last executing test programs: 31m25.124821107s ago: executing program 32 (id=63): openat$kvm(0xffffffffffffff9c, 0x0, 0x22042, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x1000, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$kcm(0x2, 0x3, 0x2) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write$sndseq(r2, &(0x7f0000000180)=[{0xff, 0x0, 0x0, 0x0, @tick=0x4, {}, {}, @result={0x1, 0x2}}, {0x0, 0x0, 0xff, 0x3, @tick=0xf27, {0x1}, {}, @addr={0x2a, 0x5}}], 0x38) readv(r2, &(0x7f0000000000)=[{0x0}], 0x1) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000000)={0x5, 0xfff, 0x8, 0x2, 0x5, 0x80000000, 0x5, 0x48a5}, &(0x7f0000000040)=0x20) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000e80)={'filter\x00', 0xb001, 0x4, 0x3b0, 0x0, 0x10c, 0x1f0, 0x2d0, 0x2d0, 0x2d0, 0x7fffffe, 0x0, {[{{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x2, 0x1}}}, {{@uncond, 0xbc, 0xe4, 0x0, {0x0, 0x1e03}}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x46e, 0xfffc}}}, {{@uncond, 0xbc, 0xe0}, @unspec=@CLASSIFY={0x24, 'CLASSIFY\x00', 0x0, {0x31caf518}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x3fc) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socket$inet6_mptcp(0xa, 0x1, 0x106) writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f00000000c0)='$T', 0x2}, {&(0x7f0000000240)="3a77acfd5e3f5b9057ae6018a749450f789ba0177859fcba83592be5205aeed8b1f5e232e6a00bc47ec28687b917c513dc25d2c09e8389abf694a55a5520f963f3123c8ec23833669be46e6e925dedb89f9be55a05f02749c9f71a71c9217e0c92ae63c2dfcd48cc8bab594f7af56cfc756c6c54493e91bd4ab2e5def4c51a5fb5e1b2b537eb97a26be469fc04bbbe7837e3147a64040401d90dfdc2f56f64c7a1", 0xa1}, {&(0x7f0000000140)}, {&(0x7f00000004c0)}, {0x0}], 0x5) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000940)={0x2020}, 0x2020) 30m50.247010761s ago: executing program 33 (id=91): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x22, 0x2, 0x24) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'wg0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000280)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, r4}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, 0x0, 0x9004) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r6 = socket$kcm(0x2, 0xa, 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000a00)={'filter\x00', 0x7, 0x4, 0x400, 0x110, 0x210, 0x0, 0x318, 0x318, 0x318, 0x4, &(0x7f0000000340), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @remote, @broadcast, 0x2}}}, {{@uncond, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "0959f5bc43251ea24f348c5a0594aad42536b14faccd7bafd4889ba177e2"}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8, 'syz0\x00', {0xfffffffffffffffd}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x450) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, 0x0, 0xfdef) sync() syz_open_dev$midi(0x0, 0x500, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) close(r0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 23m13.24601883s ago: executing program 34 (id=1242): bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) r0 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0x50) futex(0x0, 0x8c, 0x1, 0x0, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000), 0x10) r1 = creat(0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, 0x0) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000300), 0x0) read$alg(r2, &(0x7f0000000040)=""/3, 0x3) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f00000001c0)=0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r3}, 0x0, &(0x7f0000000040)}, 0x20) r4 = socket$inet6(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, r5}, 0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r6}, 0x10) sendto$inet6(r4, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000004c0), &(0x7f0000000400)=@udp6=r7}, 0x3f) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) 22m34.445960534s ago: executing program 35 (id=1319): openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x100, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 21m41.492983464s ago: executing program 36 (id=1477): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000040)={0x0, 0x2c, 0x0, 0x6, 0x17, 0xa9, 0x3, 0x2, 0x1}) 20m1.180105947s ago: executing program 37 (id=1670): syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x100580) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r3, 0xc0305302, &(0x7f0000000200)={0x80000000, 0x9, 0x80000001, 0xfff, 0x10000, 0x2}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r4 = openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r4, 0xc0045103, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x40}, 0xc) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty}}, 0x5c) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000b00)=ANY=[], 0x1e0) 15m15.543097391s ago: executing program 38 (id=2506): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000002000)=[{0x200000000006, 0x1, 0x1, 0x7ffc1ff8}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xfffffffb}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x20, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0xa, 0x4e21, 0x0, @empty, 0x3}, 0x1, {[0x0, 0x0, 0x0, 0xf017, 0x1, 0x4]}}, 0x5c) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/cpu_byteorder', 0x0, 0x60) r4 = add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000100)='[', 0xfeed, 0xffffffffffffffff) recvmmsg(r2, &(0x7f0000006ac0)=[{{&(0x7f0000006840)=@hci, 0x80, &(0x7f0000000200)=[{&(0x7f0000000380)=""/198, 0xc6}], 0x1, &(0x7f0000000480)=""/173, 0xad}, 0x6}, {{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000540)=""/28, 0x1c}, {&(0x7f0000002080)=""/4096, 0x1000}, {&(0x7f0000000580)=""/121, 0x79}, {&(0x7f0000001600)=""/244, 0xf4}, {&(0x7f0000003080)=""/4096, 0x1000}], 0x5, &(0x7f0000001740)=""/6, 0x6}, 0x3}, {{&(0x7f0000001780)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001800)=""/96, 0x60}, {&(0x7f0000001880)=""/202, 0xca}, {&(0x7f0000001980)=""/143, 0x8f}, {&(0x7f0000001a40)=""/165, 0xa5}, {&(0x7f0000001f40)=""/59, 0x3b}, {&(0x7f0000001b40)=""/233, 0xe9}, {&(0x7f0000001c40)=""/209, 0xd1}, {&(0x7f0000001d40)=""/153, 0x99}], 0x8, &(0x7f0000001e40)=""/69, 0x45}, 0x2}, {{&(0x7f0000001ec0), 0x80, &(0x7f00000063c0)=[{&(0x7f0000004080)=""/4096, 0x1000}, {&(0x7f0000006cc0)=""/153, 0x99}, {&(0x7f0000005080)=""/4096, 0x1000}, {&(0x7f0000006080)=""/122, 0x7a}, {&(0x7f00000002c0)=""/85, 0x55}, {&(0x7f0000006180)=""/213, 0xd5}, {&(0x7f0000006280)=""/120, 0x78}, {&(0x7f0000006bc0)=""/28, 0x1c}, {&(0x7f0000006300)=""/140, 0x8c}], 0x9, &(0x7f0000006440)=""/252, 0xfc}, 0x800}, {{&(0x7f0000006540)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f00000069c0)=[{&(0x7f00000065c0)=""/188, 0xbc}, {&(0x7f0000006680)=""/68, 0x44}, {&(0x7f0000006740)=""/244, 0xf4}, {&(0x7f0000006c00)=""/176, 0xb0}, {&(0x7f0000006900)=""/12, 0xc}, {&(0x7f0000006940)=""/118, 0x76}], 0x6, &(0x7f0000006a00)=""/179, 0xb3}, 0xfffffffd}], 0x5, 0x40000140, &(0x7f0000006b80)={0x77359400}) keyctl$revoke(0x3, r4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x1, 0x0, @pic={0x9, 0xf9, 0x1, 0x1, 0x1, 0x3, 0x6, 0x3, 0x8, 0x6f, 0x7, 0x0, 0x1, 0x1, 0xc, 0x2}}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0xce0, 0x7, 0x0, 0x180, 0x6, 0x0, 0xf1, 0x3, 0x8000000000000, 0x5, 0x0, 0x9, 0xff, 0x7, 0x0, 0xbd9], 0x2000, 0x3c4210}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r6, &(0x7f0000000600)="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", 0xfca, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) 14m35.265696121s ago: executing program 39 (id=2591): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @remote, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0xfffc, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0x2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4, 0x7}]}}}}}}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0x4}, 0x6) fsopen(&(0x7f0000000000)='udf\x00', 0x0) 13m21.419575103s ago: executing program 40 (id=2669): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x121741, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000002c0)='./file3\x00', 0x4002, &(0x7f0000000180), 0x2, 0xbd2, &(0x7f0000000540)="$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") r1 = syz_open_dev$loop(0x0, 0x204000000000075f, 0x10b042) ioctl$LOOP_SET_STATUS(r1, 0x1277, &(0x7f0000000580)={0x0, {}, 0x0, {}, 0x7, 0x12, 0xf, 0xc, "4b8b3ea46929dfed0b2f34380d308f95a023d009852471dd5a94a9fe9549918ae7fd1f0ececd9bada8b108403362cfe0f4fccffb1b6a2115354d4df15d017a3f", "2363f18d9acc6caadd6d126cfbc0c92fc817d44dcdecf900", [0x8000, 0x1e0a]}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x3810744, &(0x7f0000000000)={[{@nomblk_io_submit}, {@max_batch_time={'max_batch_time', 0x3d, 0x5314}}, {@usrquota}, {@jqfmt_vfsv1}, {@jqfmt_vfsv0}, {@delalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@i_version}]}, 0x1, 0x453, &(0x7f0000002a80)="$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") dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00003e1000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000004000)={0x494, 0x1ff, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) iopl(0x3) prctl$PR_SET_THP_DISABLE(0x29, 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12m39.041898412s ago: executing program 41 (id=2805): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x28, r2, 0x1, 0x0, 0x2, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x4, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x200440c0}, 0x0) 11m50.888723181s ago: executing program 42 (id=2902): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_ethernet(0x36, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r3, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 11m42.226854055s ago: executing program 43 (id=2923): syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file1\x00', 0x0, &(0x7f0000000100)=ANY=[], 0x1, 0x14fe, &(0x7f0000002ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xa84940, 0x5c) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x12, r0, 0x0) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xa) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r3, &(0x7f0000001fc0)=""/184, 0x20002078) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r4, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee17688a2003c000303000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff", 0xb8) 11m8.183175278s ago: executing program 44 (id=3026): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000700)={0x44, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@weak_handle={0x77682a85, 0x1}, @flat=@weak_handle={0x77682a85, 0x1001, 0x2}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 10m57.148160357s ago: executing program 45 (id=3020): pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80080) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x2000414, &(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYRESOCT], 0x1, 0x2a1, &(0x7f0000000540)="$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") r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000080)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f0000000880)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc491c6170000501d0000be7ba9bd"], 0x1c}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, &(0x7f0000000400)=0x13) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000380)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000040)={0x3d15, 0x100, 0x0, 0x6, 0x3, "00010b000093000000001900"}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x2) recvmmsg$unix(r4, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r6 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) sendmmsg(r6, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000580)=ANY=[], 0x10}}], 0x1, 0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r0, &(0x7f0000000140)) 10m23.6174283s ago: executing program 46 (id=3123): ioctl$F2FS_IOC_COMPRESS_FILE(0xffffffffffffffff, 0xf518, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000100)={@remote, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1, 0x6, 0x0, 0x100, 0x4, 0x10}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, @private0, 0x1, 0x6, 0x0, 0x100, 0x6, 0x180107}) 10m12.592632974s ago: executing program 47 (id=3152): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r6], 0x54}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@dellink={0x20, 0x11, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, 0x8010, 0x602a1}}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 9m48.267702319s ago: executing program 4 (id=3218): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, &(0x7f0000000040)={[{@mode={'mode', 0x3d, 0xfb2f}}]}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000d80)={{{@in6=@private2, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, &(0x7f0000000900)=0xe4) syz_mount_image$ext4(&(0x7f0000000540)='ext2\x00', &(0x7f00000001c0)='./file2\x00', 0x8089, &(0x7f0000000e80)={[], [{@uid_eq={'uid', 0x3d, r0}}, {@permit_directio}, {@func={'func', 0x3d, 'FILE_MMAP'}}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) r1 = timerfd_create(0x8, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="7800000018002507b9409b14ffff00000202be04020506050e13020443001e003f0040480a0000000d0085a168d0bf46d32345653600648d27000b000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a3200040016000b000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x80, 0x0, 0x0) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r4, r4, r4}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) timerfd_settime(r1, 0x3, &(0x7f0000000140)={{0x0, 0x989680}, {r2, r3+60000000}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000980)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'dummy0\x00'}, @IFLA_CARRIER={0x5, 0x21, 0x2}]}, 0x3c}}, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000180)={{0x0, 0x3938700}}, 0x0) timerfd_gettime(r1, 0x0) 9m46.48495844s ago: executing program 48 (id=3218): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, &(0x7f0000000040)={[{@mode={'mode', 0x3d, 0xfb2f}}]}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000d80)={{{@in6=@private2, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, &(0x7f0000000900)=0xe4) syz_mount_image$ext4(&(0x7f0000000540)='ext2\x00', &(0x7f00000001c0)='./file2\x00', 0x8089, &(0x7f0000000e80)={[], [{@uid_eq={'uid', 0x3d, r0}}, {@permit_directio}, {@func={'func', 0x3d, 'FILE_MMAP'}}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) r1 = timerfd_create(0x8, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="7800000018002507b9409b14ffff00000202be04020506050e13020443001e003f0040480a0000000d0085a168d0bf46d32345653600648d27000b000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a3200040016000b000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x80, 0x0, 0x0) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r4, r4, r4}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) timerfd_settime(r1, 0x3, &(0x7f0000000140)={{0x0, 0x989680}, {r2, r3+60000000}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000980)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'dummy0\x00'}, @IFLA_CARRIER={0x5, 0x21, 0x2}]}, 0x3c}}, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000180)={{0x0, 0x3938700}}, 0x0) timerfd_gettime(r1, 0x0) 7m53.806560903s ago: executing program 49 (id=3726): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x2382, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000400000004"]) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0x4, 0x2007}) 7m52.104074406s ago: executing program 3 (id=3737): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6949c667f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c3522fff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041afc61529260e6c4046d55927c96dcce1", 0x7e}, {&(0x7f00000007c0)="02999344565d9c61d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b365", 0x30}, {&(0x7f0000000f00)="ec75d081fcb70000000000000000bb6a38b0c57cc77b83d2eea81aad8f73b36abc2019cb08fcaaec9647a07d0a09", 0x2e}], 0x3}}], 0x1, 0x20008000) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 7m50.066880244s ago: executing program 3 (id=3741): r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, 0x0) 7m47.368655859s ago: executing program 50 (id=3741): r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, 0x0) 7m38.312954232s ago: executing program 51 (id=3763): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000380)=ANY=[@ANYBLOB="010000000000000006", @ANYBLOB='a']) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x4) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/236, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/66}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 6m45.583539814s ago: executing program 52 (id=3971): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002b80)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 6m18.953239458s ago: executing program 8 (id=4066): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6949c667f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c3522fff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041afc61529260e6c4046d55927c96dcce1", 0x7e}, {&(0x7f00000007c0)="02999344565d9c61d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b365", 0x30}, {&(0x7f0000000f00)="ec75d081fcb70000000000000000bb6a38b0c57cc77b83d2eea81aad8f73b36abc2019cb08fcaaec9647a07d0a09", 0x2e}], 0x3}}], 0x1, 0x20008000) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 6m18.188306311s ago: executing program 8 (id=4068): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904"], 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x3, 0xbc01) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000180)=""/135) 6m15.801445895s ago: executing program 53 (id=4067): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 6m15.751530476s ago: executing program 8 (id=4070): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000340)='\x00', 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100114, 0x0, 0xfffffffffffffd25) 6m15.162848654s ago: executing program 8 (id=4073): socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f00000000c0)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x7}}, {@init_itable}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, 0x0, 0xffffffffffffff9c, 0x0, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) move_mount(r0, &(0x7f0000000080)='./file0/file0\x00', r0, &(0x7f0000000040)='./file0/../file0\x00', 0x0) 6m13.819407281s ago: executing program 8 (id=4076): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, 0x0, 0x0) 6m13.183163703s ago: executing program 8 (id=4078): ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'nr0\x00', 0x800}) setsockopt$rose(0xffffffffffffffff, 0x104, 0x2, &(0x7f0000000000)=0x3, 0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = syz_open_dev$mouse(&(0x7f0000000080), 0xf92, 0x2) connect$x25(r2, &(0x7f0000000140), 0x12) setsockopt$inet6_tcp_buf(r2, 0x6, 0xe4ee936376aa007d, &(0x7f0000000180)="a09b31f97ddf5e17654141690c5d292b56806535edb68106ca0e01d9952ec479b7e229f6c355eefdb46e2bb5c86eaa4ae47b0cf00a7c30c23742b87959283d213772b5be12de5cd852957c3b6dad411eed1ff7c53161ce5b5b23752b09b3d731a3035e7fe325c7d8949119", 0x6b) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0}, 0x1, 0x0, 0x0, 0x4040800}, 0x0) ioctl$sock_rose_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000000c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @null, @bpq0, 0x1, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}) 6m11.0533165s ago: executing program 54 (id=4078): ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'nr0\x00', 0x800}) setsockopt$rose(0xffffffffffffffff, 0x104, 0x2, &(0x7f0000000000)=0x3, 0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = syz_open_dev$mouse(&(0x7f0000000080), 0xf92, 0x2) connect$x25(r2, &(0x7f0000000140), 0x12) setsockopt$inet6_tcp_buf(r2, 0x6, 0xe4ee936376aa007d, &(0x7f0000000180)="a09b31f97ddf5e17654141690c5d292b56806535edb68106ca0e01d9952ec479b7e229f6c355eefdb46e2bb5c86eaa4ae47b0cf00a7c30c23742b87959283d213772b5be12de5cd852957c3b6dad411eed1ff7c53161ce5b5b23752b09b3d731a3035e7fe325c7d8949119", 0x6b) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0}, 0x1, 0x0, 0x0, 0x4040800}, 0x0) ioctl$sock_rose_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000000c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @null, @bpq0, 0x1, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}) 6m4.361892644s ago: executing program 6 (id=4095): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, 0x0, 0x0) 6m3.649011255s ago: executing program 6 (id=4097): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000340)='\x00', 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100114, 0x0, 0xfffffffffffffd25) 6m1.875353412s ago: executing program 6 (id=4099): mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000006840)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0x2, 0xfffffffffffffffc, 0x0, 0x0, {0x0, 0x2000000000, 0x0, 0x2, 0x0, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x7, r2, 0x0, 0xf0ee, 0xffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x8, 0x8, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0xffffffffffffffff}, 0x0, 0x0) 6m0.259811156s ago: executing program 6 (id=4102): socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f00000000c0)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x7}}, {@init_itable}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}]}, 0x3, 