000E: unknown main item tag 0x0 [ 420.993178][ T4485] ft260 0003:0403:6030.000E: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0 [ 421.158787][ T4485] ft260 0003:0403:6030.000E: chip code: 0000 0000 [ 421.569883][ T4485] ft260 0003:0403:6030.000E: failed to retrieve status: -32 [ 421.798912][ T7696] i2c i2c-1: adapter quirk: too many messages (addr 0x2000, size 0, write) [ 421.812847][ T4319] usb 4-1: USB disconnect, device number 6 [ 424.629417][ T7736] loop5: detected capacity change from 0 to 256 [ 425.730599][ T7746] netlink: 56 bytes leftover after parsing attributes in process `syz.0.826'. [ 425.739856][ T7746] netlink: 8 bytes leftover after parsing attributes in process `syz.0.826'. [ 426.243205][ T7756] netlink: 12 bytes leftover after parsing attributes in process `syz.4.827'. [ 426.371804][ T7760] netlink: 40 bytes leftover after parsing attributes in process `syz.0.833'. [ 426.389500][ T7760] netlink: 40 bytes leftover after parsing attributes in process `syz.0.833'. [ 426.482220][ T7764] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 426.720124][ T7771] netlink: 8 bytes leftover after parsing attributes in process `syz.4.835'. [ 427.064182][ T7774] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 427.717985][ T7778] UBIFS error (pid: 7778): cannot open "ubifs", error -22 [ 430.615260][ T7798] loop5: detected capacity change from 0 to 256 [ 430.748742][ T7801] netlink: 56 bytes leftover after parsing attributes in process `syz.0.843'. [ 430.758374][ T7801] netlink: 8 bytes leftover after parsing attributes in process `syz.0.843'. [ 433.152642][ T7818] misc userio: Invalid payload size [ 435.330072][ T7847] netlink: 56 bytes leftover after parsing attributes in process `syz.0.855'. [ 435.339328][ T7847] netlink: 8 bytes leftover after parsing attributes in process `syz.0.855'. [ 435.603686][ T4363] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 436.277261][ T4363] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 436.302833][ T4363] usb 6-1: config 0 has no interface number 0 [ 436.323717][ T4363] usb 6-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 436.352358][ T4363] usb 6-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 436.393675][ T4363] usb 6-1: config 0 interface 2 altsetting 2 endpoint 0x82 has invalid maxpacket 192, setting to 64 [ 436.425038][ T4363] usb 6-1: config 0 interface 2 has no altsetting 0 [ 436.445611][ T4363] usb 6-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f7.3f [ 436.473687][ T4363] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.499577][ T4363] usb 6-1: Product: syz [ 436.523606][ T4363] usb 6-1: Manufacturer: syz [ 436.560414][ T4363] usb 6-1: SerialNumber: syz [ 436.572413][ T4363] usb 6-1: config 0 descriptor?? [ 436.583688][ T7844] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 436.601369][ T7844] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 436.898959][ T7861] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 437.069374][ T4363] usb 6-1: USB disconnect, device number 5 [ 437.503159][ T7866] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 437.810659][ T7872] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 440.107509][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.117679][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.526646][ T7889] netlink: 56 bytes leftover after parsing attributes in process `syz.4.869'. [ 440.573770][ T7889] netlink: 8 bytes leftover after parsing attributes in process `syz.4.869'. [ 442.867257][ T7894] misc userio: Invalid payload size [ 444.812328][ T7912] netlink: 8 bytes leftover after parsing attributes in process `syz.5.874'. [ 445.435722][ T7923] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 448.197950][ T7941] netlink: 56 bytes leftover after parsing attributes in process `syz.1.882'. [ 448.207104][ T7941] netlink: 8 bytes leftover after parsing attributes in process `syz.1.882'. [ 450.557555][ T7962] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 452.396611][ T6671] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 452.594783][ T7972] netlink: 8 bytes leftover after parsing attributes in process `syz.5.890'. [ 454.935951][ T7991] netlink: 56 bytes leftover after parsing attributes in process `syz.1.897'. [ 454.945031][ T7991] netlink: 8 bytes leftover after parsing attributes in process `syz.1.897'. [ 455.437393][ T8000] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 455.707968][ T8004] misc userio: Invalid payload size [ 458.591416][ T8029] netlink: 12 bytes leftover after parsing attributes in process `syz.5.904'. [ 459.796732][ T8045] netlink: 56 bytes leftover after parsing attributes in process `syz.5.910'. [ 459.806050][ T8045] netlink: 8 bytes leftover after parsing attributes in process `syz.5.910'. [ 460.899452][ T8052] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 460.983687][ T4319] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 462.038224][ T4319] usb 2-1: Using ep0 maxpacket: 32 [ 462.045514][ T4319] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 462.067677][ T4319] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 462.083608][ T4319] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 462.103095][ T4319] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.330375][ T8065] misc userio: Invalid payload size [ 462.930575][ T4319] usb 2-1: config 0 descriptor?? [ 463.774721][ T8075] overlayfs: missing 'lowerdir' [ 463.809352][ T4319] ft260 0003:0403:6030.000F: unknown main item tag 0x0 [ 463.817962][ T8076] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 463.884351][ T4319] ft260 0003:0403:6030.000F: unknown main item tag 0x0 [ 464.043726][ T4319] ft260 0003:0403:6030.000F: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0 [ 464.165632][ T4319] ft260 0003:0403:6030.000F: chip code: 0000 0000 [ 464.402856][ T8078] netlink: 12 bytes leftover after parsing attributes in process `syz.4.920'. [ 464.532397][ T4319] ft260 0003:0403:6030.000F: failed to retrieve status: -32 [ 464.828372][ T8089] netlink: 56 bytes leftover after parsing attributes in process `syz.3.922'. [ 464.837533][ T8089] netlink: 8 bytes leftover after parsing attributes in process `syz.3.922'. [ 464.895791][ T1199] usb 2-1: USB disconnect, device number 15 [ 465.666137][ T8086] fido_id[8086]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 469.019927][ T8123] misc userio: Invalid payload size [ 469.210184][ T8125] netlink: 12 bytes leftover after parsing attributes in process `syz.5.931'. [ 470.266919][ T8143] netlink: 56 bytes leftover after parsing attributes in process `syz.4.935'. [ 470.277295][ T8143] netlink: 8 bytes leftover after parsing attributes in process `syz.4.935'. [ 471.113690][ T8113] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 471.303712][ T8113] usb 2-1: Using ep0 maxpacket: 32 [ 471.312334][ T8113] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 471.358466][ T8113] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 471.394355][ T8113] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 471.415637][ T8113] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.446408][ T8113] usb 2-1: config 0 descriptor?? [ 471.520420][ T8149] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 471.673290][ T8133] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 471.935671][ T8113] ft260 0003:0403:6030.0010: unknown main item tag 0x0 [ 471.942645][ T8113] ft260 0003:0403:6030.0010: unknown main item tag 0x0 [ 472.120940][ T8113] ft260 0003:0403:6030.0010: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0 [ 472.285795][ T8113] ft260 0003:0403:6030.0010: chip code: 0000 0000 [ 472.700069][ T8113] ft260 0003:0403:6030.0010: failed to retrieve status: -32 [ 472.888935][ T8163] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 472.950578][ T8113] usb 2-1: USB disconnect, device number 16 [ 473.137879][ T8162] fido_id[8162]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 474.745965][ T8179] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 475.091519][ T8184] misc userio: Invalid payload size [ 475.940849][ T8193] netlink: 56 bytes leftover after parsing attributes in process `syz.1.948'. [ 477.696172][ T8202] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 478.265400][ T8207] netlink: 12 bytes leftover after parsing attributes in process `syz.4.952'. [ 478.757783][ T8214] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 478.983759][ T126] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 479.173987][ T126] usb 1-1: Using ep0 maxpacket: 32 [ 479.198279][ T126] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 479.210154][ T126] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 479.221133][ T126] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 479.230414][ T126] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.258303][ T126] usb 1-1: config 0 descriptor?? [ 479.681725][ T126] ft260 0003:0403:6030.0011: unknown main item tag 0x0 [ 480.533238][ T8231] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 481.586418][ T126] ft260 0003:0403:6030.0011: unknown main item tag 0x0 [ 481.595759][ T126] ft260 0003:0403:6030.0011: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0 [ 481.767709][ T8235] netlink: 56 bytes leftover after parsing attributes in process `syz.1.960'. [ 482.531928][ T126] ft260 0003:0403:6030.0011: failed to retrieve chip version [ 482.544338][ T126] ft260: probe of 0003:0403:6030.0011 failed with error -71 [ 482.563765][ T126] usb 1-1: USB disconnect, device number 11 [ 483.038407][ T8244] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 483.278477][ T8247] loop0: detected capacity change from 0 to 512 [ 483.285937][ T8247] EXT4-fs: Ignoring removed oldalloc option [ 483.715697][ T8249] netlink: 'syz.1.963': attribute type 12 has an invalid length. [ 483.893422][ T6671] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 484.110733][ T8247] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 484.153626][ T8247] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 484.162711][ T8247] ext4 filesystem being mounted at /207/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 484.211044][ T26] audit: type=1800 audit(1783542062.996:18): pid=8245 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.962" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 484.242660][ T8250] device macsec0 entered promiscuous mode [ 484.502572][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 484.767403][ T8251] fido_id[8251]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 484.964802][ T8266] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 485.227921][ T8248] device macsec0 left promiscuous mode [ 486.708681][ T4319] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 486.754812][ T8279] loop4: detected capacity change from 0 to 256 [ 486.935453][ T4319] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 486.953877][ T4319] usb 6-1: config 0 has no interface number 0 [ 486.960056][ T4319] usb 6-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 487.200617][ T4319] usb 6-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 487.212496][ T4319] usb 6-1: config 0 interface 2 altsetting 2 endpoint 0x82 has invalid maxpacket 192, setting to 64 [ 487.243560][ T4319] usb 6-1: config 0 interface 2 has no altsetting 0 [ 487.286312][ T4319] usb 6-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f7.3f [ 487.746131][ T4319] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.791084][ T4319] usb 6-1: Product: syz [ 487.871529][ T4319] usb 6-1: Manufacturer: syz [ 487.915765][ T4319] usb 6-1: SerialNumber: syz [ 488.020128][ T4319] usb 6-1: config 0 descriptor?? [ 488.040074][ T8273] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 488.063853][ T8273] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 488.352902][ T8288] netlink: 12 bytes leftover after parsing attributes in process `syz.4.973'. [ 488.540429][ T8298] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 489.121871][ T8299] netlink: 56 bytes leftover after parsing attributes in process `syz.1.974'. [ 489.261314][ T4317] usb 6-1: USB disconnect, device number 6 [ 489.805898][ T8309] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 490.084926][ T8311] loop4: detected capacity change from 0 to 512 [ 490.098367][ T8311] EXT4-fs: Ignoring removed oldalloc option [ 490.155434][ T8311] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 490.404203][ T8311] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 490.413399][ T8311] ext4 filesystem being mounted at /194/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 490.453670][ T26] audit: type=1800 audit(1783542069.236:19): pid=8310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.976" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 490.861829][ T8320] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 491.488682][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 492.673899][ T8330] loop3: detected capacity change from 0 to 256 [ 494.460173][ T8348] netlink: 12 bytes leftover after parsing attributes in process `syz.4.986'. [ 495.446275][ T8360] netlink: 56 bytes leftover after parsing attributes in process `syz.5.988'. [ 496.904571][ T8369] loop4: detected capacity change from 0 to 512 [ 496.914823][ T8369] EXT4-fs: Ignoring removed oldalloc option [ 497.448865][ T8371] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 497.759074][ T8369] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 498.907975][ T8369] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 498.917119][ T8369] ext4 filesystem being mounted at /197/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 498.994004][ T8388] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 499.273845][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 500.812565][ T8384] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 501.521494][ T8407] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1001'. [ 501.545935][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.552375][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.688766][ T8416] loop0: detected capacity change from 0 to 256 [ 502.020763][ T8422] loop4: detected capacity change from 0 to 1024 [ 502.829667][ T8422] EXT4-fs: Ignoring removed i_version option [ 503.092687][ T8422] EXT4-fs: Ignoring removed bh option [ 504.344537][ T8422] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 504.669355][ T8445] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 505.005436][ T26] audit: type=1800 audit(1783542083.806:20): pid=8447 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1006" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 505.345785][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 505.462225][ T8453] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1011'. [ 508.118046][ T8476] loop3: detected capacity change from 0 to 256 [ 509.048121][ T8489] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 510.052523][ T8496] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 510.928335][ T8501] loop3: detected capacity change from 0 to 1024 [ 510.949199][ T8501] EXT4-fs: Ignoring removed i_version option [ 510.967441][ T8506] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1026'. [ 510.993286][ T8501] EXT4-fs: Ignoring removed bh option [ 511.203566][ T14] usb 1-1: new low-speed USB device number 12 using dummy_hcd [ 511.898030][ T8501] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 512.045532][ T14] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 8, setting to 0 [ 512.116961][ T14] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 0 [ 512.148615][ T14] usb 1-1: string descriptor 0 read error: -22 [ 512.178361][ T14] usb 1-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 512.258671][ T26] audit: type=1800 audit(1783542091.036:21): pid=8517 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1023" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 512.653729][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.736463][ T14] usb 1-1: low speed audio streaming not supported [ 512.797812][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 513.029565][ T14] usb 1-1: low speed audio streaming not supported [ 513.061602][ T14] usb 1-1: selecting invalid altsetting 1 [ 513.081797][ T14] usb_set_interface error [ 513.087079][ T14] snd-usb-us122l: probe of 1-1:1.1 failed with error -22 [ 513.098189][ T14] usb 1-1: USB disconnect, device number 12 [ 513.442303][ T8530] tmpfs: Unknown parameter 'grpquota' [ 515.229615][ T4266] udevd[4266]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 515.728200][ T4420] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 515.768022][ T8549] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 516.700611][ T8557] loop0: detected capacity change from 0 to 1024 [ 516.708217][ T8557] EXT4-fs: Ignoring removed i_version option [ 516.714380][ T8557] EXT4-fs: Ignoring removed bh option [ 517.356812][ T8557] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 519.443623][ T26] audit: type=1800 audit(1783542098.166:22): pid=8574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1039" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 519.585845][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 519.626321][ T26] audit: type=1800 audit(1783542098.166:23): pid=8575 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1039" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 519.755035][ T8587] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1043'. [ 520.145002][ T8591] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1041'. [ 523.009418][ T8606] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 524.911514][ T8617] loop0: detected capacity change from 0 to 1024 [ 524.918959][ T8617] EXT4-fs: Ignoring removed i_version option [ 524.926508][ T8617] EXT4-fs: Ignoring removed bh option [ 524.968600][ T8617] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 526.294570][ T8635] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1058'. [ 526.818481][ T8645] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 527.610198][ T8644] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 527.882507][ T8652] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 527.962620][ T8654] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1063'. [ 528.762779][ T8661] misc userio: Invalid payload size [ 531.004599][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 533.041503][ T8689] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1070'. [ 533.143741][ T8692] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 534.535495][ T8701] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 534.962504][ T8705] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1077'. [ 535.052486][ T8707] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 541.823521][ T4319] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 542.063788][ T4319] usb 2-1: Using ep0 maxpacket: 32 [ 542.075260][ T4319] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 542.113041][ T4319] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 542.152862][ T4319] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 542.178237][ T4319] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.224608][ T4319] usb 2-1: config 0 descriptor?? [ 542.647266][ T4319] ft260 0003:0403:6030.0012: unknown main item tag 0x0 [ 542.654699][ T4319] ft260 0003:0403:6030.0012: unknown main item tag 0x0 [ 542.684248][ T4319] ft260 0003:0403:6030.0012: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0 [ 542.858938][ T4319] ft260 0003:0403:6030.0012: chip code: 0000 0000 [ 543.255875][ T4319] ft260 0003:0403:6030.0012: failed to retrieve status: -32 [ 543.646767][ T8732] i2c i2c-1: adapter quirk: 2nd comb msg must be read (addr 0x0007, size 0, write) [ 543.712482][ T4319] usb 2-1: USB disconnect, device number 17 [ 544.585400][ T8756] fido_id[8756]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 544.671945][ T8764] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 544.782181][ T8766] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1095'. [ 545.051069][ T8773] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1087'. [ 546.921867][ T8782] misc userio: Invalid payload size [ 547.774056][ T4389] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 549.313665][ T8113] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 549.972075][ T8113] usb 1-1: Using ep0 maxpacket: 32 [ 549.996260][ T8113] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 550.008568][ T8113] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 550.022352][ T8113] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 550.034400][ T8113] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.094536][ T8113] usb 1-1: config 0 descriptor?? [ 551.336300][ T8113] ft260 0003:0403:6030.0013: unknown main item tag 0x0 [ 551.353806][ T8113] ft260 0003:0403:6030.0013: unknown main item tag 0x0 [ 551.397707][ T8113] ft260 0003:0403:6030.0013: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0 [ 551.583979][ T8113] ft260 0003:0403:6030.0013: chip code: 0000 0000 [ 552.170334][ T8113] ft260 0003:0403:6030.0013: failed to retrieve status: -32 [ 552.290196][ T8822] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1109'. [ 552.473216][ T8807] i2c i2c-1: adapter quirk: 2nd comb msg must be read (addr 0x0007, size 0, write) [ 552.561077][ T8833] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1110'. [ 553.296044][ T8301] usb 1-1: USB disconnect, device number 13 [ 554.842126][ T8851] Cannot find add_set index 0 as target [ 558.413016][ T8877] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1125'. [ 558.464922][ T4324] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 559.173562][ T4324] usb 2-1: Using ep0 maxpacket: 32 [ 559.222545][ T4324] usb 2-1: device descriptor read/all, error -71 [ 559.365214][ T8885] overlayfs: missing 'lowerdir' [ 560.567414][ T8892] Cannot find add_set index 0 as target [ 562.244045][ T8301] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 562.523614][ T8301] usb 5-1: Using ep0 maxpacket: 32 [ 562.743378][ T8301] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 562.764671][ T8301] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 562.985588][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.992030][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.733745][ T8301] usb 5-1: config 0 interface 0 has no altsetting 0 [ 563.786607][ T8301] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 563.844274][ T8301] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.852370][ T8301] usb 5-1: Product: syz [ 563.903830][ T8301] usb 5-1: Manufacturer: syz [ 563.908521][ T8301] usb 5-1: SerialNumber: syz [ 565.395983][ T8301] usb 5-1: config 0 descriptor?? [ 565.603313][ T8915] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1137'. [ 565.667458][ T8301] usb 5-1: can't set config #0, error -71 [ 565.693136][ T8301] usb 5-1: USB disconnect, device number 10 [ 566.952410][ T8932] overlayfs: missing 'lowerdir' [ 570.605093][ T8952] loop5: detected capacity change from 0 to 1024 [ 570.621919][ T8952] EXT4-fs: Ignoring removed i_version option [ 570.629838][ T8952] EXT4-fs: Ignoring removed bh option [ 570.739736][ T8952] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 571.733595][ T26] audit: type=1800 audit(1783542150.336:24): pid=8959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1151" name="file2" dev="loop5" ino=16 res=0 errno=0 [ 572.540850][ T5291] EXT4-fs (loop5): unmounting filesystem. [ 573.731693][ T8973] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1154'. [ 574.656672][ T14] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 574.863707][ T14] usb 2-1: Using ep0 maxpacket: 32 [ 575.059753][ T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 575.205035][ T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 575.231276][ T8988] loop4: detected capacity change from 0 to 256 [ 575.404605][ T14] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 575.421185][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.104653][ T14] usb 2-1: config 0 descriptor?? [ 576.592564][ T9000] misc userio: Invalid payload size [ 576.618456][ T14] ft260 0003:0403:6030.0014: unknown main item tag 0x0 [ 577.354090][ T14] ft260 0003:0403:6030.0014: unknown main item tag 0x0 [ 577.478991][ T14] ft260 0003:0403:6030.0014: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0 [ 577.779873][ T14] ft260 0003:0403:6030.0014: chip code: 0000 0000 [ 578.031624][ T9010] loop3: detected capacity change from 0 to 1024 [ 578.095068][ T9010] EXT4-fs: Ignoring removed i_version option [ 578.108307][ T14] ft260 0003:0403:6030.0014: failed to retrieve system status [ 578.167055][ T9010] EXT4-fs: Ignoring removed bh option [ 578.172816][ T14] ft260: probe of 0003:0403:6030.0014 failed with error -71 [ 578.220377][ T14] usb 2-1: USB disconnect, device number 20 [ 578.254584][ T9010] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 578.727537][ T9020] Cannot find add_set index 0 as target [ 579.636389][ T6663] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 579.953811][ T26] audit: type=1800 audit(1783542158.756:25): pid=9022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1164" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 580.182498][ T9014] fido_id[9014]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 583.357654][ T9051] loop1: detected capacity change from 0 to 256 [ 585.903706][ T4486] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 586.433622][ T4486] usb 6-1: Using ep0 maxpacket: 32 [ 586.440723][ T4486] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 586.523227][ T4486] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 586.553936][ T4486] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 586.563067][ T4486] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.588573][ T4486] usb 6-1: config 0 descriptor?? [ 587.700396][ T4486] ft260 0003:0403:6030.0015: unknown main item tag 0x0 [ 587.744681][ T4486] ft260 0003:0403:6030.0015: unknown main item tag 0x0 [ 587.765447][ T4486] ft260 0003:0403:6030.0015: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.5-1/input0 [ 587.869818][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 588.078606][ T4486] ft260 0003:0403:6030.0015: chip code: 0000 0000 [ 588.444381][ T9098] IPVS: ip_vs_add_dest(): server weight less than zero [ 588.510229][ T4486] ft260 0003:0403:6030.0015: failed to retrieve status: -32 [ 588.994835][ T9068] i2c i2c-1: adapter quirk: 2nd comb msg must be read (addr 0x0007, size 0, write) [ 589.133510][ T4486] usb 6-1: reset high-speed USB device number 7 using dummy_hcd [ 590.680120][ T9104] loop4: detected capacity change from 0 to 256 [ 591.320677][ T8113] usb 6-1: USB disconnect, device number 7 [ 592.094979][ T9113] netlink: 'syz.1.1189': attribute type 4 has an invalid length. [ 592.445800][ T9109] fido_id[9109]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 594.281014][ T9141] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 594.982202][ T9140] loop3: detected capacity change from 0 to 1024 [ 594.996223][ T9140] EXT4-fs: Ignoring removed i_version option [ 595.069092][ T9140] EXT4-fs: Ignoring removed bh option [ 595.149950][ T9140] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 595.270263][ T9152] loop5: detected capacity change from 0 to 256 [ 595.403561][ T8113] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 596.316567][ T26] audit: type=1800 audit(1783542175.116:26): pid=9156 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1196" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 596.553642][ T8113] usb 2-1: Using ep0 maxpacket: 32 [ 596.561001][ T8113] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 596.583173][ T8113] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 596.623519][ T8113] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 597.419965][ T8113] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.430161][ T8113] usb 2-1: config 0 descriptor?? [ 597.846225][ T8113] ft260 0003:0403:6030.0016: unknown main item tag 0x0 [ 597.878878][ T8113] ft260 0003:0403:6030.0016: unknown main item tag 0x0 [ 597.901916][ T8113] ft260 0003:0403:6030.0016: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0 [ 598.204077][ T8113] ft260 0003:0403:6030.0016: chip code: 0000 0000 [ 598.971784][ T8113] ft260 0003:0403:6030.0016: failed to retrieve status: -32 [ 599.194056][ T4485] usb 2-1: reset high-speed USB device number 21 using dummy_hcd [ 599.215058][ T9188] loop0: detected capacity change from 0 to 256 [ 599.493539][ T9191] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 601.034100][ T8113] usb 2-1: USB disconnect, device number 21 [ 603.658604][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 604.551100][ T9225] loop5: detected capacity change from 0 to 256 [ 608.462645][ T9255] loop0: detected capacity change from 0 to 1024 [ 608.516366][ T9255] EXT4-fs: Ignoring removed i_version option [ 608.526906][ T9255] EXT4-fs: Ignoring removed bh option [ 608.710943][ T9261] loop3: detected capacity change from 0 to 256 [ 610.038754][ T9255] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 612.099162][ T4501] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 612.808583][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 612.915937][ T126] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 613.233553][ T126] usb 6-1: Using ep0 maxpacket: 32 [ 613.240943][ T126] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 613.605930][ T9301] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 614.163763][ T126] usb 6-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 614.173851][ T126] usb 6-1: config 0 interface 0 has no altsetting 0 [ 614.184478][ T126] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 614.195404][ T126] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.211070][ T126] usb 6-1: Product: syz [ 614.353080][ T126] usb 6-1: Manufacturer: syz [ 614.405139][ T126] usb 6-1: SerialNumber: syz [ 614.458061][ T126] usb 6-1: config 0 descriptor?? [ 614.510476][ T9308] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4274] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[9308] [ 615.425810][ T126] gs_usb 6-1:0.0: Configuring for 158 interfaces [ 615.468364][ T9312] loop3: detected capacity change from 0 to 256 [ 616.494392][ T126] gs_usb 6-1:0.0: Couldn't get bit timing const for channel 1 (-EPROTO) [ 616.724687][ T126] gs_usb: probe of 6-1:0.0 failed with error -71 [ 616.764010][ T126] usb 6-1: USB disconnect, device number 8 [ 617.710680][ T9324] overlayfs: missing 'lowerdir' [ 618.114082][ T9326] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 618.223386][ T46] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 621.020973][ T9350] loop4: detected capacity change from 0 to 256 [ 621.679884][ T9359] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1258'. [ 624.449323][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.455757][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.388283][ T9381] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1267'. [ 625.403035][ T9379] overlayfs: missing 'lowerdir' [ 627.621149][ T9398] loop3: detected capacity change from 0 to 256 [ 628.334406][ T9409] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 630.310993][ T26] audit: type=1326 audit(1783542209.106:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9399 comm="syz.5.1273" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febb579de59 code=0x7ffc0000 [ 631.124640][ T26] audit: type=1326 audit(1783542209.136:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9399 comm="syz.5.1273" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febb579de59 code=0x7ffc0000 [ 631.311980][ T26] audit: type=1326 audit(1783542209.146:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9399 comm="syz.5.1273" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7febb579de59 code=0x7ffc0000 [ 631.399473][ T26] audit: type=1326 audit(1783542209.146:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9399 comm="syz.5.1273" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febb579de59 code=0x7ffc0000 [ 631.548306][ T26] audit: type=1326 audit(1783542209.146:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9399 comm="syz.5.1273" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febb579de59 code=0x7ffc0000 [ 631.573365][ T26] audit: type=1326 audit(1783542209.996:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9399 comm="syz.5.1273" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7febb579de59 code=0x7ffc0000 [ 632.623618][ T26] audit: type=1326 audit(1783542210.006:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9399 comm="syz.5.1273" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febb579de59 code=0x7ffc0000 [ 632.808118][ T26] audit: type=1326 audit(1783542210.006:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9399 comm="syz.5.1273" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febb579de59 code=0x7ffc0000 [ 633.664346][ T26] audit: type=1326 audit(1783542210.016:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9399 comm="syz.5.1273" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7febb579de59 code=0x7ffc0000 [ 633.689301][ T26] audit: type=1326 audit(1783542210.016:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9399 comm="syz.5.1273" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febb579de59 code=0x7ffc0000 [ 633.975858][ T9447] UBIFS error (pid: 9447): cannot open "ubifs", error -22 [ 634.731752][ T9450] loop4: detected capacity change from 0 to 256 [ 635.430291][ T9453] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 636.290145][ T9467] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1288'. [ 637.771715][ T9475] misc userio: Invalid payload size [ 639.816890][ T9498] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1295'. [ 640.220349][ T9504] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1296'. [ 641.174881][ T9510] UBIFS error (pid: 9510): cannot open "ubifs", error -22 [ 642.241311][ T9517] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 642.998947][ T9519] loop1: detected capacity change from 0 to 256 [ 643.069046][ T9521] overlayfs: missing 'lowerdir' [ 644.218025][ T4334] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 645.045647][ T9527] misc userio: Invalid payload size [ 646.587325][ T9557] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1310'. [ 648.064398][ T9565] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1309'. [ 648.201372][ T9569] UBIFS error (pid: 9569): cannot open "ubifs", error -22 [ 651.900630][ T9591] overlayfs: missing 'lowerdir' [ 652.947922][ T9597] misc userio: Invalid payload size [ 654.567751][ T9612] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1321'. [ 654.878642][ T9614] UBIFS error (pid: 9614): cannot open "ubifs", error -22 [ 655.568487][ T9618] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1325'. [ 656.653762][ T8113] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 657.423496][ T8113] usb 5-1: Using ep0 maxpacket: 32 [ 658.097138][ T8113] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 658.113509][ T8113] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 658.123315][ T8113] usb 5-1: config 0 interface 0 has no altsetting 0 [ 658.215602][ T8113] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 658.257208][ T8113] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.283469][ T8113] usb 5-1: Product: syz [ 658.312121][ T8113] usb 5-1: Manufacturer: syz [ 658.328227][ T9642] overlayfs: missing 'lowerdir' [ 658.333196][ T8113] usb 5-1: SerialNumber: syz [ 658.345405][ T8113] usb 5-1: config 0 descriptor?? [ 659.234091][ T8113] gs_usb 5-1:0.0: Configuring for 158 interfaces [ 659.437957][ T8113] gs_usb 5-1:0.0: Couldn't get bit timing const for channel 0 (-EPROTO) [ 659.447273][ T8113] gs_usb: probe of 5-1:0.0 failed with error -71 [ 659.517121][ T8113] usb 5-1: USB disconnect, device number 11 [ 660.598655][ T9661] UBIFS error (pid: 9661): cannot open "ubifs", error -22 [ 661.446179][ T9676] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1341'. [ 662.575123][ T9691] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 664.365467][ T9698] overlayfs: missing 'lowerdir' [ 665.038675][ T9708] UBIFS error (pid: 9708): cannot open "ubifs", error -22 [ 665.318703][ T9711] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1349'. [ 666.713371][ T9730] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 671.130986][ T9767] UBIFS error (pid: 9767): cannot open "ubifs", error -22 [ 671.144023][ T9771] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 671.425900][ T9765] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1365'. [ 671.500016][ T9759] overlayfs: missing 'lowerdir' [ 675.011174][ T9819] UBIFS error (pid: 9819): cannot open "ubifs", error -22 [ 675.902274][ T9826] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1380'. [ 677.451607][ T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 679.595530][ T9862] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1391'. [ 