last executing test programs: 11m45.473937424s ago: executing program 4 (id=4040): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$video(&(0x7f0000000000), 0x9, 0x181600) openat$audio1(0xffffffffffffff9c, &(0x7f0000000280), 0x20143, 0x0) ioctl$VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000740)=@fd={0x10001, 0xd, 0x4, 0x10, 0x4, {0x0, 0xea60}, {0x4, 0x2, 0xcb, 0x72, 0x5, 0xa, "d03777a1"}, 0xfffffffc, 0x4, {}, 0x3f}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x6b1) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0xc2a) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000240)=0x1, 0x4) bind$inet6(r3, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) syz_emit_ethernet(0x42, &(0x7f0000000380)=ANY=[@ANYBLOB="0180c2000000ffffffffffff86dd60010700000c1100fc0100000000000000"], 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFCONF(r5, 0x8912, &(0x7f0000000200)=@buf={0xffe, &(0x7f0000000400)="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"}) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r6, r6, 0x0, 0x200000) 11m42.365256315s ago: executing program 4 (id=4057): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, 0x0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x7, @vifc_lcl_addr=@local, @multicast1}, 0x10) openat$audio1(0xffffffffffffff9c, &(0x7f0000000340), 0x129202, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x2, 0x80805, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x8401, 0x0) lseek(r2, 0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000000)=ANY=[]) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) sendto$packet(r5, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 11m40.804566415s ago: executing program 4 (id=4064): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x54) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x50) link(0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000008280)="03680f2a20da68ab7a58c28b635d19c32b6efabb6ae3b5eee5a74d8943c613539e166c8baef50500824343a2f05093a5c21f746caefe9f9bccd83cca0fc28da20e2706308c61398dfce5f54ea9f266791ba29a4c7da158637def8b816aa296815ff13c06d632df45feaec1fd272ec1b510eaf58fe6b26cc36df3ecc0f5b1f258a190304e2519dd39ba9f5bc1788926ced5202e3b1e3afa16ae0b5d66dc05b36d3a00f72e5f318f8bdfc7eddc94238c50031d0657a22445ad0b3b90a86b086eed837a00bf0a3888bf61b4db57d6d8d6b286bbb13ba3b246def60ac34241eb843f89fe77d7e3e52573e90d791f21d4a8dfcc24ba95db60e2135634c02bd4b14535285df4fbe381ec036d876c4c8057c79371fa9717414590890e182a7b9e0ab927812083acf0d04e04c20c0555c8ceedc5bcf9b0e814be6eca98ce7b2f9f17d098bea541b75a1617c09fa99902ad746811f89a1fc5e6a80d77528247d6c104395715d2c9f9102f070a295f20c4307b9e848d3928b50985bfa2486893139761925b8fab96d26291243db23c4fd4d96864f4db860731a4e3e10b52d8d0487f5a8536cb4507dbdc111570ad0321b918edbc52807c2e0676d3257553702d9c1bd6741e9cd5cdeb3b8f636b6eb02a3b0066d7f677d586de5018850000f000ab3960f6656fb98039ceb6400d0299c356fc22b7298ed157c667bed5563fac2192a8ff7706a9e58d9d2f92632d6b25d8b090642e3f323bf7ff4d8264617a43a97099dd7347fbe3b1c439737913f17eff57f3e1ff4fdac374fb554e9a6a1ff32daa69507698d660d8d5f591801d8e4a9309342c3dc84966dbfcd2652800200bcb0dde9d456b7a07c5409f4f5387d0150daa34dbc865c6108d34dcc51eedb277e9638b43ce3c9afac5d7aa0f8542e58b0a84632a07557b041845d0012cf016ef065f97660b731ce1b79493de71def047277a3ae6d4a0d86591847d3475926039848c5baf6e1b43bc83053855182423156e54cadc8c85089265b49da853d15e5a701fedf2bf7986a723abf72e513fa05cb178345f2fcc859df49e74c8ccef196000a05cb090f22986ffb6f8f74ab41d2d88b6b535507a23b03d2fc2743f6f69fbcd43b8ff52b1ba32fa0137d542c515569b7f486f8ffa02ad1f54767f51701eb4c141437720884d529a57e17bc2837799124f7f112f42bd90f5b435d7a5d7524f7667bb7a6266263e62bf7ebf6896888d584c65a530b766111f078630d8629ffa91acb5ed02498549bd7e042acae0fab7ccb23278088a364be3da9619d91e1061bbaa9b33c3c5fbbcbc725ce8c2cc9ab0f2b4d30078040d3ca79d3ca056c360381ee87e743dea73a25ea2b4843f9ef280feb507f933fb556c718d8bf8f8618db72805b65d381b319f65c745c1e5060dae2f498852e79aff8dd9c88fd939a31871a430d3ba96fb118c79d1b08a397af23b1a188d1802106f588c768a1e6c9d244ac9a38d2a54ed50f19b78bf25e0ae1f9337ceaa8ff5ca8640104b19bcd643b51501d4e03ed5ffb383e7ed0ab78d540ae10bbd64fba1af59a4190215b7d10230992bbb4ff618d8284a2e2446990511fc2bff07cce9ba94a11d3db041e220e3d931fdf129d8ec2c9b17d6587a0044c9e09f52848db43ddc0df94513cc9e94e9d427623502a910deea0f21d86b16366769a46bf0d6d9fc0d2cd6b98ed885e9e2d765bdd051196bf20bd27c46ec902726d96de352c346d904fa00d63b67d272f116dce489f9d636cef61b441b9c113addec983b8b2fbdb2b32049e436c972b2fcf5140dc7b094c5047cb6226da700b72aeb3febdf16a75b6f61a311f606251c99b377c775c8fb3446ccf25dc4cca24290b3939f948019b05c80b5a6382112f63e0990b324c16a087c72aaec08796afc769f678e3634100a5a9da8215cb5d7a6a6b50a81676ef4edca35595b11f9606bef2fb84fe1f0a0703c886579f09986086f0dca6eb8061f9a74c79c1f758684a7363974b14561b9d2efdaba6c4cd8cb70627da1e195fcae3d8b2fa751278e8f220c83e677e14731eccd6fe0c357b011ed88b6df0c266b383f224b8e95384e401b717030b1227582d0d1042bd90377c4f2c7206a19983fc5905e4eb87edb6532b26ca9e28e160202606d19d9f5da34762f4b3fa842d7bff382ad70dcbc411f8b3e4cace8c8e0c72898d24023545e0dfdeb176209276a535491ce11c045c57b45c40f19b12dcf6ffbf78ab23e7fe9bdc404cf47db9855f2b835e1fce57debfa071803ec38da3c77a904080a4c737ce2b20e14e8449762f1ca0b1ce71779d2e6ee5299e1cf230e8070045c23c1d0e52f66fe9039f95cdc0b448dc12d24de39157934270345991948fce921b5d8e739315cc75d4b3b49928437b88672c1a7770365207b43895f45909d5d972f48aa66de609152a5afa2c7d75f0a14189d0409f0b623eab3b6e7d81025cde140893ed71b6f24f5a36d21dafb62af6be9da845403bc8ed36672efa74d7da19d5794cb4b79fa1c86940b1890c012e14b7c3bb261f16bdd99efaa9819b0bc00af842a6b94c6086d15b16ab81af9331ba3a5bd6941ef35239e85455ceab02c598ccee8fbad97ed37daebfe3b26a5a6c9eda5f65a1cfaf7a1f1688267c812a56c552ae11b465dac030e18f9008ad03cad80bf2cb91a7d99dcfa54d323ae0a4c3a6dc0f80d7ff703870610a945eb0ab5b6d14e81869c8872f6b123d98edcf6bba10d76d35cff4b0bb73db8b6695a8351785bcba1e160a42ed367c4da727da38f91562e941e5c4fa90cd585c5f1cd3a7d6892f18a5aa3c74a4fc00bf5909267489b937a928d9d8ff92530b5226eedf8ab9a957e5ffec45bc3a55e6955b38393ce52892655265d1f741e0b744808eb568a08d145a8bc5ada9b079f6d0bec5fc2ace0502b3f926372dff49478fbd10451f0de4b3d1a63b9d4e17ade45628d2e9dca041fcf7fc1e105e1fc44089fde9caf418ba8454dc361df4a59e1bd79143d280613e3c79ad18e922a43e199aa5927bb9553dd31e6223ad19bf8aff6e1dac8b3680feea3138bc61742b03f047b3d77039c1a4c2d05bd89c4bc12a1b83d78b4e7023f690fce6a44608c423d8cbc2e80942b9d9df2f4bf5606640fa47692f3e003885983a73e1dc313b243bbab5c3c6348afab796da766044ba142eda5a9d3713e3eda8c54c1708909c5da89ba67d29cd7f409c9b759cba316c42028754e3cb6eae2cc4f6d66982f212320f199b2e837bb4c54c54bcdcd2ac240ef6295d38e9889b4213819ef0f9aba6ceead4e0fd2c4becdc1f8ee3049831996c9a74a5fd4e12a1fd21ed47cf27e29f9d61e4b673d88914c36eefa53d3c49d94b463b7f8462c1951dfe33c10993d5cfcd0ededd50ad55009528f1e79fbc2fa70c3338b32c40ae3bb45d7079c7ae8433fb1aa19affbd3fbce0cb5ab0d557afb3be036856066eea45c28e93528b35477fc97fe9ff3641e5bb0f0e46069eb653c027daabff38541250081c77e0e3a1d030a73289e771cc41db10819af60599b5df0ad978fcf0b46af821c6b717b265e07d3a85397ea94de26f510290ddb5df8fcff76fe624843c8577802809c145916afce01d9dfdfa8bf07633e98f14fc73d5ef58ae5cb0c308bc74ca38259692a1cd4cf16752786a1c816f24612c27393d7e40a2df9a3dfa23a0c59613c8a7ccdd97c3fc67ecab94dcd8cc4b4517ed2414d41ce574074ffebd156e3d65c4421b0f339bc9f29abbfe49db62122248cf96b74d9639b3ef9d935cd81315a7ecfb0dc6ea1ee053c2e5c3615fbc10782f16a564fcabe1df70da7de989e00eedc346cef5b5cf880e9d563fc15302f056d37f98a939fd1dd5478b4318c256e93b77e31f87d8f7fe31755191b40d778ddb2ada1480bb9fcb96a09783fcf2c2c9fac2c3a2771dd0e2fb113cd460ee2c9cf4a712f04eb1b1a746091109f7ce0655e1ff7781fbe853e3d03bb91c9d8f4f416f5745c6b607bbf72786bd3c0ac4761e6e6d70f12dbefa1b13542086f793b72c6102ac06e75be17bdbb1efbf7e007f07f9bd433fd9d9cbf93e760757b792f15231895561fe49d9d683ccc066f38af581422b71702627162c0f0f35c36a61eaaa92129114b7334281e35fd39576e51d8593c149c9326e0c710ea4dcc9ef39a432a48ae1834f5046b954f9c033d6035cde0dbffe3e97f48a1dc695f4b2f6fe5d4eee83008318def105c37e11c9015670f13417ed036e68f6fbfca2a8289829677feb23079f3f2ee53b26e491924fefc1c50e54f288a8c4b6ba6d319054c3a9e39e14bba81b423acbd44b51279bbea6b0bb2047325837ce8b2191454f52ffa2cd04abe89e3de5bc102e9fdf740d3efd975bc9503af796e6aeee711ef8797de5d507a964730aa70cb9d3840054d4e1ffc57de378b511f7649666a54a6b3d91ed517198d76322bf99d13bef530a43ed3f13196bf2def6dcfb39f76471c75c5779bedf105717e546057fb478bfd24e8fdf3c12d028b542d1f424a9d45bb9e026e6098eb1cb0a77378300ec1b4c9f006aa4dfb7fb5c57cf1b035cbe96009ead1ca25ea1e5fae40312a4e9fe250684a1c8653bb303209e0fc6a498f3a08f6c5b946378a349f3aea45104a2badb8a45f500bb4f0f6cd620ce794e0f390e1cb7f2f1fc0039f4250a577544a6862b47bf89eea3a8c1516b7a9dd111c2ca719190e8feb1a7079e9fdfdb8224dc50791c986825469c087c8f081616edaa4193e161281aa68b7286a364cbb336b2459f0892e57c40afcfda7d16ea1877efb4e4b0d4b5c31e8cba15066903d3a91bdc7fb64452fb9843436110596f0b038da167a86f97d32c807270a1c994fe88e2517e11bdd210dd982d3c8158459440108308a936c9d2370b9d157c3f9caec36ff05bc40b37f095edf33bf4fad440f38c3f52129456936c07014140be5618f4e9d07b66679238023390cd676b1a3a28d0e90d5ad9ef13a31fcdc5a435454309367c437424e340a1f91c6483bce1026d85a16fb854252ea4ede39a4e69702ecff76432de508e064eda0df9f263a25c0f626d1c1ffaa6783be2975451ee936cc2178648935a924f6fb2db2f8ba34e348920d903114520918cc6872b842e3744fc18d1363583a107ec7b89c7792c0d8069e12f873f6d668f6fdeb47b72986914e45c2b061c5c936c73c9bcf1475ea0d25edaad21cf193405c8acef3bff4e4f1b2b321d70dba59e856a8849c2bba9508bad775370669b2bb7f5e53181af8bff525e13a4935d7e28b997b4ff15da9e36f1353a154ab701ad15420786daaf27ba7e122f7b825c668185b685630420378b4142ec4e4242c2cf0bf6e143f7e55cb12fb9dd59a8df9959ce4fc5fff68ae7174977a31ad7fd644bc94a20bae76f0af474034990fdfec8ceca0e6cd93fe21d84837b7e9d74c17b6d3054f0c008ee05764745fd8773a0c1c31bb3eef5b7e261b54805b5c805a4eeef05c812fcdede200442e7340c63490645ebd09c235d5c52a785542526edfe3875ad08267faed1d0a15236f00c6736b94c1a3821302ff610697ad7becdbc96f54b55138b585cd122e0d5aeaf43c9ba373e8aa1c1297e3415552cc57cd60ee1f3c04500ed0eed37775c873de3066c034c176c67c5bfbe9899a47732030855781341374641da058eee61d01d11b9db8f19fd4558957897340e32cdfbc39713f1f439be0638f614cdb5361433a45a6ff024e39c94141dc5403af101404ce5f2efa97b90d9ecdb7c361785dab977feded32554d1a74d5cbfe2435be7f0329ba382455c2ac11fbe29fe3826796d4bea03dc53a37f63f5be2773f83faf282f0ae24d9fe5762b71b499fd37b4ce7e71f93c3a983f80fed477708bbf2261c89893c4b76e34fac9b42671b6cc81678cc867f53e8c3ec47716206212743ca0c4941c2c61ed3177fccf85921e998d2b826df751173944bb07eeaae4001f677a0687a2550eeac8bb5128ecad9c7b6a514596a30b8292fbacc09ab488193507b6785d7a35c979db774b2c413246f1ae88d35d1914b20b8fb501034321642fb0b0baba3378e4c31fb5e247c177e573295df0194462b99079a436400ba1be2e30d39b8714c0fb2bdcd981d5a5cd514f8d4f14e4e0437108630355d8f2b60a6d18cb14ceb2b5d0704aa6e93e180bd79cb17e176bc4f81a03db12a03413de6189896955bb9e3cc69b6f9a50a7eda3742527f98c71d7ea8ba75e253c2b783f7104813c619949e6a0765179b1b9cbe68b703335ab5986928d86384357a2f4189f4b4ffcd61a3d29709bbc93b5371f0e7798cb72ae4c17bcee24f8e566f2777803c3d182d15a63ac40063f0ccdf4bd790404524eae02eafb6b54c699578486490033f0be866c74a134083003d330498658ba973ea674c4a0ff158403987b4c4752b07c8637a119b019fd5093406960144445056f6ffe73eda0235dc1871bb6058d4a9feecac628265689d58a81453d33290ab56eb691f3180d0288449f41844e56f5c6cf522d4a5866b24fb9552fde71946c4d25dcceaa41cfddb5a33c51c54c0a0a5abd31be8fb6ec53c1d14ba648e183979dbd0db01b9e51ba3803be7e7d3dee752668367264c783f74838121797ae5706ef3aa460682d1bf55808c70e69ae29d7683368470d08e7e9a1095305dce250b5b4bd48c02e098d241b1089736e8306a737e3a1a93e554cc3ab24672b8c74bfb8825004ca869e347f873de14575493836662ad741d79269904f905d7df64d0581ab8d76ee51a32d72ccb719f3a25c0a856b5bd2b2a1269e208d70c32e1d5ad0dfdc0ef43f0230e95eb85871eb4d6033abbf0be7025382d878eeaeea73c94270e79bd5757dc1bac95236a62545cd467830b12dcc30d7cc81e889d360d073db40058e9a1c7b41fc53e67740bc984132a1452cf7d000378f14ef93a7eb0dc9bacf23584ad6761139576607f8214757f71fc47b2944127116ca3e83b9d9643bce8d7bb44b4d16b5d5cff70a9e1114cd920b6fc1f409672648ad56ac3136ef0a314adb458faf3d3f171cb2fc513d76e43e6bda2f1a68e6fcf4a4ecbe6bc87716e2a82ea0c4657983ca0caaf8d75fdf5b0d7930e4f3e95eb1271485f938e7ad2bf0c97b7c11745de45518a1e3a74341968588558e7197b407d24eda0671ee28f219e4c5f809a7ea6f9f5b9705f4634a96112eb262bd5967db5237285b865d3f64516495ea6d1ec20dbed7af02362370bcc98671a61241fa1ef5b3095609d66ecc16010f6f67a280d1c6d215ec224ead17d68bbc9bc64b363b5be9b479b7aa2cbc8587a6b48cf653fde7a262a11ab3a10356f55f122310feac77c32ce0994d6e8a70f1c53331cb473a8e29427322fb6da292c4443b1678877f1c981fa05fbdef96520e5895aeb2a3a8e62652f9d8830c3b144b9598873e2ef41b7ade943807766877d609972cca74855eaedce07cda35b50557de96e736ca3107c154d31aeee78db214687b9964517bcd2c6c9ec047514b45c831aee4588166dc3ec9ab36bd1033e74b3d02d731c5bd84f659fa9fe55cac08c12cb999a2e64fac52f6cb7d1fffbf45d9a1126787d0060fd1be563ccbc278ac97dab0c1bee664675f273f5fa429bdc24b21ff1cf0a3ad3c687fb07ffd88bad6ab6c6b422a43b77ff76f96bf405c07f8a667bb8ff54d6714aaa21ceba2e78ce03146b2ab9f49e6d65081119b8e7cf3843e91349790d2b975c9f9c305df0ab4f2b1b2f30f629313cc66a325e4037f38f29842ee5781ba73d2f30f506cf7ff2237a72b4075aefa32cdd5ba0ae4e65cb6fa47a3e06f0d5f684b7172d6b58f5f7d783c4122db4f4b8b4f9d3296c9d115f432710c29d40dfca0010ecbe2f42fac899911d65c84f08aaa1923c8add5af518286211db14e1187a8839f3b2ae8bd914eafc16a576bbe3eba6271a4c5b3170c3f543761f11f1326a05c575bde1b