0x43a, &(0x7f0000000340)="$eJzs28tvG0UYAPBv13FKXySU8ugDCBRExCNp0gI9cAGBxAEkJDiUY0jSqtRtUBMkWlUQECpHVIk74ojEX8AJLgg4IXGFO6pUoVxaOBmtvZs4jp0mwY5L/ftJm8zsjjPzeXbs2Z1sAH1rJPuRROyJiN8jYqieXV1gpP7r5tLl6b+XLk8nUa2+9VdSK3dj6fJ0UbR43e48M5pGpJ8lcahFvfMXL52dqlRmL+T58YVz74/PX7z07JlzU6dnT8+enzxx4vixiReen3yuI3Fmbbpx8KO5wwdee+fqG9Mnr77787dJEX9THB0yst7BJ6rVDlfXW3sb0slADxvCppQiIuuucm38D0UpVjpvKF79tKeNA7qqWq1Wd7c/vFgF7mBJbLTk2fzzArgzFF/02fVvsW3T1OO2cP2l+gVQFvfNfKsfGYg0L1Nuur7tpJGIOLn4z1fZFt25DwEAsMr32fznmVbzvzTubyh3d742NBwR90TEvoi4NyL2R8R9EbWyD0TEg5usv3mRZO38J722pcA2KJv/vZivba2e/xWzvxgu5bm9tfjLyakzldmj+XsyGuUdWX5inTp+eOW3L9oda5z/ZVtWfzEXzNtxbWDH6tfMTC1M/ZeYG13/JOLgQKv4k+WVgCQiDkTEwS3Wceapbw63O9Yu/vJG/nAH1pmqX0c8We//xWiKv5Csvz45fldUZo+OF2fFWr/8euXNdvXfuv+7K+v/XS3P/+X4h5PG9dr5zddx5Y/P217TbPX8H0zerqUH830fTi0sXJiIGExerze6cf/kymuLfFE+i3/0SOvxvy9W3olDEZGdxA9FxMMR8Uje9kcj4rGIOLJO/D+9/Ph7W4+/u7L4ZzbV/yuJwWje0zpROvvjd6sqHd5M/Fn/H6+lRvM9G/n820i7tnY2AwAAwP9PGhF7IknHltNpOjZW/3/5/bErrczNLzx9au6D8zP1ZwSGo5wWd7qGGu6HTuSX9UV+sil/LL9v/GVpZy0/Nj1Xmel18NDndrcZ/5k/S71uHdB1nteC/mX8Q/8y/qF/Gf/Qv1qM/529aAew/Vp9/3/cg3YA269p/Fv2gz7i+h/6l/EP/cv4h740vzNu/ZC8hMSaRKS3RTMkupTo9ScTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAZ/wbAAD//9E940M=") mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, 0x0, 0xffffffffffffff9c, 0x0, 0x0) mount$bind(0x0, 0x0, 0x0, 0x80000, 0x0) mount$bind(0x0, &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) move_mount(r0, &(0x7f0000000080)='./file0/file0\x00', r0, &(0x7f0000000040)='./file0/../file0\x00', 0x0) 5m59.02143938s ago: executing program 6 (id=4105): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30000091) 5m58.261512725s ago: executing program 6 (id=4107): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) r0 = openat$kvm(0x0, &(0x7f0000000080), 0x2382, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)=ANY=[]) 5m55.387872296s ago: executing program 55 (id=4107): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) r0 = openat$kvm(0x0, &(0x7f0000000080), 0x2382, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)=ANY=[]) 5m49.294083798s ago: executing program 9 (id=4046): openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close(r0) 5m48.661210715s ago: executing program 9 (id=4122): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) 5m47.907816425s ago: executing program 9 (id=4124): syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000"]) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0xf86, 0x6, 0x0, 0x0, 0x10003, 0xf, 0x400200cc4, 0x800ffe, 0x800000000004, 0x20000000000, 0x0, 0xf0, 0xffffffffffffffff, 0x0, 0x6a, 0x8d], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5m46.926402029s ago: executing program 9 (id=4127): socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f00000000c0)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x7}}, {@init_itable}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, 0x0, 0xffffffffffffff9c, 0x0, 0x0) mount$bind(0x0, 0x0, 0x0, 0x80000, 0x0) mount$bind(0x0, 0x0, 0x0, 0x1adc51, 0x0) move_mount(r0, &(0x7f0000000080)='./file0/file0\x00', r0, &(0x7f0000000040)='./file0/../file0\x00', 0x0) 5m45.88689029s ago: executing program 9 (id=4129): openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close(r0) 5m44.921386956s ago: executing program 9 (id=4131): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) 5m44.811161901s ago: executing program 4 (id=4069): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$vim2m(&(0x7f0000000340), 0x7f, 0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sysvipc/msg\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$vsock_stream(0x28, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) userfaultfd(0x80001) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r2}, 0x1e) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)}) 5m42.454382648s ago: executing program 56 (id=4131): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) 5m42.381359344s ago: executing program 4 (id=4134): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) 5m41.679827764s ago: executing program 4 (id=4136): socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f00000000c0)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x7}}, {@init_itable}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, 0x0, 0xffffffffffffff9c, 0x0, 0x0) mount$bind(0x0, 0x0, 0x0, 0x80000, 0x0) mount$bind(0x0, 0x0, 0x0, 0x1adc51, 0x0) move_mount(r0, 0x0, r0, &(0x7f0000000040)='./file0/../file0\x00', 0x0) 5m40.056833676s ago: executing program 4 (id=4139): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r3, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c6572300000000000000800050006"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r6) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$RTC_UIE_ON(r7, 0x7003) ioctl$RTC_AIE_ON(r7, 0x7001) ioctl$RTC_SET_TIME(r7, 0x4024700a, &(0x7f0000000040)={0x0, 0x2c, 0x0, 0x6, 0x0, 0xa9, 0x3, 0x2, 0x1}) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) write$rfkill(r5, &(0x7f0000000080)={0xff, 0x1, 0x3, 0x1, 0x4}, 0x8) 5m39.120023942s ago: executing program 4 (id=4141): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r3, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c6572300000000000000800050006"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r6) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$RTC_UIE_ON(r7, 0x7003) ioctl$RTC_AIE_ON(r7, 0x7001) ioctl$RTC_SET_TIME(r7, 0x4024700a, &(0x7f0000000040)={0x0, 0x2c, 0x0, 0x6, 0x0, 0xa9, 0x3, 0x2, 0x1}) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) write$rfkill(r5, &(0x7f0000000080)={0xff, 0x1, 0x3, 0x1, 0x4}, 0x8) 5m36.42836268s ago: executing program 57 (id=4141): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r3, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c6572300000000000000800050006"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r6) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$RTC_UIE_ON(r7, 0x7003) ioctl$RTC_AIE_ON(r7, 0x7001) ioctl$RTC_SET_TIME(r7, 0x4024700a, &(0x7f0000000040)={0x0, 0x2c, 0x0, 0x6, 0x0, 0xa9, 0x3, 0x2, 0x1}) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) write$rfkill(r5, &(0x7f0000000080)={0xff, 0x1, 0x3, 0x1, 0x4}, 0x8) 5m29.52755064s ago: executing program 3 (id=4109): mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000006840)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="9ab1446569aa24b774753c9e994c09c24df9d42fa5a228e469b44cecf6f9f5ce5f77c93b1895aaac9cf34b37415f11fe22d6fa0162aa743b242e8fe0a8659e32fb543d7969d6513136a9f332a8074f8ee1e445277ddd5859eb5ac3321eb710be880a441031da9b31f791d54fb3c97cd8ee92b00cbf962be8eb5fd0b7cab207645f59cf87a8c41e2739dd8386b6bb84b627cbf5e09bac876ad4b215f0e510a853c5e8b9f7822b26771d72972290a1f9a6f0a46942be0d0eb7aa5145ff368863b14e9845926088f9f92d554e572926290dc6e6b574aea8c500fbe5697f881c0cec48282c6d07619248da0c3b9aa6f7c778525d1760051e4ba8ef31d3c8d3e1d4214ffa5261ce1fdbc12eba889968137f5c06fea233000296cf18df494b4e7b1bee7dc2f3751c37415d46f6d7ffb3d0f788f2100ee41266e6fba75b61af22e1d7b286507ff100cc34ed28d5a2c8be3231446874bbbde6f3c367ca802d64192ffcce1ea41b2cbc57f7500fc4f8f12fe02690c1c9785bbc35542b59d05600783cf4f4633b374101d8ed395303392b238d198f9f68c8ae928cbf3b558deec6d38ebaa526e749ac4e47dd5b838ec34f2820a1134252ae60159d4e030cf5e5d6f8de799a31e12ae57cfe5a1a3ded525c6e71271271d35a0056265362387a361f21ea0f4b6d46f6a83a8512687e43b31e11b1396d6e9e49cf42b693732e226b55d21a1203022f6be9f8ecccb68de3bf4ce99689514bd752f4e60bd2f8e376d7fae5b5fc8db0f53db8c52746671e361b9319419c1b3f3168b4797ebd2d118ee42dda4bc59dd0251236195c8cdafc0546354eeb28f4c7e71e8245a6ccaddfb858f61039c0ccf5acd924680aab38dd061fc7b123f24ac7f3d3c0cee43b61045bb1efea25af86088a0591f166e2f11ea4089860893b17ca5e3d99ec75131268e2e4e290c2bf15e4dde23284e4bdf6e549c096ce221d9c8a6c0fc78aa6a1c8b547c0e10738de2a1e8663e03ab0ce4594e244989f75b6672de1eee97ba7e6467a0da51c0e75d5866c405b03c4744d8d3fbb01eddba5a0361662269154c2f0e61a9433982eb904ff562896cbfa692eb1e6c644fcf6cbc103a76b712af706a47608d3e2f5d54d47d8e9906ab37ddf04004d32ce00200fc3c274666aeb618b27424d87b6a4b0262de4436b9e6f150bc798394c298b25a2c318fbe786185464057c0bcfcd1917230d78ee1a49eca12068fa676852c1099096c6cb98dfda27fedac41826516e42cc116f0cbb68f0f810418258dc5a65c0e1ada296176e17f8d762894c80542a79383cc1674a4f3d6520633ce80baba214c20628899f9ac826484c887713aed9c5caf13b40a598cb1e81f7b18dae39efc22dc99ff497e11f158edc2716ebe3bcd593691aa26523efc168e1394ab439c9a9270575ef34eeee9084b0a31b2d81d47c964ac61e600f75d9321d7474dde45bb8d0cc46510488ab68486d3ba6cc9c3ddb6f66f2e5d251ee285121e1645a2f5167fc5fb8ac4491c0d9d0423c7a8452efea2f5a30096a0fa47173f3a68500a5c755ea939c838d3be126a87ff6baa5a1fba638a5c64767d17f04201b935fcb1cb6afa175594f410f2ff773194c703e623876051e46bb0850a5016e65f8fa34b96bafdfe851a0756fe26fb63d52113c0935b0867f7dc8a94d887484b15e8f92b6a316a22c04a985cc94e432cd43f44001bcdbd48efcd463c402d3d181298e96db60fdb714b82e146567af5ae3fc0c3f9d241471b4d129f928d286f780facb1e84434610ab3379dfff0f64d57b4a1c2e96c98b693de952d26773d24e7a95eddbc450f79932d5332d27991c7bfbd3bc35bfeb9496fbebccb5e4c35c368e021dea643cb292d794d3d3bbcc960f989bef09763dc73d83cbf907485635265e81f87b712d958a66719230fc6466615a0e3bb998d48159e9e9c51959354a545966bcffa298c7673b4d32b991c886a997236642c0f104f6795feab9f48d0ffc74667f3f3e82473ac892ad25f4b13029b0b27fb1d86991ddc42bbc3fe584ed364e769f3bc72ed8749e7a654ec1a2ec7a01bd2d5caccdc6241a1b1ef2726db54d2c34ab47020b4c729b5994b43deb00ad959950e0051d2c0f27217397055e78f1dd3bd867a45e06c2134ae8981021aae881cc7b2049fe7c82d2127ec81d6430c8116355c8d0ab8b9291c688ed9b8dbb1ed6f1a99bb58a1be8d5737acbf9461b142c8982f52481195d35ef82aed4fa52385ea4ed00a739d01cad7af9f7c27d357748e24f28d22065ccb37300e8f5d8dae5ca79af7a50edc3e05184d1a2a6d59784d5ceeb1f1550a44ea03bee4dc5c27eb78f0032593c7d082e59211f83a8b91aa78bfb7e959328ee63af26a37b79ce5e5139eeebd12e28b2a26ad2fcbdca652524d036b324782d54247a48b9f8200b2d6d2c091c41366d677e3be6e136cec6c3080d608849135c6e3c7d695d2e226ae1ce999d730d7f79116ab85762e55a3e5a66a690ce0a4bb4fd1560c796e2797414b544ef78e29d55e4853fdbf3362085a65c46105f32c360a0a9867b984a5d0297fe0b06a45684ac801a8e66294cef6e5f3c48648884fbb2422fa00488df33a9a0ff1039c81f1939f2cd2f5fe8aa805af2d2332ac37244ed4a7b50265af8062752b0c16511e5f25e8aa2b60645675bc826557bb75474ca4787f6b584b2f83bc25192579104aa0baae79f396df0d31121f90db9acea9695ee0fe0c22df4db503ec8b2437b05f5d35a65722fa82eebd2aff4bcd3316a5cffc4b31913fd02f82130c77f320bf04bf8fa873d0e3f62122d6a5f87d3e908bedafed4a3cb6d9f73ff546f5a2b74a2493b1753e89b682352bb3166563518dcb190c7b3d9fd667c57978a670b192641a674dc92c2401d067b6767aa632ce32a401175c98200a52ab5d80dffa719746d0bff8a84bac4a56e0ab8124fc332b64ea662d01e1b73231a6638f01cf4d699448da228c16951149c8d3dab9a7e3be9a16c7d1ffb061818f8f9cb2b42739fae4a0d70c0701c8dceee785d36ef6413162de1917df01c693ef3e1f517e7fc46245209fee52f5c6a2f50ab3f56d67d1cd987282b24071d8ebb1bc5cd635957b2a7ad92d0650abd5bbc24b75885b6119592a3d715392718e52f9124c4ac95be3582abba4ac3a4049ee49fa8ceb9b59d4e1e2a069c9d482879fd8d27d5ac22ef870542453be22c2ec4ebf1472c19fbfb56aa0a3671297b020e3fe49d201a82a04420e90bda43691dacf92347bcbcae3742cc4abad4c8010c0afa15278795d4d76c482461ae78f30569e1dcf87b9b150d07a2bd81676ec6022422d490759ae1e861a6c4cd1f733bd772d60975a59356c385a4a390429f3d2131e7f616015261df6db3cc3ec261a53be10c4f197e71878984fee00e6d1069f79825194b7af434fb6bb86db18e11977f82928be35054543060cea94ebb4015d061f20f8454e056e7b6e4f9a1621ef2377d77659c20bf358c817519f1801be15ae3b5b42adfab367777a6789635a0dcdd1f2b97edecea0210768af67601d1b95a8850dddb6b1f4b0c2f52c835b0833d81966ad19e49ceb9dc9c729cd8334bc3ee5bb8c74186f5cc3e765b9fdd91d79baaab3d2ab64c15d655d1af7de9cf8d5d7c1baef24577843ce142331743b45b06104b6d0d4392e61ca8c07507ff5f831bbf720854db4debf64182aaebf899ba57626a48748fc2dcf016013d575595d24d383eef2da0ff0c9f6fe9c64b186cd4617e3f37635d7dacb58ec297f3ddb48ce4a5e00cc127267e18a1fdf209e098f2cb2e9c0630d15ec9b867b2b95ecf82ad2c0ba39df9c4d36d492bc9a55c4b767da966e4fd7f4d2fef5e91d0575177c05d240b50757031c76333d43bcc828ab2f0376e29d12d1261ce104a8ea488091326bc451c120c8c04d3e64835c893f55b312e248ad8fc1c32429d68e6b67bf45ab8a1cc3db22f9f01a2266b8349046d3d3e081eaa7f7020c73c0762d11a33b517b8f081da3c61ef63e1d40cd87d69c7ac7491fb61bb57c1fe2d218aff6d39b3e1fc847f0ed894e2f0b4d6a4ad03ba42e28bb1dfab645081f548e64ceb8ce15d2214bd66a14fe594aa447c3537eb493299fef0f9326236ea5dae44e23b34801fe06ee16c79545feaf2528421d6e7f9a256a7914d86bd053dc33c8c2043ba73714f5ff5f0507097a56c40b2190e77877d43be849ee2ac129e582930ced06d359eebb49eda4edb13819f91cecc449c9613d9659906179f8fefa34fecb7d21cdaf09a1ce8d094421da80796c97c02fc56171aaba53fd8a7f55de059044717df164f3571028f16995d51fc8829534cdf58dd134def1e43a34e4f5f372fa8e19d3b85881e99ecd45faa4fccfdb47e094ab06955f3960fac71294dd965f24a97cff36b9966cf1a4c3e96c3e14a3951dcc8a3e9371f7e1ae9df77ddb1a99172174adbee8ea57a0c9872a6d677c2875da88a6a7234bebf68a3cc0532a9809a4de4b4d419bff67b0ba825a7ae6e999087155378357ae67e2dd98697f1d10ffa4497dde6582571670456db995228b97d0ecb2fb30c2ba6c16038c40059815c56b35666cc1c5090f6c38e0f4c12abf79919951b85a2734d32dd12b239912d541f9163387a4aa0be0b7a12d9c6b56dbcf1e9aadcfd72e2664a84d6c5147c72bffe7c3560ccd8c447b748dcd26cc9ca2a85cded742a8dccdfd8e78c96e78d405a19faab9e57183b37583f94b3d416b2920c6b746427ed75c08dc3be02720c1edc4743229153c48f1239b222b9fe2e21c0ae28122bc44f9dc78a59f3485ac8057eb21f0857bcfea2d9ebbbcc197e7880d81515bb1cb7192d97c4258c09926d137e245977db40812b253f99a504bb68137d8d73ca4e7c808d50f1dcc600e6a6db90238ff44e075932fe668c066e6988a6a8b4a8485120c8e4d6511268a75d8f9b0f06689aac8cd621e90c62af1e59aa9efe928e9ea098661b408a2825c4f9aac1efd9d54d163a651054b9ab32719d2be3b176f6795ddad0f1310b9237181689f2f9dd34a41d4d4cd2d7569bf56e6a80bc24d90df3bdde0f9649e699f4ef70c4f3faf9553a231215416bba26c29f17861e0f265e9641b2307ed43d6fde23a378669f4ade874e54c20a5e902205dcaa79a3e8584a3f78a86e703451115a1717df882507c607297afac0a056a0f3509a57502fd2ffff6035d04b91f72f5e1a69ddafaf80f7b2f7a13f38c683988436585e6bc7fc2da328449675c234ec0acf5294ce06c72442beba15e65d6a3e1b5dc3c8f115e1005798383f79b0194f6b7d4b1b32371acbf22340af6e5ee3ea840f7ed451226daef3041fc194e051af2fb450022b394c774273b9575c974c324ecd7268435176ee28c54bb54c8e829232ca636f3bdef60ed460b5ff425936626dd16a3f436f08a863582a79f393378f60f6c8ecdd13d83073bfda2e9f8d0c74a841021cbb8c148e70bfc585627449cdd9fb3045db3ea08a96108b52ee8a4f5048a5d910355789f4bb85c1362955e267e719581c38a2648eaa0b516db6277d2ee3c6e1e1090df3f53a31b747d99887e337dadddab16a297d9e56797007a3d18ce333311c70bb1bf45bdae517ffc589419af643773bb30a1fbff7ecd4a8ae7456a608fe73547c2eda4f070d57dc70b65d867526c946a435ea581497da18646ce569eaf6ccf3474cd6e7aa3d6d4732836ff4167c9153757ce58a34864be6d479f7b4ea1d6480b9ac16c5bff346a74e74133234744df867e16b3d2f1f7db4b21b89019b520917ef863e60f52999d6946b9e09cb60054f49d8a255f02e4b62fff6e6adb9a167ea70a177d00b26f56e29b63138a2ebc30b956161a4ab25d5da1c207c3f762714f651341ae771e17d84fa1c86685f2fcb0a128c2e1208d1930e7ff0d8d55299154112af574b881be8b69cc1721d548ad4dc02632e184c47f9b394bf4a834e60fbead8c8bfbf5087f8454513b0b086ac97bbbb9aa342af9def758fe88f1e4570e65f93fd4a9868665d08fac0cf6ebde786995c433504ca01cdf83311aaae20cc76f819a4344a8ee4e26c1094cb00d2c8a67c733fffcd89e97534cacb08a64d75e8594fa31f0dcfcafb0d1bc184c7067fec6a48ddefd580d4d9a4128d8f70f6fc6562da683904766e982ecd0286064db6844131bb7962a0a497f7b97fefad88a0b128bdf8cca774b1c32cb4af259bfebccda036e7e4ea8962838dbb5c04ffab0a2f1481848a27f06171645daf5246a2e563f3ed60097a9d7023d6ba5c8a58d39f733b12baf0863d82c427460f51cf9e3f77281a42221725b7bb75c2116ab31f704661f090d3eeddd2aa6efc619946b4933c398b635fd04ba3758294965c568997e1ef44b0562804e6c64558f6cfa87662a988c321a856ead51c848528a4954f9ff1948d517d67bc11db66801648848bfb7ee12296428bc3ffec863e9c77ff31ee386197679adab2a0e93bbe0c66ffe9c4b09b636f6216faa373aa8271678cc57ad46898222df7e2d8b14a5b70130596c0430997c4c04d9b5187fd9bb26b71fd19aacc8e08a3239f0eebca7b2873062a19f327a4a282012ebf9898a5ab6310b8623c864d4dada3ded00ad201ce8f3973f90396f5edc1ba466e16247fe6b0ee98acfd53792cc0fea33647b841596655b8d9efbc14b50fe0b588e4c41e2cbd0a700529e7ca91122d3d1b26e52bf44a0c9fe37cdbc352357f13b2adc68e78a00f6dc88a8e6ea54bd0b2c8276f9e1bfebc8655a1f47b72c25ffa97f4463630cc21428ca3bb381a6d3171d28bb946f746f820247bf3f7bb69caaeb5c47026ca9997e586e657a9e1569312bb443299ef4cfeacc9aaf4fc3aaa4a77a21579234d2aab6fd0234398ae07ca7c57ac6d6a51e025744b1430abce27f7f9b0d0e45c051e34d20db95cadcc0e4e327dbd979166b33e39a3951d0b8dd62c0d1542b69583cfc07b127243cac4b052cb29ccb3592972698fa4cd84633d222d78b8741d5f903f8636d95cddfe2ef13829df9ce32705edfda51ded2f0ef38f60a33a2e00373107eef56a01acb5e05d849279b5987343c8bbc73ea660ceaf7c9b90c0a8e1412ff3f517cef8fe604d7a26e085170a76e1bf43f5d1bb77ee771fe841d59fe2cc2874d25bf991b4af6bf9ffe1bfbf3a5587006b60bab5bdfd5a3192e82d474ecab0ab656967856c84cba9469c5823c1d1bf104d2a21c071bb08b2a137883dd9c8f545d6958db8efa45263ae303de76e70f2f6a10e1858e6654004f2a099dc31950ee730c465e0a1822935e309d41650fba489aa3050eedbf3f058d24d1f04fc340966e42d72052d84a66789ccf75000c3fc83b8842badd6b22ddaaaf53ed34e25c1b638e3630d66a7903405052902cf8e7395d54679e2f4a2bf7c8c89b0dc38969376ea164fe97b37b1172e6e8f05a929aa373108e891a64e38e18b432a115a44d754811e03c4f4ae7c525a6b9b92aab0d16967ee1a64eeeb2207c094f6aa96f126d058eff22435a4ae76c31f888ee13b327d2cab4ab5a56abf4cae88c583dd67129271708aa17f4f10886ead0e12734314bd4a49e64349beba4abdf94a1fb23a72cf7e16b5af2f1706d9646a5ff7dbf5c7b1cb2c3781346167b15d4625841d9f3d14392db1d39101d37175c42c522229db0708544058d75cebf3e399cd443d1b943c6f3017a898bd49836a8d92519deb810712aed76602682ef0df2be270734eeda7f289a76f4684baf75702a1ac3da005e62b83f794b934cf882db5d50e5ed4aca868e300d690c0b10daf0a47486e9f49d1b08eac6cf5090ddd2443b1459b2df86ab3447b2b5c6afe8aadb410de6a84b640e326eb882832d1a9cb12e0b8f13aef579f404af8631cdd5a30a031dad19cdf247575dd223229330f19fe4d88c51242217397acf66b86c743de283d5df7212fce59af17eb702eccab192f56f054a33709d41841e4a39638e02b4210559593f9b5c44fd22d9da637ef1a3a0a41c40469990dc4beec30a05b67931c0560d9a59fa875f3e26fd1eb32655aa30c7a1cd3d541716fdaacdda206328f3cbc8f16fc2be26690f18963a16febbaf2cb6c199330579ca067c60b54cbdd211c1350e066448fb50ae28ed58788ac98f0ded3414c8735ab90639916e26ab29102cc2609035e56d9b9d2dbc98118835bcf0e437c77052efe2293d9f19b7197aa1b94b10997b0b1efdef251de8945a97fec885f032c3bee2447335230b866d7aef515b04664d0c59e18233f9a229969e3e17d69716413ca3bc55f5959e340627ea803f7b26f4a74295b295344a3685287093998a1ce75b1ed5d730c9aec812617b4c200a0250c9ef8ef7d2fcfc59ef97422eca746bc6451a5b77307d14c1cfa0ea2c8eb7cf7819644577a6456efec0af058a0e3c8ec371019009462bfe174a11368b57fbe3090208a57b2236b97edc32cda5c6fc988cbaaf91c4020a06a7ad45519eaa761e045fc84d3219b287206282347a031ef1e7b7dbc67de738fa8f9fe71c44201fd1d548f8aebe93bf502d64d4b5f470a419e3fcd87f0616b9813048311ed20ac2efd7f18dcd6889542208b50c28c8c0700f73fa33a964e38d699819cab2098c6ff081266721cdced87ff41948c84037485f30d38a99eeeb3ff4c3049742a29eb09bb35c358e732546267c165a62fee9e25abdafdb8a48785bd432d160797e7a41d580f59d7d8e59b3e6b954d39f86db33b8f7cabde43e8e04cac1fcf9aa6fdbe4326e0d9c782d9a630055b36f85c2b8efebf18f42ef14ee5eb1d33ca322db69704f8bb90bf30eb05908b8d8ed169580923f53a6539cc3b55baa47718053d2ff103c23d90f9cb49ddc7d759950f605bafabcb7953c042c0523b84da994529a87ad68fc6f0709fd7af5fc20e53a17d3f5fd4d25fc5ff6598c6ddfc34668a08ee5e066d81a65e7979c50c08febf76dc5a3a405f551bb8449d94ea0dfdad6dd6dd6d6e4486f4ae1d2523c05f46198d8af4da12873ebdf7d6b5f2d0f1b2d29759ab0d78e34ae6f17b7ab83518cf8b18836ea5630ee934e5ecc123f0d3fe6b803ae1f735d65dcadcaaf6660e02ecad0290f6ead0594733a10b2b1654a44244424fa8b3180b551ac401828203e61603b017106e2256f01b9f26db33897167d9defb54ddfe49334150574493895370bad46cc658667aa9a8ed333c86f112b2a542936af92e2f933254b6fb0b1a599eec3bf2e476ae6714e2486dd31b29e4d26838d84bd7a62c62beab3ba71642278ecaf2e50d70670d9fdff105019791d36321bc57fdfd8f65f2ea1cb188035ecabf6140e777b7e6d2177ac29e9a1a2f87dd54d96184bb1a855bd9efdadfc606f13621f40e07cd8be9c2435c8c90b4ccba5eb7ddcf8cf1f76617c9a9e011abf4a63ffe31df63ecacb8b1d2d653e613cb399ce079392f9ca2e226c60b6e8103447c24c1f80d42e1ee747997602ae3ccff8f9f98ce9b56f6f3e3c0ba507df8b2169539cfc946c42da72644feb9b3b582ce332f8b2eda02192958194903d17b3e9b4bd60d08cd9a7989d946ece6d8dc01d6b66a7851bb11e4b075d38081d3ce7bf1875fec9daf47a589abdb72763c9747b83a28389238b0279c8e41db6521130420851acac463664a97be2190aff921923475f2c1f8a87d1169229e5f10dd0a92221e61358b156020f2c9ca2cb6580743a8d5e3c59e6fd97a7a246211450c7c62f1891cedb434102f8794d81c1caf2c1b4ae18b7c4b9c88de5c51da33e3343cef76da0d00341c2e60c4562c162e41a7efa8290cc9061f3d6a592d5f104c5018f31bcaf912bdd37370fbf8fedf0aa9026c1142299197d67ab026756927b5864ea42c45a82c23c275697d31a1b7900670c9a3c967d12974543c11f20c367a336bea9b9ebe480f9c806528138dff35c5f56b1199b75748e9c5cf50e6a32397dc3eeb04c3636c0848a5e13df8a9758bacea231f34cba13b466360b0dec69f74f8bf9a2dcf3dd94fa3a7d27e8caae00240559d75875ef9c619416593ca0072e7f38caae5a530c62dbe00e38c12cb8b924d63fca4d5c3a4c8f50e8f4f86fc1fe2b163219c46c21eb783e587e18e07ab7e1927a646c4f154c5000cb65ce9528457c3c66f43d9ab7d61580df0ecfb31cb38e4cbcdc3dafcca57311abec6b74048c8b74505ba678a4db07ed7243c70a821aee66a487bf91fd273418f8ef657d1eeb9ea6f095d47641e9f9fa30599e8b9c6b4453a1a5e8afd86fcafb46dd095fa4a98a2b26470e2c799b08c6000f5c3c4e28961463724377f37813f3922484fda986eb7c93ae8365baf648acbb344ca7e044d7ba93e7ba35c31085f3f99c5fdb2f9f2845f00b8590395e8ff730b86f5dd7f52297b8ecd5d5a6bb452bcd12b98d6adb27e7ef0e84b9567c66093ca3edab7e64ac4f56360501d81823ea2b1595f934c5f61c8558304c16154109a983a2af8725c7af91b5bc57e555768aa8115236a6ccc921d472b608eb6b82c4ba3747d79027d7856fae5369aa325df6a76138a5b41a94377eeeb251087e0b8510d8890e3f7a0cffaeddb9d2c29bc89f952489f82ee2e2b485cd297e6d30683701623cf73ee9ee606baeae9c3afba287eff57731b9cfaf034b1f56c8b31a32a1078c4fcab298c3f925a8e7cacceb9edf7ba2e54d31033a25462021e4a3c0bf5af341b462ee4417024da7c12c7f385de3af129aef1338a9c1fd68323d07ff47ec8bcca66b44300624d02c9202a2d093c3c85fd922b57b3bd14162c8ca5690734b7e4e4b8980b73a8e9908a9fa3dd508b30e3b1e1fd4ec388affa27c4bc26ca2820e0a902d51ff94984e8894fa5fca7b8704b7600ca6d6b1b1527ea999fcdf8fe3b290ec0036cad222f92cf8a5a54d0fa91de6e74ef61f60a233c9f15fdc86226c3f688de15ed8f0c3f1bc3afcad87cee47a19384afc6a804f197339ebce4aca211dbe0504a000755d18f20c4ecacd4123acdff7653cbb26456499495662508c8186afb883f5481c6bdf88cf137e263bde9d62f054573e0d1454cc119c95d4d9011332bd77682f79debcf5c21f0be7e9a83a58cec34e7cfb17a8122e030669228e4d3d9e274a678c5b77e6180aacc2fa8eb9952c5b04de6b2c7bee591badab96a3c3248c275b5b8faf5394eacc427a840570033be5006c33ce2d2c6e54f08681c3f74ad2fe54bca6dc62a9d84f6c58509c1e5dd5cfcc7a358493d428de48dfc1bc3f74154801c97e6aae38445045320b4cf66c1e56eb6ea2c1218de65f120b463c5cfb9255b3a25eb6e848cbd977f0605d71c561c2a754f5761c31f84101ee8178782cc8cf70b41a2204c5cb2f3134d572327fe4bbc1792249dfcf0ae7ba5d81fb5ae4a7978d044085f3b7f2e398c05733e2bf456cae898f8b5a81e9c79179bb5ca716713fce643dabe21eaee4386e646e25ad3adc5a4ad40f9bd6743f5f742efb1a674ffdbd2ced56c646ae590eb8f10283b47f57e6f96ad76adebecb24df74020b096fdee3c8d780d563a915f73c8b0246b861cd3a8580d5cf75798e8cf1c5875724661a39277e7165fe48ed8d5e6a20d68239f626fe8ea434a4e6e03ea434ec68c4b92a0fc2af15a135d6cbaeeca39a0c1896dab33daac", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) open(&(0x7f00000001c0)='./file0/file0\x00', 