686.737908][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.744401][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.685785][ T9929] misc userio: Invalid payload size [ 689.573697][ T9940] comedi comedi1: comedi_parport: I/O port conflict (0xfffffffffffffffd,3) [ 692.005427][ T9953] misc userio: Invalid payload size [ 697.108396][T10003] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1427'. [ 697.186437][T10003] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1427'. [ 698.697940][T10012] misc userio: Invalid payload size [ 698.703618][ T953] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 699.125042][ T953] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 699.389616][ T953] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 699.461628][ T953] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 700.332528][ T953] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 700.353494][ T953] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.386595][ T953] usb 5-1: config 0 descriptor?? [ 700.392168][T10013] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 701.998880][ T4282] Bluetooth: hci0: unknown advertising packet type: 0x65 [ 701.998986][ T4282] Bluetooth: hci0: unknown advertising packet type: 0x20 [ 702.010962][ T4282] Bluetooth: hci0: Malformed LE Event: 0x02 [ 703.554264][ T953] usbhid 5-1:0.0: can't add hid device: -71 [ 703.560424][ T953] usbhid: probe of 5-1:0.0 failed with error -71 [ 703.601486][ T953] usb 5-1: USB disconnect, device number 12 [ 704.047515][T10056] loop1: detected capacity change from 0 to 256 [ 706.501963][T10066] xt_nat: multiple ranges no longer supported [ 708.763538][ T4334] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 709.525839][ T26] kauditd_printk_skb: 25 callbacks suppressed [ 709.525885][ T26] audit: type=1326 audit(1783542288.326:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10086 comm="syz.1.1451" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc65d9de59 code=0x7ffc0000 [ 709.698505][ T26] audit: type=1326 audit(1783542288.386:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10086 comm="syz.1.1451" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efc65d9de59 code=0x7ffc0000 [ 709.758975][ T26] audit: type=1326 audit(1783542288.396:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10086 comm="syz.1.1451" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc65d9de59 code=0x7ffc0000 [ 709.812353][T10099] loop3: detected capacity change from 0 to 256 [ 709.869742][ T26] audit: type=1326 audit(1783542288.396:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10086 comm="syz.1.1451" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7efc65d9de59 code=0x7ffc0000 [ 710.879532][ T26] audit: type=1326 audit(1783542288.396:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10086 comm="syz.1.1451" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc65d9de59 code=0x7ffc0000 [ 710.943467][T10108] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1453'. [ 711.005251][ T26] audit: type=1326 audit(1783542288.396:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10086 comm="syz.1.1451" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efc65d9de59 code=0x7ffc0000 [ 711.340724][ T26] audit: type=1326 audit(1783542288.426:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10086 comm="syz.1.1451" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc65d9de59 code=0x7ffc0000 [ 712.037757][ T26] audit: type=1326 audit(1783542288.426:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10086 comm="syz.1.1451" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc65d9de59 code=0x7ffc0000 [ 712.063066][ T26] audit: type=1326 audit(1783542288.426:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10086 comm="syz.1.1451" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7efc65d9de59 code=0x7ffc0000 [ 713.013594][ T26] audit: type=1326 audit(1783542288.426:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10086 comm="syz.1.1451" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc65d9de59 code=0x7ffc0000 [ 716.102122][T10145] loop1: detected capacity change from 0 to 256 [ 719.105701][T10172] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1474'. [ 719.108652][T10170] vcan0 speed is unknown, defaulting to 1000 [ 719.148196][T10172] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 719.148357][T10172] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 719.148390][T10172] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 719.148422][T10172] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 719.191216][T10170] vcan0 speed is unknown, defaulting to 1000 [ 719.209237][T10170] vcan0 speed is unknown, defaulting to 1000 [ 719.770866][T10172] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1474'. [ 719.771995][T10172] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1474'. [ 720.574616][T10181] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 720.711173][ T953] vcan0 speed is unknown, defaulting to 1000 [ 720.717302][T10170] infiniband syz1: set active [ 720.717407][T10170] infiniband syz1: added vcan0 [ 720.749934][T10170] rdma_rxe: unable to create cq [ 720.750311][T10170] infiniband syz1: Couldn't create ib_mad CQ [ 720.750766][T10170] infiniband syz1: Couldn't open port 1 [ 720.938881][T10170] RDS/IB: syz1: added [ 720.939903][T10170] smc: adding ib device syz1 with port count 1 [ 720.940024][T10170] smc: ib device syz1 port 1 has pnetid [ 720.942647][ T953] vcan0 speed is unknown, defaulting to 1000 [ 720.952826][T10170] vcan0 speed is unknown, defaulting to 1000 [ 721.058444][ T26] kauditd_printk_skb: 13 callbacks suppressed [ 721.058459][ T26] audit: type=1326 audit(1783542299.856:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10185 comm="syz.5.1478" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febb579de59 code=0x7ffc0000 [ 721.075947][ T26] audit: type=1326 audit(1783542299.876:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10185 comm="syz.5.1478" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febb579de59 code=0x7ffc0000 [ 721.193043][T10170] vcan0 speed is unknown, defaulting to 1000 [ 721.228098][ C1] vkms_vblank_simulate: vblank timer overrun [ 721.426027][T10193] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1481'. [ 723.022768][T10170] vcan0 speed is unknown, defaulting to 1000 [ 723.451365][T10170] vcan0 speed is unknown, defaulting to 1000 [ 723.941470][T10170] vcan0 speed is unknown, defaulting to 1000 [ 733.717265][T10277] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 733.767736][ T8995] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 734.444274][ T8995] usb 1-1: Using ep0 maxpacket: 8 [ 734.703599][ T8995] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 734.703652][ T8995] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 734.703692][ T8995] usb 1-1: config 0 has no interface number 0 [ 734.703816][ T8995] usb 1-1: config 0 interface 52 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 734.703866][ T8995] usb 1-1: config 0 interface 52 has no altsetting 0 [ 734.713047][ T8995] usb 1-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 734.713100][ T8995] usb 1-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 734.713139][ T8995] usb 1-1: Manufacturer: syz [ 734.777422][ T8995] usb 1-1: config 0 descriptor?? [ 734.831259][ T8995] hub 1-1:0.52: bad descriptor, ignoring hub [ 734.831796][ T8995] hub: probe of 1-1:0.52 failed with error -5 [ 735.863736][ T8995] usb 1-1: USB disconnect, device number 14 [ 737.442860][T10314] rdma_rxe: rxe_register_device failed with error -23 [ 737.530855][ T26] audit: type=1326 audit(1783542316.326:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10300 comm="syz.0.1517" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bdf99de59 code=0x7ffc0000 [ 737.573462][T10314] rdma_rxe: failed to add vcan0 [ 737.781929][ T26] audit: type=1326 audit(1783542316.416:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10300 comm="syz.0.1517" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5bdf99de59 code=0x7ffc0000 [ 737.805840][ C1] vkms_vblank_simulate: vblank timer overrun [ 737.898952][ T26] audit: type=1326 audit(1783542316.426:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10300 comm="syz.0.1517" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bdf99de59 code=0x7ffc0000 [ 739.337481][ T26] audit: type=1326 audit(1783542316.436:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10300 comm="syz.0.1517" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f5bdf99de59 code=0x7ffc0000 [ 739.487741][ T26] audit: type=1326 audit(1783542316.436:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10300 comm="syz.0.1517" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bdf99de59 code=0x7ffc0000 [ 739.667600][ T26] audit: type=1326 audit(1783542316.446:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10300 comm="syz.0.1517" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5bdf99de59 code=0x7ffc0000 [ 740.692748][ T26] audit: type=1326 audit(1783542316.456:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10300 comm="syz.0.1517" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bdf99de59 code=0x7ffc0000 [ 740.816039][ T6676] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 741.669517][ T26] audit: type=1326 audit(1783542316.546:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10300 comm="syz.0.1517" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f5bdf99de59 code=0x7ffc0000 [ 741.837277][ T26] audit: type=1326 audit(1783542316.546:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10300 comm="syz.0.1517" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bdf99de59 code=0x7ffc0000 [ 741.944059][ T26] audit: type=1326 audit(1783542316.546:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10300 comm="syz.0.1517" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bdf99de59 code=0x7ffc0000 [ 741.973144][T10333] af_packet: tpacket_rcv: packet too big, clamped from 20 to 4294967272. macoff=96 [ 743.154568][T10347] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1531'. [ 743.298281][T10347] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 743.307825][T10347] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 743.316630][T10347] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 743.325395][T10347] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 745.398196][ T26] kauditd_printk_skb: 14 callbacks suppressed [ 745.398215][ T26] audit: type=1326 audit(1783542324.186:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10351 comm="syz.4.1532" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaf6b9de59 code=0x7ffc0000 [ 745.428436][ C1] vkms_vblank_simulate: vblank timer overrun [ 745.529812][ T26] audit: type=1326 audit(1783542324.236:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10351 comm="syz.4.1532" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaf6b9de59 code=0x7ffc0000 [ 746.773478][ T953] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 747.065814][ T953] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 747.184212][ T953] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 747.233750][ T953] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.305251][ T953] usb 2-1: config 0 descriptor?? [ 747.309370][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.319561][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.359843][ T953] pwc: Askey VC010 type 2 USB webcam detected. [ 747.759425][ T953] pwc: recv_control_msg error -32 req 02 val 2b00 [ 747.792336][ T953] pwc: recv_control_msg error -32 req 02 val 2700 [ 747.821384][ T953] pwc: recv_control_msg error -32 req 02 val 2c00 [ 747.844409][ T953] pwc: recv_control_msg error -32 req 04 val 1000 [ 747.883605][ T953] pwc: recv_control_msg error -32 req 04 val 1300 [ 747.903765][ T953] pwc: recv_control_msg error -32 req 04 val 1400 [ 747.934345][ T953] pwc: recv_control_msg error -32 req 02 val 2000 [ 747.954047][ T953] pwc: recv_control_msg error -32 req 02 val 2100 [ 747.974574][ T953] pwc: recv_control_msg error -32 req 04 val 1500 [ 748.015225][ T953] pwc: recv_control_msg error -32 req 02 val 2500 [ 748.053629][ T953] pwc: recv_control_msg error -32 req 02 val 2400 [ 748.084833][ T953] pwc: recv_control_msg error -32 req 02 val 2600 [ 748.309814][ T953] pwc: recv_control_msg error -32 req 02 val 2800 [ 748.522884][ T953] pwc: recv_control_msg error -71 req 04 val 1200 [ 748.548296][ T953] pwc: Registered as video103. [ 748.575106][ T953] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input10 [ 749.389247][ T953] usb 2-1: USB disconnect, device number 22 [ 750.244313][ T26] audit: type=1326 audit(1783542329.036:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10394 comm="syz.4.1541" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaf6b9de59 code=0x7ffc0000 [ 750.245071][ T26] audit: type=1326 audit(1783542329.046:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10394 comm="syz.4.1541" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaf6b9de59 code=0x7ffc0000 [ 750.249092][ T26] audit: type=1326 audit(1783542329.046:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10394 comm="syz.4.1541" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcaf6b9de59 code=0x7ffc0000 [ 750.251278][ T26] audit: type=1326 audit(1783542329.046:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10394 comm="syz.4.1541" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaf6b9de59 code=0x7ffc0000 [ 750.254172][ T26] audit: type=1326 audit(1783542329.056:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10394 comm="syz.4.1541" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaf6b9de59 code=0x7ffc0000 [ 750.254416][ T26] audit: type=1326 audit(1783542329.056:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10394 comm="syz.4.1541" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fcaf6b9de59 code=0x7ffc0000 [ 750.254670][ T26] audit: type=1326 audit(1783542329.056:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10394 comm="syz.4.1541" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaf6b9de59 code=0x7ffc0000 [ 750.258747][ T26] audit: type=1326 audit(1783542329.056:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10394 comm="syz.4.1541" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcaf6b9de59 code=0x7ffc0000 [ 750.450832][ C0] vkms_vblank_simulate: vblank timer overrun [ 750.501880][ C0] vkms_vblank_simulate: vblank timer overrun [ 750.551936][ C0] vkms_vblank_simulate: vblank timer overrun [ 750.600870][ C0] vkms_vblank_simulate: vblank timer overrun [ 755.260940][T10410] device veth0_macvtap left promiscuous mode [ 756.853473][ T14] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 757.775434][ T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 757.823516][ T14] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 757.883444][ T14] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 757.892570][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 757.970725][ T14] usb 4-1: config 0 descriptor?? [ 759.063973][ T14] ath6kl: Failed to submit usb control message: -110 [ 759.555246][ T14] ath6kl: unable to send the bmi data to the device: -110 [ 759.562440][ T14] ath6kl: Unable to send get target info: -110 [ 759.593571][ T4282] Bluetooth: hci5: Malformed LE Event: 0x0d [ 759.696260][ T14] ath6kl: Failed to init ath6kl core: -110 [ 761.934104][ T14] ath6kl_usb: probe of 4-1:0.0 failed with error -110 [ 761.994801][ T14] usb 4-1: USB disconnect, device number 7 [ 763.829831][T10534] misc userio: Invalid payload size [ 764.988493][ T26] kauditd_printk_skb: 16 callbacks suppressed [ 764.988537][ T26] audit: type=1326 audit(1783542343.786:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10540 comm="syz.1.1565" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc65d9de59 code=0x7ffc0000 [ 765.550987][ T26] audit: type=1326 audit(1783542343.906:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10540 comm="syz.1.1565" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efc65d9de59 code=0x7ffc0000 [ 765.608735][ T26] audit: type=1326 audit(1783542344.406:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10540 comm="syz.1.1565" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc65d9de59 code=0x7ffc0000 [ 765.608786][ T26] audit: type=1326 audit(1783542344.406:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10540 comm="syz.1.1565" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc65d9de59 code=0x7ffc0000 [ 770.893532][ T8995] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 771.085100][ T8995] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 771.173460][ T8995] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 771.182635][ T8995] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 771.232720][ T8995] usb 1-1: config 0 descriptor?? [ 771.246988][ T8995] pwc: Askey VC010 type 2 USB webcam detected. [ 771.649418][ T8995] pwc: recv_control_msg error -32 req 02 val 2b00 [ 771.657921][ T8995] pwc: recv_control_msg error -32 req 02 val 2700 [ 771.865901][ T8995] pwc: recv_control_msg error -32 req 02 val 2c00 [ 772.634223][ T8995] pwc: recv_control_msg error -32 req 04 val 1000 [ 772.698606][ T8995] pwc: recv_control_msg error -32 req 04 val 1300 [ 773.274138][ T6668] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 773.490623][ T8995] pwc: recv_control_msg error -71 req 04 val 1400 [ 773.499454][ T8995] pwc: recv_control_msg error -71 req 02 val 2000 [ 773.513545][ T8995] pwc: recv_control_msg error -71 req 02 val 2100 [ 773.539414][ T8995] pwc: recv_control_msg error -71 req 04 val 1500 [ 773.573912][ T8995] pwc: recv_control_msg error -71 req 02 val 2500 [ 773.799707][ T8995] pwc: recv_control_msg error -71 req 02 val 2400 [ 773.806781][ T8995] pwc: recv_control_msg error -71 req 02 val 2600 [ 773.823496][ T8995] pwc: recv_control_msg error -71 req 02 val 2900 [ 773.830358][ T8995] pwc: recv_control_msg error -71 req 02 val 2800 [ 773.839844][ T8995] pwc: recv_control_msg error -71 req 04 val 1100 [ 773.851392][ T8995] pwc: recv_control_msg error -71 req 04 val 1200 [ 773.864784][ T8995] pwc: Registered as video103. [ 773.870364][ T8995] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input11 [ 773.895310][ T8995] usb 1-1: USB disconnect, device number 15 [ 774.156143][T10647] misc userio: Invalid payload size [ 774.952726][T10650] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1584'. [ 777.485205][ T26] audit: type=1326 audit(1783542356.286:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10669 comm="syz.0.1589" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bdf99de59 code=0x7ffc0000 [ 777.745893][T10680] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 778.522883][ T26] audit: type=1326 audit(1783542356.456:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10669 comm="syz.0.1589" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5bdf99de59 code=0x7ffc0000 [ 779.503455][ T26] audit: type=1326 audit(1783542356.456:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10669 comm="syz.0.1589" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bdf99de59 code=0x7ffc0000 [ 779.833638][ T4486] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 779.984721][ T26] audit: type=1326 audit(1783542356.456:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10669 comm="syz.0.1589" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f5bdf99de59 code=0x7ffc0000 [ 780.077389][ T4486] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 780.093607][ T4486] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 780.103898][ T4486] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.133707][ T4486] usb 6-1: config 0 descriptor?? [ 780.173648][ T4486] pwc: Askey VC010 type 2 USB webcam detected. [ 780.293080][ T26] audit: type=1326 audit(1783542356.456:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10669 comm="syz.0.1589" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bdf99de59 code=0x7ffc0000 [ 780.494440][ T26] audit: type=1326 audit(1783542356.466:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10669 comm="syz.0.1589" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5bdf99de59 code=0x7ffc0000 [ 780.553968][ T4486] pwc: recv_control_msg error -32 req 02 val 2b00 [ 780.578037][ T4486] pwc: recv_control_msg error -32 req 02 val 2700 [ 780.768890][ T26] audit: type=1326 audit(1783542356.466:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10669 comm="syz.0.1589" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bdf99de59 code=0x7ffc0000 [ 780.821078][ T26] audit: type=1326 audit(1783542356.466:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10669 comm="syz.0.1589" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f5bdf99de59 code=0x7ffc0000 [ 781.644580][ T4486] pwc: recv_control_msg error -32 req 02 val 2c00 [ 781.704843][ T4486] pwc: recv_control_msg error -32 req 04 val 1000 [ 781.717522][ T4486] pwc: recv_control_msg error -32 req 04 val 1300 [ 781.764429][T10706] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1597'. [ 781.799795][ T4486] pwc: recv_control_msg error -32 req 04 val 1400 [ 781.978092][ T4486] pwc: recv_control_msg error -32 req 02 val 2000 [ 782.025996][ T26] audit: type=1326 audit(1783542356.466:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10669 comm="syz.0.1589" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bdf99de59 code=0x7ffc0000 [ 782.083868][ T4486] pwc: recv_control_msg error -32 req 02 val 2100 [ 782.243534][ T4486] pwc: recv_control_msg error -32 req 04 val 1500 [ 782.251371][ T4486] pwc: recv_control_msg error -32 req 02 val 2500 [ 782.262683][ T4486] pwc: recv_control_msg error -32 req 02 val 2400 [ 782.943058][ T4486] pwc: recv_control_msg error -32 req 02 val 2600 [ 783.193595][ T26] audit: type=1326 audit(1783542356.466:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10669 comm="syz.0.1589" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5bdf99de59 code=0x7ffc0000 [ 784.051011][T10720] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1600'. [ 784.140539][ T26] audit: type=1326 audit(1783542356.466:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10669 comm="syz.0.1589" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bdf99de59 code=0x7ffc0000 [ 784.311448][ T4486] pwc: recv_control_msg error -71 req 02 val 2800 [ 784.344154][ T4486] pwc: recv_control_msg error -71 req 04 val 1100 [ 784.351073][ T26] audit: type=1326 audit(1783542356.466:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10669 comm="syz.0.1589" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5bdf99de59 code=0x7ffc0000 [ 784.403549][ T4486] pwc: recv_control_msg error -71 req 04 val 1200 [ 784.441008][ T4486] pwc: Registered as video103. [ 784.473566][ T4486] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input12 [ 784.523471][ T26] audit: type=1326 audit(1783542356.476:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10669 comm="syz.0.1589" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bdf99de59 code=0x7ffc0000 [ 784.614427][ T4486] usb 6-1: USB disconnect, device number 9 [ 784.788752][ T26] audit: type=1326 audit(1783542356.476:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10669 comm="syz.0.1589" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f5bdf95e68e code=0x7ffc0000 [ 785.074214][T10729] misc userio: Invalid payload size [ 785.649244][ T26] audit: type=1326 audit(1783542356.476:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10669 comm="syz.0.1589" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bdf99de59 code=0x7ffc0000 [ 785.677909][ T26] audit: type=1326 audit(1783542356.476:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10669 comm="syz.0.1589" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5bdf99de59 code=0x7ffc0000 [ 785.702367][ T26] audit: type=1326 audit(1783542357.236:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10669 comm="syz.0.1589" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bdf99de59 code=0x7ffc0000 [ 785.753561][ T26] audit: type=1326 audit(1783542357.236:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10669 comm="syz.0.1589" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bdf99de59 code=0x7ffc0000 [ 786.673511][ T4316] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 787.484350][ T4316] usb 1-1: unable to get BOS descriptor or descriptor too short [ 787.627504][ T4316] usb 1-1: not running at top speed; connect to a high speed hub [ 787.644080][ T4316] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 787.652329][ T4316] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 787.695114][ T4316] usb 