5c6afd3876bea4fbb649071a95caf74de9f7b3421803ec351f934b8d0932ce72a13abf3627d9a396c10875fc167ef1ae98ff92af9ca366033c99d30306fd540a09d67d26ab192504e7c09f9e4d06287a2b1748f1761ba3c16d9d08be7562b7351c4b4679f5d4b38681bfd86c7f2003a9749b20b602112a95803469f5d252c564912b55c4bf3409298dbd066d877cc70a89b484b9ee6bb836c9acd1e53086c4be85e9a3bc5969c7016db9c72b68620c241409d06f4d7f72fe2289c9b4921055922783b8b886bc22926b7d194820af2b90e3c60e87e1a7851f38a970c07c1da120d1da75de2bb994ff7d05a313522373326f160914a9589711e0439d694f5221afe8cc118722ce4927e9543e61a12a76bcf2da1d01a0f258095d32063387349b4e9f253d8b73c6e834b6866f8a56b4797b92d521fa732aa0d55c8e9d6c56011ee6fb450853dc564d18e97c463609c27a63f9c91c46d7bd80ace4edc0615ca342f43ca3b3d0cc36ed52b7d1f457e5b4b26b5eca0d91abe4f1a42a2eec40ec2faff1222f71dc226d6344e947b45155691205c09913fc3c6ab3fe76f4d1b11fa45869e20694b5f0a1074780a07332764212533b797dd24d8df157d4172f91253b77eb2ec90c8222307ed59136463057b7f469116086410b7503b44cef401c47811c1390060da5b3321d34096b67468a7702978d98d4bd721c18a25ed541249638e90281dc8e3565dc33e66d7b832a9bd62c02c5ed0e92935c92472499653d2d842ea6697c733ee80d775884074b3a0c250a4aa021bb6ea93514f9cc5f09feb5719d270cd184e364ca966f1416e10f111bc425f32a993fc5cd75503f99d89d91d7ddc6dee70193057cb946e5fbf8663c53e12cebffe5dbd4a86bfcf5f35f0d8aa43763a60e00356b4f8bc2bca01b02cfddde38f0c4df1e7f98709fdebc5abb5eb9631bdc3dbfcf15517fabcf16931eb7381e83713b081ad1947274d4896ee8953d772e9e71f363b6f1147317bc739ec128e4ec865f8f0ea34cd5ff19fb2c28931d2c85846735358504ae9161535cd7890e8b95c814cfec116b78e6d0eb5097cd4f35888121452e27391d865c15f0b986925d0d0c623bcbb4d8ca66603720253af17853967ea5954eb5ef0dc43de185ec4925026c680464e66d1caff1f4c7c757bd55ec2515ffe7183e3481ff6f626c2228a3fc3d15f63e4bfbec76a2a170206142cbbcf204a1cbfe0ee56eb47dfb79c80894c0a0fbf8a2955d861678fc2f8f9ad7a28052197b5992bced1273658da5b1f42fca48c80883600c24d8515a0c7113deb4c97df918ab64bca16a0c14f2547dc91d5ce4f884978c95fe54899f77ffc20a2c4b27350bc451bef72a46d8e144ad57a8d5f8ac039f58b8a53ea1f3fd5fce612a171bf82ba17c0681cf46ce5c8181a522ed2e986361903903159643046c7be1787dac6ccab09d18a30997541dc6e9efa260f1ff0392bc1890f19d8bb725f4fe7d8bc618f46e0c23be6b9ca67777dd3f5a89b41ccfb11a526a3bed045a2906f86cc5186a1db7a70391261b694b423e5a44d374f9d3720330e083574083f8950b2b35c8bb5b6c0a7fe259f235dc1c069d4581a9f0a7451890561a0829bb290de6aefe4d243ae0b00ca61a1dc4262bb4951242b21d88148eb7b6a9718d6433274f2b3c9bcdbb6d5df67b48ff42692d8cd7f4b7f41728de68ea1ce0f3e4a2843c5b9ffc43f69b8a0445dce44081f5b443a327084b0d00d07cbdbbfd2da5d67bf8d4bb4ee408d17eeee48b61decd06bd3dac9a1adbeb069b49ec96608b9179bb3af4c10f2ade6778b31fd4c22c2961cb949a64e9a8a4879c550f8d8783064cb304511e40e2e562ba83c08ba8ae011a784ed9db03db5527a7aae222c856c8df0a94f9c4def0f94244c5b8e3db9f39dbd337928e24d9d8562f231fea72116c01089163d2c5f4ca17faab20b73c9957fa1a9af20837a804870034d4e64281125b070d8ee0dbf05f95e5fb079e2a57e9af977222e90b664189114dccbca81ee58b7de90a813768a2049052b339a608d3e9966bdb3b584291fbf7694a7d1dea7f72ca604894e6cca5d326ed5e48c15eff5e6a8cc11c40f84ca920d79a5c55d07001909bf6338921c656a39d59d03f62bb5b8870189f0416ec8c317b03ccdcbbeb3e1a9bf2661813f4966b57eb56a2757de5f7745851b5f7bf75e41eb1646e61a41923c5c0e58c2ea478d95b5c39c450744aea0aad3706fce684cb7338ff3dacab60e8d968f0e6fc070693ae3ca16996b34a50afb7e6e377546ae28dc8de7a2ea3a657b4b0003a91a488e347c61971d62f32eaf843d4d4c4f86cc4033c1244c8408def09188dde509c629323f34072f9089a3846680894e8b000a03865438b2ea212b68fdef7f17583f92014eef2c8115a37c9c82dee06213c1407c1433690f68cdc8e91971104039dfe06774b946f43b68b7957a5ca3ee763eafbb7437850eb0a285c413bcf6965232d593d8da47a2a06abc635ae38e596a9dae55b43f341bcc6fe72d79b453ac1c259da37f64cbc1f1508caf280aa6a3f4cd2ff5564cc5a8727f222431454a5ac93398a29fb95b4e057686cd6fcd920992f74e5870749676a36e043bec5fc1b0fce5563affe9addfaa3689e857383ccd1f2924080449d2cfb006e855570b711c1dedd1df2629afaa3806f4ae229a9a8ef1940ddf2c55dac7812d2374c0684b7ba27b2f0849ee4c055d2b8ccc8e41c593378340d7546bb974bc8032f220b37099e3b04c6591c40d2c50a855a491e03c1c9cbb32c400f6104341262d92daaf3e2c04936cf28788fdff8e0a77770a9deb9089a9e32eb5d9e2581aecd98f83881ca8e7d49e603556dc03a9aa19a8f3a4735aaee347b25ea35b36fa57484c0b6d591979b4a3da894fa0c15966d6a5e02e397cccdb9c314b504372b81ef6913877767001263c05dae362b49e5928ef36f554ce245b4111486417634f1e7f4530a760ae6ffd3123f5736ac12c5bf506c5dca03079c0fd0776cdb56c938cdf480fb9b97b1685dfa3be6f712aae107e2dda726bec137b2ebdf56c0fcaecca4350bd7b5c84d57f29c2a2c99ae10c30cece4831d71ae4ee3362983cc816bb6cb9225b9db08503a1be23a26a0425a8628a2e718feae5df91d829f27966f766b623a0a4958a57642aefae259713733670d5b1d027fb8eb2d0d3a0b4acd482076dfa09ffe883f556b2db2262bc0872e1bd713f100dd7a8a8f2d725b46e09c625d513179872bbcc9a41e596a18b2471d977f4ca2bebd06cdaba31b70ef25e098f214fef16f16f725cad4311eb91457fdb70b471eddb65ecafb1e2b03c5ff21356241e3cab2c8ba601f9ef1aec9006b7cd0b81da29be01cb4c1d52e563298e373013886ebb1889bd5616647c6c418ea6bc1f3c0853b65cae48467b35f08318e3a9d034af7224cc3520ab1ece7751ba15407298b21e4f84ef7c23d7993739403d4f116cba2d0ae2d4003a28334c461c734d4555105b986ad0af28aac36c753ab52b91b7e23ae3ab07d3b170fe53a2249efe5b65463a3f237cec72091b04005f95a15ae595191ba39d0ae1d91d8e00b132ae9339884bc57bbb79978a308e1c31c5f213b092f380a7ba58f55869e9c29a5a6e7a7aa4f8d58e5787cc05e5", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x7ffffffd, 0x0, {0x0, 0x2, 0x7f, 0x1b7, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 11m39.67536421s ago: executing program 4 (id=4069): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0/../file0/../file0\x00') 11m39.397930984s ago: executing program 4 (id=4071): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8001}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@RTM_NEWNSID={0x14, 0x58, 0x4837deceb25b88bb, 0x70bd26, 0x25dfdbfd}, 0x14}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 11m39.088721898s ago: executing program 4 (id=4073): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000005480)=ANY=[]) 11m38.439702497s ago: executing program 32 (id=4073): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000005480)=ANY=[]) 18.710424953s ago: executing program 5 (id=7220): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800"/16], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000080400240012800b0001006d61637365630000140002800500060000000000050007000000000008000500", @ANYRES32=r1], 0x4c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$VIDIOC_SUBDEV_S_SELECTION(0xffffffffffffffff, 0xc040563e, 0x0) waitid(0x0, 0x0, &(0x7f0000002ff9), 0x0, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) pipe(0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x11000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r3, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000008100000008000300", @ANYRES32=r5], 0x50}}, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newtaction={0x84, 0x30, 0xb, 0x0, 0x0, {}, [{0x70, 0x1, [@m_ct={0x6c, 0x1, 0x0, 0x0, {{0x7}, {0x44, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @loopback}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFC_CMD_DEV_DOWN(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040054}, 0xc0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, 0x0, 0x80) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 17.46927826s ago: executing program 5 (id=7225): socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$xdp(0x2c, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) pselect6(0x40, &(0x7f0000000000)={0x0, 0x40000000002, 0x8000000000000000, 0x8000f, 0x2, 0x0, 0x100, 0x10001000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0x0, 0x4, 0x2, 0x0, 0x2, 0x7}, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) 15.359948708s ago: executing program 5 (id=7231): syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_pkts={{0x13, 0x5}, {0x1, [{0xc8}]}}}, 0x8) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="090000000000000000000000000000009500000000900000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r5 = socket(0x2, 0x3, 0xff) bind$inet(r5, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f0000000400)=""/168, 0x300000, 0x800, 0x5}, 0x20) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, 0x0, 0x80) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) getsockopt$IPT_SO_GET_REVISION_TARGET(r5, 0x0, 0xe, 0x0, &(0x7f00000002c0)) r6 = syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) ptrace$pokeuser(0x6, r6, 0x358, 0x0) syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000080)='./bus\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x227, &(0x7f0000000580)="$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") 13.042193188s ago: executing program 0 (id=7236): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x0) 13.035450128s ago: executing program 5 (id=7237): socket$inet6_sctp(0xa, 0x5, 0x84) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x44, 0x30, 0x1, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e22, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0xdc}}, 0x3, 0x0, 0x825e, 0x0, 0x22, 0x1, 0xff}, 0x9c) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r4, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000300)=""/16, 0x10, 0xfff9, 0x0, 0x203}}, 0x11c) write$UHID_DESTROY(r4, &(0x7f0000000080), 0x4) timer_create(0xb, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = syz_open_dev$cec(&(0x7f0000001080), 0x0, 0x80) ioctl$CEC_RECEIVE(r5, 0xc0386106, &(0x7f0000000000)={0x0, 0x7, 0x1, 0x0, 0x0, 0x9, '&\x00', 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0, 0xe}) 12.653986173s ago: executing program 0 (id=7240): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000004240)='./file1\x00', 0x0, &(0x7f0000004280), 0x1, 0x7b6, &(0x7f0000001140)="$eJzs3c9rG1ceAPDvyPLPZNdeWNjNngwLu4EQeZ31JruwsF72sBQaCLSnHpoYWTGpZStYcoiNaRNKoZdCW3prLzn356X02h+HXtr/oySkrROa0kNxGf2wZVtyrMSWkubzgYne07zRe995ozcvmrEUwBNrPP0nE3EsIl5PIkbrzycR0V9NZSOma+Xura/l0yWJjY1nvkuqZe6ur+WjaZvUkXrmjxHx+SsRJzK76y2vrM7PFIuFpXp+orJweaK8snry0sLMXGGusHh6cmrq1Jl/nDn9UOENN2d++Hr16K03/v/XD6Z/evkPH772RRLTcbS+rjmOgzIe4/V90p/uwm3+d9CV9czHL+6jUNMRkD3MxtChtGP66r1yLEajb6/+Ge5mywCAw/JSRGy009d2DQDwWEtq5///9LodAEC3ND4HuLu+lm8svf1Eortu/zcihobqudr1zVo6W79mN1S9DjpyN9l2ZSSJiLEDqH88It755Pn30iUO6TokQCvXrkfEhbHx3eN/suuehU79rfXTc82Z8R0rjX/QPZ+m859/tpr/ZTbnP9Fi/jPY4r37IO7//s/cPIBq2krnf/9uurftXlP8dWN99dxvqnO+/uTipWIhHdt+GxHHo38wzU/uUcfxOz/fabeuef73/ZsvvJvWnz5ulcjczA5u32Z2pjLzMDE3u3094k/ZVvGn4/9gtf+TNvPfc/X0wH3qeOpfr77dbl0afxpvY9kd/+HauBHxl5b9n2yWSfa8P3GiejhMNA6KFj6ajpF29Y9nt/o/XdL6G/8X6Ia0/0f2jn8sab5fs7zvl968W+yrG6OftSvUfPy3jr/18T+QPFtNN469qzOVytJkxEDy9O7nT21t28g3yqfxH/9z6/d/Y/xrcfw/l77+hX3uiOytb99/8PgPVxr/bEf933Eihu7N97Wrf3/9P7Vtm/2Mf/tt4IPuNwAAAAAAAAAAAAAAAAAAAAAAAADoRCYijkaSyW2mM5lcrvYb3r+PkUyxVK6cuFhaXpyN6m9lj0V/pvFVl6NN34c6Wf8+/Eb+1I783yPidxHx1uBwNZ/Ll4qzvQ4eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOqOtPn9/9Q3gzsK9/WihQDAoRhyYgeAJ02Szfa6CQBAtw11VHr40NoBAHRPZ+d/AODXwPkfAJ489zn/7/wzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOjUubNn02Xjx/W1fJqfvbKyPF+6cnK2UJ7PLSznc/nS0uXcXKk0Vyzk8qWFti90rfZQLJUuT8Xi8tWJSqFcmSivrJ5fKC0vVs5fWpiZK5wv9HctMgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYv/LK6vxMsVhYkuhJYv7LWj88Ku2R6CwR12r996i05+ASMbA1Sgz3ZnACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeAz8EgAA//99gB7t") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0xde452000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) poll(0x0, 0x0, 0x5) setsockopt$inet_int(r1, 0x0, 0x1, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUMAUDOUT(r7, 0xc0345642, &(0x7f0000000040)={0x0, "1f57f7b67e281a015e6e237e0a5b8339a1b8651fc289aa3f0c9e006583974c5f", 0x1}) ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000300)={0x0, 0x3, 0x1, [0x7fff, 0x6, 0x5, 0x2, 0x3], [0x7, 0x8d3d, 0x3, 0x1, 0x4, 0x7, 0x728, 0xf, 0x4, 0x3526, 0x7, 0x2, 0x1, 0x2, 0x9, 0x9, 0x3, 0x8, 0x1, 0x7f, 0x9, 0x5, 0x5, 0x9, 0x4, 0x9, 0xc, 0x8, 0x1, 0x10001, 0xcb9, 0x4f5, 0x0, 0x0, 0x8001, 0x9, 0x9, 0x1, 0xa8e, 0x80, 0x80000001, 0x7, 0x9661, 0x38, 0x8, 0x6, 0x1, 0x941, 0x2, 0x5, 0x9, 0x5, 0x100, 0xffffffff, 0x5, 0x4, 0x9, 0x1, 0x1, 0x7a6, 0x8000000000000000, 0x9, 0x5c, 0x2, 0x8000, 0x1, 0x8000000000000001, 0x200, 0x9, 0x3, 0x7, 0x5, 0x4, 0x8, 0x8c05, 0x7, 0x2, 0x80000000, 0x3, 0x5, 0x3, 0x5a, 0xb0, 0x5, 0x1, 0x3ff, 0x0, 0x7, 0x1, 0x3, 0xff, 0x10, 0x144, 0xffffffffffff5081, 0x1, 0x3, 0x800000000000000, 0x58e9224, 0xc60, 0x400, 0x8, 0x4, 0x5, 0x1, 0x7f, 0xb, 0x5, 0x3, 0x8, 0x5, 0x8, 0x3, 0x7, 0x7, 0x7a8f, 0x10, 0x81, 0x92, 0x14e, 0x80000000, 0x8]}) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000000)={{r7}, {@val={r8}, @max}}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r9, @ANYBLOB="40002700060010"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) 11.602295877s ago: executing program 0 (id=7242): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x0) read(r0, &(0x7f0000000200)=""/202, 0xca) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x4058534c, &(0x7f00000000c0)={0x80, 0x2, {0x3, 0x0, 0x4}, 0xfffffffe}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000380)={{0x0, 0x9}, 'port0\x00', 0x51, 0xb0440, 0x4, 0x3, 0x62, 0x0, 0x0, 0x0, 0x4, 0x66}) tkill(0x0, 0x7) 10.179592436s ago: executing program 0 (id=7247): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) readv(r0, &(0x7f0000000000)=[{&(0x7f0000001300)=""/241, 