0x1800, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x8, 0x8, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0xffffffffffffffff}, 0x0, 0x0) 5m27.525359688s ago: executing program 3 (id=4162): socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f00000000c0)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x7}}, {@init_itable}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, 0x0, 0xffffffffffffff9c, 0x0, 0x0) mount$bind(0x0, 0x0, 0x0, 0x80000, 0x0) mount$bind(0x0, 0x0, 0x0, 0x1adc51, 0x0) move_mount(r0, &(0x7f0000000080)='./file0/file0\x00', r0, 0x0, 0x0) 5m26.349387146s ago: executing program 3 (id=4165): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30000091) 5m25.3722266s ago: executing program 3 (id=4167): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) close(0x3) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d240600000308", @ANYRES8=r0, @ANYRES8=r1], 0x0) 5m22.605224945s ago: executing program 58 (id=4167): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) close(0x3) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d240600000308", @ANYRES8=r0, @ANYRES8=r1], 0x0) 10.855904423s ago: executing program 7 (id=5444): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x8, 0x2, [@TCA_BASIC_POLICE={0x4}]}}]}, 0x38}}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 10.1371561s ago: executing program 7 (id=5447): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0xd0f, 0x400000, 0x25dfdbfc, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x8, 0x2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c) 9.667561126s ago: executing program 7 (id=5451): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000140009052abd7000fddbdf25022031cb", @ANYRES32=r2, @ANYBLOB="080002007f000001140003"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 9.189726133s ago: executing program 7 (id=5455): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000380)={0xa0000001}) epoll_pwait(r3, &(0x7f0000000140)=[{}], 0x1, 0xe, 0x0, 0x0) 5.677269206s ago: executing program 2 (id=5471): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x70bd28, 0x0, {0x0, 0x0, 0x4c}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x4}]}, 0x30}, 0x1, 0xffffa888, 0x0, 0x40000}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0xe5, 0x0, 0x0, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x1, 0x0, 0x3, {@ip4=@local, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) 4.884992706s ago: executing program 2 (id=5476): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03adcac4b74ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 4.431873732s ago: executing program 2 (id=5477): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0x10) 4.312096297s ago: executing program 5 (id=5478): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x70bd28, 0x0, {0x0, 0x0, 0x4c}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x4}]}, 0x30}, 0x1, 0xffffa888, 0x0, 0x40000}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0xe5, 0x0, 0x0, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x1, 0x0, 0x3, {@ip4=@local, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./file0\x00', 0x3000050, &(0x7f0000000180)=ANY=[@ANYRESHEX=r6], 0x2, 0x14fe, &(0x7f0000000600)="$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") r7 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x7e21) unlink(0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x28, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x4000080) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='fd/3\x00') write$sndseq(r9, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x14, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x80) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x1f, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e22, @remote}}, 0xc57, 0x3c}, &(0x7f0000000280)=0x90) r10 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x800000) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r10, 0xc0884113, &(0x7f00000000c0)={0x1, 0x5, 0x8, 0x8, 0x0, 0x1, 0x800, 0x1, 0x7f, 0xfffffffffffffffb, 0x2, 0x5}) 4.309436447s ago: executing program 1 (id=5479): r0 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0xa00) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, 0x0) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000480)={0x9, 0x0, 0x9, 0x0, 0x0, 0x0, "fff8000000000000c5c6ff0017c3a86d", 0x0, 0x2, 0x0, 0xff, 0x0, 0x1, 0xff}) 3.719093935s ago: executing program 2 (id=5480): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000300)=0x1, 0x4) bind$can_j1939(r1, &(0x7f0000000380)={0x1d, r2, 0x0, {0x2, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048001) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) 3.715244065s ago: executing program 0 (id=5481): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101080000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff08000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) 3.529140798s ago: executing program 1 (id=5482): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x70bd28, 0x0, {0x0, 0x0, 0x4c}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x4}]}, 0x30}, 0x1, 0xffffa888, 0x0, 0x40000}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0xe5, 0x0, 0x0, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x1, 0x0, 0x3, {@ip4=@local, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./file0\x00', 0x3000050, &(0x7f0000000180)=ANY=[@ANYRESHEX=r6], 0x2, 0x14fe, &(0x7f0000000600)="$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") r7 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x7e21) unlink(0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x28, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x4000080) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='fd/3\x00') write$sndseq(r9, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x14, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x80) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x1f, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e22, @remote}}, 0xc57, 0x3c}, &(0x7f0000000280)=0x90) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x800000) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x0, &(0x7f0000000140), 0x0, 0x4) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 3.335442657s ago: executing program 5 (id=5483): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x38, r2, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_KEY={0x1c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x18, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}]}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) 3.084351725s ago: executing program 0 (id=5484): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d6fe682c6100000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x1d, r2, 0x0, 0x4000}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x4044001) 2.706622252s ago: executing program 5 (id=5485): r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r0, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xb1c0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010024bd7000e8dbdf252100000008000300", @ANYRES32=r5, @ANYBLOB="08009e00"], 0x24}, 0x1, 0x0, 0x0, 0x4014001}, 0x0) 2.576670679s ago: executing program 0 (id=5486): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x70bd28, 0x0, {0x0, 0x0, 0x4c}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x4}]}, 0x30}, 0x1, 0xffffa888, 0x0, 0x40000}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0xe5, 0x0, 0x0, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x1, 0x0, 0x3, {@ip4=@local, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2.387810226s ago: executing program 1 (id=5487): accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x3}}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.369041615s ago: executing program 2 (id=5488): r0 = socket$netlink(0x10, 0x3, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03adcac4b74ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 1.841678398s ago: executing program 1 (id=5489): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, 0x0) 1.722114173s ago: executing program 0 (id=5490): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r0, &(0x7f0000001900)={0x0, 0xffffffea, 0x0}, 0x20040005) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) 1.695548792s ago: executing program 2 (id=5491): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mprotect(&(0x7f000003a000/0x2000)=nil, 0x2000, 0x1) 1.471885196s ago: executing program 5 (id=5492): r0 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0xa00) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, 0x0) ioctl$CEC_TRANSMIT(r0, 0xc0386105, 0x0) 1.054621655s ago: executing program 0 (id=5493): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x70bd28, 0x0, {0x0, 0x0, 0x4c}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x4}]}, 0x30}, 0x1, 0xffffa888, 0x0, 0x40000}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0xe5, 0x0, 0x0, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x1, 0x0, 0x3, {@ip4=@local, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./file0\x00', 0x3000050, &(0x7f0000000180)=ANY=[@ANYRESHEX=r6], 0x2, 0x14fe, &(0x7f0000000600)="$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") r7 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x7e21) unlink(0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x28, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x4000080) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='fd/3\x00') write$sndseq(r9, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x14, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x80) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x1f, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e22, @remote}}, 0xc57, 0x3c}, &(0x7f0000000280)=0x90) r10 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x800000) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r10, 0xc0884113, &(0x7f00000000c0)={0x1, 0x5, 0x8, 0x8, 0x0, 0x1, 0x800, 0x1, 0x7f, 0xfffffffffffffffb, 0x2, 0x5}) 865.870618ms ago: executing program 1 (id=5494): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)={0x80, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4a, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0x99, 0x80, 0xfe}}, @val={0x2d, 0x1a, {0x400, 0x1, 0x7, 0x0, {0x6, 0x9, 0x0, 0x3e3, 0x0, 0x0, 0x1, 0x3, 0x1}, 0x300, 0x0, 0x9}}, @void, @void, @void}}], @chandef_params, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x7}]}, 0x80}}, 0x0) 833.958728ms ago: executing program 7 (id=5495): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x1, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xf}, {0xd, 0xa}, {0x6}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0x8, 0x4, 0x0, 0x7}, 0xf0, 0x1, 0x31a, 0x3, 0x88a, 0xd, 0x8e, 0x1f, 0x3, 0xff, {0x4415, 0x2, 0x800, 0x5, 0x0, 0x5}}}}]}, 0x78}}, 0x4000) 782.811826ms ago: executing program 5 (id=5496): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000340)="1400000023003517d25a806f8b6394f90324fc60", 0x14}], 0x1}, 0x0) 282.315949ms ago: executing program 5 (id=5497): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x70bd28, 0x0, {0x0, 0x0, 0x4c}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x4}]}, 0x30}, 0x1, 0xffffa888, 0x0, 0x40000}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0xe5, 0x0, 0x0, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x1, 0x0, 0x3, {@ip4=@local, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./file0\x00', 0x3000050, &(0x7f0000000180)=ANY=[@ANYRESHEX=r6], 0x2, 0x14fe, &(0x7f0000000600)="$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") r7 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x7e21) unlink(0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x28, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x4000080) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='fd/3\x00') write$sndseq(r9, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x14, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x80) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x1f, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e22, @remote}}, 0xc57, 0x3c}, &(0x7f0000000280)=0x90) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x800000) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x0, &(0x7f0000000140), 0x0, 0x4) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 209.939673ms ago: executing program 7 (id=5498): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendto$packet(r0, 0x0, 0x0, 0x4004, 0x0, 0x0) socket$inet(0x2, 0x2, 0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp(0x2, 0x2, 0x1) 115.531463ms ago: executing program 0 (id=5499): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x8, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x1) sendmmsg$inet6(r0, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="bd", 0x1}], 0x1}}], 0x1, 0x0) 0s ago: executing program 1 (id=5500): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0xd0f, 0x400000, 0x25dfdbfc, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x8, 0x2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c) kernel console output (not intermixed with test programs): c 0x1003 length: 249 > 9 [ 2024.291076][T15281] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2024.313909][T15281] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2024.325752][T15281] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2024.700856][ T30] kauditd_printk_skb: 242 callbacks suppressed [ 2024.700941][ T30] audit: type=1326 audit(1751520437.914:8159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19863 comm="syz.2.4737" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 2024.729920][ C1] vkms_vblank_simulate: vblank timer overrun [ 2025.046109][ T30] audit: type=1326 audit(1751520437.964:8160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19863 comm="syz.2.4737" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 2025.069521][ T30] audit: type=1326 audit(1751520437.964:8161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19863 comm="syz.2.4737" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 2025.091824][ C1] vkms_vblank_simulate: vblank timer overrun [ 2025.098878][ T30] audit: type=1326 audit(1751520437.964:8162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19863 comm="syz.2.4737" exe="/root/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 2025.121856][ T30] audit: type=1326 audit(1751520437.964:8163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19863 comm="syz.2.4737" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 2025.144174][ C1] vkms_vblank_simulate: vblank timer overrun [ 2025.151100][ T30] audit: type=1326 audit(1751520437.964:8164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19863 comm="syz.2.4737" exe="/root/syz-executor" sig=0 arch=40000003 syscall=337 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 2025.173816][ T30] audit: type=1326 audit(1751520437.974:8165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19863 comm="syz.2.4737" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 2025.196118][ C1] vkms_vblank_simulate: vblank timer overrun [ 2025.202822][ T30] audit: type=1326 audit(1751520437.974:8166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19863 comm="syz.2.4737" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 2025.225254][ C1] vkms_vblank_simulate: vblank timer overrun [ 2025.232200][ T30] audit: type=1326 audit(1751520437.974:8167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19863 comm="syz.2.4737" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 2025.255022][ T30] audit: type=1326 audit(1751520437.984:8168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19863 comm="syz.2.4737" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 2025.277453][ C1] vkms_vblank_simulate: vblank timer overrun [ 2025.917109][ T9419] usb 1-1: USB disconnect, device number 37 [ 2025.998306][T19861] chnl_net:caif_netlink_parms(): no params data found [ 2026.026419][T19875] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4739'. [ 2026.486775][T15281] Bluetooth: hci4: command tx timeout [ 2027.868042][T10005] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 2028.069386][T10005] usb 6-1: Using ep0 maxpacket: 16 [ 2028.091411][T10005] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2028.103154][T10005] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2028.232316][T10005] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2028.241850][T10005] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2028.250539][T10005] usb 6-1: Product: syz [ 2028.255000][T10005] usb 6-1: Manufacturer: syz [ 2028.260006][T10005] usb 6-1: SerialNumber: syz [ 2028.478707][T19861] bridge0: port 1(bridge_slave_0) entered blocking state [ 2028.486396][T19861] bridge0: port 1(bridge_slave_0) entered disabled state [ 2028.494596][T19861] bridge_slave_0: entered allmulticast mode [ 2028.497805][T15281] Bluetooth: hci4: command tx timeout [ 2028.505493][T19861] bridge_slave_0: entered promiscuous mode [ 2028.555604][T19861] bridge0: port 2(bridge_slave_1) entered blocking state [ 2028.563829][T19861] bridge0: port 2(bridge_slave_1) entered disabled state [ 2028.579869][T19861] bridge_slave_1: entered allmulticast mode [ 2028.591626][T19861] bridge_slave_1: entered promiscuous mode [ 2028.971693][T18391] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2029.004373][T19861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2029.041237][T19861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2029.082361][T18391] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2029.244578][T18391] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2029.707363][ T30] kauditd_printk_skb: 292 callbacks suppressed [ 2029.707449][ T30] audit: type=1326 audit(1751520442.914:8461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19903 comm="syz.7.4750" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 2029.934826][ T30] audit: type=1326 audit(1751520442.954:8462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19903 comm="syz.7.4750" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 2029.958012][ T30] audit: type=1326 audit(1751520442.954:8463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19903 comm="syz.7.4750" exe="/root/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf70de567 code=0x7ffc0000 [ 2029.981180][ T30] audit: type=1326 audit(1751520442.964:8464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19903 comm="syz.7.4750" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 2030.003998][ T30] audit: type=1326 audit(1751520442.964:8465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19903 comm="syz.7.4750" exe="/root/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf70de567 code=0x7ffc0000 [ 2030.026443][ C1] vkms_vblank_simulate: vblank timer overrun [ 2030.033222][ T30] audit: type=1326 audit(1751520442.964:8466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19903 comm="syz.7.4750" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 2030.055967][ T30] audit: type=1326 audit(1751520442.974:8467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19903 comm="syz.7.4750" exe="/root/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf70de567 code=0x7ffc0000 [ 2030.078396][ C1] vkms_vblank_simulate: vblank timer overrun [ 2030.085357][ T30] audit: type=1326 audit(1751520442.974:8468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19903 comm="syz.7.4750" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 2030.108767][ T30] audit: type=1326 audit(1751520442.974:8469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19903 comm="syz.7.4750" exe="/root/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf70de567 code=0x7ffc0000 [ 2030.131601][ T30] audit: type=1326 audit(1751520442.974:8470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19903 comm="syz.7.4750" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 2030.391801][T19861] team0: Port device team_slave_0 added [ 2030.428397][T14657] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 2030.526426][T18391] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2030.578852][T15281] Bluetooth: hci4: command tx timeout [ 2030.611380][T19861] team0: Port device team_slave_1 added [ 2030.617726][T14657] usb 1-1: Using ep0 maxpacket: 16 [ 2030.631096][T14657] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2030.642014][T14657] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2030.672089][T14657] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2030.681949][T14657] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2030.690445][T14657] usb 1-1: Product: syz [ 2030.694973][T14657] usb 1-1: Manufacturer: syz [ 2030.700467][T14657] usb 1-1: SerialNumber: syz [ 2030.804626][T10239] usb 6-1: USB disconnect, device number 26 [ 2030.860483][T19913] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4752'. [ 2031.824970][T19861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2031.836061][T19861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2031.862874][T19861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2031.884181][T18391] bridge_slave_1: left allmulticast mode [ 2031.890601][T18391] bridge_slave_1: left promiscuous mode [ 2031.897712][T18391] bridge0: port 2(bridge_slave_1) entered disabled state [ 2031.967612][T18391] bridge_slave_0: left allmulticast mode [ 2031.973728][T18391] bridge_slave_0: left promiscuous mode [ 2031.980782][T18391] bridge0: port 1(bridge_slave_0) entered