1-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 787.713123][ T4316] usb 1-1: config 14 has no interface number 0 [ 787.719690][ T4316] usb 1-1: config 14 has no interface number 1 [ 787.726226][ T4316] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 787.737446][ T4316] usb 1-1: config 14 interface 228 altsetting 5 has an invalid endpoint with address 0xD1, skipping [ 787.753514][ T4316] usb 1-1: config 14 interface 57 has no altsetting 0 [ 787.763695][ T4316] usb 1-1: config 14 interface 228 has no altsetting 0 [ 787.779575][ T4316] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 787.788804][ T4316] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.976205][ T4316] usb 1-1: Product: syz [ 787.980451][ T4316] usb 1-1: Manufacturer: syz [ 787.985477][ T4316] usb 1-1: SerialNumber: syz [ 788.405564][ T4316] legousbtower 1-1:14.57: interrupt endpoints not found [ 788.898459][ T4316] legousbtower 1-1:14.228: interrupt endpoints not found [ 792.338120][T10785] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1613'. [ 792.621956][T10788] misc userio: Invalid payload size [ 793.657271][T10793] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1616'. [ 796.189815][ T4316] usb 1-1: USB disconnect, device number 16 [ 796.816071][T10817] loop3: detected capacity change from 0 to 1024 [ 796.823176][T10817] EXT4-fs: Ignoring removed i_version option [ 797.683564][T10817] EXT4-fs: Ignoring removed bh option [ 797.884121][T10817] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 798.744508][ T26] audit: type=1800 audit(1783542377.406:159): pid=10838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1619" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 799.484711][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 801.604286][T10858] misc userio: Invalid payload size [ 805.530361][ T4587] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 805.560473][T10885] loop4: detected capacity change from 0 to 1024 [ 805.588234][T10885] EXT4-fs: Ignoring removed i_version option [ 805.598109][T10885] EXT4-fs: Ignoring removed bh option [ 805.935165][T10885] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 805.944479][ T4319] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 806.135227][ T4319] usb 1-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 806.278389][ T26] audit: type=1800 audit(1783542385.066:160): pid=10897 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1636" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 806.618836][ T4319] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 806.758197][ T4319] usb 1-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 806.761866][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 808.426911][ T4319] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.483205][ T4319] usb 1-1: Product: syz [ 808.500002][ T4319] usb 1-1: Manufacturer: syz [ 808.505206][ T4319] usb 1-1: SerialNumber: syz [ 808.554217][ T4319] usb 1-1: config 0 descriptor?? [ 808.746461][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.756164][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.487013][ T4319] usb 1-1: can't set config #0, error -71 [ 809.498468][ T4319] usb 1-1: USB disconnect, device number 17 [ 812.224883][T10927] rdma_rxe: already configured on vcan0 [ 812.423670][ T953] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 813.001404][ T953] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 813.303557][ T953] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 813.360225][ T953] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.440807][ T953] usb 1-1: config 0 descriptor?? [ 813.471908][ T953] pwc: Askey VC010 type 2 USB webcam detected. [ 813.611929][T10934] loop4: detected capacity change from 0 to 1024 [ 813.648492][T10934] EXT4-fs: Ignoring removed i_version option [ 813.657875][T10934] EXT4-fs: Ignoring removed bh option [ 813.874176][ T953] pwc: recv_control_msg error -32 req 02 val 2b00 [ 813.900997][ T953] pwc: recv_control_msg error -32 req 02 val 2700 [ 813.916925][T10934] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 813.932601][ T953] pwc: recv_control_msg error -32 req 02 val 2c00 [ 814.120900][ T953] pwc: recv_control_msg error -32 req 04 val 1000 [ 815.362452][ T26] audit: type=1800 audit(1783542394.156:161): pid=10951 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1649" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 815.633905][ T953] pwc: recv_control_msg error -71 req 04 val 1300 [ 815.648810][ T953] pwc: recv_control_msg error -71 req 04 val 1400 [ 815.699868][ T953] pwc: recv_control_msg error -71 req 02 val 2000 [ 815.751259][ T953] pwc: recv_control_msg error -71 req 02 val 2100 [ 816.006101][ T953] pwc: recv_control_msg error -71 req 04 val 1500 [ 816.014931][ T953] pwc: recv_control_msg error -71 req 02 val 2500 [ 816.022298][ T953] pwc: recv_control_msg error -71 req 02 val 2400 [ 816.031735][ T953] pwc: recv_control_msg error -71 req 02 val 2600 [ 816.040729][ T953] pwc: recv_control_msg error -71 req 02 val 2900 [ 817.202946][ T953] pwc: recv_control_msg error -71 req 02 val 2800 [ 817.231661][ T953] pwc: recv_control_msg error -71 req 04 val 1100 [ 817.255847][ T953] pwc: recv_control_msg error -71 req 04 val 1200 [ 817.314068][ T953] pwc: Registered as video103. [ 817.348572][ T953] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input13 [ 817.384704][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 817.400552][ T953] usb 1-1: USB disconnect, device number 18 [ 817.966043][T10974] rdma_rxe: already configured on vcan0 [ 819.425652][T10984] misc userio: Invalid payload size [ 827.263678][T11044] rdma_rxe: already configured on vcan0 [ 830.251566][T11072] misc userio: Invalid payload size [ 837.013397][ T4316] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 838.108908][ T4316] usb 4-1: Using ep0 maxpacket: 32 [ 838.116666][ T4316] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 838.242696][ T4316] usb 4-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 838.557879][ T4316] usb 4-1: config 0 interface 0 has no altsetting 0 [ 838.750935][ T4316] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 838.833508][ T4316] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 838.841587][ T4316] usb 4-1: Product: syz [ 838.883671][ T4316] usb 4-1: Manufacturer: syz [ 838.888532][ T4316] usb 4-1: SerialNumber: syz [ 838.945079][ T4316] usb 4-1: config 0 descriptor?? [ 838.977352][ T4316] gs_usb 4-1:0.0: Required endpoints not found [ 839.749062][ T5737] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 840.572646][ T8962] usb 4-1: USB disconnect, device number 8 [ 846.663007][T11191] loop1: detected capacity change from 0 to 1024 [ 846.684807][T11191] EXT4-fs: Ignoring removed i_version option [ 846.735891][T11191] EXT4-fs: Ignoring removed bh option [ 846.874994][T11191] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 848.015508][ T26] audit: type=1800 audit(1783542426.806:162): pid=11203 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1721" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 848.363518][ T4316] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 848.494134][ T4281] EXT4-fs (loop1): unmounting filesystem. [ 848.563379][ T4316] usb 6-1: Using ep0 maxpacket: 32 [ 849.453087][ T4316] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 849.466875][ T4316] usb 6-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 849.480468][ T4316] usb 6-1: config 0 interface 0 has no altsetting 0 [ 849.510392][ T4316] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 849.529262][ T4316] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.541225][ T4316] usb 6-1: Product: syz [ 849.545536][ T4316] usb 6-1: Manufacturer: syz [ 849.550174][ T4316] usb 6-1: SerialNumber: syz [ 849.559844][ T4316] usb 6-1: config 0 descriptor?? [ 849.572560][ T4316] gs_usb 6-1:0.0: Required endpoints not found [ 849.761818][T11209] misc userio: Invalid payload size [ 851.595331][T11218] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1727'. [ 851.687672][ T4316] usb 6-1: USB disconnect, device number 10 [ 853.156237][T11238] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 853.348152][T11243] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1734'. [ 858.350361][T11262] misc userio: Invalid payload size [ 858.678503][T11266] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1742'. [ 862.201677][T11293] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 862.886487][T11299] overlayfs: missing 'lowerdir' [ 866.961742][T11317] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1756'. [ 867.213701][ T4485] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 867.504770][ T4485] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 868.241663][ T4485] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 868.277519][ T26] audit: type=1326 audit(1783542447.076:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11318 comm="syz.1.1759" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc65d9de59 code=0x7ffc0000 [ 868.333279][ T4485] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.399692][ T26] audit: type=1326 audit(1783542447.106:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11318 comm="syz.1.1759" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc65d9de59 code=0x7ffc0000 [ 868.406425][ T4485] usb 6-1: config 0 descriptor?? [ 868.626145][ T4485] pwc: Askey VC010 type 2 USB webcam detected. [ 869.029026][ T26] audit: type=1326 audit(1783542447.126:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11318 comm="syz.1.1759" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efc65d9de59 code=0x7ffc0000 [ 869.056290][ T4485] pwc: recv_control_msg error -32 req 02 val 2b00 [ 869.086521][ T4485] pwc: recv_control_msg error -32 req 02 val 2700 [ 869.170241][T11334] process 'syz.4.1763' launched '/dev/fd/9' with NULL argv: empty string added [ 869.188434][ T4485] pwc: recv_control_msg error -32 req 02 val 2c00 [ 869.278507][ T4485] pwc: recv_control_msg error -32 req 04 val 1000 [ 869.309214][ T4485] pwc: recv_control_msg error -32 req 04 val 1300 [ 869.692013][ T4485] pwc: recv_control_msg error -32 req 04 val 1400 [ 869.714254][ T4485] pwc: recv_control_msg error -32 req 02 val 2000 [ 869.727460][ T26] audit: type=1326 audit(1783542447.126:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11318 comm="syz.1.1759" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc65d9de59 code=0x7ffc0000 [ 869.763397][ T4485] pwc: recv_control_msg error -32 req 02 val 2100 [ 869.805311][ T4485] pwc: recv_control_msg error -32 req 04 val 1500 [ 869.832283][ T26] audit: type=1326 audit(1783542447.126:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11318 comm="syz.1.1759" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7efc65d9de59 code=0x7ffc0000 [ 869.874166][ T4485] pwc: recv_control_msg error -32 req 02 val 2500 [ 869.893575][ T4485] pwc: recv_control_msg error -32 req 02 val 2400 [ 869.934022][ T26] audit: type=1326 audit(1783542447.126:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11318 comm="syz.1.1759" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc65d9de59 code=0x7ffc0000 [ 870.031519][ T26] audit: type=1326 audit(1783542447.126:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11318 comm="syz.1.1759" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efc65d9de59 code=0x7ffc0000 [ 870.101409][ T4485] pwc: recv_control_msg error -32 req 02 val 2900 [ 870.237019][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.243746][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.479492][ T4485] pwc: recv_control_msg error -71 req 04 val 1100 [ 870.783918][ T4485] pwc: recv_control_msg error -71 req 04 val 1200 [ 870.792509][ T4485] pwc: Registered as video103. [ 870.811333][ T4485] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input14 [ 871.176406][ T4485] usb 6-1: USB disconnect, device number 11 [ 871.222430][ T26] audit: type=1326 audit(1783542447.236:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11318 comm="syz.1.1759" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc65d9de59 code=0x7ffc0000 [ 872.031888][T11353] overlayfs: missing 'lowerdir' [ 873.227602][T10511] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 873.271977][ T26] audit: type=1326 audit(1783542447.236:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11318 