0xf1}], 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 10.013818158s ago: executing program 1 (id=7248): r0 = socket$inet6(0xa, 0x806, 0x0) listen(r0, 0x3) connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e23}, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x20) accept4(r0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r3, 0x1, 0x53, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$exfat(&(0x7f00000009c0), &(0x7f0000000000)='./file1\x00', 0x800800, &(0x7f0000000240)={[{@utf8}, {@iocharset={'iocharset', 0x3d, 'cp862'}}, {@sys_tz}, {@zero_size_dir}, {@umask={'umask', 0x3d, 0x5}}, {@umask={'umask', 0x3d, 0x7f}}, {@dmask={'dmask', 0x3d, 0xc08}}, {@fmask={'fmask', 0x3d, 0x3c}}, {@errors_continue}, {@sys_tz}]}, 0x1, 0x152b, &(0x7f0000000a00)="$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") mount$nfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x2000, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000003, 0x13, r5, 0x0) r6 = gettid() sigaltstack(&(0x7f00000000c0)={&(0x7f0000002400)=""/4095, 0x0, 0xfff}, 0x0) rt_sigqueueinfo(r6, 0x21, &(0x7f0000000000)) pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0x3) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000019100)={[&(0x7f0000000200)=' ']}) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) 9.09069029s ago: executing program 1 (id=7249): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) ioctl$KVM_GET_MSRS(r2, 0xc008ae88, 0x0) syz_open_dev$I2C(&(0x7f0000008740), 0x0, 0x200) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, 0x0) socket$igmp(0x2, 0x3, 0x2) openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/reserved_size', 0x101002, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x14, 0x6, 0x1, @local, @local, {[], {{0x0, 0xc001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0x8d}}}}}}}, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c5", @ANYRES32=r7, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r5], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmmsg$inet(r4, &(0x7f0000004c80)=[{{&(0x7f0000000480)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000640)=[{&(0x7f00000004c0)="69548f", 0x3}], 0x1, &(0x7f0000000680)=[@ip_retopts={{0x10}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @empty, @local}}}], 0x30}}], 0x1, 0x1000) 9.06577137s ago: executing program 0 (id=7250): syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_pkts={{0x13, 0x5}, {0x1, [{0xc8}]}}}, 0x8) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="090000000000000000000000000000009500000000900000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r5 = socket(0x2, 0x3, 0xff) bind$inet(r5, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f0000000400)=""/168, 0x300000, 0x800, 0x5}, 0x20) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, 0x0, 0x80) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) getsockopt$IPT_SO_GET_REVISION_TARGET(r5, 0x0, 0xe, 0x0, &(0x7f00000002c0)) ioctl$SOUND_MIXER_READ_DEVMASK(r0, 0x80044dfe, &(0x7f0000000540)) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) ptrace$pokeuser(0x6, 0x0, 0x358, 0x0) syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000080)='./bus\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x227, &(0x7f0000000580)="$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") 8.541138898s ago: executing program 3 (id=7251): socket$inet6(0xa, 0x2, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f00000004c0)='./file0\x00', 0x80, &(0x7f00000007c0)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098fe0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4ece31c9f4c7a4d53914e100"/167, @ANYBLOB="1080ea5420435c5067c47944bad4b4a97316654d5bf269d4ce130f556da20c66428911080000000000"], 0x1, 0x147, &(0x7f00000008c0)="$eJzs2zFrE2EYB/AnJmrUJbM4HLg4BfUTKBJBPFCUDDopRJdEAma5dmk+Sr9goWTK9pb2StKGZMhwudL7/Zb7w5+D9x3uHt6D+/Xi33g0nf2dfl1Et9WKzrvIYtmKXjyIdpTmAQDcJ8uU4jyllB7P48lppJTqXhEAUDXzHwCax/wHgOYx/wGgeb7/+Pn5fZ4PvmVZN+JsXgyLYXkt+4+f8sHr7EpvfdeiKIbtVf+m7LPb/cN4et2/3do/ilcvy/6y+/Al3+ifxaj67QMAAEAj9LOVref7fn9XX6Yb3wc2zu+deN452DYAgD3Mjo7HvyeTP/8FQdgjpJM7sYzKQt1vJqBq64e+7pUAAAAAAAAAAAAAAAC7HOJ3orr3CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJsuAgAA//9tQVLQ") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) getdents64(r3, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r4, &(0x7f0000001fc0)=""/184, 0xb8) 8.35262202s ago: executing program 1 (id=7252): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000004240)='./file1\x00', 0x0, &(0x7f0000004280), 0x1, 0x7b6, &(0x7f0000001140)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0xde452000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) poll(0x0, 0x0, 0x5) setsockopt$inet_int(r1, 0x0, 0x1, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUMAUDOUT(r7, 0xc0345642, &(0x7f0000000040)={0x0, "1f57f7b67e281a015e6e237e0a5b8339a1b8651fc289aa3f0c9e006583974c5f", 0x1}) ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000300)={0x0, 0x3, 0x1, [0x7fff, 0x6, 0x5, 0x2, 0x3], [0x7, 0x8d3d, 0x3, 0x1, 0x4, 0x7, 0x728, 0xf, 0x4, 0x3526, 0x7, 0x2, 0x1, 0x2, 0x9, 0x9, 0x3, 0x8, 0x1, 0x7f, 0x9, 0x5, 0x5, 0x9, 0x4, 0x9, 0xc, 0x8, 0x1, 0x10001, 0xcb9, 0x4f5, 0x0, 0x0, 0x8001, 0x9, 0x9, 0x1, 0xa8e, 0x80, 0x80000001, 0x7, 0x9661, 0x38, 0x8, 0x6, 0x1, 0x941, 0x2, 0x5, 0x9, 0x5, 0x100, 0xffffffff, 0x5, 0x4, 0x9, 0x1, 0x1, 0x7a6, 0x8000000000000000, 0x9, 0x5c, 0x2, 0x8000, 0x1, 0x8000000000000001, 0x200, 0x9, 0x3, 0x7, 0x5, 0x4, 0x8, 0x8c05, 0x7, 0x2, 0x80000000, 0x3, 0x5, 0x3, 0x5a, 0xb0, 0x5, 0x1, 0x3ff, 0x0, 0x7, 0x1, 0x3, 0xff, 0x10, 0x144, 0xffffffffffff5081, 0x1, 0x3, 0x800000000000000, 0x58e9224, 0xc60, 0x400, 0x8, 0x4, 0x5, 0x1, 0x7f, 0xb, 0x5, 0x3, 0x8, 0x5, 0x8, 0x3, 0x7, 0x7, 0x7a8f, 0x10, 0x81, 0x92, 0x14e, 0x80000000, 0x8]}) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000000)={{r7}, {@val={r8}, @max}}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r9, @ANYBLOB="40002700060010"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) 8.30886577s ago: executing program 5 (id=7253): socket$netlink(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000080)={r2}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mlock2(&(0x7f000027f000/0x2000)=nil, 0x2000, 0x1) pipe2$watch_queue(0x0, 0x80) set_mempolicy(0x3, 0x0, 0x7) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="18000000"], 0x18}}, 0x0) 7.262846594s ago: executing program 3 (id=7255): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r4 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000000480)=ANY=[@ANYBLOB="08000000000000000a00000000000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800"/103], 0x5000) fallocate(r3, 0x0, 0x0, 0x1000f4) io_setup(0x7d, &(0x7f0000000600)=0x0) io_submit(r6, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000000)="96", 0xffffff20, 0x0, 0x0, 0x0, r4}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, r3, 0x0, 0x0, 0xffffffffffffffff}]) 6.870588809s ago: executing program 1 (id=7256): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x4) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r2 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r2, &(0x7f0000002940), 0x40000000000017d, 0x811) 4.152549796s ago: executing program 2 (id=7258): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0xdd02}], 0xc, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) 3.647931372s ago: executing program 3 (id=7259): r0 = timerfd_create(0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') read$eventfd(r1, &(0x7f0000000080), 0x8) read(r0, 0x0, 0x0) 3.489093364s ago: executing program 1 (id=7260): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000001300)=""/241, 0xf1}], 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 3.369707236s ago: executing program 2 (id=7261): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') pread64(r5, &(0x7f0000001600)=""/4103, 0x1007, 0x8) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_GUEST_MEMFD(r7, 0xc040aed4, &(0x7f00000001c0)={0x1fe0000}) fallocate(r8, 0x3, 0x100000000, 0x80000000) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x9}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xac}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c00028005000100000000000800074000000000040006"], 0x98}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0xb4, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xb4}}, 0x0) sendmsg$NL80211_CMD_SET_STATION(r9, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000580)={0x34, r10, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_FLAGS={0xc, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}]}]}, 0x34}}, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000180)=ANY=[@ANYBLOB="010076"]) 3.298068477s ago: executing program 3 (id=7262): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) ioctl$KVM_GET_MSRS(r2, 0xc008ae88, 0x0) syz_open_dev$I2C(&(0x7f0000008740), 0x0, 0x200) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, 0x0) socket$igmp(0x2, 0x3, 0x2) openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/reserved_size', 0x101002, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x14, 0x6, 0x1, @local, @local, {[], {{0x0, 0xc001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0x8d}}}}}}}, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c5", @ANYRES32=r7, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r5], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmmsg$inet(r4, &(0x7f0000004c80)=[{{&(0x7f0000000480)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000640)=[{&(0x7f00000004c0)="69548f", 0x3}], 0x1, &(0x7f0000000680)=[@ip_retopts={{0x10}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @empty, @local}}}], 0x30}}], 0x1, 0x1000) 3.05952386s ago: executing program 1 (id=7263): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0x1200000, &(0x7f0000000940)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@noquota}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0xff, 0x57e, &(0x7f0000001b40)="$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") syz_open_dev$radio(&(0x7f0000000180), 0x0, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c0000000000851000000200"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) mkdir(&(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="170000005400010029bd700000deff0007000000", @ANYRES32=0x0], 0x18}, 0x1, 0x0, 0x0, 0x20044044}, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$dri(0x0, 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) 2.803348223s ago: executing program 0 (id=7264): socket$inet6_sctp(0xa, 0x5, 0x84) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x44, 0x30, 0x1, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e22, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0xdc}}, 0x3, 0x0, 0x825e, 0x0, 0x22, 0x1, 0xff}, 0x9c) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r4, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000300)=""/16, 0x10, 0xfff9, 0x0, 0x203}}, 0x11c) write$UHID_DESTROY(r4, &(0x7f0000000080), 0x4) timer_create(0xb, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = syz_open_dev$cec(&(0x7f0000001080), 0x0, 0x80) ioctl$CEC_RECEIVE(r5, 0xc0386106, &(0x7f0000000000)={0x0, 0x7, 0x1, 0x0, 0x0, 0x9, '&\x00', 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0, 0xe}) 2.214078051s ago: executing program 2 (id=7265): socket$inet6(0xa, 0x2, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f00000004c0)='./file0\x00', 0x80, &(0x7f00000007c0)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098fe0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4ece31c9f4c7a4d53914e100"/167, @ANYBLOB="1080ea5420435c5067c47944bad4b4a97316654d5bf269d4ce130f556da20c66428911080000000000"], 0x1, 0x147, &(0x7f00000008c0)="$eJzs2zFrE2EYB/AnJmrUJbM4HLg4BfUTKBJBPFCUDDopRJdEAma5dmk+Sr9goWTK9pb2StKGZMhwudL7/Zb7w5+D9x3uHt6D+/Xi33g0nf2dfl1Et9WKzrvIYtmKXjyIdpTmAQDcJ8uU4jyllB7P48lppJTqXhEAUDXzHwCax/wHgOYx/wGgeb7/+Pn5fZ4PvmVZN+JsXgyLYXkt+4+f8sHr7EpvfdeiKIbtVf+m7LPb/cN4et2/3do/ilcvy/6y+/Al3+ifxaj67QMAAEAj9LOVref7fn9XX6Yb3wc2zu+deN452DYAgD3Mjo7HvyeTP/8FQdgjpJM7sYzKQt1vJqBq64e+7pUAAAAAAAAAAAAAAAC7HOJ3orr3CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJsuAgAA//9tQVLQ") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) getdents64(r3, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0xb8) 1.839339286s ago: executing program 3 (id=7266): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000004240)='./file1\x00', 0x0, &(0x7f0000004280), 0x1, 0x7b6, &(0x7f0000001140)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0xde452000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) poll(0x0, 0x0, 0x5) setsockopt$inet_int(r1, 0x0, 0x1, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUMAUDOUT(r7, 0xc0345642, &(0x7f0000000040)={0x0, "1f57f7b67e281a015e6e237e0a5b8339a1b8651fc289aa3f0c9e006583974c5f", 0x1}) ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000300)={0x0, 0x3, 0x1, [0x7fff, 0x6, 0x5, 0x2, 0x3], [0x7, 0x8d3d, 0x3, 0x1, 0x4, 0x7, 0x728, 0xf, 0x4, 0x3526, 0x7, 0x2, 0x1, 0x2, 0x9, 0x9, 0x3, 0x8, 0x1, 0x7f, 0x9, 0x5, 0x5, 0x9, 0x4, 0x9, 0xc, 0x8, 0x1, 0x10001, 0xcb9, 