disabled state [ 2032.538810][T18391] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2032.579028][T18391] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2032.615633][T18391] bond0 (unregistering): Released all slaves [ 2032.652819][T19861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2032.657988][T15281] Bluetooth: hci4: command tx timeout [ 2032.660088][T19861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2032.692415][T19861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2032.816010][T19929] fuse: Bad value for 'user_id' [ 2032.821815][T19929] fuse: Bad value for 'user_id' [ 2033.096314][T10239] usb 1-1: USB disconnect, device number 38 [ 2033.298275][T19861] hsr_slave_0: entered promiscuous mode [ 2033.310197][T19861] hsr_slave_1: entered promiscuous mode [ 2033.319634][T19861] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2033.327979][T19861] Cannot create hsr debugfs directory [ 2033.395007][T18391] hsr_slave_0: left promiscuous mode [ 2033.429823][T18391] hsr_slave_1: left promiscuous mode [ 2033.438720][T18391] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2033.446696][T18391] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2033.484955][T18391] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2033.493137][T18391] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2033.541586][T18391] veth1_macvtap: left promiscuous mode [ 2033.547898][T18391] veth0_macvtap: left promiscuous mode [ 2033.554052][T18391] veth1_vlan: left promiscuous mode [ 2033.560039][T18391] veth0_vlan: left promiscuous mode [ 2034.357209][T18391] team0 (unregistering): Port device team_slave_1 removed [ 2034.828311][ T30] kauditd_printk_skb: 199 callbacks suppressed [ 2034.828401][ T30] audit: type=1326 audit(1751520447.884:8670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19937 comm="syz.5.4762" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 2034.858572][ C1] vkms_vblank_simulate: vblank timer overrun [ 2034.865774][ T30] audit: type=1326 audit(1751520447.884:8671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19937 comm="syz.5.4762" exe="/root/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf70de567 code=0x7ffc0000 [ 2034.889479][ T30] audit: type=1326 audit(1751520447.894:8672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19937 comm="syz.5.4762" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 2034.911704][ C1] vkms_vblank_simulate: vblank timer overrun [ 2034.920353][ T30] audit: type=1326 audit(1751520447.894:8673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19937 comm="syz.5.4762" exe="/root/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf70de567 code=0x7ffc0000 [ 2034.942669][ C1] vkms_vblank_simulate: vblank timer overrun [ 2034.951178][ T30] audit: type=1326 audit(1751520447.904:8674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19937 comm="syz.5.4762" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 2034.975101][ T30] audit: type=1326 audit(1751520447.904:8675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19937 comm="syz.5.4762" exe="/root/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf70de567 code=0x7ffc0000 [ 2034.998749][ T30] audit: type=1326 audit(1751520447.914:8676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19937 comm="syz.5.4762" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 2035.022409][ T30] audit: type=1326 audit(1751520447.914:8677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19937 comm="syz.5.4762" exe="/root/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf70de567 code=0x7ffc0000 [ 2035.044710][ C1] vkms_vblank_simulate: vblank timer overrun [ 2035.053430][ T30] audit: type=1326 audit(1751520447.934:8678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19937 comm="syz.5.4762" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 2035.075788][ C1] vkms_vblank_simulate: vblank timer overrun [ 2035.083421][ T30] audit: type=1326 audit(1751520447.934:8679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19937 comm="syz.5.4762" exe="/root/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf70de567 code=0x7ffc0000 [ 2035.340214][T19946] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4765'. [ 2035.607471][T14657] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 2036.250843][T14657] usb 1-1: Using ep0 maxpacket: 16 [ 2036.298926][T14657] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2036.309716][T14657] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2036.375565][T14657] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2036.385517][T14657] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2036.394097][T14657] usb 1-1: Product: syz [ 2036.398706][T14657] usb 1-1: Manufacturer: syz [ 2036.403603][T14657] usb 1-1: SerialNumber: syz [ 2036.773829][T19958] fuse: Bad value for 'fd' [ 2037.127599][T14657] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 2037.354251][T19861] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2037.373881][T14657] usb 8-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 2037.385089][T14657] usb 8-1: config 255 has 0 interfaces, different from the descriptor's value: 1 [ 2037.417223][T19861] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2037.457497][T14657] usb 8-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 2037.467632][T14657] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2037.475995][T14657] usb 8-1: Product: syz [ 2037.480647][T14657] usb 8-1: Manufacturer: syz [ 2037.485523][T14657] usb 8-1: SerialNumber: syz [ 2037.502020][T19861] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2037.540342][T19861] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2037.768606][T19960] mac80211_hwsim hwsim69 syzkaller0: entered promiscuous mode [ 2037.777185][T19960] mac80211_hwsim hwsim69 syzkaller0: entered allmulticast mode [ 2037.815253][T14657] usb 8-1: USB disconnect, device number 28 [ 2037.939220][T16744] usb 1-1: USB disconnect, device number 39 [ 2038.253544][T19861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2038.354279][T19861] 8021q: adding VLAN 0 to HW filter on device team0 [ 2038.428211][T18391] bridge0: port 1(bridge_slave_0) entered blocking state [ 2038.436096][T18391] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2038.547356][T18391] bridge0: port 2(bridge_slave_1) entered blocking state [ 2038.554994][T18391] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2040.408968][T19993] fuse: Bad value for 'fd' [ 2041.038359][T16744] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 2041.086259][T19861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2041.218582][T14657] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 2041.219820][T16744] usb 1-1: Using ep0 maxpacket: 16 [ 2041.275349][T16744] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2041.286652][T16744] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2041.334138][T16744] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2041.343857][T16744] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2041.352469][T16744] usb 1-1: Product: syz [ 2041.357370][T16744] usb 1-1: Manufacturer: syz [ 2041.362267][T16744] usb 1-1: SerialNumber: syz [ 2041.459435][T14657] usb 3-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 2041.470555][T14657] usb 3-1: config 255 has 0 interfaces, different from the descriptor's value: 1 [ 2041.483344][T19861] veth0_vlan: entered promiscuous mode [ 2041.533103][T14657] usb 3-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 2041.543049][T14657] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2041.551776][T14657] usb 3-1: Product: syz [ 2041.556227][T14657] usb 3-1: Manufacturer: syz [ 2041.561284][T14657] usb 3-1: SerialNumber: syz [ 2041.604023][T19861] veth1_vlan: entered promiscuous mode [ 2041.694610][ T30] kauditd_printk_skb: 107 callbacks suppressed [ 2041.694694][ T30] audit: type=1326 audit(1751520454.904:8787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20007 comm="syz.5.4787" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 2042.212244][T20001] syzkaller0: entered promiscuous mode [ 2042.218458][T20001] syzkaller0: entered allmulticast mode [ 2042.382149][T19861] veth0_macvtap: entered promiscuous mode [ 2042.427455][ T30] audit: type=1326 audit(1751520454.944:8788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20007 comm="syz.5.4787" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 2042.450291][ T30] audit: type=1326 audit(1751520454.954:8789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20007 comm="syz.5.4787" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 2042.473145][ T30] audit: type=1326 audit(1751520454.954:8790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20007 comm="syz.5.4787" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 2042.482202][T19861] veth1_macvtap: entered promiscuous mode [ 2042.495792][ T30] audit: type=1326 audit(1751520454.964:8791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20007 comm="syz.5.4787" exe="/root/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 2042.525100][ T30] audit: type=1326 audit(1751520454.964:8792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20007 comm="syz.5.4787" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 2042.548162][ T30] audit: type=1326 audit(1751520454.984:8793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20007 comm="syz.5.4787" exe="/root/syz-executor" sig=0 arch=40000003 syscall=337 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 2042.570869][ T30] audit: type=1326 audit(1751520454.984:8794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20007 comm="syz.5.4787" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 2042.594284][ T30] audit: type=1326 audit(1751520454.984:8795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20007 comm="syz.5.4787" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 2042.617105][ T30] audit: type=1326 audit(1751520454.994:8796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20007 comm="syz.5.4787" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 2042.748696][T19861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2042.837398][T16744] usb 3-1: USB disconnect, device number 24 [ 2043.053985][T19861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2043.123465][T19861] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2043.134224][T19861] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2043.144907][T19861] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2043.156726][T19861] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2043.964974][T14657] usb 1-1: USB disconnect, device number 40 [ 2045.109572][T20036] fuse: Bad value for 'fd' [ 2046.527614][T16744] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 2046.764206][T16744] usb 8-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 2046.775603][T16744] usb 8-1: config 255 has 0 interfaces, different from the descriptor's value: 1 [ 2046.906072][T16744] usb 8-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 2046.919083][T16744] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2046.927956][T16744] usb 8-1: Product: syz [ 2046.932427][T16744] usb 8-1: Manufacturer: syz [ 2046.937802][T16744] usb 8-1: SerialNumber: syz [ 2047.194430][T16744] usb 8-1: USB disconnect, device number 29 [ 2048.508484][T20079] fuse: Bad value for 'fd' [ 2049.153536][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 2049.153621][ T30] audit: type=1326 audit(1751520462.354:8831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20084 comm="syz.5.4811" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 2049.183952][ T30] audit: type=1326 audit(1751520462.364:8832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20084 comm="syz.5.4811" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 2049.305065][ T3773] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2049.313435][ T3773] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2049.646360][ T30] audit: type=1326 audit(1751520462.424:8833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20084 comm="syz.5.4811" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 2049.669522][ T30] audit: type=1326 audit(1751520462.424:8834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20084 comm="syz.5.4811" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 2049.692524][ T30] audit: type=1326 audit(1751520462.424:8835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20084 comm="syz.5.4811" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 2049.715257][ T30] audit: type=1326 audit(1751520462.434:8836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20084 comm="syz.5.4811" exe="/root/syz-executor" sig=0 arch=40000003 syscall=337 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 2049.738628][ T30] audit: type=1326 audit(1751520462.434:8837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20084 comm="syz.5.4811" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 2049.761281][ T30] audit: type=1326 audit(1751520462.444:8838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20084 comm="syz.5.4811" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 2049.784787][ T30] audit: type=1326 audit(1751520462.444:8839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20084 comm="syz.5.4811" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 2049.807557][ T30] audit: type=1326 audit(1751520462.444:8840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20084 comm="syz.5.4811" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 2049.982949][T13936] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2049.991183][T13936] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2050.847187][T14657] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 2051.061107][T14657] usb 6-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 2051.072217][T14657] usb 6-1: config 255 has 0 interfaces, different from the descriptor's value: 1 [ 2051.160942][T14657] usb 6-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 2051.170895][T14657] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2051.183444][T14657] usb 6-1: Product: syz [ 2051.188097][T14657] usb 6-1: Manufacturer: syz [ 2051.193067][T14657] usb 6-1: SerialNumber: syz [ 2051.641788][T20101] syzkaller0: entered promiscuous mode [ 2051.647782][T20101] syzkaller0: entered allmulticast mode [ 2051.714790][T16744] usb 6-1: USB disconnect, device number 27 [ 2052.090360][T20119] overlayfs: upper fs does not support file handles, falling back to index=off. [ 2054.199157][T20146] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4827'. [ 2054.253961][T20146] netlink: 'syz.5.4827': attribute type 10 has an invalid length. [ 2054.838503][T20155] overlayfs: upper fs does not support file handles, falling back to index=off. [ 2055.597413][T14657] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 2055.805832][T14657] usb 8-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 2055.817229][T14657] usb 8-1: config 255 has 0 interfaces, different from the descriptor's value: 1 [ 2055.888016][T14657] usb 8-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 2055.897904][T14657] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2055.906261][T14657] usb 8-1: Product: syz [ 2055.911209][T14657] usb 8-1: Manufacturer: syz [ 2055.916156][T14657] usb 8-1: SerialNumber: syz [ 2056.127329][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 2056.127493][ T30] audit: type=1326 audit(1751520469.334:8871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20167 comm="syz.0.4840" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85539 code=0x7ffc0000 [ 2056.501083][T14657] usb 8-1: USB disconnect, device number 30 [ 2056.777602][ T30] audit: type=1326 audit(1751520469.374:8872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20167 comm="syz.0.4840" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f85539 code=0x7ffc0000 [ 2056.802440][ T30] audit: type=1326 audit(1751520469.374:8873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20167 comm="syz.0.4840" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85539 code=0x7ffc0000 [ 2056.825320][ T30] audit: type=1326 audit(1751520469.374:8874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20167 comm="syz.0.4840" exe="/root/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf7f85539 code=0x7ffc0000 [ 2056.848071][ T30] audit: type=1326 audit(1751520469.374:8875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20167 comm="syz.0.4840" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85539 code=0x7ffc0000 [ 2056.870752][ T30] audit: type=1326 audit(1751520469.384:8876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20167 comm="syz.0.4840" exe="/root/syz-executor" sig=0 arch=40000003 syscall=337 compat=1 ip=0xf7f85539 code=0x7ffc0000 [ 2056.893493][ T30] audit: type=1326 audit(1751520469.384:8877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20167 comm="syz.0.4840" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85539 code=0x7ffc0000 [ 2056.920809][ T30] audit: type=1326 audit(1751520469.384:8878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20167 comm="syz.0.4840" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7f85539 code=0x7ffc0000 [ 2056.947373][ T30] audit: type=1326 audit(1751520469.384:8879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20167 comm="syz.0.4840" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85539 code=0x7ffc0000 [ 2056.970085][ T30] audit: type=1326 audit(1751520469.384:8880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20167 comm="syz.0.4840" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f85539 code=0x7ffc0000 [ 2057.589084][T20184] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4844'. [ 2057.659079][T20184] netlink: 'syz.2.4844': attribute type 10 has an invalid length. [ 2057.832962][T20188] binder: 20185:20188 ioctl c0306201 0 returned -14 [ 2060.345333][T16744] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 2060.347149][T20218] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4859'. [ 2060.362966][T20218] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4859'. [ 2060.548042][T16744] usb 1-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 2060.558883][T16744] usb 1-1: config 255 has 0 interfaces, different from the descriptor's value: 1 [ 2060.600921][T16744] usb 1-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 2060.610574][T16744] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2060.619313][T16744] usb 1-1: Product: syz [ 2060.623798][T16744] usb 1-1: Manufacturer: syz [ 2060.628966][T16744] usb 1-1: SerialNumber: syz [ 2060.852357][T20224] binder: 20222:20224 ioctl c0306201 0 returned -14 [ 2060.882177][T20213] mac80211_hwsim hwsim65 syzkaller0: entered promiscuous mode [ 2060.890277][T20213] mac80211_hwsim hwsim65 syzkaller0: entered allmulticast mode [ 2060.973155][ T9419] usb 1-1: USB disconnect, device number 41 [ 2061.365964][T20233] overlayfs: missing 'lowerdir' [ 2061.507446][T16744] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 2061.723349][T16744] usb 3-1: Using ep0 maxpacket: 8 [ 2061.779183][T16744] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 2061.788105][T16744] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2061.799412][T16744] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2061.809770][T16744] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2061.821877][T16744] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2061.836071][T16744] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2061.845699][T16744] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2062.237573][T16744] usb 3-1: usb_control_msg returned -32 [ 2062.243768][T16744] usbtmc 3-1:16.0: can't read capabilities [ 2062.402581][ T30] kauditd_printk_skb: 145 callbacks suppressed [ 2062.402666][ T30] audit: type=1326 audit(1751520475.614:9026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20242 comm="syz.7.4871" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 2062.678322][ T9] kworker/0:0 (9) used greatest stack depth: 3928 bytes left [ 2063.124431][ T30] audit: type=1326 audit(1751520475.654:9027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20242 comm="syz.7.4871" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 2063.149472][ T30] audit: type=1326 audit(1751520475.664:9028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20242 comm="syz.7.4871" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 2063.173213][ T30] audit: type=1326 audit(1751520475.664:9029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20242 comm="syz.7.4871" exe="/root/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 2063.196013][ T30] audit: type=1326 audit(1751520475.664:9030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20242 comm="syz.7.4871" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 2063.219003][ T30] audit: type=1326 audit(1751520475.674:9031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20242 comm="syz.7.4871" exe="/root/syz-executor" sig=0 arch=40000003 syscall=337 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 2063.241878][ T30] audit: type=1326 audit(1751520475.674:9032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20242 comm="syz.7.4871" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 2063.266362][ T30] audit: type=1326 audit(1751520475.684:9033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20242 comm="syz.7.4871" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 2063.290944][ T30] audit: type=1326 audit(1751520475.684:9034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20242 comm="syz.7.4871" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 2063.313716][ T30] audit: type=1326 audit(1751520475.694:9035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20242 comm="syz.7.4871" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 2064.156465][T20260] binder: 20258:20260 