comm="syz.1.1759" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc65d9de59 code=0x7ffc0000 [ 876.626651][T11380] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1772'. [ 880.374342][T11381] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 881.178406][T11394] rdma_rxe: rxe_register_device failed with error -23 [ 881.320880][T11394] rdma_rxe: failed to add vcan0 [ 888.578092][T11456] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 891.700635][T11479] netlink: 'syz.0.1800': attribute type 1 has an invalid length. [ 891.799221][T11479] 8021q: adding VLAN 0 to HW filter on device bond1 [ 893.213791][T11495] misc userio: Invalid payload size [ 893.543483][T11481] bond1: (slave dummy0): making interface the new active one [ 893.844815][T11481] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 893.953822][T11479] netlink: 'syz.0.1800': attribute type 10 has an invalid length. [ 893.982895][T11479] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1800'. [ 894.011885][T11479] device dummy0 entered promiscuous mode [ 894.018938][T11479] bond1: (slave dummy0): Releasing active interface [ 898.541442][T11545] misc userio: Invalid payload size [ 904.068734][T11576] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1825'. [ 905.366394][T11586] misc userio: Invalid payload size [ 909.054826][ T126] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 909.294636][ T126] usb 2-1: Using ep0 maxpacket: 32 [ 909.301715][ T126] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 909.350290][ T126] usb 2-1: config 0 interface 0 has no altsetting 0 [ 909.371665][ T126] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 909.388486][ T126] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.401465][ T126] usb 2-1: Product: syz [ 909.406184][ T126] usb 2-1: Manufacturer: syz [ 909.410851][ T126] usb 2-1: SerialNumber: syz [ 909.418145][ T126] usb 2-1: config 0 descriptor?? [ 909.428742][ T126] gs_usb 2-1:0.0: Required endpoints not found [ 910.394992][T10538] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 911.099444][ T4319] usb 2-1: USB disconnect, device number 23 [ 925.780581][T11785] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1886'. [ 928.857172][T11814] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 930.514870][T11832] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1900'. [ 931.626487][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.632851][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 934.129884][T11866] device geneve2 entered promiscuous mode [ 934.233060][T11870] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1913'. [ 936.529061][T11888] rdma_rxe: rxe_register_device failed with error -23 [ 936.538077][T11888] rdma_rxe: failed to add vcan0 [ 937.067737][T11891] fuse: Bad value for 'fd' [ 937.925551][T11909] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 938.014121][T11911] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1928'. [ 940.672345][T11941] random: crng reseeded on system resumption [ 941.700431][T11947] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1941'. [ 941.842718][T11956] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1944'. [ 941.880342][T11956] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1944'. [ 941.924134][T11956] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1944'. [ 942.034101][T10538] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 944.988747][T11993] overlayfs: failed to clone lowerpath [ 944.997973][T11993] overlayfs: failed to clone lowerpath [ 946.612713][T12005] misc userio: Invalid payload size [ 947.568867][T12011] comedi: valid board names for 8255 driver are: [ 947.575801][T12011] 8255 [ 947.578580][T12011] comedi: valid board names for vmk80xx driver are: [ 947.585331][T12011] vmk80xx [ 947.588369][T12011] comedi: valid board names for usbduxsigma driver are: [ 947.595352][T12011] usbduxsigma [ 947.598733][T12011] comedi: valid board names for usbduxfast driver are: [ 947.605676][T12011] usbduxfast [ 947.608971][T12011] comedi: valid board names for usbdux driver are: [ 947.615519][T12011] usbdux [ 947.618466][T12011] comedi: valid board names for ni6501 driver are: [ 947.625162][T12011] ni6501 [ 947.628131][T12011] comedi: valid board names for dt9812 driver are: [ 947.634699][T12011] dt9812 [ 947.637645][T12011] comedi: valid board names for ni_labpc_cs driver are: [ 947.644633][T12011] ni_labpc_cs [ 947.648015][T12011] comedi: valid board names for ni_daq_700 driver are: [ 947.654946][T12011] ni_daq_700 [ 947.658240][T12011] comedi: valid board names for labpc_pci driver are: [ 947.665399][T12011] labpc_pci [ 947.668608][T12011] comedi: valid board names for adl_pci9118 driver are: [ 947.675619][T12011] pci9118dg [ 947.678946][T12011] pci9118hg [ 947.682182][T12011] pci9118hr [ 947.685498][T12011] comedi: valid board names for 8255_pci driver are: [ 947.692186][T12011] 8255_pci [ 947.695359][T12011] comedi: valid board names for s526 driver are: [ 947.701831][T12011] s526 [ 947.704697][T12011] comedi: valid board names for multiq3 driver are: [ 947.711299][T12011] multiq3 [ 947.714378][T12011] comedi: valid board names for pcmuio driver are: [ 947.720891][T12011] pcmuio48 [ 947.724077][T12011] pcmuio96 [ 947.727209][T12011] comedi: valid board names for pcmmio driver are: [ 947.733762][T12011] pcmmio [ 947.736726][T12011] comedi: valid board names for pcmda12 driver are: [ 947.743394][T12011] pcmda12 [ 947.746432][T12011] comedi: valid board names for pcmad driver are: [ 947.752856][T12011] pcmad12 [ 947.755948][T12011] pcmad16 [ 947.758989][T12011] comedi: valid board names for ni_labpc driver are: [ 947.766051][T12011] lab-pc-1200 [ 947.769448][T12011] lab-pc-1200ai [ 947.773019][T12011] lab-pc+ [ 947.776088][T12011] comedi: valid board names for atmio16 driver are: [ 947.782685][T12011] atmio16 [ 947.785789][T12011] atmio16d [ 947.788929][T12011] comedi: valid board names for ni_at_ao driver are: [ 947.795645][T12011] at-ao-6 [ 947.798797][T12011] at-ao-10 [ 947.801918][T12011] comedi: valid board names for ni_at_a2150 driver are: [ 947.808955][T12011] ni_at_a2150 [ 947.812337][T12011] comedi: valid board names for adq12b driver are: [ 947.818887][T12011] adq12b [ 947.821921][T12011] comedi: valid board names for mpc624 driver are: [ 947.828482][T12011] mpc624 [ 947.831580][T12011] comedi: valid board names for c6xdigio driver are: [ 947.838333][T12011] c6xdigio [ 947.841588][T12011] comedi: valid board names for aio_iiro_16 driver are: [ 947.848600][T12011] aio_iiro_16 [ 947.852011][T12011] comedi: valid board names for aio_aio12_8 driver are: [ 947.859148][T12011] aio_aio12_8 [ 947.862549][T12011] aio_ai12_8 [ 947.866229][T12011] aio_ao12_4 [ 947.869543][T12011] comedi: valid board names for fl512 driver are: [ 947.876156][T12011] fl512 [ 947.879065][T12011] comedi: valid board names for dmm32at driver are: [ 947.885717][T12011] dmm32at [ 947.888756][T12011] comedi: valid board names for dt282x driver are: [ 947.895368][T12011] dt2821 [ 947.898334][T12011] dt2821-f [ 947.901456][T12011] dt2821-g [ 947.904653][T12011] dt2823 [ 947.907600][T12011] dt2824-pgh [ 947.910891][T12011] dt2824-pgl [ 947.914232][T12011] dt2825 [ 947.917180][T12011] dt2827 [ 947.920142][T12011] dt2828 [ 947.923083][T12011] dt2829 [ 947.926119][T12011] dt21-ez [ 947.929173][T12011] dt23-ez [ 947.932221][T12011] dt24-ez [ 947.935352][T12011] dt24-ez-pgl [ 947.938749][T12011] comedi: valid board names for dt2817 driver are: [ 947.945548][T12011] dt2817 [ 947.948522][T12011] comedi: valid board names for dt2815 driver are: [ 947.955102][T12011] dt2815 [ 947.958090][T12011] comedi: valid board names for dt2814 driver are: [ 947.964696][T12011] dt2814 [ 947.967663][T12011] comedi: valid board names for dt2811 driver are: [ 947.974540][T12011] dt2811-pgh [ 947.977845][T12011] dt2811-pgl [ 947.981157][T12011] comedi: valid board names for dt2801 driver are: [ 947.987837][T12011] dt2801 [ 947.990804][T12011] comedi: valid board names for das6402 driver are: [ 947.997514][T12011] das6402-12 [ 948.000821][T12011] das6402-16 [ 948.004166][T12011] comedi: valid board names for das1800 driver are: [ 948.010765][T12011] das-1701st [ 948.014127][T12011] das-1701st-da [ 948.017684][T12011] das-1702st [ 948.020977][T12011] das-1702st-da [ 948.024631][T12011] das-1702hr [ 948.028058][T12011] das-1702hr-da [ 948.031640][T12011] das-1701ao [ 948.034972][T12011] das-1702ao [ 948.038274][T12011] das-1801st [ 948.041604][T12011] das-1801st-da [ 948.045211][T12011] das-1802st [ 948.048504][T12011] das-1802st-da [ 948.052054][T12011] das-1802hr [ 948.055377][T12011] das-1802hr-da [ 948.059021][T12011] das-1801hc [ 948.062315][T12011] das-1802hc [ 948.065680][T12011] das-1801ao [ 948.069003][T12011] das-1802ao [ 948.072619][T12011] comedi: valid board names for das800 driver are: [ 948.079175][T12011] das-800 [ 948.082300][T12011] cio-das800 [ 948.085684][T12011] das-801 [ 948.088737][T12011] cio-das801 [ 948.092052][T12011] das-802 [ 948.095150][T12011] cio-das802 [ 948.098508][T12011] cio-das802/16 [ 948.102100][T12011] comedi: valid board names for isa-das08 driver are: [ 948.108947][T12011] isa-das08 [ 948.112156][T12011] das08-pgm [ 948.115395][T12011] das08-pgh [ 948.118603][T12011] das08-pgl [ 948.121830][T12011] das08-aoh [ 948.125128][T12011] das08-aol [ 948.128338][T12011] das08-aom [ 948.131555][T12011] das08/jr-ao [ 948.134991][T12011] das08jr-16-ao [ 948.138561][T12011] pc104-das08 [ 948.142049][T12011] das08jr/16 [ 948.145434][T12011] comedi: valid board names for das16m1 driver are: [ 948.152036][T12011] das16m1 [ 948.155127][T12011] comedi: valid board names for dac02 driver are: [ 948.161579][T12011] dac02 [ 948.164488][T12011] comedi: valid board names for rti802 driver are: [ 948.171027][T12011] rti802 [ 948.174397][T12011] comedi: valid board names for rti800 driver are: [ 948.180933][T12011] rti800 [ 948.184040][T12011] rti815 [ 948.186989][T12011] comedi: valid board names for pcm3724 driver are: [ 948.193615][T12011] pcm3724 [ 948.196650][T12011] comedi: valid board names for pcl818 driver are: [ 948.203162][T12011] pcl818l [ 948.206258][T12011] pcl818h [ 948.209288][T12011] pcl818hd [ 948.212413][T12011] pcl818hg [ 948.215574][T12011] pcl818 [ 948.218521][T12011] pcl718 [ 948.221463][T12011] pcm3718 [ 948.224541][T12011] comedi: valid board names for pcl816 driver are: [ 948.231049][T12011] pcl816 [ 948.234049][T12011] pcl814b [ 948.237116][T12011] comedi: valid board names for pcl812 driver are: [ 948.243717][T12011] pcl812 [ 948.246666][T12011] pcl812pg [ 948.249789][T12011] acl8112pg [ 948.252990][T12011] acl8112dg [ 948.256230][T12011] acl8112hg [ 948.259437][T12011] a821pgl [ 948.262476][T12011] a821pglnda [ 948.265983][T12011] a821pgh [ 948.269024][T12011] a822pgl [ 948.272053][T12011] a822pgh [ 948.275292][T12011] a823pgl [ 948.278582][T12011] a823pgh [ 948.281621][T12011] pcl813 [ 948.284614][T12011] pcl813b [ 948.287657][T12011] acl8113 [ 948.290727][T12011] iso813 [ 948.293744][T12011] acl8216 [ 948.297063][T12011] a826pg [ 948.300027][T12011] comedi: valid board names for pcl730 driver are: [ 948.306642][T12011] pcl730 [ 948.309593][T12011] iso730 [ 948.312530][T12011] acl7130 [ 948.315584][T12011] pcm3730 [ 948.318611][T12011] pcl725 [ 948.321550][T12011] p8r8dio [ 948.324696][T12011] acl7225b [ 948.327932][T12011] p16r16dio [ 948.331465][T12011] pcl733 [ 948.334482][T12011] pcl734 [ 948.337438][T12011] opmm-1616-xt [ 948.340930][T12011] pearl-mm-p [ 948.344309][T12011] ir104-pbf [ 948.347540][T12011] comedi: valid board names for pcl726 driver are: [ 948.354094][T12011] pcl726 [ 948.357038][T12011] pcl727 [ 948.360073][T12011] pcl728 [ 948.363037][T12011] acl6126 [ 948.366135][T12011] acl6128 [ 948.369174][T12011] comedi: valid board names for pcl724 driver are: [ 948.375733][T12011] pcl724 [ 948.378993][T12011] pcl722 [ 948.381937][T12011] pcl731 [ 948.384941][T12011] acl7122 [ 948.388018][T12011] acl7124 [ 948.391050][T12011] pet48dio [ 948.394195][T12011] pcmio48 [ 948.397314][T12011] onyx-mm-dio [ 948.400688][T12011] comedi: valid board names for pcl711 driver are: [ 948.407291][T12011] pcl711 [ 948.410232][T12011] pcl711b [ 948.413330][T12011] acl8112hg [ 948.416530][T12011] acl8112dg [ 948.419725][T12011] comedi: valid board names for amplc_pc263 driver are: [ 948.426710][T12011] pc263 [ 