0x4f5, 0x0, 0x0, 0x8001, 0x9, 0x9, 0x1, 0xa8e, 0x80, 0x80000001, 0x7, 0x9661, 0x38, 0x8, 0x6, 0x1, 0x941, 0x2, 0x5, 0x9, 0x5, 0x100, 0xffffffff, 0x5, 0x4, 0x9, 0x1, 0x1, 0x7a6, 0x8000000000000000, 0x9, 0x5c, 0x2, 0x8000, 0x1, 0x8000000000000001, 0x200, 0x9, 0x3, 0x7, 0x5, 0x4, 0x8, 0x8c05, 0x7, 0x2, 0x80000000, 0x3, 0x5, 0x3, 0x5a, 0xb0, 0x5, 0x1, 0x3ff, 0x0, 0x7, 0x1, 0x3, 0xff, 0x10, 0x144, 0xffffffffffff5081, 0x1, 0x3, 0x800000000000000, 0x58e9224, 0xc60, 0x400, 0x8, 0x4, 0x5, 0x1, 0x7f, 0xb, 0x5, 0x3, 0x8, 0x5, 0x8, 0x3, 0x7, 0x7, 0x7a8f, 0x10, 0x81, 0x92, 0x14e, 0x80000000, 0x8]}) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000000)={{r7}, {@val={r8}, @max}}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r9, @ANYBLOB="40002700060010"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.180186255s ago: executing program 2 (id=7267): socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$xdp(0x2c, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) pselect6(0x40, &(0x7f0000000000)={0x0, 0x40000000002, 0x8000000000000000, 0x8000f, 0x2, 0x0, 0x100, 0x10001000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0x0, 0x4, 0x2, 0x0, 0x2, 0x7}, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) 714.046891ms ago: executing program 2 (id=7268): r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) read(r1, &(0x7f0000000200)=""/202, 0xca) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x4058534c, &(0x7f00000000c0)={0x80, 0x2, {0x3, 0x0, 0x4}, 0xfffffffe}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f0000000380)={{0x0, 0x9}, 'port0\x00', 0x51, 0xb0440, 0x4, 0x3, 0x62, 0x0, 0x0, 0x0, 0x4, 0x66}) tkill(r0, 0x7) 195.122858ms ago: executing program 3 (id=7269): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000040)={@host}) r2 = userfaultfd(0x1) fcntl$dupfd(r2, 0x0, r2) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x15) socketpair(0x1, 0x1, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x8800000003, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r1, 0x7ab, &(0x7f0000000000)={&(0x7f0000000540)={{@host=0x10}, {@host=0x10}, 0x400, "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"}, 0x418}) r5 = dup(r0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000100)=0xff) ioctl$TUNGETVNETBE(r5, 0x800454df, &(0x7f0000000100)) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={r6, 0xffffffffffffffff, 0x7, 0x2000000, @void}, 0x10) r7 = socket(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x3fff8, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xc}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0xffffffff, 0x0, 0x0, 0xffffffff}, 0x22000, 0x0, 0xffffffff, 0x8, 0x101, 0x3, 0xfe, 0x0, 0x0, 0xfffffffc, {0x4, 0x6, 0xfffffffd, 0x0, 0x0, 0x8}}}}]}, 0x78}}, 0x40000c4) 33.39591ms ago: executing program 2 (id=7270): iopl(0x3) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\xff\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\x912\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebD(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1re\xe86\xcd}\a\a\xf4\t\x11F\xc3\xd4\xdb\xeb\xc48\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf', 0x3) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r6, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000040), &(0x7f0000000380)=0x4) r7 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={r1, 0x0, 0x0, 0x4000}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x13, r7, 0x0) syz_clone3(&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xe8001, 0x0) ioctl$TUNSETOFFLOAD(r8, 0x400454c9, 0xba98575a95aeb70d) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES16=r9, @ANYBLOB="010000000000ffdbdf250700000014000200fe8000000000000000000000000000aa2d7191b276101cc2c970323734b00c7d82b1e992c001877e32c8ec4368e5803e39bea608be74123c2d2f8448ad92002c5659f79f7a179aeac19e408231e92d1cc7351da8feb3cb0fe44eb089fe22c489d97306a2f23a3c20de0a12723f833c662bd72906bf8d5c1c796530df11a1a31742f4cdff85c2974dfb4a06a668289344f97c0a237dc45ece7b4f5acb8ce630721237d04c5ec3"], 0x28}}, 0x20040000) 0s ago: executing program 5 (id=7271): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x4) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r2 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r2, &(0x7f0000002940), 0x40000000000017d, 0x811) kernel console output (not intermixed with test programs): 5:2428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24360 comm="syz.5.6544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34658e969 code=0x7fc00000 [ 1197.473630][T24407] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6556'. [ 1197.784740][T24409] fuse: Unknown parameter '0000000000000000000000000000000000000000' [ 1198.083301][T18460] usb 1-1: USB disconnect, device number 102 [ 1198.269499][T24415] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6560'. [ 1198.283560][T24414] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6558'. [ 1198.342849][T24415] netlink: 452 bytes leftover after parsing attributes in process `syz.2.6560'. [ 1199.080715][T23133] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 1199.290895][T23133] usb 1-1: Using ep0 maxpacket: 32 [ 1199.298080][T23133] usb 1-1: config 0 has an invalid interface number: 110 but max is 0 [ 1199.331553][T23133] usb 1-1: config 0 has no interface number 0 [ 1199.386132][T23133] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=3a.e4 [ 1199.445433][T23133] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1199.471149][T23133] usb 1-1: Product: syz [ 1199.475573][T23133] usb 1-1: Manufacturer: syz [ 1199.480414][T23133] usb 1-1: SerialNumber: syz [ 1199.500816][ T4273] Bluetooth: hci3: command 0x0406 tx timeout [ 1199.521263][T23783] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 79 if 0 alt 243 proto 3 vid 0x0525 pid 0xA4A8 [ 1199.558211][T23133] usb 1-1: config 0 descriptor?? [ 1199.588570][T23133] igorplugusb 1-1:0.110: incorrect number of endpoints [ 1199.611999][T24435] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6567'. [ 1199.648235][T23783] usb 2-1: USB disconnect, device number 79 [ 1199.668777][T23783] usblp0: removed [ 1199.766147][T24442] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6571'. [ 1199.805774][T24442] netlink: 452 bytes leftover after parsing attributes in process `syz.2.6571'. [ 1199.826121][T24444] fuse: Unknown parameter '0000000000000000000000000000000000000000' [ 1199.844140][T24422] vivid-000: disconnect [ 1199.964133][ T26] kauditd_printk_skb: 46 callbacks suppressed [ 1199.964148][ T26] audit: type=1326 audit(1745721778.245:2475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24443 comm="syz.5.6570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34658e969 code=0x7fc00000 [ 1199.992718][ C1] vkms_vblank_simulate: vblank timer overrun [ 1200.125089][ T26] audit: type=1326 audit(1745721778.245:2476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24443 comm="syz.5.6570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa34658e969 code=0x7fc00000 [ 1200.147710][T18460] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 1200.166606][T24452] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6574'. [ 1200.257387][ T26] audit: type=1326 audit(1745721778.245:2477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24443 comm="syz.5.6570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34658e969 code=0x7fc00000 [ 1200.445056][T18460] usb 4-1: config 0 has no interfaces? [ 1200.470853][T18460] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1200.494210][ T26] audit: type=1326 audit(1745721778.245:2478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24443 comm="syz.5.6570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34658e969 code=0x7fc00000 [ 1200.524703][T18460] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1200.546241][T18460] usb 4-1: Product: syz [ 1200.558022][T18460] usb 4-1: Manufacturer: syz [ 1200.626162][T18460] usb 4-1: SerialNumber: syz [ 1200.699576][T18460] usb 4-1: config 0 descriptor?? [ 1201.651403][T23133] usb 6-1: new full-speed USB device number 48 using dummy_hcd [ 1201.893324][T18460] usb 1-1: USB disconnect, device number 103 [ 1201.907846][T24420] vivid-000: reconnect [ 1201.960751][T23133] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1201.992778][T23133] usb 6-1: not running at top speed; connect to a high speed hub [ 1202.046415][T23133] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1202.156168][T24481] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6582'. [ 1202.329901][T23133] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1202.355495][T23133] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1202.422184][T23133] usb 6-1: Product: ꒇ蔤孯♐龾ꮬ槠飧곁‷ᎎ웦﨔溙錧熌區缍໼⣶쬑귛ꍾ˛ᘑ㯐嗼Ωꑨ퀭뒟范㶸鴑瀑휿㠕훊΍쁞挌閇獡ݢ㞵ꍬ䙧﯀蘛봔宨囨ꄆ㪉缀ꜹ☩⒅폹떿簒꠵ࢬ닱蓰礙걎蛕쇃㧷箳鿇椹熼ᘀ숢혫㾖ᾁ쨵㫙걤㈥뜻ȫ劗魌䕀꘱邡긺䁌ಶ녪ꇣ걭둗蟡醭䁀ස띫踖㚤퍒ᜋ [ 1202.457584][ C1] vkms_vblank_simulate: vblank timer overrun [ 1202.511762][T24485] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6583'. [ 1202.528796][T24485] netlink: 452 bytes leftover after parsing attributes in process `syz.0.6583'. [ 1202.563464][T23133] usb 6-1: Manufacturer: 嘋䶟偏眆⴫㗖馷瀒稍ิ縃삱匦䦷飋є灕啠见ꬦ쾁シꛨ怮䣲둾ﲱ㲝姾ऍ庌鵃燋膸娄頣򿢨톖쑇գ੄饬䓱鋏Ӿꐷ時궼䓡︸嵞喙⟷셝瑯褾鱊軖돟䷆谗끹쯜䕿ꣵ픭䮵猱拮쿜惪ꈻ讽텴㪐灧恺嬃涨휥◧苭ꆳ讄黐볋퇋壷㊼䉨頮汆ᷯञ⤭ᆰ [ 1202.594313][ C1] vkms_vblank_simulate: vblank timer overrun [ 1202.813920][T23133] usb 6-1: SerialNumber: 꾨ᐯ㝄㿪鎠怰⊑壐䊄⤢tඬ㴛鏻襳簳錗켟ꓡ菷圩 [ 1202.841971][T24487] fuse: Unknown parameter '0000000000000000000000000000000000000000' [ 1203.038532][ T26] audit: type=1326 audit(1745721781.315:2479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24486 comm="syz.0.6584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaa8f8e969 code=0x7fc00000 [ 1203.258055][ T26] audit: type=1326 audit(1745721781.315:2480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24486 comm="syz.0.6584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fcaa8f8e969 code=0x7fc00000 [ 1203.386486][ T26] audit: type=1326 audit(1745721781.315:2481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24486 comm="syz.0.6584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaa8f8e969 code=0x7fc00000 [ 1203.409023][ C1] vkms_vblank_simulate: vblank timer overrun [ 1203.529288][T24495] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6587'. [ 1203.596759][ T26] audit: type=1326 audit(1745721781.315:2482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24486 comm="syz.0.6584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaa8f8e969 code=0x7fc00000 [ 1203.788272][ T26] audit: type=1326 audit(1745721781.315:2483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24486 comm="syz.0.6584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaa8f8e969 code=0x7fc00000 [ 1203.810739][ C1] vkms_vblank_simulate: vblank timer overrun [ 1204.537058][T13227] usb 4-1: USB disconnect, device number 98 [ 1204.713915][T24514] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6594'. [ 1204.822179][T24515] netlink: 452 bytes leftover after parsing attributes in process `syz.3.6594'. [ 1204.860748][T18460] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 1205.005305][T24517] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6595'. [ 1205.070770][T18460] usb 1-1: Using ep0 maxpacket: 32 [ 1205.077831][T18460] usb 1-1: config 0 has an invalid interface number: 110 but max is 0 [ 1205.117005][T18460] usb 1-1: config 0 has no interface number 0 [ 1205.153218][T18460] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=3a.e4 [ 1205.219083][T24522] fuse: Unknown parameter '0000000000000000000000000000000000000000' [ 1205.227559][T18460] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1205.270773][T18460] usb 1-1: Product: syz [ 1205.274973][T18460] usb 1-1: Manufacturer: syz [ 1205.319710][T18460] usb 1-1: SerialNumber: syz [ 1205.355647][T18460] usb 1-1: config 0 descriptor?? [ 1205.391390][T18460] igorplugusb 1-1:0.110: incorrect number of endpoints [ 1205.420396][ T26] audit: type=1326 audit(1745721783.695:2484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24521 comm="syz.1.6597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58b318e969 code=0x7fc00000 [ 1205.442823][ C1] vkms_vblank_simulate: vblank timer overrun [ 1205.504803][T23133] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 48 if 0 alt 243 proto 3 vid 0x0525 pid 0xA4A8 [ 1205.613486][ T26] audit: type=1326 audit(1745721783.695:2485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24521 comm="syz.1.6597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f58b318e969 code=0x7fc00000 [ 1205.620778][T23133] usb 6-1: USB disconnect, device number 48 [ 1205.737354][ T26] audit: type=1326 audit(1745721783.695:2486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24521 comm="syz.1.6597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58b318e969 code=0x7fc00000 [ 1205.765538][T23133] usblp0: removed [ 1205.877706][ T26] audit: type=1326 audit(1745721783.695:2487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24521 comm="syz.1.6597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58b318e969 code=0x7fc00000 [ 1205.934618][ T26] audit: type=1326 audit(1745721783.695:2488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24521 