ioctl c0306201 0 returned -14 [ 2064.560127][T16744] usb 3-1: USB disconnect, device number 25 [ 2064.878416][T20270] overlayfs: missing 'lowerdir' [ 2064.938504][T10239] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 2065.133161][T10239] usb 8-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 2065.144240][T10239] usb 8-1: config 255 has 0 interfaces, different from the descriptor's value: 1 [ 2065.237500][T10239] usb 8-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 2065.247252][T10239] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2065.255594][T10239] usb 8-1: Product: syz [ 2065.260621][T10239] usb 8-1: Manufacturer: syz [ 2065.265599][T10239] usb 8-1: SerialNumber: syz [ 2065.518834][ T9419] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 2065.565111][T10239] usb 8-1: USB disconnect, device number 31 [ 2065.709720][ T9419] usb 6-1: Using ep0 maxpacket: 8 [ 2065.782729][ T9419] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 2065.791925][ T9419] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2065.802483][ T9419] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2065.812839][ T9419] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 2065.823205][ T9419] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 2065.833504][ T9419] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2065.847340][ T9419] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2065.856760][ T9419] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2066.347374][ T9419] usbtmc 6-1:16.0: probe with driver usbtmc failed with error -22 [ 2066.394132][T14657] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 2066.630421][T14657] usb 1-1: Using ep0 maxpacket: 8 [ 2066.670180][T14657] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 2066.679292][T14657] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2066.689741][T14657] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2066.700553][T14657] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2066.711181][T14657] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2066.724776][T14657] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2066.734428][T14657] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2067.488269][T10239] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 2067.649800][T10239] usb 8-1: Using ep0 maxpacket: 16 [ 2067.684612][T10239] usb 8-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 2067.694003][T10239] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2067.704762][T10239] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2067.753396][T10239] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2067.765103][T10239] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2067.774675][T10239] usb 8-1: Product: syz [ 2067.781925][T10239] usb 8-1: Manufacturer: syz [ 2067.789795][T10239] usb 8-1: SerialNumber: syz [ 2068.259829][T20304] overlayfs: upper fs does not support file handles, falling back to index=off. [ 2068.274674][T10239] usb 8-1: 0:2 : does not exist [ 2068.560155][T16744] usb 6-1: USB disconnect, device number 28 [ 2068.892134][T20308] overlayfs: missing 'lowerdir' [ 2069.168488][T10239] usb 8-1: USB disconnect, device number 32 [ 2069.284051][T14657] usb 1-1: USB disconnect, device number 42 [ 2069.589976][ T30] kauditd_printk_skb: 155 callbacks suppressed [ 2069.590073][ T30] audit: type=1326 audit(1751520482.804:9191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20309 comm="syz.2.4898" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 2069.829660][ T30] audit: type=1326 audit(1751520482.844:9192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20309 comm="syz.2.4898" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 2069.852932][ T30] audit: type=1326 audit(1751520482.844:9193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20309 comm="syz.2.4898" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 2069.875240][ C1] vkms_vblank_simulate: vblank timer overrun [ 2069.882220][ T30] audit: type=1326 audit(1751520482.844:9194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20309 comm="syz.2.4898" exe="/root/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 2069.904932][ T30] audit: type=1326 audit(1751520482.844:9195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20309 comm="syz.2.4898" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 2069.927233][ C1] vkms_vblank_simulate: vblank timer overrun [ 2069.933866][ T30] audit: type=1326 audit(1751520482.844:9196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20309 comm="syz.2.4898" exe="/root/syz-executor" sig=0 arch=40000003 syscall=337 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 2069.956320][ C1] vkms_vblank_simulate: vblank timer overrun [ 2069.963125][ T30] audit: type=1326 audit(1751520482.844:9197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20309 comm="syz.2.4898" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 2069.985998][ T30] audit: type=1326 audit(1751520482.854:9198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20309 comm="syz.2.4898" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 2070.008382][ C1] vkms_vblank_simulate: vblank timer overrun [ 2070.015113][ T30] audit: type=1326 audit(1751520482.854:9199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20309 comm="syz.2.4898" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 2070.037851][ T30] audit: type=1326 audit(1751520482.854:9200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20309 comm="syz.2.4898" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 2070.060157][ C1] vkms_vblank_simulate: vblank timer overrun [ 2071.447378][T14657] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 2071.537516][ T9419] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 2071.646445][T14657] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2071.658442][T14657] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2071.668807][T14657] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 2071.678466][T14657] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2071.707309][T20339] overlayfs: missing 'lowerdir' [ 2071.721888][T14657] usb 1-1: config 0 descriptor?? [ 2071.728497][ T9419] usb 3-1: Using ep0 maxpacket: 8 [ 2071.740594][T10239] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 2071.753407][ T9419] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 2071.762261][ T9419] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2071.772669][ T9419] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2071.783581][ T9419] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 2071.794020][ T9419] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 2071.804390][ T9419] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2071.818358][ T9419] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2071.827979][ T9419] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2071.899542][ T9419] usbtmc 3-1:16.0: probe with driver usbtmc failed with error -22 [ 2071.937218][T10239] usb 6-1: Using ep0 maxpacket: 8 [ 2071.991406][T10239] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 2072.000698][T10239] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2072.010932][T10239] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2072.021515][T10239] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2072.031863][T10239] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2072.045385][T10239] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2072.056812][T10239] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2072.329833][T20328] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4906'. [ 2072.339654][T20328] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4906'. [ 2072.387211][T10239] usb 6-1: usb_control_msg returned -32 [ 2072.393325][T10239] usbtmc 6-1:16.0: can't read capabilities [ 2072.689002][T14657] usbhid 1-1:0.0: can't add hid device: -71 [ 2072.695770][T14657] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 2073.023023][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 2073.030134][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 2073.527766][T14657] usb 1-1: USB disconnect, device number 43 [ 2073.676666][T20349] overlayfs: upper fs does not support file handles, falling back to index=off. [ 2074.292119][T10239] usb 3-1: USB disconnect, device number 26 [ 2074.708789][T14657] usb 6-1: USB disconnect, device number 29 [ 2075.216317][T20369] overlayfs: missing 'lowerdir' [ 2075.593450][ T30] kauditd_printk_skb: 247 callbacks suppressed [ 2075.593536][ T30] audit: type=1326 audit(1751520488.804:9448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20372 comm="syz.1.4924" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 2075.939135][T14657] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 2076.239130][T14657] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2076.251415][T14657] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2076.262698][T14657] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 2076.272914][T14657] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2076.365106][ T30] audit: type=1326 audit(1751520488.844:9449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20372 comm="syz.1.4924" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 2076.388164][ T30] audit: type=1326 audit(1751520488.844:9450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20372 comm="syz.1.4924" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 2076.411163][ T30] audit: type=1326 audit(1751520488.844:9451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20372 comm="syz.1.4924" exe="/root/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 2076.433869][ T30] audit: type=1326 audit(1751520488.854:9452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20372 comm="syz.1.4924" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 2076.456693][ T30] audit: type=1326 audit(1751520488.854:9453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20372 comm="syz.1.4924" exe="/root/syz-executor" sig=0 arch=40000003 syscall=337 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 2076.481351][ T30] audit: type=1326 audit(1751520488.854:9454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20372 comm="syz.1.4924" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 2076.504830][ T30] audit: type=1326 audit(1751520488.864:9455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20372 comm="syz.1.4924" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 2076.527577][ T30] audit: type=1326 audit(1751520488.864:9456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20372 comm="syz.1.4924" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 2076.550846][ T30] audit: type=1326 audit(1751520488.864:9457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20372 comm="syz.1.4924" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 2076.553310][T14657] usb 6-1: config 0 descriptor?? [ 2076.573153][ C1] vkms_vblank_simulate: vblank timer overrun [ 2077.054519][T20375] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4925'. [ 2077.064361][T20375] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4925'. [ 2077.205939][ T9419] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 2077.337625][T10239] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 2077.408718][ T9419] usb 8-1: Using ep0 maxpacket: 8 [ 2077.462173][ T9419] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 2077.471166][ T9419] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2077.481832][ T9419] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2077.492392][ T9419] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2077.502999][ T9419] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2077.517314][ T9419] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2077.526326][T10239] usb 2-1: Using ep0 maxpacket: 8 [ 2077.527277][ T9419] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2077.576563][T10239] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 2077.587431][T10239] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2077.598423][T10239] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2077.608805][T10239] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 2077.619226][T10239] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 2077.629541][T10239] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2077.643082][T10239] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2077.652764][T10239] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2077.653389][T14657] usbhid 6-1:0.0: can't add hid device: -71 [ 2077.668780][T14657] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2077.741919][T14657] usb 6-1: USB disconnect, device number 30 [ 2077.819561][T10239] usbtmc 2-1:16.0: probe with driver usbtmc failed with error -22 [ 2078.068691][ T9419] usb 8-1: usb_control_msg returned -32 [ 2078.074852][ T9419] usbtmc 8-1:16.0: can't read capabilities [ 2078.597520][T10239] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 2078.827778][T10239] usb 6-1: Using ep0 maxpacket: 8 [ 2078.852281][T10239] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 2078.861378][T10239] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2078.871808][T10239] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2078.882164][T10239] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2078.892684][T10239] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2078.906754][T10239] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2078.918350][T10239] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2079.003476][T20408] overlayfs: missing 'lowerdir' [ 2079.272273][T20410] loop2: detected capacity change from 0 to 1024 [ 2079.337290][T20410] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2079.533321][T20410] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.4938: Allocating blocks 449-513 which overlap fs metadata [ 2079.572948][T20410] EXT4-fs (loop2): pa ffff888123bc2380: logic 256, phys. 385, len 8 [ 2079.582110][T20410] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 2080.648673][ T9419] usb 8-1: USB disconnect, device number 33 [ 2080.708097][T18409] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2080.759219][T14657] usb 2-1: USB disconnect, device number 4 [ 2081.475319][T10239] usb 6-1: USB disconnect, device number 31 [ 2081.527578][T14657] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 2081.750023][T14657] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2081.762908][T14657] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2081.773419][T14657] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 2081.783095][T14657] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2081.880128][T14657] usb 8-1: config 0 descriptor?? [ 2082.365939][T20428] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4944'. [ 2082.375752][T20428] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4944'. [ 2082.433761][T20438] overlayfs: missing 'workdir' [ 2082.549932][ T30] kauditd_printk_skb: 211 callbacks suppressed [ 2082.550032][ T30] audit: type=1326 audit(1751520495.764:9669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20439 comm="syz.0.4950" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85539 code=0x7ffc0000 [ 2082.858295][ T30] audit: type=1326 audit(1751520495.804:9670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20439 comm="syz.0.4950" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f85539 code=0x7ffc0000 [ 2082.881347][ T30] audit: type=1326 audit(1751520495.804:9671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20439 comm="syz.0.4950" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85539 code=0x7ffc0000 [ 2082.904344][ T30] audit: type=1326 audit(1751520495.814:9672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20439 comm="syz.0.4950" exe="/root/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf7f85539 code=0x7ffc0000 [ 2082.928829][ T30] audit: type=1326 audit(1751520495.814:9673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20439 comm="syz.0.4950" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85539 code=0x7ffc0000 [ 2082.952404][ T30] audit: type=1326 audit(1751520495.824:9674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20439 comm="syz.0.4950" exe="/root/syz-executor" sig=0 arch=40000003 syscall=337 compat=1 ip=0xf7f85539 code=0x7ffc0000 [ 2082.975274][ T30] audit: type=1326 audit(1751520495.824:9675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20439 comm="syz.0.4950" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85539 code=0x7ffc0000 [ 2082.998018][ T30] audit: type=1326 audit(1751520495.824:9676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20439 comm="syz.0.4950" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7f85539 code=0x7ffc0000 [ 2083.022372][ T30] audit: type=1326 audit(1751520495.834:9677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20439 comm="syz.0.4950" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85539 code=0x7ffc0000 [ 2083.045687][ T30] audit: type=1326 audit(1751520495.844:9678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20439 comm="syz.0.4950" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f85539 code=0x7ffc0000 [ 2083.588122][T14657] usbhid 8-1:0.0: can't add hid device: -71 [ 2083.594851][T14657] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 2083.620222][T20447] 9pnet_fd: Insufficient options for proto=fd [ 2083.660303][T14657] usb 8-1: USB disconnect, device number 34 [ 2084.207934][T14657] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 2084.209734][T10239] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 2084.407582][T10239] usb 2-1: Using ep0 maxpacket: 32 [ 2084.419004][T14657] usb 3-1: Using ep0 maxpacket: 8 [ 2084.440570][T10239] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2084.453916][T10239] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2084.459273][T14657] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 2084.476024][T14657] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2084.486328][T14657] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2084.496577][T14657] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2084.507131][T14657] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2084.520681][T14657] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2084.530352][T14657] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2084.547210][T10239] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2084.558764][T10239] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2084.568079][T10239] usb 2-1: Product: syz [ 2084.572527][T10239] usb 2-1: Manufacturer: syz [ 2084.577625][T10239] usb 2-1: SerialNumber: syz [ 2084.652104][T10239] usb 2-1: config 0 descriptor?? [ 2084.671070][T10239] hub 2-1:0.0: bad descriptor, ignoring hub [ 2084.677646][T10239] hub 2-1:0.0: probe with driver hub failed with error -5 [ 2084.973057][T14657] usb 3-1: usb_control_msg returned -32 [ 2084.979694][T14657] usbtmc 3-1:16.0: can't read capabilities [ 2085.078638][T10239] usb 2-1: USB disconnect, device number 5 [ 2085.241309][ T9419] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 2085.409028][ T9419] usb 8-1: Using ep0 maxpacket: 8 [ 2085.417631][T10239] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 2085.431052][ T9419] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 2085.440760][ T9419] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2085.452784][ T9419] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2085.463264][ T9419] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2085.473699][ T9419] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2085.487597][ T9419] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2085.497150][ T9419] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2085.625907][T10239] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2085.637090][T10239] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2085.717180][T10239] usb 2-1: string descriptor 0 read error: -22 [ 2085.724532][T10239] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2085.734263][T10239] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2085.802301][T10239] usb 2-1: config 0 descriptor?? [ 2086.278513][T20474] overlayfs: missing 'workdir' [ 2086.648170][T10239] hub 2-1:0.0: bad descriptor, ignoring hub [ 2086.654502][T10239] hub 2-1:0.0: probe with driver hub failed with error -5 [ 2086.704565][T10239] usb 2-1: USB disconnect, device number 6 [ 2087.200706][ T9419] usb 3-1: USB disconnect, device number 27 [ 2087.419996][T20482] 9pnet_fd: Insufficient options for proto=fd [ 2087.737205][ T9419] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 2087.935510][ T9419] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2087.947475][ T9419] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2087.957816][ T9419] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 2087.967468][ T9419] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2088.094164][ T9419] usb 3-1: config 0 descriptor?? [ 2088.266279][T14657] usb 8-1: USB disconnect, device number 35 [ 2088.609021][T20486] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4967'. [ 2088.618719][T20486] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4967'. [ 2088.997309][ T30] kauditd_printk_skb: 206 callbacks suppressed [ 2088.997464][ T30] audit: type=1326 audit(1751520502.204:9885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20500 comm="syz.7.4974" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 2089.293411][ T30] audit: type=1326 audit(1751520502.244:9886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20500 comm="syz.7.4974" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 2089.316712][ T30] audit: type=1326 audit(1751520502.334:9887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20500 comm="syz.7.4974" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 2089.340235][ T30] audit: type=1326 