948.429561][T12011] comedi: valid board names for amplc_pc236 driver are: [ 948.436526][T12011] pc36at [ 948.439978][T12011] comedi: valid board names for amplc_dio200 driver are: [ 948.447111][T12011] pc212e [ 948.450057][T12011] pc214e [ 948.453006][T12011] pc215e [ 948.456025][T12011] pc218e [ 948.458977][T12011] pc272e [ 948.461924][T12011] comedi: valid board names for comedi_parport driver are: [ 948.469196][T12011] comedi_parport [ 948.472858][T12011] comedi: valid board names for comedi_test driver are: [ 948.479998][T12011] comedi_test [ 948.483630][T12011] comedi: valid board names for comedi_bond driver are: [ 948.490595][T12011] comedi_bond [ 948.621888][ T126] kernel write not supported for file /uhid (pid: 126 comm: kworker/1:2) [ 948.642856][T12015] Bluetooth: MGMT ver 1.22 [ 950.225000][ T953] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 950.598695][ T953] usb 1-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 950.610042][ T953] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 950.650055][ T953] usb 1-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 950.692291][T12048] rdma_rxe: rxe_register_device failed with error -23 [ 950.700132][ T953] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 950.715677][T12048] rdma_rxe: failed to add vcan0 [ 950.720605][ T953] usb 1-1: Product: syz [ 950.720631][ T953] usb 1-1: Manufacturer: syz [ 950.720647][ T953] usb 1-1: SerialNumber: syz [ 950.732460][ T953] usb 1-1: config 0 descriptor?? [ 951.683613][T12056] overlayfs: failed to clone lowerpath [ 951.736686][T12054] overlayfs: failed to clone lowerpath [ 952.135788][ T953] mos7840 1-1:0.0: required endpoints missing [ 952.153166][ T953] usb 1-1: USB disconnect, device number 19 [ 960.093944][T12115] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1991'. [ 960.103208][T12115] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1991'. [ 963.205392][T12136] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2001'. [ 966.740988][T12174] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 967.065662][T12177] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2014'. [ 967.083779][T12178] ================================================================== [ 967.091916][T12178] BUG: KASAN: use-after-free in dvb_device_open+0xc5/0x360 [ 967.099484][T12178] Read of size 8 at addr ffff8881401a3c18 by task syz.0.2015/12178 [ 967.107485][T12178] [ 967.109871][T12178] CPU: 1 PID: 12178 Comm: syz.0.2015 Not tainted syzkaller #0 [ 967.117363][T12178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 967.127468][T12178] Call Trace: [ 967.130850][T12178] [ 967.133880][T12178] dump_stack_lvl+0x188/0x24e [ 967.138656][T12178] ? read_lock_is_recursive+0x10/0x10 [ 967.144111][T12178] ? show_regs_print_info+0x12/0x12 [ 967.149357][T12178] ? load_image+0x410/0x410 [ 967.153928][T12178] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 967.159486][T12178] ? __virt_addr_valid+0x188/0x540 [ 967.164698][T12178] ? __virt_addr_valid+0x467/0x540 [ 967.169851][T12178] ? dvb_device_open+0xc5/0x360 [ 967.174855][T12178] print_report+0xa8/0x210 [ 967.179334][T12178] kasan_report+0x10b/0x140 [ 967.183967][T12178] ? dvb_device_open+0xc5/0x360 [ 967.188869][T12178] dvb_device_open+0xc5/0x360 [ 967.193611][T12178] chrdev_open+0x585/0x5f0 [ 967.198136][T12178] ? cd_forget+0x160/0x160 [ 967.202592][T12178] ? fsnotify_perm+0x39b/0x550 [ 967.207444][T12178] ? cd_forget+0x160/0x160 [ 967.211896][T12178] do_dentry_open+0x7dd/0x10b0 [ 967.216774][T12178] path_openat+0x2674/0x2f10 [ 967.221419][T12178] ? verify_lock_unused+0x140/0x140 [ 967.226665][T12178] ? do_sys_openat2+0xdd/0x4f0 [ 967.231480][T12178] ? do_filp_open+0x420/0x420 [ 967.236202][T12178] do_filp_open+0x1ee/0x420 [ 967.240756][T12178] ? vfs_tmpfile+0x470/0x470 [ 967.245395][T12178] ? _raw_spin_unlock+0x24/0x40 [ 967.250288][T12178] ? alloc_fd+0x590/0x640 [ 967.254743][T12178] do_sys_openat2+0x14b/0x4f0 [ 967.259462][T12178] ? do_sys_open+0xe0/0xe0 [ 967.263936][T12178] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 967.269969][T12178] ? lock_chain_count+0x20/0x20 [ 967.274871][T12178] __x64_sys_openat+0x135/0x160 [ 967.279768][T12178] do_syscall_64+0x4c/0xa0 [ 967.284240][T12178] ? clear_bhb_loop+0x60/0xb0 [ 967.288988][T12178] ? clear_bhb_loop+0x60/0xb0 [ 967.293727][T12178] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 967.299698][T12178] RIP: 0033:0x7f5bdf95e68e [ 967.304247][T12178] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 967.323965][T12178] RSP: 002b:00007f5be07afb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 967.332502][T12178] RAX: ffffffffffffffda RBX: 00007f5be07b06c0 RCX: 00007f5bdf95e68e [ 967.340687][T12178] RDX: 0000000000000002 RSI: 00007f5be07afc00 RDI: ffffffffffffff9c [ 967.348703][T12178] RBP: 00007f5be07afc00 R08: 0000000000000000 R09: 0000000000000000 [ 967.356711][T12178] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 967.364723][T12178] R13: 00007f5bdfc26038 R14: 00007f5bdfc25fa0 R15: 00007ffeeaa34cc8 [ 967.372831][T12178] [ 967.375885][T12178] [ 967.378241][T12178] Allocated by task 1: [ 967.382415][T12178] kasan_set_track+0x4b/0x70 [ 967.387051][T12178] __kasan_kmalloc+0x8e/0xa0 [ 967.391681][T12178] dvb_register_device+0x305/0x1dc0 [ 967.396950][T12178] dvb_register_frontend+0x629/0x900 [ 967.402342][T12178] vidtv_bridge_probe+0x9cf/0xf50 [ 967.407508][T12178] platform_probe+0x137/0x1c0 [ 967.412312][T12178] really_probe+0x24a/0xb40 [ 967.416857][T12178] __driver_probe_device+0x1f5/0x390 [ 967.422180][T12178] driver_probe_device+0x4f/0x420 [ 967.427242][T12178] __driver_attach+0x43d/0x6c0 [ 967.432306][T12178] bus_for_each_dev+0x182/0x1f0 [ 967.437232][T12178] bus_add_driver+0x324/0x5d0 [ 967.442219][T12178] driver_register+0x32d/0x430 [ 967.447031][T12178] vidtv_bridge_init+0x39/0x67 [ 967.451975][T12178] do_one_initcall+0x257/0x800 [ 967.456806][T12178] do_initcall_level+0x13d/0x1ed [ 967.461815][T12178] do_initcalls+0x4b/0x8a [ 967.466180][T12178] kernel_init_freeable+0x401/0x5ab [ 967.471424][T12178] kernel_init+0x19/0x1b0 [ 967.475864][T12178] ret_from_fork+0x1f/0x30 [ 967.480418][T12178] [ 967.482794][T12178] Freed by task 12134: [ 967.486891][T12178] kasan_set_track+0x4b/0x70 [ 967.491555][T12178] kasan_save_free_info+0x27/0x40 [ 967.496624][T12178] ____kasan_slab_free+0x126/0x1f0 [ 967.501784][T12178] slab_free_freelist_hook+0x133/0x1b0 [ 967.507286][T12178] __kmem_cache_free+0xb6/0x200 [ 967.512197][T12178] dvb_device_open+0x2d2/0x360 [ 967.517007][T12178] chrdev_open+0x585/0x5f0 [ 967.521461][T12178] do_dentry_open+0x7dd/0x10b0 [ 967.526271][T12178] path_openat+0x2674/0x2f10 [ 967.530901][T12178] do_filp_open+0x1ee/0x420 [ 967.535444][T12178] do_sys_openat2+0x14b/0x4f0 [ 967.540171][T12178] __x64_sys_openat+0x135/0x160 [ 967.545114][T12178] do_syscall_64+0x4c/0xa0 [ 967.549582][T12178] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 967.555545][T12178] [ 967.557908][T12178] The buggy address belongs to the object at ffff8881401a3c00 [ 967.557908][T12178] which belongs to the cache kmalloc-256 of size 256 [ 967.572003][T12178] The buggy address is located 24 bytes inside of [ 967.572003][T12178] 256-byte region [ffff8881401a3c00, ffff8881401a3d00) [ 967.585235][T12178] [ 967.587599][T12178] The buggy address belongs to the physical page: [ 967.594188][T12178] page:ffffea0005006880 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1401a2 [ 967.604565][T12178] head:ffffea0005006880 order:1 compound_mapcount:0 compound_pincount:0 [ 967.612934][T12178] flags: 0x57ff00000010200(slab|head|node=1|zone=2|lastcpupid=0x7ff) [ 967.621057][T12178] raw: 057ff00000010200 0000000000000000 dead000000000122 ffff888017441b40 [ 967.629773][T12178] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 967.638399][T12178] page dumped because: kasan: bad access detected [ 967.644870][T12178] page_owner tracks the page as allocated [ 967.650642][T12178] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 18784728160, free_ts 0 [ 967.670404][T12178] post_alloc_hook+0x173/0x1a0 [ 967.675309][T12178] get_page_from_freelist+0x206b/0x2180 [ 967.680946][T12178] __alloc_pages+0x1ec/0x4f0 [ 967.685596][T12178] alloc_page_interleave+0x24/0x1e0 [ 967.690910][T12178] alloc_slab_page+0x5d/0x180 [ 967.695654][T12178] new_slab+0x87/0x2d0 [ 967.699775][T12178] ___slab_alloc+0xbc5/0x1240 [ 967.704507][T12178] __kmem_cache_alloc_node+0x126/0x270 [ 967.710029][T12178] kmalloc_trace+0x26/0xe0 [ 967.714594][T12178] bus_add_driver+0xdc/0x5d0 [ 967.719250][T12178] driver_register+0x32d/0x430 [ 967.724148][T12178] usb_register_driver+0x201/0x3c0 [ 967.729340][T12178] do_one_initcall+0x257/0x800 [ 967.734163][T12178] do_initcall_level+0x13d/0x1ed [ 967.739161][T12178] do_initcalls+0x4b/0x8a [ 967.743537][T12178] kernel_init_freeable+0x401/0x5ab [ 967.748780][T12178] page_owner free stack trace missing [ 967.754220][T12178] [ 967.756584][T12178] Memory state around the buggy address: [ 967.762268][T12178] ffff8881401a3b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 967.770368][T12178] ffff8881401a3b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 967.778481][T12178] >ffff8881401a3c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 967.786585][T12178] ^ [ 967.791652][T12178] ffff8881401a3c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 967.799851][T12178] ffff8881401a3d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 967.807953][T12178] ================================================================== [ 967.836629][T12178] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 967.843893][T12178] CPU: 1 PID: 12178 Comm: syz.0.2015 Not tainted syzkaller #0 [ 967.851407][T12178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 967.861597][T12178] Call Trace: [ 967.864948][T12178] [ 967.867914][T12178] dump_stack_lvl+0x188/0x24e [ 967.872644][T12178] ? memcpy+0x3c/0x60 [ 967.876667][T12178] ? show_regs_print_info+0x12/0x12 [ 967.881925][T12178] ? load_image+0x410/0x410 [ 967.886484][T12178] panic+0x2d3/0x710 [ 967.890439][T12178] ? bpf_jit_dump+0xd0/0xd0 [ 967.894987][T12178] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 967.901016][T12178] ? _raw_spin_unlock+0x40/0x40 [ 967.905924][T12178] check_panic_on_warn+0x80/0xa0 [ 967.911029][T12178] ? dvb_device_open+0xc5/0x360 [ 967.915939][T12178] end_report+0x66/0x110 [ 967.920276][T12178] kasan_report+0x118/0x140 [ 967.924838][T12178] ? dvb_device_open+0xc5/0x360 [ 967.929746][T12178] dvb_device_open+0xc5/0x360 [ 967.934502][T12178] chrdev_open+0x585/0x5f0 [ 967.938973][T12178] ? cd_forget+0x160/0x160 [ 967.943442][T12178] ? fsnotify_perm+0x39b/0x550 [ 967.948297][T12178] ? cd_forget+0x160/0x160 [ 967.952756][T12178] do_dentry_open+0x7dd/0x10b0 [ 967.957578][T12178] path_openat+0x2674/0x2f10 [ 967.962249][T12178] ? verify_lock_unused+0x140/0x140 [ 967.967494][T12178] ? do_sys_openat2+0xdd/0x4f0 [ 967.972325][T12178] ? do_filp_open+0x420/0x420 [ 967.977074][T12178] do_filp_open+0x1ee/0x420 [ 967.981633][T12178] ? vfs_tmpfile+0x470/0x470 [ 967.986277][T12178] ? _raw_spin_unlock+0x24/0x40 [ 967.991256][T12178] ? alloc_fd+0x590/0x640 [ 967.995630][T12178] do_sys_openat2+0x14b/0x4f0 [ 968.000466][T12178] ? do_sys_open+0xe0/0xe0 [ 968.004922][T12178] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 968.010947][T12178] ? lock_chain_count+0x20/0x20 [ 968.015852][T12178] __x64_sys_openat+0x135/0x160 [ 968.020754][T12178] do_syscall_64+0x4c/0xa0 [ 968.025251][T12178] ? clear_bhb_loop+0x60/0xb0 [ 968.029962][T12178] ? clear_bhb_loop+0x60/0xb0 [ 968.034668][T12178] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 968.040597][T12178] RIP: 0033:0x7f5bdf95e68e [ 968.045044][T12178] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 968.064687][T12178] RSP: 002b:00007f5be07afb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 968.073129][T12178] RAX: ffffffffffffffda RBX: 00007f5be07b06c0 RCX: 00007f5bdf95e68e [ 968.081147][T12178] RDX: 0000000000000002 RSI: 00007f5be07afc00 RDI: ffffffffffffff9c [ 968.089145][T12178] RBP: 00007f5be07afc00 R08: 0000000000000000 R09: 0000000000000000 [ 968.097160][T12178] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 968.105334][T12178] R13: 00007f5bdfc26038 R14: 00007f5bdfc25fa0 R15: 00007ffeeaa34cc8 [ 968.113348][T12178] [ 968.116979][T12178] Kernel Offset: disabled [ 968.121315][T12178] Rebooting in 86400 seconds..