comm="syz.1.6597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58b318e969 code=0x7fc00000 [ 1206.124343][T24548] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6602'. [ 1206.660765][T13227] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1206.737636][T24560] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6606'. [ 1206.823795][T24560] netlink: 452 bytes leftover after parsing attributes in process `syz.3.6606'. [ 1206.870000][T13227] usb 6-1: config 0 has no interfaces? [ 1206.908276][T13227] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1206.958945][T13227] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1207.000857][T24565] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6608'. [ 1207.026218][T13227] usb 6-1: Product: syz [ 1207.057540][T13227] usb 6-1: Manufacturer: syz [ 1207.096598][T13227] usb 6-1: SerialNumber: syz [ 1207.179589][T13227] usb 6-1: config 0 descriptor?? [ 1207.270980][T24568] fuse: Unknown parameter '0000000000000000000000000000000000000000' [ 1207.445002][ T26] audit: type=1326 audit(1745721785.725:2489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24566 comm="syz.2.6610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02b798e969 code=0x7fc00000 [ 1207.658472][ T4308] usb 1-1: USB disconnect, device number 104 [ 1207.687153][ T26] audit: type=1326 audit(1745721785.725:2490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24566 comm="syz.2.6610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f02b798e969 code=0x7fc00000 [ 1207.774070][ T26] audit: type=1326 audit(1745721785.725:2491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24566 comm="syz.2.6610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02b798e969 code=0x7fc00000 [ 1207.874155][ T26] audit: type=1326 audit(1745721785.725:2492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24566 comm="syz.2.6610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02b798e969 code=0x7fc00000 [ 1207.984067][ T26] audit: type=1326 audit(1745721785.725:2493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24566 comm="syz.2.6610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02b798e969 code=0x7fc00000 [ 1208.360780][ T4308] usb 3-1: new full-speed USB device number 103 using dummy_hcd [ 1208.876509][ T4308] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1208.910321][ T4308] usb 3-1: not running at top speed; connect to a high speed hub [ 1208.979976][T24597] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6617'. [ 1209.083537][ T4308] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1209.111411][ T4308] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1209.150986][ T4308] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1209.183216][ T4308] usb 3-1: Product: ꒇ蔤孯♐龾ꮬ槠飧곁‷ᎎ웦﨔溙錧熌區缍໼⣶쬑귛ꍾ˛ᘑ㯐嗼Ωꑨ퀭뒟范㶸鴑瀑휿㠕훊΍쁞挌閇獡ݢ㞵ꍬ䙧﯀蘛봔宨囨ꄆ㪉缀ꜹ☩⒅폹떿簒꠵ࢬ닱蓰礙걎蛕쇃㧷箳鿇椹熼ᘀ숢혫㾖ᾁ쨵㫙걤㈥뜻ȫ劗魌䕀꘱邡긺䁌ಶ녪ꇣ걭둗蟡醭䁀ස띫踖㚤퍒ᜋ [ 1209.319856][ T4308] usb 3-1: Manufacturer: 嘋䶟偏眆⴫㗖馷瀒稍ิ縃삱匦䦷飋є灕啠见ꬦ쾁シꛨ怮䣲둾ﲱ㲝姾ऍ庌鵃燋膸娄頣򿢨톖쑇գ੄饬䓱鋏Ӿꐷ時궼䓡︸嵞喙⟷셝瑯褾鱊軖돟䷆谗끹쯜䕿ꣵ픭䮵猱拮쿜惪ꈻ讽텴㪐灧恺嬃涨휥◧苭ꆳ讄黐볋퇋壷㊼䉨頮汆ᷯञ⤭ᆰ [ 1209.510967][ T4308] usb 3-1: SerialNumber: 꾨ᐯ㝄㿪鎠怰⊑壐䊄⤢tඬ㴛鏻襳簳錗켟ꓡ菷圩 [ 1209.511527][T24606] fuse: Unknown parameter '0000000000000000000000000000000000000000' [ 1209.607392][T23131] usb 6-1: USB disconnect, device number 49 [ 1209.796918][T24613] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6623'. [ 1210.140869][T23131] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1210.330742][T23131] usb 6-1: Using ep0 maxpacket: 32 [ 1210.337953][T23131] usb 6-1: config 0 has an invalid interface number: 110 but max is 0 [ 1210.385044][T23131] usb 6-1: config 0 has no interface number 0 [ 1210.416800][T23131] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=3a.e4 [ 1210.449037][T23131] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1210.504047][T23131] usb 6-1: Product: syz [ 1210.516478][T23131] usb 6-1: Manufacturer: syz [ 1210.539692][T23131] usb 6-1: SerialNumber: syz [ 1210.575657][T23131] usb 6-1: config 0 descriptor?? [ 1210.600194][T23131] igorplugusb 6-1:0.110: incorrect number of endpoints [ 1210.980175][T24640] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6630'. [ 1211.656493][T24651] fuse: Unknown parameter '0000000000000000000000000000000000000000' [ 1211.716499][T18466] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1211.868035][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 1211.868046][ T26] audit: type=1326 audit(1745721790.145:2501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24650 comm="syz.0.6634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaa8f8e969 code=0x7fc00000 [ 1211.924327][T18466] usb 4-1: config 0 has no interfaces? [ 1211.955151][T18466] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1211.976464][T18466] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1212.008698][T18466] usb 4-1: Product: syz [ 1212.020796][ T26] audit: type=1326 audit(1745721790.145:2502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24650 comm="syz.0.6634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fcaa8f8e969 code=0x7fc00000 [ 1212.023327][T18466] usb 4-1: Manufacturer: syz [ 1212.080419][T18466] usb 4-1: SerialNumber: syz [ 1212.122210][T18466] usb 4-1: config 0 descriptor?? [ 1212.179629][ T26] audit: type=1326 audit(1745721790.145:2503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24650 comm="syz.0.6634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaa8f8e969 code=0x7fc00000 [ 1212.202110][ C1] vkms_vblank_simulate: vblank timer overrun [ 1212.329404][T24658] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6636'. [ 1212.344198][ T26] audit: type=1326 audit(1745721790.185:2504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24650 comm="syz.0.6634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaa8f8e969 code=0x7fc00000 [ 1212.366637][ C1] vkms_vblank_simulate: vblank timer overrun [ 1212.502663][ T26] audit: type=1326 audit(1745721790.185:2505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24650 comm="syz.0.6634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaa8f8e969 code=0x7fc00000 [ 1212.829945][ T4308] usblp 3-1:1.0: usblp0: USB Bidirectional printer dev 103 if 0 alt 243 proto 3 vid 0x0525 pid 0xA4A8 [ 1212.901012][ T4308] usb 3-1: USB disconnect, device number 103 [ 1212.945443][ T4308] usblp0: removed [ 1212.993366][T18466] usb 6-1: USB disconnect, device number 50 [ 1213.596757][T24683] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6644'. [ 1213.934881][T24686] fuse: Unknown parameter '0000000000000000000000000000000000000000' [ 1214.123573][ T26] audit: type=1326 audit(1745721792.405:2506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24685 comm="syz.1.6646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58b318e969 code=0x7fc00000 [ 1214.185271][T23131] usb 4-1: USB disconnect, device number 99 [ 1214.250726][ T26] audit: type=1326 audit(1745721792.405:2507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24685 comm="syz.1.6646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f58b318e969 code=0x7fc00000 [ 1214.302149][T24693] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6650'. [ 1214.341515][ T26] audit: type=1326 audit(1745721792.405:2508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24685 comm="syz.1.6646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58b318e969 code=0x7fc00000 [ 1214.471207][ T26] audit: type=1326 audit(1745721792.405:2509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24685 comm="syz.1.6646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58b318e969 code=0x7fc00000 [ 1214.591914][ T26] audit: type=1326 audit(1745721792.405:2510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24685 comm="syz.1.6646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58b318e969 code=0x7fc00000 [ 1214.911358][T23131] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1215.070742][ T4308] usb 3-1: new full-speed USB device number 104 using dummy_hcd [ 1215.110909][T23131] usb 4-1: Using ep0 maxpacket: 32 [ 1215.122143][T23131] usb 4-1: config 0 has an invalid interface number: 110 but max is 0 [ 1215.170650][T23131] usb 4-1: config 0 has no interface number 0 [ 1215.192052][T23131] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=3a.e4 [ 1215.248101][T23131] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1215.274195][T23131] usb 4-1: Product: syz [ 1215.276667][ T4308] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1215.288682][T23131] usb 4-1: Manufacturer: syz [ 1215.297751][ T4308] usb 3-1: not running at top speed; connect to a high speed hub [ 1215.308911][T23131] usb 4-1: SerialNumber: syz [ 1215.335060][T23131] usb 4-1: config 0 descriptor?? [ 1215.344396][ T4308] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1215.372227][T23131] igorplugusb 4-1:0.110: incorrect number of endpoints [ 1215.414147][ T4308] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1215.439156][ T4308] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1215.486444][ T4308] usb 3-1: Product: ꒇ蔤孯♐龾ꮬ槠飧곁‷ᎎ웦﨔溙錧熌區缍໼⣶쬑귛ꍾ˛ᘑ㯐嗼Ωꑨ퀭뒟范㶸鴑瀑휿㠕훊΍쁞挌閇獡ݢ㞵ꍬ䙧﯀蘛봔宨囨ꄆ㪉缀ꜹ☩⒅폹떿簒꠵ࢬ닱蓰礙걎蛕쇃㧷箳鿇椹熼ᘀ숢혫㾖ᾁ쨵㫙걤㈥뜻ȫ劗魌䕀꘱邡긺䁌ಶ녪ꇣ걭둗蟡醭䁀ස띫踖㚤퍒ᜋ [ 1215.593906][ T4308] usb 3-1: Manufacturer: 嘋䶟偏眆⴫㗖馷瀒稍ิ縃삱匦䦷飋є灕啠见ꬦ쾁シꛨ怮䣲둾ﲱ㲝姾ऍ庌鵃燋膸娄頣򿢨톖쑇գ੄饬䓱鋏Ӿꐷ時궼䓡︸嵞喙⟷셝瑯褾鱊軖돟䷆谗끹쯜䕿ꣵ픭䮵猱拮쿜惪ꈻ讽텴㪐灧恺嬃涨휥◧苭ꆳ讄黐볋퇋壷㊼䉨頮汆ᷯञ⤭ᆰ [ 1215.698775][ T4308] usb 3-1: SerialNumber: 꾨ᐯ㝄㿪鎠怰⊑壐䊄⤢tඬ㴛鏻襳簳錗켟ꓡ菷圩 [ 1216.010777][T18466] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1216.071719][T24738] fuse: Unknown parameter '0000000000000000000000000000000000000000' [ 1216.289420][T18466] usb 2-1: config 0 has no interfaces? [ 1216.345628][T18466] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1216.363043][T18466] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1216.392394][T18466] usb 2-1: Product: syz [ 1216.409302][T18466] usb 2-1: Manufacturer: syz [ 1216.429200][T18466] usb 2-1: SerialNumber: syz [ 1216.466400][T18466] usb 2-1: config 0 descriptor?? [ 1217.740531][T23131] usb 4-1: USB disconnect, device number 100 [ 1218.681065][T24776] fuse: Unknown parameter '0000000000000000000000000000000000000000' [ 1218.819042][ T4308] usblp 3-1:1.0: usblp0: USB Bidirectional printer dev 104 if 0 alt 243 proto 3 vid 0x0525 pid 0xA4A8 [ 1218.907214][ T4308] usb 3-1: USB disconnect, device number 104 [ 1218.933974][ T4308] usblp0: removed [ 1219.495849][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 1219.495863][ T26] audit: type=1326 audit(1745721797.775:2518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24775 comm="syz.3.6674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dfdd8e969 code=0x7fc00000 [ 1219.620742][ T26] audit: type=1326 audit(1745721797.775:2519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24775 comm="syz.3.6674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1dfdd8e969 code=0x7fc00000 [ 1219.683557][ T4308] usb 2-1: USB disconnect, device number 80 [ 1219.762227][ T26] audit: type=1326 audit(1745721797.775:2520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24775 comm="syz.3.6674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dfdd8e969 code=0x7fc00000 [ 1219.870950][ T26] audit: type=1326 audit(1745721797.775:2521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24775 comm="syz.3.6674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dfdd8e969 code=0x7fc00000 [ 1219.893951][T18466] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1219.950750][ T26] audit: type=1326 audit(1745721797.775:2522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24775 comm="syz.3.6674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dfdd8e969 code=0x7fc00000 [ 1220.050746][ T26] audit: type=1326 audit(1745721797.775:2523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24775 comm="syz.3.6674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dfdd8e969 code=0x7fc00000 [ 1220.110732][T18466] usb 6-1: Using ep0 maxpacket: 32 [ 1220.117553][T18466] usb 6-1: config 0 has an invalid interface number: 110 but max is 0 [ 1220.147186][T18466] usb 6-1: config 0 has no interface number 0 [ 1220.164882][ T26] audit: type=1326 audit(1745721797.775:2524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24775 comm="syz.3.6674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dfdd8e969 code=0x7fc00000 [ 1220.193094][T18466] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=3a.e4 [ 1220.222739][T18466] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1220.242967][T18466] usb 6-1: Product: syz [ 1220.247176][T18466] usb 6-1: Manufacturer: syz [ 1220.262307][ T26] audit: type=1326 audit(1745721797.775:2525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24775 comm="syz.3.6674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dfdd8e969 code=0x7fc00000 [ 1220.295237][T18466] usb 6-1: SerialNumber: syz [ 1220.316826][T18466] usb 6-1: config 0 descriptor?? [ 1220.342703][T18466] igorplugusb 6-1:0.110: incorrect number of endpoints [ 1220.352636][ T26] audit: type=1326 audit(1745721797.775:2526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24775 comm="syz.3.6674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dfdd8e969 code=0x7fc00000 [ 1220.420526][ T26] audit: type=1326 audit(1745721797.775:2527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24775 