audit(1751520502.344:9888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20500 comm="syz.7.4974" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 2089.363469][ T30] audit: type=1326 audit(1751520502.344:9889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20500 comm="syz.7.4974" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 2089.386588][ T30] audit: type=1326 audit(1751520502.374:9890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20500 comm="syz.7.4974" exe="/root/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 2089.409978][ T30] audit: type=1326 audit(1751520502.374:9891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20500 comm="syz.7.4974" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 2089.433169][ T30] audit: type=1326 audit(1751520502.374:9892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20500 comm="syz.7.4974" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 2089.456241][ T30] audit: type=1326 audit(1751520502.394:9893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20500 comm="syz.7.4974" exe="/root/syz-executor" sig=0 arch=40000003 syscall=337 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 2089.479356][ T30] audit: type=1326 audit(1751520502.394:9894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20500 comm="syz.7.4974" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 2090.419533][T20506] overlayfs: failed to resolve './file1': -2 [ 2090.687617][ T9419] usbhid 3-1:0.0: can't add hid device: -71 [ 2090.694410][ T9419] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2090.749540][ T9419] usb 3-1: USB disconnect, device number 28 [ 2091.047303][ T9922] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 2091.091200][T20514] overlayfs: missing 'workdir' [ 2091.169450][T20517] 9pnet_fd: Insufficient options for proto=fd [ 2091.219659][ T9922] usb 2-1: Using ep0 maxpacket: 8 [ 2091.260410][ T9922] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 2091.269588][ T9922] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2091.279880][ T9922] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2091.290329][ T9922] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2091.300878][ T9922] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2091.314486][ T9922] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2091.324129][ T9922] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2091.599261][ T9922] usb 2-1: usb_control_msg returned -32 [ 2091.605268][ T9922] usbtmc 2-1:16.0: can't read capabilities [ 2092.761069][T20539] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 2092.768045][T20539] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2092.776484][T20539] vhci_hcd vhci_hcd.0: Device attached [ 2093.038565][T10239] usb 43-1: new low-speed USB device number 5 using vhci_hcd [ 2093.057169][ T9922] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 2093.217629][ T9419] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 2093.250146][ T9922] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 2093.258684][ T9922] usb 6-1: can't read configurations, error -61 [ 2093.398017][ T9419] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2093.409905][ T9419] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2093.420420][ T9419] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 2093.430199][ T9419] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2093.447729][ T9922] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 2093.499155][ T9419] usb 8-1: config 0 descriptor?? [ 2093.550108][T20555] overlayfs: missing 'lowerdir' [ 2093.658712][ T9922] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 2093.667380][ T9922] usb 6-1: can't read configurations, error -61 [ 2093.675335][ T9922] usb usb6-port1: attempt power cycle [ 2093.933518][T20548] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4992'. [ 2093.943423][T20548] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4992'. [ 2094.041853][ T9922] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 2094.081351][T14657] usb 2-1: USB disconnect, device number 7 [ 2094.161341][ T9922] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 2094.170265][ T9922] usb 6-1: can't read configurations, error -61 [ 2094.407309][ T9922] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 2094.457598][ T9419] usbhid 8-1:0.0: can't add hid device: -71 [ 2094.464451][ T9419] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 2094.511920][ T9419] usb 8-1: USB disconnect, device number 36 [ 2094.543653][ T9922] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 2094.551959][ T9922] usb 6-1: can't read configurations, error -61 [ 2094.582510][ T9922] usb usb6-port1: unable to enumerate USB device [ 2095.781598][T20541] vhci_hcd: connection reset by peer [ 2095.790352][T10063] vhci_hcd: stop threads [ 2095.795121][T10063] vhci_hcd: release socket [ 2095.802945][T10063] vhci_hcd: disconnect device [ 2096.142278][T20589] overlayfs: missing 'lowerdir' [ 2096.247676][T16744] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 2096.449005][T16744] usb 8-1: Using ep0 maxpacket: 8 [ 2096.470587][T16744] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 2096.479424][T16744] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2096.489861][T16744] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2096.500191][T16744] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2096.510533][T16744] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2096.524041][T16744] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2096.535306][T16744] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2096.899828][T16744] usb 8-1: usb_control_msg returned -32 [ 2096.905943][T16744] usbtmc 8-1:16.0: can't read capabilities [ 2097.167275][T17181] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 2097.172424][T20602] binder: 20601:20602 ioctl c0306201 0 returned -14 [ 2097.328658][ T9419] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 2097.357484][T17181] usb 2-1: Using ep0 maxpacket: 16 [ 2097.379176][T17181] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 2097.388866][T17181] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2097.399561][T17181] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2097.463999][T17181] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2097.473910][T17181] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2097.482439][T17181] usb 2-1: Product: syz [ 2097.487167][T17181] usb 2-1: Manufacturer: syz [ 2097.492064][T17181] usb 2-1: SerialNumber: syz [ 2097.519837][ T9419] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2097.531509][ T9419] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2097.542264][ T9419] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 2097.553122][ T9419] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2097.638446][ T9419] usb 6-1: config 0 descriptor?? [ 2097.929318][T17181] usb 2-1: 0:2 : does not exist [ 2098.091039][T20598] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5013'. [ 2098.101101][T20598] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5013'. [ 2098.187297][T10239] vhci_hcd: vhci_device speed not set [ 2098.607789][T17181] usb 2-1: USB disconnect, device number 8 [ 2098.790425][ T9419] usbhid 6-1:0.0: can't add hid device: -71 [ 2098.799422][ T9419] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2098.845656][ T9419] usb 6-1: USB disconnect, device number 36 [ 2099.159890][ T9419] usb 8-1: USB disconnect, device number 37 [ 2099.397963][T20621] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5023'. [ 2099.407602][T20621] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5023'. [ 2099.790079][T20625] overlayfs: missing 'lowerdir' [ 2100.110558][ T9419] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 2100.297610][ T9419] usb 8-1: Using ep0 maxpacket: 8 [ 2100.336117][ T9419] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 2100.345369][ T9419] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2100.355832][ T9419] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2100.366159][ T9419] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2100.376655][ T9419] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2100.390487][ T9419] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2100.400486][ T9419] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2100.582377][ T9922] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 2100.747040][ T9922] usb 1-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 2100.758579][ T9922] usb 1-1: config 255 has 0 interfaces, different from the descriptor's value: 1 [ 2100.787439][ T9419] usb 8-1: usb_control_msg returned -32 [ 2100.793758][ T9419] usbtmc 8-1:16.0: can't read capabilities [ 2100.826394][ T9922] usb 1-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 2100.836169][ T9922] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2100.844742][ T9922] usb 1-1: Product: syz [ 2100.849497][ T9922] usb 1-1: Manufacturer: syz [ 2100.854400][ T9922] usb 1-1: SerialNumber: syz [ 2101.127408][ T9419] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 2101.181128][T14657] usb 1-1: USB disconnect, device number 44 [ 2101.267170][ T9922] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 2101.297713][ T9419] usb 6-1: Using ep0 maxpacket: 8 [ 2101.328279][ T9419] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 2101.337336][ T9419] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2101.347682][ T9419] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2101.358059][ T9419] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2101.368537][ T9419] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2101.382234][ T9419] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2101.392445][ T9419] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2101.477260][ T9922] usb 2-1: Using ep0 maxpacket: 16 [ 2101.499524][ T9922] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 2101.508904][ T9922] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2101.519642][ T9922] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2101.561756][ T9922] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2101.571946][ T9922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2101.580627][ T9922] usb 2-1: Product: syz [ 2101.585318][ T9922] usb 2-1: Manufacturer: syz [ 2101.590747][ T9922] usb 2-1: SerialNumber: syz [ 2101.632952][ T9419] usb 6-1: usb_control_msg returned -32 [ 2101.639583][ T9419] usbtmc 6-1:16.0: can't read capabilities [ 2101.652942][T10239] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 2101.852207][T10239] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2101.865765][T10239] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2101.876696][T10239] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 2101.886340][T10239] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2101.906669][T10239] usb 3-1: config 0 descriptor?? [ 2102.108031][ T9922] usb 2-1: 0:2 : does not exist [ 2102.339897][T17181] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 2102.372132][T20648] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5037'. [ 2102.382519][T20648] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5037'. [ 2102.551035][T17181] usb 1-1: Using ep0 maxpacket: 8 [ 2102.582812][T17181] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 2102.593052][T17181] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2102.603685][T17181] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2102.614191][T17181] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2102.624888][T17181] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2102.638831][T17181] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2102.648599][T17181] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2102.783538][T10239] usbhid 3-1:0.0: can't add hid device: -71 [ 2102.791273][T10239] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2102.823063][ T9922] usb 2-1: USB disconnect, device number 9 [ 2102.824882][T10239] usb 3-1: USB disconnect, device number 29 [ 2102.966263][T17181] usb 1-1: usb_control_msg returned -32 [ 2102.972571][T17181] usbtmc 1-1:16.0: can't read capabilities [ 2103.015480][ T9419] usb 8-1: USB disconnect, device number 38 [ 2103.155880][T20655] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5039'. [ 2103.165374][T20655] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5039'. [ 2103.480116][T20658] fuse: Unknown parameter 'group_id00000000000000000000' [ 2103.715633][T20662] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2103.725353][T20662] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2104.119241][ T9419] usb 6-1: USB disconnect, device number 37 [ 2105.253516][T10239] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 2105.302732][ T9419] usb 1-1: USB disconnect, device number 45 [ 2105.449551][T10239] usb 3-1: config 0 has no interfaces? [ 2105.455650][T10239] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2105.465453][T10239] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2105.505326][T10239] usb 3-1: config 0 descriptor?? [ 2105.599169][T20681] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5050'. [ 2105.609430][T17181] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 2105.668157][T20682] tipc: Started in network mode [ 2105.673425][T20682] tipc: Node identity fec57b26c22f, cluster identity 4711 [ 2105.681803][T20682] tipc: Enabled bearer , priority 0 [ 2105.729065][T20673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2105.742486][T20673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2105.783558][T20673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2105.793201][T20673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2105.805401][T20678] tipc: Resetting bearer [ 2105.831360][T17181] usb 2-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 2105.842243][T17181] usb 2-1: config 255 has 0 interfaces, different from the descriptor's value: 1 [ 2105.883699][T10239] usb 3-1: USB disconnect, device number 30 [ 2105.919154][T17181] usb 2-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 2105.930633][T17181] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2105.941220][T17181] usb 2-1: Product: syz [ 2105.945676][T17181] usb 2-1: Manufacturer: syz [ 2105.953381][T17181] usb 2-1: SerialNumber: syz [ 2105.985362][T20678] tipc: Disabling bearer [ 2106.357942][ T9922] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 2106.367546][ T9419] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 2106.458421][T20675] syzkaller0: entered promiscuous mode [ 2106.467002][T20675] syzkaller0: entered allmulticast mode [ 2106.477137][T10239] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 2106.519442][T14657] usb 2-1: USB disconnect, device number 10 [ 2106.537386][ T9419] usb 8-1: Using ep0 maxpacket: 16 [ 2106.557307][ T9922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2106.569004][ T9922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2106.579485][ T9922] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 2106.589194][ T9922] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2106.627356][ T9419] usb 8-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 2106.636554][ T9419] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2106.647734][ T9419] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2106.707795][ T9922] usb 1-1: config 0 descriptor?? [ 2106.781842][ T9419] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2106.782196][T10239] usb 3-1: Using ep0 maxpacket: 16 [ 2106.791632][ T9419] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2106.805596][ T9419] usb 8-1: Product: syz [ 2106.810372][ T9419] usb 8-1: Manufacturer: syz [ 2106.815466][ T9419] usb 8-1: SerialNumber: syz [ 2106.857356][T10239] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2106.868580][T10239] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2106.907175][T10239] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2106.916726][T10239] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2106.925515][T10239] usb 3-1: Product: syz [ 2106.930120][T10239] usb 3-1: Manufacturer: syz [ 2106.935006][T10239] usb 3-1: SerialNumber: syz [ 2107.185352][T20685] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5052'. [ 2107.195311][T20685] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5052'. [ 2107.269899][ T9419] usb 8-1: 0:2 : does not exist [ 2107.469738][T20694] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2107.479877][T20694] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2107.549129][ T9922] usbhid 1-1:0.0: can't add hid device: -71 [ 2107.556618][ T9922] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 2107.580363][ T9922] usb 1-1: USB disconnect, device number 46 [ 2107.728519][ T9419] usb 8-1: USB disconnect, device number 39 [ 2107.734992][T10239] usb 3-1: 0:2 : does not exist [ 2107.742232][T10239] usb 3-1: unit 5 not found! [ 2107.810064][T10239] usb 3-1: USB disconnect, device number 31 [ 2108.838434][ T9419] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 2109.027518][ T9419] usb 1-1: Using ep0 maxpacket: 8 [ 2109.062678][ T9419] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 2109.071948][ T9419] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2109.082302][ T9419] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2109.092538][ T9419] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2109.102930][ T9419] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2109.117517][ T9419] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2109.127151][ T9419] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2109.140661][T20710] netlink: 'syz.2.5062': attribute type 10 has an invalid length. [ 2109.569616][ T9419] usb 1-1: usb_control_msg returned -32 [ 2109.575829][ T9419] usbtmc 1-1:16.0: can't read capabilities [ 2109.800960][T20716] loop1: detected capacity change from 0 to 4096 [ 2110.118299][T20724] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2110.121706][T20716] ntfs3(loop1): failed to convert "0000" to iso8859-6 [ 2110.128014][T20724] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2110.146526][T20716] ntfs3(loop1): failed to convert "0030" to iso8859-6 [ 2110.157309][T20716] ntfs3(loop1): failed to convert name for inode 1e. [ 2110.164347][T20716] ntfs3(loop1): failed to convert "0032" to iso8859-6 [ 2110.182548][T20716] ntfs3(loop1): ino=1f, mi_enum_attr [ 2110.188886][T20716] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 2110.200954][T20716] ntfs3(loop1): failed to convert "0033" to iso8859-6 [ 2110.208686][T20716] ntfs3(loop1): ino=1f, mi_enum_attr [ 2110.237377][T17181] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 2110.312019][ T9419] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 2110.487827][ T9419] usb 6-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 2110.488992][T17181] usb 8-1: config 0 has no interfaces? [ 2110.498817][ T9419] usb 6-1: config 255 has 0 interfaces, different from the descriptor's value: 1 [ 2110.504393][T17181] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2110.524027][T17181] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2110.544462][ T9419] usb 6-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 2110.554705][ T9419] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2110.563284][ T9419] usb 6-1: Product: syz [ 2110.568035][ T9419] usb 6-1: Manufacturer: syz [ 2110.572948][ T9419] usb 6-1: SerialNumber: syz [ 2110.610795][T17181] usb 8-1: config 0 descriptor?? [ 2110.893352][T20719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2110.906369][T20719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2110.926621][T20719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2110.936340][T20719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2111.061115][T20722] syzkaller0: entered promiscuous mode [ 2111.067108][T20722] syzkaller0: entered allmulticast mode [ 2111.090554][T17181] usb 8-1: USB disconnect, device number 40 [ 2111.104336][ T9419] usb 6-1: USB disconnect, device number 38 [ 2111.579457][T10239] usb 1-1: USB disconnect, device number 47 [ 2111.618987][ T9922] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 2111.637937][T17181] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 2111.657637][ T9419] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 2111.787272][T17181] usb 8-1: Using ep0 maxpacket: 16 [ 2111.807699][T17181] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2111.818592][T17181] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2111.837532][ T9419] usb 2-1: Using ep0 maxpacket: 16 [ 2111.865818][T17181] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2111.870702][ T9922] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2111.875449][T17181] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2111.886623][ T9922] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2111.894731][T17181] usb 8-1: Product: syz [ 2111.904902][ T9922] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 2111.909651][T17181] usb 8-1: Manufacturer: syz [ 2111.918513][ T9922] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2111.923052][T17181] usb 8-1: SerialNumber: syz [ 2111.957205][ T9419] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 2111.966402][ T9419] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2111.977175][ T9419] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2112.027320][ T9419] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2112.037087][ T9419] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2112.045399][ T9419] usb 2-1: Product: syz [ 2112.050066][ T9419] usb 2-1: Manufacturer: syz [ 2112.054958][ T9419] usb 2-1: SerialNumber: syz [ 2112.092985][ T9922] usb 3-1: config 0 descriptor?? [ 2112.275046][T17181] usb 8-1: 0:2 : does not exist [ 2112.280522][T17181] usb 8-1: unit 5 not found! [ 2112.417269][T17181] usb 8-1: USB disconnect, device number 41 [ 