comm="syz.3.6674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dfdd8e969 code=0x7fc00000 [ 1220.444403][T24806] input: syz1 as /devices/virtual/input/input68 [ 1220.911137][T23131] usb 1-1: new full-speed USB device number 105 using dummy_hcd [ 1221.103401][T23131] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1221.123880][T23131] usb 1-1: not running at top speed; connect to a high speed hub [ 1221.451230][T24827] fuse: Unknown parameter '0000000000000000000000000000000000000000' [ 1221.460708][T23131] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1221.595068][T23131] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1221.615634][T23131] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1221.648235][T23131] usb 1-1: Product: ꒇ蔤孯♐龾ꮬ槠飧곁‷ᎎ웦﨔溙錧熌區缍໼⣶쬑귛ꍾ˛ᘑ㯐嗼Ωꑨ퀭뒟范㶸鴑瀑휿㠕훊΍쁞挌閇獡ݢ㞵ꍬ䙧﯀蘛봔宨囨ꄆ㪉缀ꜹ☩⒅폹떿簒꠵ࢬ닱蓰礙걎蛕쇃㧷箳鿇椹熼ᘀ숢혫㾖ᾁ쨵㫙걤㈥뜻ȫ劗魌䕀꘱邡긺䁌ಶ녪ꇣ걭둗蟡醭䁀ස띫踖㚤퍒ᜋ [ 1221.683645][ C1] vkms_vblank_simulate: vblank timer overrun [ 1221.790088][T23131] usb 1-1: Manufacturer: 嘋䶟偏眆⴫㗖馷瀒稍ิ縃삱匦䦷飋є灕啠见ꬦ쾁シꛨ怮䣲둾ﲱ㲝姾ऍ庌鵃燋膸娄頣򿢨톖쑇գ੄饬䓱鋏Ӿꐷ時궼䓡︸嵞喙⟷셝瑯褾鱊軖돟䷆谗끹쯜䕿ꣵ픭䮵猱拮쿜惪ꈻ讽텴㪐灧恺嬃涨휥◧苭ꆳ讄黐볋퇋壷㊼䉨頮汆ᷯञ⤭ᆰ [ 1221.820915][ C1] vkms_vblank_simulate: vblank timer overrun [ 1221.913065][T23131] usb 1-1: SerialNumber: 꾨ᐯ㝄㿪鎠怰⊑壐䊄⤢tඬ㴛鏻襳簳錗켟ꓡ菷圩 [ 1222.221075][T23133] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1222.565091][T23133] usb 3-1: config 0 has no interfaces? [ 1222.647738][T23133] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1222.690973][T23133] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1222.719915][T18466] usb 6-1: USB disconnect, device number 51 [ 1222.821038][T23133] usb 3-1: Product: syz [ 1222.862675][T23133] usb 3-1: Manufacturer: syz [ 1222.867352][T23133] usb 3-1: SerialNumber: syz [ 1222.975419][T23133] usb 3-1: config 0 descriptor?? [ 1224.752986][T24874] fuse: Unknown parameter '0000000000000000000000000000000000000000' [ 1224.850366][T24876] input: syz1 as /devices/virtual/input/input69 [ 1224.919947][T23131] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 105 if 0 alt 243 proto 3 vid 0x0525 pid 0xA4A8 [ 1224.983314][T23131] usb 1-1: USB disconnect, device number 105 [ 1225.024380][T23131] usblp0: removed [ 1225.560351][ T26] kauditd_printk_skb: 59 callbacks suppressed [ 1225.560369][ T26] audit: type=1326 audit(1745721803.835:2587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24873 comm="syz.1.6704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58b318e969 code=0x7fc00000 [ 1225.731014][ T26] audit: type=1326 audit(1745721803.835:2588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24873 comm="syz.1.6704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f58b318e969 code=0x7fc00000 [ 1225.831642][ T4305] usb 3-1: USB disconnect, device number 105 [ 1225.899879][ T26] audit: type=1326 audit(1745721803.835:2589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24873 comm="syz.1.6704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58b318e969 code=0x7fc00000 [ 1226.002054][ T26] audit: type=1326 audit(1745721803.835:2590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24873 comm="syz.1.6704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58b318e969 code=0x7fc00000 [ 1226.040829][T23783] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 1226.151360][ T26] audit: type=1326 audit(1745721803.835:2591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24873 comm="syz.1.6704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58b318e969 code=0x7fc00000 [ 1226.215126][ T26] audit: type=1326 audit(1745721803.835:2592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24873 comm="syz.1.6704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58b318e969 code=0x7fc00000 [ 1226.260772][T23783] usb 1-1: Using ep0 maxpacket: 32 [ 1226.267775][T23783] usb 1-1: config 0 has an invalid interface number: 110 but max is 0 [ 1226.300212][T23783] usb 1-1: config 0 has no interface number 0 [ 1226.327161][ T26] audit: type=1326 audit(1745721803.835:2593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24873 comm="syz.1.6704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58b318e969 code=0x7fc00000 [ 1226.349595][ C0] vkms_vblank_simulate: vblank timer overrun [ 1226.363251][T23783] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=3a.e4 [ 1226.410788][T23783] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1226.461352][T23783] usb 1-1: Product: syz [ 1226.471453][T23783] usb 1-1: Manufacturer: syz [ 1226.490193][ T26] audit: type=1326 audit(1745721803.835:2594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24873 comm="syz.1.6704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58b318e969 code=0x7fc00000 [ 1226.491732][T23783] usb 1-1: SerialNumber: syz [ 1226.598694][T23783] usb 1-1: config 0 descriptor?? [ 1226.603812][ T26] audit: type=1326 audit(1745721803.835:2595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24873 comm="syz.1.6704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58b318e969 code=0x7fc00000 [ 1226.603858][ T26] audit: type=1326 audit(1745721803.835:2596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24873 comm="syz.1.6704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58b318e969 code=0x7fc00000 [ 1226.649417][ C0] vkms_vblank_simulate: vblank timer overrun [ 1226.729419][T23783] igorplugusb 1-1:0.110: incorrect number of endpoints [ 1226.875443][T24919] input: syz1 as /devices/virtual/input/input70 [ 1226.886632][T24921] fuse: Unknown parameter '0000000000000000000000000000000000000000' [ 1227.033846][T23783] usb 6-1: new full-speed USB device number 52 using dummy_hcd [ 1227.239103][T23783] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1227.251095][T23783] usb 6-1: not running at top speed; connect to a high speed hub [ 1227.276957][T23783] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1227.313530][T23783] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1227.334495][T23783] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1227.373266][T23783] usb 6-1: Product: ꒇ蔤孯♐龾ꮬ槠飧곁‷ᎎ웦﨔溙錧熌區缍໼⣶쬑귛ꍾ˛ᘑ㯐嗼Ωꑨ퀭뒟范㶸鴑瀑휿㠕훊΍쁞挌閇獡ݢ㞵ꍬ䙧﯀蘛봔宨囨ꄆ㪉缀ꜹ☩⒅폹떿簒꠵ࢬ닱蓰礙걎蛕쇃㧷箳鿇椹熼ᘀ숢혫㾖ᾁ쨵㫙걤㈥뜻ȫ劗魌䕀꘱邡긺䁌ಶ녪ꇣ걭둗蟡醭䁀ස띫踖㚤퍒ᜋ [ 1227.408680][ C0] vkms_vblank_simulate: vblank timer overrun [ 1227.416167][T23783] usb 6-1: Manufacturer: 嘋䶟偏眆⴫㗖馷瀒稍ิ縃삱匦䦷飋є灕啠见ꬦ쾁シꛨ怮䣲둾ﲱ㲝姾ऍ庌鵃燋膸娄頣򿢨톖쑇գ੄饬䓱鋏Ӿꐷ時궼䓡︸嵞喙⟷셝瑯褾鱊軖돟䷆谗끹쯜䕿ꣵ픭䮵猱拮쿜惪ꈻ讽텴㪐灧恺嬃涨휥◧苭ꆳ讄黐볋퇋壷㊼䉨頮汆ᷯञ⤭ᆰ [ 1227.446969][ C0] vkms_vblank_simulate: vblank timer overrun [ 1227.476768][T23783] usb 6-1: SerialNumber: 꾨ᐯ㝄㿪鎠怰⊑壐䊄⤢tඬ㴛鏻襳簳錗켟ꓡ菷圩 [ 1227.560789][T23131] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1227.809788][T23131] usb 3-1: config 0 has no interfaces? [ 1227.836105][T23131] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1227.864309][T23131] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1227.903074][T23131] usb 3-1: Product: syz [ 1227.920736][T23131] usb 3-1: Manufacturer: syz [ 1227.942269][T23131] usb 3-1: SerialNumber: syz [ 1227.987315][T23131] usb 3-1: config 0 descriptor?? [ 1228.825683][T23131] usb 1-1: USB disconnect, device number 106 [ 1229.769119][T23783] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 52 if 0 alt 243 proto 3 vid 0x0525 pid 0xA4A8 [ 1229.878860][T23783] usb 6-1: USB disconnect, device number 52 [ 1229.942367][T18466] usb 3-1: USB disconnect, device number 106 [ 1229.953635][T23783] usblp0: removed [ 1230.041215][T24968] fuse: Unknown parameter '0000000000000000000000000000000000000000' [ 1230.059318][T24970] input: syz1 as /devices/virtual/input/input71 [ 1230.089622][ T6725] udevd[6725]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 1230.809975][ T26] kauditd_printk_skb: 43 callbacks suppressed [ 1230.809992][ T26] audit: type=1326 audit(1745721809.085:2640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24967 comm="syz.5.6734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34658e969 code=0x7fc00000 [ 1230.956105][ T26] audit: type=1326 audit(1745721809.095:2641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24967 comm="syz.5.6734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa34658e969 code=0x7fc00000 [ 1231.071196][ T26] audit: type=1326 audit(1745721809.095:2642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24967 comm="syz.5.6734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34658e969 code=0x7fc00000 [ 1231.142199][ T26] audit: type=1326 audit(1745721809.095:2643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24967 comm="syz.5.6734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34658e969 code=0x7fc00000 [ 1231.176461][ T26] audit: type=1326 audit(1745721809.095:2644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24967 comm="syz.5.6734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34658e969 code=0x7fc00000 [ 1231.255151][ T26] audit: type=1326 audit(1745721809.095:2645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24967 comm="syz.5.6734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34658e969 code=0x7fc00000 [ 1231.295682][ T26] audit: type=1326 audit(1745721809.095:2646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24967 comm="syz.5.6734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34658e969 code=0x7fc00000 [ 1231.325836][ T26] audit: type=1326 audit(1745721809.095:2647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24967 comm="syz.5.6734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34658e969 code=0x7fc00000 [ 1231.365789][ T26] audit: type=1326 audit(1745721809.095:2648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24967 comm="syz.5.6734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34658e969 code=0x7fc00000 [ 1231.391336][T23131] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 1231.403803][ T26] audit: type=1326 audit(1745721809.095:2649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24967 comm="syz.5.6734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34658e969 code=0x7fc00000 [ 1231.441523][T25001] input: syz1 as /devices/virtual/input/input72 [ 1231.530861][T23132] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1231.581121][T13227] usb 1-1: new full-speed USB device number 107 using dummy_hcd [ 1231.613875][T23131] usb 6-1: Using ep0 maxpacket: 32 [ 1231.630538][T23131] usb 6-1: config 0 has an invalid interface number: 110 but max is 0 [ 1231.638921][T23131] usb 6-1: config 0 has no interface number 0 [ 1231.727960][T23131] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=3a.e4 [ 1231.759984][T23132] usb 2-1: config 0 has no interfaces? [ 1231.783549][T13227] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1231.805907][T13227] usb 1-1: not running at top speed; connect to a high speed hub [ 1231.831512][T23131] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1231.840021][T23132] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1231.866992][T23132] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1231.888521][T13227] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1231.900068][T23131] usb 6-1: Product: syz [ 1231.919732][T23132] usb 2-1: Product: syz [ 1231.925657][T23131] usb 6-1: Manufacturer: syz [ 1231.940722][T13227] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1231.951955][T23132] usb 2-1: Manufacturer: syz [ 1231.958107][T23131] usb 6-1: SerialNumber: syz [ 1231.973456][T23132] usb 2-1: SerialNumber: syz [ 1231.998707][T23131] usb 6-1: config 0 descriptor?? [ 1232.005362][T13227] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1232.029075][T23132] usb 2-1: config 0 descriptor?? [ 1232.073049][T23131] igorplugusb 6-1:0.110: incorrect number of endpoints [ 1232.090371][T13227] usb 1-1: Product: ꒇ蔤孯♐龾ꮬ槠飧곁‷ᎎ웦﨔溙錧熌區缍໼⣶쬑귛ꍾ˛ᘑ㯐嗼Ωꑨ퀭뒟范㶸鴑瀑휿㠕훊΍쁞挌閇獡ݢ㞵ꍬ䙧﯀蘛봔宨囨ꄆ㪉缀ꜹ☩⒅폹떿簒꠵ࢬ닱蓰礙걎蛕쇃㧷箳鿇椹熼ᘀ숢혫㾖ᾁ쨵㫙걤㈥뜻ȫ劗魌䕀꘱邡긺䁌ಶ녪ꇣ걭둗蟡醭䁀ස띫踖㚤퍒ᜋ [ 1232.307238][T13227] usb 1-1: Manufacturer: 嘋䶟偏眆⴫㗖馷瀒稍ิ縃삱匦䦷飋є灕啠见ꬦ쾁シꛨ怮䣲둾ﲱ㲝姾ऍ庌鵃燋膸娄頣򿢨톖쑇գ੄饬䓱鋏Ӿꐷ時궼䓡︸嵞喙⟷셝瑯褾鱊軖돟䷆谗끹쯜䕿ꣵ픭䮵猱拮쿜惪ꈻ讽텴㪐灧恺嬃涨휥◧苭ꆳ讄黐볋퇋壷㊼䉨頮汆ᷯञ⤭ᆰ [ 1232.354217][T13227] usb 1-1: SerialNumber: 꾨ᐯ㝄㿪鎠怰⊑壐䊄⤢tඬ㴛鏻襳簳錗켟ꓡ菷圩 [ 1233.353492][T25032] fuse: Unknown parameter '0000000000000000000000000000000000000000' [ 1233.879857][T18466] usb 2-1: USB disconnect, device number 81 [ 1234.145467][T18466] usb 6-1: USB disconnect, device number 53 [ 1234.474732][T13227] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 107 if 0 alt 243 proto 3 vid 0x0525 pid 0xA4A8 [ 1234.544426][T13227] usb 1-1: USB disconnect, device number 107 [ 1234.582194][T13227] usblp0: removed [ 1234.843140][T25062] input: syz1 as /devices/virtual/input/input73 [ 1235.541015][ T4308] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1235.820982][T23132] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 1235.864255][ T4308] usb 3-1: config 0 has no interfaces? [ 1235.921228][ T4308] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1235.930423][ T4308] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1235.987160][T25082] fuse: Unknown parameter '0000000000000000000000000000000000000000' [ 1235.995659][ T4308] usb 3-1: Product: syz [ 1235.999965][ T4308] usb 3-1: Manufacturer: syz [ 1236.010706][T23132] usb 4-1: Using ep0 maxpacket: 32 [ 1236.017509][T23132] usb 4-1: config 0 has an invalid interface number: 110 but max is 0 [ 1236.026054][ T4308] usb 3-1: SerialNumber: syz [ 1236.063880][ T4308] usb 3-1: config 0 descriptor?? [ 1236.088427][T23132] usb 