2112.562522][T20731] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5070'. [ 2112.572595][T20731] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5070'. [ 2112.581399][ T9419] usb 2-1: 0:2 : does not exist [ 2113.045438][ T9922] usbhid 3-1:0.0: can't add hid device: -71 [ 2113.052422][ T9922] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2113.118890][ T9922] usb 3-1: USB disconnect, device number 32 [ 2113.138619][ T9419] usb 2-1: USB disconnect, device number 11 [ 2113.189164][T20744] loop5: detected capacity change from 0 to 1024 [ 2113.299261][T20744] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2113.409919][ T30] kauditd_printk_skb: 47 callbacks suppressed [ 2113.409998][ T30] audit: type=1800 audit(1751520526.624:9942): pid=20744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.5075" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 2113.546262][T20744] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4113: comm syz.5.5075: Allocating blocks 449-513 which overlap fs metadata [ 2113.612639][T20744] EXT4-fs (loop5): pa ffff888123bc2380: logic 256, phys. 385, len 8 [ 2113.621604][T20744] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 2114.067621][ T9419] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 2114.070067][T18311] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2114.289474][ T9419] usb 8-1: Using ep0 maxpacket: 8 [ 2114.357847][ T9419] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 2114.366423][ T9419] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2114.376729][ T9419] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2114.387174][ T9419] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2114.398577][ T9419] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2114.412717][ T9419] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2114.412881][ T9419] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2114.598418][T20760] loop2: detected capacity change from 0 to 4096 [ 2114.673619][T20767] overlayfs: failed to resolve './file0': -2 [ 2114.757587][ T9419] usb 8-1: usb_control_msg returned -32 [ 2114.763783][ T9419] usbtmc 8-1:16.0: can't read capabilities [ 2114.896429][T20763] loop5: detected capacity change from 0 to 4096 [ 2115.080395][T20760] ntfs3(loop2): failed to convert "0000" to iso8859-6 [ 2115.092915][T20760] ntfs3(loop2): failed to convert "0030" to iso8859-6 [ 2115.120447][T20760] ntfs3(loop2): failed to convert name for inode 1e. [ 2115.127928][T20760] ntfs3(loop2): failed to convert "0032" to iso8859-6 [ 2115.139408][T20760] ntfs3(loop2): ino=1f, mi_enum_attr [ 2115.145271][T20760] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 2115.154396][T20772] ntfs3(loop2): failed to convert "0000" to iso8859-6 [ 2115.162001][T20772] ntfs3(loop2): failed to convert "0030" to iso8859-6 [ 2115.169441][T20772] ntfs3(loop2): failed to convert name for inode 1e. [ 2115.176447][T20772] ntfs3(loop2): failed to convert "0032" to iso8859-6 [ 2115.216517][T20763] ntfs3(loop5): $Secure::$SDH is corrupted. [ 2115.223863][T20763] ntfs3(loop5): Failed to initialize $Secure (-22). [ 2116.207992][T17181] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 2116.387233][T17181] usb 1-1: Using ep0 maxpacket: 16 [ 2116.415054][T17181] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 2116.424679][T17181] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2116.435319][T17181] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2116.509247][T17181] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2116.519252][T17181] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2116.527838][T17181] usb 1-1: Product: syz [ 2116.532283][T17181] usb 1-1: Manufacturer: syz [ 2116.537366][T17181] usb 1-1: SerialNumber: syz [ 2116.545123][T10239] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 2116.718425][T10239] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2116.730382][T10239] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2116.740973][T10239] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 2116.750769][T10239] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2116.776641][T10239] usb 2-1: config 0 descriptor?? [ 2117.020620][ T9419] usb 8-1: USB disconnect, device number 42 [ 2117.044028][T17181] usb 1-1: 0:2 : does not exist [ 2117.281566][T20783] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5091'. [ 2117.291461][T20783] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5091'. [ 2117.550642][T20796] mac80211_hwsim hwsim69 syzkaller0: left promiscuous mode [ 2117.558851][T20796] mac80211_hwsim hwsim69 syzkaller0: left allmulticast mode [ 2117.577499][T17181] usb 1-1: USB disconnect, device number 48 [ 2117.949760][T10239] usbhid 2-1:0.0: can't add hid device: -71 [ 2117.956553][T10239] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2118.017312][T10239] usb 2-1: USB disconnect, device number 12 [ 2119.639770][T10239] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 2119.847289][T10239] usb 3-1: Using ep0 maxpacket: 8 [ 2119.872592][T10239] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 2119.882219][T10239] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2119.892509][T10239] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2119.902677][T10239] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2119.913232][T10239] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2119.926730][T10239] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2119.936376][T10239] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2119.947579][T17181] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 2120.152615][T17181] usb 2-1: Using ep0 maxpacket: 32 [ 2120.189628][T17181] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 2120.241008][T10239] usb 3-1: usb_control_msg returned -32 [ 2120.247556][T10239] usbtmc 3-1:16.0: can't read capabilities [ 2120.264520][T17181] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2120.274301][T17181] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2120.283117][T17181] usb 2-1: Product: syz [ 2120.287734][T17181] usb 2-1: Manufacturer: syz [ 2120.292654][T17181] usb 2-1: SerialNumber: syz [ 2120.300190][T16744] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 2120.394486][T17181] usb 2-1: config 0 descriptor?? [ 2120.403969][T20829] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 2120.457528][T17181] hub 2-1:0.0: bad descriptor, ignoring hub [ 2120.463924][T17181] hub 2-1:0.0: probe with driver hub failed with error -5 [ 2120.508278][T16744] usb 8-1: Using ep0 maxpacket: 16 [ 2120.529817][T16744] usb 8-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 2120.539110][T16744] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2120.549770][T16744] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2120.596384][T16744] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2120.606266][T16744] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2120.614795][T16744] usb 8-1: Product: syz [ 2120.619698][T16744] usb 8-1: Manufacturer: syz [ 2120.624604][T16744] usb 8-1: SerialNumber: syz [ 2120.798387][T17181] usb 2-1: USB disconnect, device number 13 [ 2120.887364][ T9419] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 2121.060753][T16744] usb 8-1: 0:2 : does not exist [ 2121.086379][ T9419] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2121.098415][ T9419] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2121.108806][ T9419] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 2121.118395][ T9419] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2121.138117][ T9419] usb 1-1: config 0 descriptor?? [ 2121.188437][ T9922] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 2121.373116][ T9922] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 2121.438134][ T9922] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2121.448479][ T9922] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2121.457624][ T9922] usb 2-1: Product: syz [ 2121.462269][ T9922] usb 2-1: Manufacturer: syz [ 2121.467517][ T9922] usb 2-1: SerialNumber: syz [ 2121.482387][ T9922] usb 2-1: config 0 descriptor?? [ 2121.494268][T20829] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 2121.514942][ T9922] hub 2-1:0.0: bad descriptor, ignoring hub [ 2121.521717][ T9922] hub 2-1:0.0: probe with driver hub failed with error -5 [ 2121.596461][T16744] usb 8-1: USB disconnect, device number 43 [ 2121.625450][T20840] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5116'. [ 2121.635429][T20840] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5116'. [ 2121.851467][ T9922] usb 2-1: USB disconnect, device number 14 [ 2122.041548][ T9419] usbhid 1-1:0.0: can't add hid device: -71 [ 2122.049169][ T9419] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 2122.094525][ T9419] usb 1-1: USB disconnect, device number 49 [ 2122.549179][ T9419] usb 3-1: USB disconnect, device number 33 [ 2123.017934][ T9922] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 2123.240832][ T9922] usb 2-1: Using ep0 maxpacket: 8 [ 2123.282611][ T9922] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 2123.291457][ T9922] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2123.301816][ T9922] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2123.312222][ T9922] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2123.322810][ T9922] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2123.336476][ T9922] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2123.344349][T20859] loop7: detected capacity change from 0 to 2048 [ 2123.347501][ T9922] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2123.395913][T20859] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024) [ 2123.563177][T20865] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2123.717863][ T9922] usb 2-1: usb_control_msg returned -32 [ 2123.723981][ T9922] usbtmc 2-1:16.0: can't read capabilities [ 2124.177981][T16744] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 2124.292282][T20878] loop7: detected capacity change from 0 to 1024 [ 2124.357226][T20878] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2124.357441][T16744] usb 1-1: Using ep0 maxpacket: 16 [ 2124.402877][T16744] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 2124.412600][T16744] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2124.423215][T16744] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2124.447435][T16744] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2124.457180][T16744] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2124.465512][T16744] usb 1-1: Product: syz [ 2124.470471][T16744] usb 1-1: Manufacturer: syz [ 2124.475364][T16744] usb 1-1: SerialNumber: syz [ 2124.527182][ T30] audit: type=1800 audit(1751520537.734:9943): pid=20878 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.5129" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 2124.712448][T20878] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4113: comm syz.7.5129: Allocating blocks 449-513 which overlap fs metadata [ 2124.770175][T20878] EXT4-fs (loop7): pa ffff8881246253f0: logic 256, phys. 385, len 8 [ 2124.779435][T20878] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 2124.912329][T16744] usb 1-1: 0:2 : does not exist [ 2125.107199][ T9922] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 2125.162560][T18271] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2125.280410][ T9922] usb 3-1: Using ep0 maxpacket: 8 [ 2125.311628][ T9922] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 2125.320548][ T9922] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2125.331076][ T9922] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2125.341478][ T9922] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2125.351976][ T9922] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2125.365491][ T9922] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2125.375559][ T9922] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2125.456337][T16744] usb 1-1: USB disconnect, device number 50 [ 2125.457677][ T9419] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 2125.645053][ T9419] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2125.657020][ T9419] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2125.668010][ T9419] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 2125.677534][ T9419] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2125.691185][ T9922] usb 3-1: usb_control_msg returned -32 [ 2125.697575][ T9922] usbtmc 3-1:16.0: can't read capabilities [ 2125.707788][ T9419] usb 6-1: config 0 descriptor?? [ 2125.966145][ T9922] usb 2-1: USB disconnect, device number 15 [ 2126.345828][ T9419] usbhid 6-1:0.0: can't add hid device: -71 [ 2126.352992][ T9419] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2126.397678][ T9419] usb 6-1: USB disconnect, device number 39 [ 2127.097943][T20903] loop7: detected capacity change from 0 to 2048 [ 2127.126672][T20903] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024) [ 2127.194601][T20909] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2127.345367][T20912] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5141'. [ 2127.397628][T20912] netlink: 'syz.1.5141': attribute type 10 has an invalid length. [ 2128.051439][ T9419] usb 3-1: USB disconnect, device number 34 [ 2128.714105][ T9419] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 2128.908001][ T9419] usb 3-1: Using ep0 maxpacket: 16 [ 2128.944262][T16744] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 2128.951135][ T9419] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 2128.961331][ T9419] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2128.972087][ T9419] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2129.036050][ T9419] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2129.046356][ T9419] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2129.055997][ T9419] usb 3-1: Product: syz [ 2129.061326][ T9419] usb 3-1: Manufacturer: syz [ 2129.066217][ T9419] usb 3-1: SerialNumber: syz [ 2129.124877][T16744] usb 2-1: Using ep0 maxpacket: 8 [ 2129.155293][T16744] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 2129.164293][T16744] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2129.174740][T16744] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2129.186102][T16744] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2129.196587][T16744] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2129.210197][T16744] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2129.227638][T16744] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2129.550261][ T9922] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 2129.562244][ T9419] usb 3-1: 0:2 : does not exist [ 2129.647126][T16744] usb 2-1: usb_control_msg returned -32 [ 2129.653394][T16744] usbtmc 2-1:16.0: can't read capabilities [ 2129.786686][ T9922] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2129.799086][ T9922] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2129.809691][ T9922] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 2129.819489][ T9922] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2129.904788][ T9922] usb 6-1: config 0 descriptor?? [ 2130.109408][ T9419] usb 3-1: USB disconnect, device number 35 [ 2130.244775][T20946] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5155'. [ 2130.267476][T20946] netlink: 'syz.7.5155': attribute type 10 has an invalid length. [ 2130.512648][ T9922] usbhid 6-1:0.0: can't add hid device: -71 [ 2130.519930][ T9922] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2130.540911][ T9922] usb 6-1: USB disconnect, device number 40 [ 2130.667796][ T9419] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 2130.761012][T20951] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5157'. [ 2130.785456][T20951] netlink: 'syz.7.5157': attribute type 10 has an invalid length. [ 2130.858075][ T9419] usb 1-1: Using ep0 maxpacket: 8 [ 2130.884650][ T9419] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 2130.893608][ T9419] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2130.903947][ T9419] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2130.914397][ T9419] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2130.924845][ T9419] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2130.941600][ T9419] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2130.951924][ T9419] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2131.220337][ T9419] usb 1-1: usb_control_msg returned -32 [ 2131.226324][ T9419] usbtmc 1-1:16.0: can't read capabilities [ 2131.906503][ T9419] usb 2-1: USB disconnect, device number 16 [ 2132.515947][ T9419] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 2132.663220][T20976] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5167'. [ 2132.696626][T20976] netlink: 'syz.7.5167': attribute type 10 has an invalid length. [ 2132.697365][ T9419] usb 6-1: Using ep0 maxpacket: 8 [ 2132.753641][ T9419] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 2132.762600][ T9419] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2132.772979][ T9419] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2132.783455][ T9419] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2132.794286][ T9419] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2132.808245][ T9419] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2132.818076][ T9419] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2132.979628][T20979] loop1: detected capacity change from 0 to 2048 [ 2132.998468][T20979] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 2133.056517][ T9419] usb 6-1: usb_control_msg returned -32 [ 2133.063090][ T9419] usbtmc 6-1:16.0: can't read capabilities [ 2133.084955][T20981] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2133.137559][T16744] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 2133.317616][T16744] usb 3-1: Using ep0 maxpacket: 16 [ 2133.354500][T16744] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 2133.364270][T16744] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2133.375059][T16744] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2133.413353][T16744] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2133.423387][T16744] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2133.430838][ T9419] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 2133.431888][T16744] usb 3-1: Product: syz [ 2133.443811][T16744] usb 3-1: Manufacturer: syz [ 2133.449240][T16744] usb 3-1: SerialNumber: syz [ 2133.503774][T20985] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5171'. [ 2133.550772][ T9922] usb 1-1: USB disconnect, device number 51 [ 2133.659289][ T9419] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2133.671225][ T9419] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2133.681580][ T9419] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 2133.690564][T20988] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5171'. [ 2133.691074][ T9419] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2133.772291][T20988] netlink: 'syz.1.5171': attribute type 10 has an invalid length. [ 2133.804145][ T9419] usb 8-1: config 0 descriptor?? [ 2133.978761][T16744] usb 3-1: 0:2 : does not exist [ 2134.010190][T20990] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5172'. [ 2134.067628][T20990] mac80211_hwsim hwsim65 syzkaller0: left promiscuous mode [ 2134.075677][T20990] mac80211_hwsim hwsim65 syzkaller0: left allmulticast mode [ 2134.132627][T20990] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5172'. [ 2134.152010][T20990] netlink: 'syz.0.5172': attribute type 10 has an invalid length. [ 2134.216552][T16744] usb 3-1: 1:0: failed to get current value for ch 0 (-22) [ 2134.381934][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 2134.388959][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 2134.450269][T16744] usb 3-1: USB disconnect, device number 36 [ 2134.597434][ T9419] usbhid 8-1:0.0: can't add hid device: -71 [ 2134.604484][ T9419] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 2134.644222][ T9419] usb 8-1: USB disconnect, device number 44 [ 2135.048104][T16744] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 2135.218365][T16744] usb 2-1: Using ep0 maxpacket: 8 [ 2135.237335][T16744] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 2135.246193][T16744] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2135.259727][T16744] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2135.270120][T16744] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2135.281011][T16744] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2135.294630][T16744] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2135.304148][T16744] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2135.423867][T17181] usb 6-1: USB disconnect, device number 41 [ 2135.661240][T16744] usb 2-1: usb_control_msg returned -32 [ 2135.667492][T16744] usbtmc 2-1:16.0: can't read capabilities [ 2135.987227][T16744] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 2136.167530][T16744] usb 6-1: Using ep0 maxpacket: 8 [ 2136.203035][T16744] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 2136.212126][T16744] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2136.222608][T16744] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2136.233000][T16744] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2136.243462][T16744] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2136.257076][T16744] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2136.266474][T16744] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2136.601512][T17181] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 2136.613264][T16744] usb 6-1: usb_control_msg returned -32 [ 2136.620827][T16744] usbtmc 6-1:16.0: can't read capabilities [ 2136.684115][T21016] loop7: detected capacity change from 0 to 512 [ 2136.703180][T21016] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 2136.758091][T21016] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2136.771341][T21016] ext4 filesystem being mounted at /212/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2136.797333][T17181] usb 3-1: Using ep0 maxpacket: 8 [ 2136.830168][T17181] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 2136.838974][T17181] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2136.849702][T17181] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2136.860009][T17181] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2136.870380][T17181] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2136.884069][T17181] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2136.893643][T17181] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2136.922711][T21016] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 2136.948600][T21016] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 16 with error 28 [ 2136.962106][T21016] EXT4-fs (loop7): This should not happen!! Data will be lost [ 2136.962106][T21016] [ 2136.972553][T21016] EXT4-fs (loop7): Total free blocks count 0 [ 2136.979095][T21016] EXT4-fs (loop7): Free/Dirty block details [ 2136.985336][T21016] EXT4-fs (loop7): free_blocks=39626 [ 2136.991098][T21016] EXT4-fs (loop7): dirty_blocks=16 [ 2136.996497][T21016] EXT4-fs (loop7): Block reservation details [ 2137.003115][T21016] EXT4-fs (loop7): i_reserved_data_blocks=16 [ 2137.245194][T18271] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2137.283681][T17181] usb 3-1: usb_control_msg returned -32 [ 2137.289898][T17181] usbtmc 3-1:16.0: can't read capabilities [ 2137.999842][T17181] usb 2-1: USB disconnect, device number 17 [ 2138.497602][T17181] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 2138.725701][T17181] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2138.737628][T17181] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2138.747989][T17181] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 2138.757506][T17181] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2138.879589][T17181] usb 8-1: config 0 descriptor?? [ 2138.989632][ T9419] usb 6-1: USB disconnect, device number 42 [ 2139.438594][T17181] usbhid 8-1:0.0: can't add hid device: -71 [ 2139.445337][T17181] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 2139.534171][T17181] usb 8-1: USB disconnect, device number 45 [ 2139.652651][T16744] usb 3-1: USB disconnect, device number 37 [ 2139.717684][T21052] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 2140.773847][T21062] bridge0: port 1(bridge_slave_0) entered disabled state [ 2140.796208][T21062] bridge0: port 2(bridge_slave_1) entered disabled state [ 2141.100653][T21064] loop7: detected capacity change from 0 to 256 [ 2141.130095][T21064] exfat: Unknown parameter '0x0000000000000008' [ 2141.962981][T10063] Bluetooth: hci5: Frame reassembly failed (-84) [ 2144.017389][T15281] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 2146.657780][T15281] Bluetooth: hci4: command 0x0406 tx timeout [ 2146.964999][T21082] random: crng reseeded on system resumption [ 2147.984574][T21091] loop5: detected capacity change from 0 to 512 [ 2148.051822][T21091] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 2148.137464][T21091] EXT4-fs (loop5): can't mount with journal_checksum, fs mounted w/o journal [ 2149.771961][T21097] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2149.887146][T21097] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2149.968873][T21098] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2151.789750][T21102] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 2153.381057][T21107] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 2153.387950][T21107] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 2153.396503][T21107] vhci_hcd vhci_hcd.0: Device attached [ 2153.597244][ T9419] vhci_hcd: vhci_device speed not set [ 2153.665831][ T9419] usb 33-1: new low-speed USB device number 7 using vhci_hcd [ 2154.188058][T21116] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2154.650650][T21102] loop1: detected capacity change from 0 to 32768 [ 2154.684431][T21102] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.5217 (21102) [ 2154.724759][T21104] loop2: detected capacity change from 0 to 32768 [ 2154.749980][T21102] BTRFS error (device loop1): open_ctree failed: -4 [ 2154.770227][T21104] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.5218 (21104) [ 2154.888275][T21104] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 2154.900427][T21104] BTRFS info (device loop2): using sha256 (sha256-x86_64) checksum algorithm [ 2154.970463][T21104] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 2154.971660][T21104] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 2154.983336][T21104] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 2154.994314][T21104] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 2155.004652][T21104] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 2155.014771][T21104] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 2155.025078][T21104] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 2155.035757][T21104] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 2155.045807][T21104] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 2155.056534][T21104] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 2155.068925][T21104] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 2155.080168][T21104] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 2155.140181][T21104] BTRFS error (device loop2): open_ctree failed: -12 [ 2156.926478][T21135] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 2158.141585][T21138] vlan2: entered promiscuous mode [ 2158.148059][T21138] veth0_virt_wifi: entered promiscuous mode [ 2158.157612][T21138] vlan2: entered allmulticast mode [ 2158.164040][T21138] veth0_virt_wifi: entered allmulticast mode [ 2158.322806][T21111] vhci_hcd: connection reset by peer [ 2158.347728][T10063] vhci_hcd: stop threads [ 2158.352280][T10063] vhci_hcd: release socket [ 2158.357328][T10063] vhci_hcd: disconnect device [ 2158.439576][T21143] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5226'. [ 2158.709393][T21143] hsr_slave_1 (unregistering): left promiscuous mode [ 2158.818366][ T9419] vhci_hcd: vhci_device speed not set [ 2160.848202][T21137] syz.1.5226 (21137): drop_caches: 2 [ 2161.005733][T21152] overlayfs: missing 'lowerdir' [ 2161.563233][T21156] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5232'. [ 2167.628762][T21186] tun0: tun_chr_ioctl cmd 1074025677 [ 2167.634987][T21186] tun0: linktype set to 768 [ 2168.287911][T21196] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 2170.269928][T21212] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 2172.158121][T21246] usb usb1: usbfs: process 21246 (syz.1.5269) did not claim interface 0 before use [ 2172.168615][T21246] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 2172.550322][T21250] syzkaller0: entered allmulticast mode [ 2174.120549][T21274] usb usb1: usbfs: process 21274 (syz.5.5282) did not claim interface 0 before use [ 2174.130803][T21274] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 2176.260438][T21309] usb usb1: usbfs: process 21309 (syz.5.5297) did not claim interface 0 before use [ 2176.270932][T21309] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 2179.692626][T21329] bridge0: port 1(bridge_slave_0) entered disabled state [ 2179.889106][T21331] loop2: detected capacity change from 0 to 256 [ 2179.965195][T21331] exfat: Unknown parameter '0x0000000000000008' [ 2185.169505][T21360] syzkaller0: entered promiscuous mode [ 2185.175296][T21360] syzkaller0: entered allmulticast mode [ 2185.668182][T21370] bridge0: port 1(bridge_slave_0) entered disabled state [ 2185.690765][T21370] bridge0: port 2(bridge_slave_1) entered disabled state [ 2185.812386][T21373] loop1: detected capacity change from 0 to 256 [ 2185.903655][T21373] exfat: Unknown parameter '0xffffffffffffffff' [ 2187.051549][T21387] tun0: tun_chr_ioctl cmd 1074025677 [ 2187.058229][T21387] tun0: linktype set to 778 [ 2188.534927][T21408] bridge0: port 1(bridge_slave_0) entered disabled state [ 2188.951157][T21408] loop5: detected capacity change from 0 to 256 [ 2188.981827][T21408] exfat: Unknown parameter '0x0000000000000008' [ 2190.933858][T21443] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 2192.535034][T21469] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5370'. [ 2192.589722][T21469] bond_slave_0: entered promiscuous mode [ 2192.595933][T21469] bond_slave_1: entered promiscuous mode [ 2192.602538][T21469] macvtap1: entered promiscuous mode [ 2192.608314][T21469] bond0: entered promiscuous mode [ 2192.618541][T21469] macvtap1: entered allmulticast mode [ 2192.624239][T21469] bond0: entered allmulticast mode [ 2192.631385][T21469] bond_slave_0: entered allmulticast mode [ 2192.637913][T21469] bond_slave_1: entered allmulticast mode [ 2192.650024][T21469] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 2192.714562][T21471] bond0: left allmulticast mode [ 2192.720095][T21471] bond_slave_0: left allmulticast mode [ 2192.725991][T21471] bond_slave_1: left allmulticast mode [ 2192.732224][T21471] bond0: left promiscuous mode [ 2192.740695][T21471] bond_slave_0: left promiscuous mode [ 2192.746498][T21471] bond_slave_1: left promiscuous mode [ 2192.991942][T21475] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 2195.638039][T21495] mac80211_hwsim hwsim65 syzkaller0: entered allmulticast mode [ 2195.848556][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 2195.855286][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 2195.878136][T21492] mac80211_hwsim hwsim65 syzkaller0: left allmulticast mode [ 2196.168094][T21497] loop7: detected capacity change from 0 to 256 [ 2196.177598][T21497] exfat: Unknown parameter '0x0000000000000008' [ 2196.750804][T21510] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 2198.155779][T21535] bridge0: entered allmulticast mode [ 2198.253374][T21535] bridge0: entered promiscuous mode [ 2198.946484][T21544] loop1: detected capacity change from 0 to 256 [ 2198.976577][T21544] exfat: Unknown parameter '0x0000000000000008' [ 2199.332296][T21555] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 2200.317150][T21570] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5408'. [ 2200.910049][T21579] bridge0: port 1(bridge_slave_0) entered disabled state [ 2201.467556][T21588] loop7: detected capacity change from 0 to 256 [ 2201.477787][T21588] exfat: Unknown parameter '0x0000000000000008' [ 2202.002003][T21594] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 2202.598128][T21603] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5423'. [ 2203.708802][T21615] mac80211_hwsim hwsim65 syzkaller0: entered promiscuous mode [ 2203.716626][T21615] mac80211_hwsim hwsim65 syzkaller0: entered allmulticast mode [ 2204.252777][T21623] loop7: detected capacity change from 0 to 256 [ 2204.290116][T21623] exfat: Unknown parameter '0x0000000000000008' [ 2204.818351][T21630] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 2206.568491][T21646] bridge_slave_0: left allmulticast mode [ 2206.574489][T21646] bridge_slave_0: left promiscuous mode [ 2206.581579][T21646] bridge0: port 1(bridge_slave_0) entered disabled state [ 2206.732182][T21646] bridge_slave_1: left allmulticast mode [ 2206.738381][T21646] bridge_slave_1: left promiscuous mode [ 2206.745307][T21646] bridge0: port 2(bridge_slave_1) entered disabled state [ 2206.885435][T21646] bond0: (slave bond_slave_0): Releasing backup interface [ 2207.091676][T21646] bond0: (slave bond_slave_1): Releasing backup interface [ 2207.262582][T21646] team0: Port device team_slave_0 removed [ 2207.401207][T21646] team0: Port device team_slave_1 removed [ 2207.412821][T21646] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2207.423575][T21646] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2207.573780][T21646] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2207.581843][T21646] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2208.831961][T21667] loop2: detected capacity change from 0 to 256 [ 2208.842409][T21667] exfat: Unknown parameter '0x0000000000000008' [ 2211.926435][T21705] loop1: detected capacity change from 0 to 256 [ 2212.006674][T21705] exfat: Unknown parameter '0x0000000000000008' [ 2212.919571][T21722] loop5: detected capacity change from 0 to 256 [ 2212.956540][T21722] exfat: Unknown parameter '0x0000000000000008' [ 2215.392933][T21747] loop5: detected capacity change from 0 to 256 [ 2215.425078][T21747] exfat: Unknown parameter '0x0000000000000008' [ 2215.725327][T21751] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5480'. [ 2216.242586][T21754] loop1: detected capacity change from 0 to 256 [ 2216.256713][T21754] exfat: Unknown parameter '0x0000000000000008' [ 2218.626693][T21790] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 2219.531875][T21794] loop5: detected capacity change from 0 to 256 [ 2219.567415][T21801] ===================================================== [ 2219.575145][T21801] BUG: KMSAN: uninit-value in sctp_inq_pop+0x14dc/0x19e0 [ 2219.583640][T21801] sctp_inq_pop+0x14dc/0x19e0 [ 2219.588866][T21801] sctp_assoc_bh_rcv+0x1a0/0xbc0 [ 2219.594598][T21801] sctp_inq_push+0x2a3/0x350 [ 2219.599612][T21801] sctp_backlog_rcv+0x3c7/0xda0 [ 2219.604718][T21801] sk_backlog_rcv+0x13f/0x420 [ 2219.610053][T21801] __release_sock+0x1d3/0x330 [ 2219.614970][T21801] release_sock+0x6b/0x270 [ 2219.619920][T21801] sctp_wait_for_connect+0x458/0x820 [ 2219.625476][T21801] sctp_sendmsg_to_asoc+0x223a/0x2260 [ 2219.631323][T21801] sctp_sendmsg+0x3910/0x49f0 [ 2219.636251][T21801] inet_sendmsg+0x26c/0x2a0 [ 2219.641651][T21801] __sock_sendmsg+0x278/0x3d0 [ 2219.646600][T21801] __sys_sendto+0x593/0x720 [ 2219.651747][T21801] __ia32_sys_sendto+0x12f/0x200 [ 2219.657352][T21801] ia32_sys_call+0x1397/0x42c0 [ 2219.662345][T21801] __do_fast_syscall_32+0xb0/0x150 [ 2219.669333][T21801] do_fast_syscall_32+0x38/0x80 [ 2219.674436][T21801] do_SYSENTER_32+0x1f/0x30 [ 2219.679344][T21801] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2219.685953][T21801] [ 2219.688648][T21801] Uninit was stored to memory at: [ 2219.693985][T21801] sctp_inq_pop+0x144a/0x19e0 [ 2219.699228][T21801] sctp_assoc_bh_rcv+0x1a0/0xbc0 [ 2219.704442][T21801] sctp_inq_push+0x2a3/0x350 [ 2219.709487][T21801] sctp_backlog_rcv+0x3c7/0xda0 [ 2219.714626][T21801] sk_backlog_rcv+0x13f/0x420 [ 2219.719742][T21801] __release_sock+0x1d3/0x330 [ 2219.724683][T21801] release_sock+0x6b/0x270 [ 2219.729568][T21801] sctp_wait_for_connect+0x458/0x820 [ 2219.735125][T21801] sctp_sendmsg_to_asoc+0x223a/0x2260 [ 2219.740948][T21801] sctp_sendmsg+0x3910/0x49f0 [ 2219.745885][T21801] inet_sendmsg+0x26c/0x2a0 [ 2219.750862][T21801] __sock_sendmsg+0x278/0x3d0 [ 2219.755900][T21801] __sys_sendto+0x593/0x720 [ 2219.760992][T21801] __ia32_sys_sendto+0x12f/0x200 [ 2219.766245][T21801] ia32_sys_call+0x1397/0x42c0 [ 2219.771442][T21801] __do_fast_syscall_32+0xb0/0x150 [ 2219.776999][T21801] do_fast_syscall_32+0x38/0x80 [ 2219.782115][T21801] do_SYSENTER_32+0x1f/0x30 [ 2219.787065][T21801] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2219.793681][T21801] [ 2219.796142][T21801] Uninit was created at: [ 2219.800977][T21801] __kmalloc_node_track_caller_noprof+0x96d/0x12f0 [ 2219.807921][T21801] kmalloc_reserve+0x22f/0x4b0 [ 2219.812974][T21801] __alloc_skb+0x347/0x7d0 [ 2219.817934][T21801] sctp_packet_transmit+0x18a1/0x46d0 [ 2219.823577][T21801] sctp_outq_flush+0x1c7d/0x67c0 [ 2219.828991][T21801] sctp_outq_uncork+0x9e/0xc0 [ 2219.833952][T21801] sctp_do_sm+0x8c8e/0x9720 [ 2219.838912][T21801] sctp_assoc_bh_rcv+0x88b/0xbc0 [ 2219.844142][T21801] sctp_inq_push+0x2a3/0x350 [ 2219.849209][T21801] sctp_backlog_rcv+0x3c7/0xda0 [ 2219.854331][T21801] sk_backlog_rcv+0x13f/0x420 [ 2219.859503][T21801] __release_sock+0x1d3/0x330 [ 2219.864438][T21801] release_sock+0x6b/0x270 [ 2219.869348][T21801] sctp_wait_for_connect+0x458/0x820 [ 2219.874909][T21801] sctp_sendmsg_to_asoc+0x223a/0x2260 [ 2219.880860][T21801] sctp_sendmsg+0x3910/0x49f0 [ 2219.885794][T21801] inet_sendmsg+0x26c/0x2a0 [ 2219.890784][T21801] __sock_sendmsg+0x278/0x3d0 [ 2219.895743][T21801] __sys_sendto+0x593/0x720 [ 2219.900716][T21801] __ia32_sys_sendto+0x12f/0x200 [ 2219.905948][T21801] ia32_sys_call+0x1397/0x42c0 [ 2219.911200][T21801] __do_fast_syscall_32+0xb0/0x150 [ 2219.916572][T21801] do_fast_syscall_32+0x38/0x80 [ 2219.921848][T21801] do_SYSENTER_32+0x1f/0x30 [ 2219.926627][T21801] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2219.933468][T21801] [ 2219.935996][T21801] CPU: 1 UID: 0 PID: 21801 Comm: syz.0.5499 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(undef) [ 2219.948767][T21801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2219.959247][T21801] ===================================================== [ 2219.966366][T21801] Disabling lock debugging due to kernel taint [ 2219.972956][T21801] Kernel panic - not syncing: kmsan.panic set ... [ 2219.979611][T21801] CPU: 1 UID: 0 PID: 21801 Comm: syz.0.5499 Tainted: G B 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(undef) [ 2219.993638][T21801] Tainted: [B]=BAD_PAGE [ 2219.997965][T21801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2220.008267][T21801] Call Trace: [ 2220.011734][T21801] [ 2220.014836][T21801] __dump_stack+0x26/0x30 [ 2220.019449][T21801] dump_stack_lvl+0x53/0x270 [ 2220.024313][T21801] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2220.030539][T21801] dump_stack+0x1e/0x25 [ 2220.034971][T21801] panic+0x4bd/0xd50 [ 2220.039211][T21801] kmsan_report+0x31c/0x320 [ 2220.044023][T21801] ? __msan_warning+0x1b/0x30 [ 2220.048974][T21801] ? sctp_inq_pop+0x14dc/0x19e0 [ 2220.054108][T21801] ? sctp_assoc_bh_rcv+0x1a0/0xbc0 [ 2220.059502][T21801] ? sctp_inq_push+0x2a3/0x350 [ 2220.064534][T21801] ? sctp_backlog_rcv+0x3c7/0xda0 [ 2220.069839][T21801] ? sk_backlog_rcv+0x13f/0x420 [ 2220.075000][T21801] ? __release_sock+0x1d3/0x330 [ 2220.080106][T21801] ? release_sock+0x6b/0x270 [ 2220.084982][T21801] ? sctp_wait_for_connect+0x458/0x820 [ 2220.090719][T21801] ? sctp_sendmsg_to_asoc+0x223a/0x2260 [ 2220.096702][T21801] ? sctp_sendmsg+0x3910/0x49f0 [ 2220.101818][T21801] ? inet_sendmsg+0x26c/0x2a0 [ 2220.106733][T21801] ? __sock_sendmsg+0x278/0x3d0 [ 2220.111853][T21801] ? __sys_sendto+0x593/0x720 [ 2220.116837][T21801] ? __ia32_sys_sendto+0x12f/0x200 [ 2220.122254][T21801] ? ia32_sys_call+0x1397/0x42c0 [ 2220.127429][T21801] ? __do_fast_syscall_32+0xb0/0x150 [ 2220.132979][T21801] ? do_fast_syscall_32+0x38/0x80 [ 2220.138264][T21801] ? do_SYSENTER_32+0x1f/0x30 [ 2220.143194][T21801] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2220.150011][T21801] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2220.156830][T21801] ? sched_clock_cpu+0x59/0xa80 [ 2220.161944][T21801] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2220.168094][T21801] ? kmsan_get_metadata+0xfb/0x160 [ 2220.173523][T21801] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 2220.180146][T21801] ? kmsan_get_metadata+0xfb/0x160 [ 2220.185512][T21801] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2220.191593][T21801] ? load_gs_index+0x41/0x100 [ 2220.196597][T21801] ? kmsan_get_metadata+0xfb/0x160 [ 2220.201974][T21801] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2220.208054][T21801] ? kmsan_get_metadata+0xfb/0x160 [ 2220.213426][T21801] __msan_warning+0x1b/0x30 [ 2220.218161][T21801] sctp_inq_pop+0x14dc/0x19e0 [ 2220.223118][T21801] sctp_assoc_bh_rcv+0x1a0/0xbc0 [ 2220.228329][T21801] ? __schedule+0x2682/0x76c0 [ 2220.233278][T21801] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2220.239357][T21801] ? __pfx_sctp_assoc_bh_rcv+0x10/0x10 [ 2220.245053][T21801] sctp_inq_push+0x2a3/0x350 [ 2220.249879][T21801] sctp_backlog_rcv+0x3c7/0xda0 [ 2220.254953][T21801] ? kmsan_get_metadata+0xfb/0x160 [ 2220.260336][T21801] ? __pfx_sctp_backlog_rcv+0x10/0x10 [ 2220.265937][T21801] sk_backlog_rcv+0x13f/0x420 [ 2220.270871][T21801] __release_sock+0x1d3/0x330 [ 2220.275789][T21801] release_sock+0x6b/0x270 [ 2220.280447][T21801] sctp_wait_for_connect+0x458/0x820 [ 2220.285961][T21801] ? __pfx_autoremove_wake_function+0x10/0x10 [ 2220.292316][T21801] sctp_sendmsg_to_asoc+0x223a/0x2260 [ 2220.297913][T21801] ? kmsan_get_metadata+0xfb/0x160 [ 2220.303290][T21801] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2220.309405][T21801] sctp_sendmsg+0x3910/0x49f0 [ 2220.314288][T21801] ? kmsan_save_stack_with_flags+0x60/0x60 [ 2220.320414][T21801] ? __pfx_sctp_sendmsg+0x10/0x10 [ 2220.325736][T21801] inet_sendmsg+0x26c/0x2a0 [ 2220.330471][T21801] __sock_sendmsg+0x278/0x3d0 [ 2220.335384][T21801] __sys_sendto+0x593/0x720 [ 2220.340141][T21801] ? do_futex+0x3a1/0x480 [ 2220.344804][T21801] ? kmsan_get_metadata+0xfb/0x160 [ 2220.350169][T21801] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2220.356276][T21801] __ia32_sys_sendto+0x12f/0x200 [ 2220.361498][T21801] ia32_sys_call+0x1397/0x42c0 [ 2220.366464][T21801] __do_fast_syscall_32+0xb0/0x150 [ 2220.371802][T21801] ? irqentry_exit_to_user_mode+0x82/0xa0 [ 2220.377803][T21801] do_fast_syscall_32+0x38/0x80 [ 2220.382874][T21801] do_SYSENTER_32+0x1f/0x30 [ 2220.387578][T21801] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2220.394154][T21801] RIP: 0023:0xf7f85539 [ 2220.398390][T21801] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2220.418228][T21801] RSP: 002b:00000000f50a655c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 2220.426869][T21801] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080847fff [ 2220.435034][T21801] RDX: 000000000000fee4 RSI: 0000000000000000 RDI: 000000008005ffe4 [ 2220.443181][T21801] RBP: 000000000000001c R08: 0000000000000000 R09: 0000000000000000 [ 2220.451320][T21801] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2220.459469][T21801] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2220.467646][T21801] [ 2220.471227][T21801] Kernel Offset: disabled [ 2220.475664][T21801] Rebooting in 86400 seconds..