4-1: config 0 has no interface number 0 [ 1236.103223][T23132] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=3a.e4 [ 1236.132940][T23132] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1236.155452][T23132] usb 4-1: Product: syz [ 1236.159645][T23132] usb 4-1: Manufacturer: syz [ 1236.177672][T23132] usb 4-1: SerialNumber: syz [ 1236.198476][T23132] usb 4-1: config 0 descriptor?? [ 1236.238690][T23132] igorplugusb 4-1:0.110: incorrect number of endpoints [ 1236.413173][T25072] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 1236.560880][T23132] usb 6-1: new full-speed USB device number 54 using dummy_hcd [ 1236.753732][ T26] kauditd_printk_skb: 42 callbacks suppressed [ 1236.753761][ T26] audit: type=1326 audit(1745721815.035:2692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25081 comm="syz.0.6770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaa8f8e969 code=0x7fc00000 [ 1236.789446][T23132] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1236.842846][T23132] usb 6-1: not running at top speed; connect to a high speed hub [ 1236.871427][ T26] audit: type=1326 audit(1745721815.035:2693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25081 comm="syz.0.6770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fcaa8f8e969 code=0x7fc00000 [ 1236.895316][T23132] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1236.918395][T23132] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1236.954887][T23132] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1236.980465][ T26] audit: type=1326 audit(1745721815.035:2694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25081 comm="syz.0.6770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaa8f8e969 code=0x7fc00000 [ 1236.998494][T23132] usb 6-1: Product: ꒇ蔤孯♐龾ꮬ槠飧곁‷ᎎ웦﨔溙錧熌區缍໼⣶쬑귛ꍾ˛ᘑ㯐嗼Ωꑨ퀭뒟范㶸鴑瀑휿㠕훊΍쁞挌閇獡ݢ㞵ꍬ䙧﯀蘛봔宨囨ꄆ㪉缀ꜹ☩⒅폹떿簒꠵ࢬ닱蓰礙걎蛕쇃㧷箳鿇椹熼ᘀ숢혫㾖ᾁ쨵㫙걤㈥뜻ȫ劗魌䕀꘱邡긺䁌ಶ녪ꇣ걭둗蟡醭䁀ස띫踖㚤퍒ᜋ [ 1237.038829][ T26] audit: type=1326 audit(1745721815.035:2695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25081 comm="syz.0.6770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaa8f8e969 code=0x7fc00000 [ 1237.068444][ T26] audit: type=1326 audit(1745721815.035:2696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25081 comm="syz.0.6770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaa8f8e969 code=0x7fc00000 [ 1237.141204][T23132] usb 6-1: Manufacturer: 嘋䶟偏眆⴫㗖馷瀒稍ิ縃삱匦䦷飋є灕啠见ꬦ쾁シꛨ怮䣲둾ﲱ㲝姾ऍ庌鵃燋膸娄頣򿢨톖쑇գ੄饬䓱鋏Ӿꐷ時궼䓡︸嵞喙⟷셝瑯褾鱊軖돟䷆谗끹쯜䕿ꣵ픭䮵猱拮쿜惪ꈻ讽텴㪐灧恺嬃涨휥◧苭ꆳ讄黐볋퇋壷㊼䉨頮汆ᷯञ⤭ᆰ [ 1237.182250][ T26] audit: type=1326 audit(1745721815.035:2697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25081 comm="syz.0.6770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaa8f8e969 code=0x7fc00000 [ 1237.206146][ T26] audit: type=1326 audit(1745721815.035:2698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25081 comm="syz.0.6770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaa8f8e969 code=0x7fc00000 [ 1237.244849][ T26] audit: type=1326 audit(1745721815.035:2699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25081 comm="syz.0.6770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaa8f8e969 code=0x7fc00000 [ 1237.267267][ C0] vkms_vblank_simulate: vblank timer overrun [ 1237.310739][T23132] usb 6-1: SerialNumber: 꾨ᐯ㝄㿪鎠怰⊑壐䊄⤢tඬ㴛鏻襳簳錗켟ꓡ菷圩 [ 1237.349954][ T26] audit: type=1326 audit(1745721815.035:2700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25081 comm="syz.0.6770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaa8f8e969 code=0x7fc00000 [ 1237.464243][ T26] audit: type=1326 audit(1745721815.035:2701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25081 comm="syz.0.6770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaa8f8e969 code=0x7fc00000 [ 1237.568133][ T4308] usb 3-1: USB disconnect, device number 107 [ 1237.989433][T25121] input: syz1 as /devices/virtual/input/input74 [ 1238.383516][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.390047][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.455876][T25128] fuse: Unknown parameter '0000000000000000000000000000000000000000' [ 1238.512068][T23133] usb 4-1: USB disconnect, device number 101 [ 1239.301960][T23132] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 54 if 0 alt 243 proto 3 vid 0x0525 pid 0xA4A8 [ 1239.373799][T23132] usb 6-1: USB disconnect, device number 54 [ 1239.416562][T23132] usblp0: removed [ 1239.868537][T25168] input: syz1 as /devices/virtual/input/input75 [ 1240.198798][T25175] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6798'. [ 1240.408525][T25186] fuse: Unknown parameter '0000000000000000000000000000000000000000' [ 1240.580886][T23132] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1240.790678][T23132] usb 2-1: Using ep0 maxpacket: 32 [ 1240.797726][T23132] usb 2-1: config 0 has an invalid interface number: 110 but max is 0 [ 1240.800827][ T4308] usb 1-1: new full-speed USB device number 108 using dummy_hcd [ 1240.815228][T23132] usb 2-1: config 0 has no interface number 0 [ 1240.831282][T23132] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=3a.e4 [ 1240.849761][T23132] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1240.866708][T23132] usb 2-1: Product: syz [ 1240.875906][T23132] usb 2-1: Manufacturer: syz [ 1240.886681][T23132] usb 2-1: SerialNumber: syz [ 1240.905133][T23132] usb 2-1: config 0 descriptor?? [ 1240.927665][T23132] igorplugusb 2-1:0.110: incorrect number of endpoints [ 1241.004771][ T4308] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1241.016945][ T4308] usb 1-1: not running at top speed; connect to a high speed hub [ 1241.035420][ T4308] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1241.053494][ T4308] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1241.069234][ T4308] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1241.078532][ T4308] usb 1-1: Product: ꒇ蔤孯♐龾ꮬ槠飧곁‷ᎎ웦﨔溙錧熌區缍໼⣶쬑귛ꍾ˛ᘑ㯐嗼Ωꑨ퀭뒟范㶸鴑瀑휿㠕훊΍쁞挌閇獡ݢ㞵ꍬ䙧﯀蘛봔宨囨ꄆ㪉缀ꜹ☩⒅폹떿簒꠵ࢬ닱蓰礙걎蛕쇃㧷箳鿇椹熼ᘀ숢혫㾖ᾁ쨵㫙걤㈥뜻ȫ劗魌䕀꘱邡긺䁌ಶ녪ꇣ걭둗蟡醭䁀ස띫踖㚤퍒ᜋ [ 1241.114011][ C0] vkms_vblank_simulate: vblank timer overrun [ 1241.121195][ T4308] usb 1-1: Manufacturer: 嘋䶟偏眆⴫㗖馷瀒稍ิ縃삱匦䦷飋є灕啠见ꬦ쾁シꛨ怮䣲둾ﲱ㲝姾ऍ庌鵃燋膸娄頣򿢨톖쑇գ੄饬䓱鋏Ӿꐷ時궼䓡︸嵞喙⟷셝瑯褾鱊軖돟䷆谗끹쯜䕿ꣵ픭䮵猱拮쿜惪ꈻ讽텴㪐灧恺嬃涨휥◧苭ꆳ讄黐볋퇋壷㊼䉨頮汆ᷯञ⤭ᆰ [ 1241.151952][ C0] vkms_vblank_simulate: vblank timer overrun [ 1241.158815][ T4308] usb 1-1: SerialNumber: 꾨ᐯ㝄㿪鎠怰⊑壐䊄⤢tඬ㴛鏻襳簳錗켟ꓡ菷圩 [ 1241.498496][ T4308] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 108 if 0 alt 243 proto 3 vid 0x0525 pid 0xA4A8 [ 1241.574388][ T4308] usb 1-1: USB disconnect, device number 108 [ 1241.627385][ T4308] usblp0: removed [ 1242.149123][T25225] input: syz1 as /devices/virtual/input/input76 [ 1242.401348][T25229] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6814'. [ 1242.594053][T25239] fuse: Unknown parameter '0000000000000000000000000000000000000000' [ 1243.328140][T23133] usb 2-1: USB disconnect, device number 82 [ 1243.350744][ T4308] usb 6-1: new full-speed USB device number 55 using dummy_hcd [ 1243.586117][ T4308] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1243.618279][ T4308] usb 6-1: not running at top speed; connect to a high speed hub [ 1243.675232][ T4308] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1243.749872][ T4308] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1243.800738][ T4308] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1243.845864][ T4308] usb 6-1: Product: ꒇ蔤孯♐龾ꮬ槠飧곁‷ᎎ웦﨔溙錧熌區缍໼⣶쬑귛ꍾ˛ᘑ㯐嗼Ωꑨ퀭뒟范㶸鴑瀑휿㠕훊΍쁞挌閇獡ݢ㞵ꍬ䙧﯀蘛봔宨囨ꄆ㪉缀ꜹ☩⒅폹떿簒꠵ࢬ닱蓰礙걎蛕쇃㧷箳鿇椹熼ᘀ숢혫㾖ᾁ쨵㫙걤㈥뜻ȫ劗魌䕀꘱邡긺䁌ಶ녪ꇣ걭둗蟡醭䁀ස띫踖㚤퍒ᜋ [ 1244.096623][ T4308] usb 6-1: Manufacturer: 嘋䶟偏眆⴫㗖馷瀒稍ิ縃삱匦䦷飋є灕啠见ꬦ쾁シꛨ怮䣲둾ﲱ㲝姾ऍ庌鵃燋膸娄頣򿢨톖쑇գ੄饬䓱鋏Ӿꐷ時궼䓡︸嵞喙⟷셝瑯褾鱊軖돟䷆谗끹쯜䕿ꣵ픭䮵猱拮쿜惪ꈻ讽텴㪐灧恺嬃涨휥◧苭ꆳ讄黐볋퇋壷㊼䉨頮汆ᷯञ⤭ᆰ [ 1244.256494][ T4308] usb 6-1: SerialNumber: 꾨ᐯ㝄㿪鎠怰⊑壐䊄⤢tඬ㴛鏻襳簳錗켟ꓡ菷圩 [ 1245.238659][T25287] fuse: Unknown parameter '0000000000000000000000000000000000000000' [ 1245.399929][T25290] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6833'. [ 1245.735091][ T4308] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 55 if 0 alt 243 proto 3 vid 0x0525 pid 0xA4A8 [ 1245.805393][ T4308] usb 6-1: USB disconnect, device number 55 [ 1245.846113][ T4308] usblp0: removed [ 1246.023065][T23132] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 1246.210634][T23132] usb 1-1: Using ep0 maxpacket: 32 [ 1246.217490][T23132] usb 1-1: config 0 has an invalid interface number: 110 but max is 0 [ 1246.251618][T23132] usb 1-1: config 0 has no interface number 0 [ 1246.286515][T23132] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=3a.e4 [ 1246.314967][T23132] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1246.372993][T23132] usb 1-1: Product: syz [ 1246.390627][T23132] usb 1-1: Manufacturer: syz [ 1246.395324][T23132] usb 1-1: SerialNumber: syz [ 1246.425559][T23132] usb 1-1: config 0 descriptor?? [ 1246.448063][T23132] igorplugusb 1-1:0.110: incorrect number of endpoints [ 1246.997932][T25312] loop3: detected capacity change from 0 to 32768 [ 1247.024832][T25312] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.6841 (25312) [ 1247.072157][T25312] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1247.096012][T25312] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 1247.116602][T25312] BTRFS info (device loop3): using free space tree [ 1247.244328][T25312] BTRFS info (device loop3): enabling ssd optimizations [ 1247.409336][T22644] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1247.426642][T25343] fuse: Unknown parameter '0000000000000000000000000000000000000000' [ 1248.165326][T25365] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6848'. [ 1248.751671][ T4308] usb 2-1: new full-speed USB device number 83 using dummy_hcd [ 1248.814757][T23132] usb 1-1: USB disconnect, device number 109 [ 1248.940130][T25389] fuse: Unknown parameter '0000000000000000000000000000000000000000' [ 1248.952694][ T4308] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1248.976504][ T4308] usb 2-1: not running at top speed; connect to a high speed hub [ 1249.159228][ T4308] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1250.700840][ T4265] Bluetooth: hci5: command 0x0406 tx timeout [ 1250.891927][ T4308] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1250.910756][ T4308] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1250.919307][ T4308] usb 2-1: Product: ꒇ蔤孯♐龾ꮬ槠飧곁‷ᎎ웦﨔溙錧熌區缍໼⣶쬑귛ꍾ˛ᘑ㯐嗼Ωꑨ퀭뒟范㶸鴑瀑휿㠕훊΍쁞挌閇獡ݢ㞵ꍬ䙧﯀蘛봔宨囨ꄆ㪉缀ꜹ☩⒅폹떿簒꠵ࢬ닱蓰礙걎蛕쇃㧷箳鿇椹熼ᘀ숢혫㾖ᾁ쨵㫙걤㈥뜻ȫ劗魌䕀꘱邡긺䁌ಶ녪ꇣ걭둗蟡醭䁀ස띫踖㚤퍒ᜋ [ 1250.955171][ T4308] usb 2-1: Manufacturer: 嘋䶟偏眆⴫㗖馷瀒稍ิ縃삱匦䦷飋є灕啠见ꬦ쾁シꛨ怮䣲둾ﲱ㲝姾ऍ庌鵃燋膸娄頣򿢨톖쑇գ੄饬䓱鋏Ӿꐷ時궼䓡︸嵞喙⟷셝瑯褾鱊軖돟䷆谗끹쯜䕿ꣵ픭䮵猱拮쿜惪ꈻ讽텴㪐灧恺嬃涨휥◧苭ꆳ讄黐볋퇋壷㊼䉨頮汆ᷯञ⤭ᆰ [ 1250.986729][ T4308] usb 2-1: SerialNumber: 꾨ᐯ㝄㿪鎠怰⊑壐䊄⤢tඬ㴛鏻襳簳錗켟ꓡ菷圩 [ 1251.347283][ T4308] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 83 if 0 alt 243 proto 3 vid 0x0525 pid 0xA4A8 [ 1251.437841][ T4308] usb 2-1: USB disconnect, device number 83 [ 1251.526660][ T4308] usblp0: removed [ 1251.812365][T25414] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6865'. [ 1252.407588][T25431] fuse: Unknown parameter '0000000000000000000000000000000000000000' [ 1254.878305][T25453] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6880'. [ 1255.490767][T23133] usb 3-1: new full-speed USB device number 108 using dummy_hcd [ 1255.706910][T25480] fuse: Unknown parameter '0000000000000000000000000000000000000000' [ 1255.721650][T23133] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1255.746844][T23133] usb 3-1: not running at top speed; connect to a high speed hub [ 1255.780956][T23133] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1255.833079][T23133] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1256.436567][T23133] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1256.445655][T23133] usb 3-1: Product: ꒇ蔤孯♐龾ꮬ槠飧곁‷ᎎ웦﨔溙錧熌區缍໼⣶쬑귛ꍾ˛ᘑ㯐嗼Ωꑨ퀭뒟范㶸鴑瀑휿㠕훊΍쁞挌閇獡ݢ㞵ꍬ䙧﯀蘛봔宨囨ꄆ㪉缀ꜹ☩⒅폹떿簒꠵ࢬ닱蓰礙걎蛕쇃㧷箳鿇椹熼ᘀ숢혫㾖ᾁ쨵㫙걤㈥뜻ȫ劗魌䕀꘱邡긺䁌ಶ녪ꇣ걭둗蟡醭䁀ස띫踖㚤퍒ᜋ [ 1256.482193][T23133] usb 3-1: Manufacturer: 嘋䶟偏眆⴫㗖馷瀒稍ิ縃삱匦䦷飋є灕啠见ꬦ쾁シꛨ怮䣲둾ﲱ㲝姾ऍ庌鵃燋膸娄頣򿢨톖쑇գ੄饬䓱鋏Ӿꐷ時궼䓡︸嵞喙⟷셝瑯褾鱊軖돟䷆谗끹쯜䕿ꣵ픭䮵猱拮쿜惪ꈻ讽텴㪐灧恺嬃涨휥◧苭ꆳ讄黐볋퇋壷㊼䉨頮汆ᷯञ⤭ᆰ [ 1256.515388][T23133] usb 3-1: SerialNumber: 꾨ᐯ㝄㿪鎠怰⊑壐䊄⤢tඬ㴛鏻襳簳錗켟ꓡ菷圩 [ 1259.251675][T23133] usblp 3-1:1.0: usblp0: USB Bidirectional printer dev 108 if 0 alt 243 proto 3 vid 0x0525 pid 0xA4A8 [ 1259.323785][T23133] usb 3-1: USB disconnect, device number 108 [ 1259.384753][T23133] usblp0: removed [ 1259.729413][T25507] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6893'. [ 1260.338770][T25536] fuse: Unknown parameter '0000000000000000000000000000000000000000' [ 1260.563461][T25539] fuse: Unknown parameter '0000000000000000000000000000000000000000' [ 1260.693012][T25541] loop3: detected capacity change from 0 to 1024 [ 1260.769348][T25541] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1260.931975][T25541] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1261.796648][T25529] loop2: detected capacity change from 0 to 32768 [ 1262.405519][T22644] EXT4-fs (loop3): unmounting filesystem. [ 1262.460915][T18464] usb 1-1: new full-speed USB device number 110 using dummy_hcd [ 1262.508989][T25529] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1265.647457][T25567] input: syz1 as /devices/virtual/input/input80 [ 1265.665577][T21465] (syz-executor,21465,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 1265.741615][T21465] ocfs2: Unmounting device (7,2) on (node local) [ 1265.828024][T25569] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6906'. [ 1265.871027][T18464] usb 1-1: device descriptor read/all, error -71 [ 1265.917031][T25569] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6906'. [ 1266.037173][T25571] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6909'. [ 1266.337438][T25592] fuse: Unknown parameter '0000000000000000000000000000000000000000' [ 1266.767814][T25605] fuse: Unknown parameter '0000000000000000000000000000000000000000' [ 1266.948416][ T26] kauditd_printk_skb: 25 callbacks suppressed [ 1266.948433][ T26] audit: type=1326 audit(1745721845.225:2727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25603 comm="syz.5.6928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34658e969 code=0x7fc00000 [ 1267.094746][T25612] loop1: detected capacity change from 0 to 1024 [ 1267.890170][ T26] audit: type=1326 audit(1745721845.245:2728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25603 comm="syz.5.6928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa34658e969 code=0x7fc00000 [ 1267.915788][ T26] audit: type=1326 audit(1745721845.245:2729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25603 comm="syz.5.6928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34658e969 code=0x7fc00000 [ 1267.938540][ T26] audit: type=1326 audit(1745721845.245:2730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25603 comm="syz.5.6928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34658e969 code=0x7fc00000 [ 1267.939214][T25612] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1267.961188][ T26] audit: type=1326 audit(1745721845.245:2731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25603 comm="syz.5.6928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34658e969 code=0x7fc00000 [ 1267.961227][ T26] audit: type=1326 audit(1745721845.245:2732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25603 comm="syz.5.6928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34658e969 code=0x7fc00000 [ 1267.961260][ T26] audit: type=1326 audit(1745721845.245:2733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25603 comm="syz.5.6928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34658e969 code=0x7fc00000 [ 1267.961292][ T26] audit: type=1326 audit(1745721845.245:2734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25603 comm="syz.5.6928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34658e969 code=0x7fc00000 [ 1267.961325][ T26] audit: type=1326 audit(1745721845.245:2735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25603 comm="syz.5.6928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34658e969 code=0x7fc00000 [ 1267.961356][ T26] audit: type=1326 audit(1745721845.245:2736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25603 comm="syz.5.6928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34658e969 code=0x7fc00000 [ 1268.158362][T25620] input: syz1 as /devices/virtual/input/input81 [ 1269.772411][T25634] loop2: detected capacity change from 0 to 8 [ 1270.014206][T25612] EXT4-fs warning (device loop1): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop1. [ 1270.071107][T25640] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6924'. [ 1270.530697][T18463] usb 6-1: new full-speed USB device number 56 using dummy_hcd [ 1270.811372][T18463] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1270.824117][T18463] usb 6-1: not running at top speed; connect to a high speed hub [ 1270.911608][T18463] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1270.952463][T18463] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1271.008066][T18463] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1271.048541][T18463] usb 6-1: Product: ꒇ蔤孯♐龾ꮬ槠飧곁‷ᎎ웦﨔溙錧熌區缍໼⣶쬑귛ꍾ˛ᘑ㯐嗼Ωꑨ퀭뒟范㶸鴑瀑휿㠕훊΍쁞挌閇獡ݢ㞵ꍬ䙧﯀蘛봔宨囨ꄆ㪉缀ꜹ☩⒅폹떿簒꠵ࢬ닱蓰礙걎蛕쇃㧷箳鿇椹熼ᘀ숢혫㾖ᾁ쨵㫙걤㈥뜻ȫ劗魌䕀꘱邡긺䁌ಶ녪ꇣ걭둗蟡醭䁀ස띫踖㚤퍒ᜋ [ 1271.290670][T18463] usb 6-1: Manufacturer: 嘋䶟偏眆⴫㗖馷瀒稍ิ縃삱匦䦷飋є灕啠见ꬦ쾁シꛨ怮䣲둾ﲱ㲝姾ऍ庌鵃燋膸娄頣򿢨톖쑇գ੄饬䓱鋏Ӿꐷ時궼䓡︸嵞喙⟷셝瑯褾鱊軖돟䷆谗끹쯜䕿ꣵ픭䮵猱拮쿜惪ꈻ讽텴㪐灧恺嬃涨휥◧苭ꆳ讄黐볋퇋壷㊼䉨頮汆ᷯञ⤭ᆰ [ 1271.535549][T18463] usb 6-1: SerialNumber: 꾨ᐯ㝄㿪鎠怰⊑壐䊄⤢tඬ㴛鏻襳簳錗켟ꓡ菷圩 [ 1273.435610][T25646] loop1: detected capacity change from 0 to 32768 [ 1273.468025][T18463] usb 6-1: can't set config #1, error -71 [ 1273.481186][T18463] usb 6-1: USB disconnect, device number 56 [ 1273.503916][T25646] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.6926 (25646) [ 1273.653134][T25674] fuse: Unknown parameter '0000000000000000000000000000000000000000' [ 1273.702547][T25677] input: syz1 as /devices/virtual/input/input82 [ 1273.836178][ T26] kauditd_printk_skb: 57 callbacks suppressed [ 1273.836190][ T26] audit: type=1326 audit(1745721852.115:2794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25673 comm="syz.2.6934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02b798e969 code=0x7fc00000 [ 1273.957661][T25683] loop3: detected capacity change from 0 to 1024 [ 1273.998656][ T26] audit: type=1326 audit(1745721852.115:2795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25673 comm="syz.2.6934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f02b798e969 code=0x7fc00000 [ 1274.028140][T25683] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1274.112034][T25683] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1274.122634][ T26] audit: type=1326 audit(1745721852.115:2796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25673 comm="syz.2.6934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02b798e969 code=0x7fc00000 [ 1274.195134][T25687] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6939'. [ 1274.296926][ T26] audit: type=1326 audit(1745721852.145:2797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25673 comm="syz.2.6934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02b798e969 code=0x7fc00000 [ 1275.048888][T22644] EXT4-fs (loop3): unmounting filesystem. [ 1276.381661][T18465] usb 4-1: new full-speed USB device number 102 using dummy_hcd [ 1276.593937][T18465] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1276.610990][T18465] usb 4-1: not running at top speed; connect to a high speed hub [ 1276.662325][T18465] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1276.703660][T18465] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1276.734334][T18465] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1276.767583][T18465] usb 4-1: Product: ꒇ蔤孯♐龾ꮬ槠飧곁‷ᎎ웦﨔溙錧熌區缍໼⣶쬑귛ꍾ˛ᘑ㯐嗼Ωꑨ퀭뒟范㶸鴑瀑휿㠕훊΍쁞挌閇獡ݢ㞵ꍬ䙧﯀蘛봔宨囨ꄆ㪉缀ꜹ☩⒅폹떿簒꠵ࢬ닱蓰礙걎蛕쇃㧷箳鿇椹熼ᘀ숢혫㾖ᾁ쨵㫙걤㈥뜻ȫ劗魌䕀꘱邡긺䁌ಶ녪ꇣ걭둗蟡醭䁀ස띫踖㚤퍒ᜋ [ 1276.918348][T18465] usb 4-1: Manufacturer: 嘋䶟偏眆⴫㗖馷瀒稍ิ縃삱匦䦷飋є灕啠见ꬦ쾁シꛨ怮䣲둾ﲱ㲝姾ऍ庌鵃燋膸娄頣򿢨톖쑇գ੄饬䓱鋏Ӿꐷ時궼䓡︸嵞喙⟷셝瑯褾鱊軖돟䷆谗끹쯜䕿ꣵ픭䮵猱拮쿜惪ꈻ讽텴㪐灧恺嬃涨휥◧苭ꆳ讄黐볋퇋壷㊼䉨頮汆ᷯञ⤭ᆰ [ 1277.029195][T25738] fuse: Unknown parameter '0000000000000000000000000000000000000000' [ 1277.114876][T18465] usb 4-1: SerialNumber: 꾨ᐯ㝄㿪鎠怰⊑壐䊄⤢tඬ㴛鏻襳簳錗켟ꓡ菷圩 [ 1277.170225][ T26] audit: type=1326 audit(1745721855.445:2798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25737 comm="syz.5.6951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34658e969 code=0x7fc00000 [ 1277.275589][ T26] audit: type=1326 audit(1745721855.445:2799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25737 comm="syz.5.6951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa34658e969 code=0x7fc00000 [ 1277.390501][ T26] audit: type=1326 audit(1745721855.445:2800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25737 comm="syz.5.6951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34658e969 code=0x7fc00000 [ 1277.496781][T18465] usblp 4-1:1.0: usblp0: USB Bidirectional printer dev 102 if 0 alt 243 proto 3 vid 0x0525 pid 0xA4A8 [ 1277.527985][ T26] audit: type=1326 audit(1745721855.445:2801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25737 comm="syz.5.6951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34658e969 code=0x7fc00000 [ 1277.581694][T18465] usb 4-1: USB disconnect, device number 102 [ 1277.633514][T18465] usblp0: removed [ 1277.680686][ T26] audit: type=1326 audit(1745721855.445:2802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25737 comm="syz.5.6951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34658e969 code=0x7fc00000 [ 1277.740146][ T26] audit: type=1326 audit(1745721855.445:2803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25737 comm="syz.5.6951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34658e969 code=0x7fc00000 [ 1277.977556][T25747] loop5: detected capacity change from 0 to 512 [ 1277.989261][T25747] EXT4-fs: Ignoring removed mblk_io_submit option [ 1277.996673][T25747] EXT4-fs: Ignoring removed mblk_io_submit option [ 1278.072901][T25747] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 1278.228984][T25754] netlink: 84 bytes leftover after parsing attributes in process `syz.0.6955'. [ 1278.593892][T25751] loop1: detected capacity change from 0 to 1024 [ 1278.610923][T25747] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c11c, mo2=0002] [ 1278.618929][T25747] System zones: 1-12 [ 1278.647387][T25751] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1278.678531][T25747] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2195: inode #15: comm syz.5.6954: corrupted in-inode xattr [ 1278.723187][T25751] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1278.735007][T25747] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.6954: couldn't read orphan inode 15 (err -117) [ 1278.761308][T25747] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1279.459670][T25765] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6958'. [ 1279.484209][T25747] EXT4-fs warning (device loop5): dx_probe:833: inode #2: comm syz.5.6954: Unrecognised inode hash code 4 [ 1279.507003][T25747] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.6954: Corrupt directory, running e2fsck is recommended [ 1279.526905][T25747] EXT4-fs warning (device loop5): dx_probe:833: inode #2: comm syz.5.6954: Unrecognised inode hash code 4 [ 1279.539532][T25747] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.6954: Corrupt directory, running e2fsck is recommended [ 1279.553635][T25747] EXT4-fs warning (device loop5): dx_probe:833: inode #2: comm syz.5.6954: Unrecognised inode hash code 4 [ 1279.592170][T25747] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.6954: Corrupt directory, running e2fsck is recommended [ 1279.838792][T22441] EXT4-fs (loop1): unmounting filesystem. [ 1279.875841][T16162] EXT4-fs (loop5): unmounting filesystem. [ 1279.898729][T25784] loop2: detected capacity change from 0 to 256 [ 1281.372863][T25807] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6969'. [ 1281.520850][T18463] usb 1-1: new full-speed USB device number 112 using dummy_hcd [ 1281.732921][T18463] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1281.755445][T18463] usb 1-1: not running at top speed; connect to a high speed hub [ 1281.785591][T25817] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6972'. [ 1281.833187][T18463] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1281.860497][T18463] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1281.927504][T18463] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1281.949041][T25819] loop5: detected capacity change from 0 to 1024 [ 1281.967839][T18463] usb 1-1: Product: ꒇ蔤孯♐龾ꮬ槠飧곁‷ᎎ웦﨔溙錧熌區缍໼⣶쬑귛ꍾ˛ᘑ㯐嗼Ωꑨ퀭뒟范㶸鴑瀑휿㠕훊΍쁞挌閇獡ݢ㞵ꍬ䙧﯀蘛봔宨囨ꄆ㪉缀ꜹ☩⒅폹떿簒꠵ࢬ닱蓰礙걎蛕쇃㧷箳鿇椹熼ᘀ숢혫㾖ᾁ쨵㫙걤㈥뜻ȫ劗魌䕀꘱邡긺䁌ಶ녪ꇣ걭둗蟡醭䁀ස띫踖㚤퍒ᜋ [ 1282.007857][T25819] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1282.076914][T25819] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1282.090772][T18463] usb 1-1: Manufacturer: 嘋䶟偏眆⴫㗖馷瀒稍ิ縃삱匦䦷飋є灕啠见ꬦ쾁シꛨ怮䣲둾ﲱ㲝姾ऍ庌鵃燋膸娄頣򿢨톖쑇գ੄饬䓱鋏Ӿꐷ時궼䓡︸嵞喙⟷셝瑯褾鱊軖돟䷆谗끹쯜䕿ꣵ픭䮵猱拮쿜惪ꈻ讽텴㪐灧恺嬃涨휥◧苭ꆳ讄黐볋퇋壷㊼䉨頮汆ᷯञ⤭ᆰ [ 1282.976600][T18463] usb 1-1: SerialNumber: 꾨ᐯ㝄㿪鎠怰⊑壐䊄⤢tඬ㴛鏻襳簳錗켟ꓡ菷圩 [ 1283.206961][T16162] EXT4-fs (loop5): unmounting filesystem. [ 1284.188310][T18463] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 112 if 0 alt 243 proto 3 vid 0x0525 pid 0xA4A8 [ 1284.335746][T18463] usb 1-1: USB disconnect, device number 112 [ 1284.390013][T18463] usblp0: removed [ 1285.964992][T25832] loop1: detected capacity change from 0 to 32768 [ 1285.993376][T25832] XFS (loop1): Mounting V5 Filesystem [ 1286.092007][T25832] XFS (loop1): Ending clean mount [ 1286.117689][T25832] XFS (loop1): Quotacheck needed: Please wait. [ 1286.261040][T25832] XFS (loop1): Quotacheck: Done. [ 1287.376966][T25882] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1287.386295][T25882] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1287.918037][T25884] loop5: detected capacity change from 0 to 32768 [ 1288.409838][T25884] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1288.420264][T25884] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 1288.429190][T25884] BTRFS info (device loop5): using free space tree [ 1288.589893][T22441] XFS (loop1): Unmounting Filesystem [ 1288.813550][T25884] BTRFS info (device loop5): enabling ssd optimizations [ 1288.960792][T13563] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 1289.044114][T16162] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1289.236897][T13563] usb 3-1: Using ep0 maxpacket: 8 [ 1289.253376][T13563] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 1289.287000][T13563] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1289.314282][T13563] usb 3-1: Product: syz [ 1289.333227][T13563] usb 3-1: Manufacturer: syz [ 1289.400665][T13563] usb 3-1: SerialNumber: syz [ 1289.461464][T13563] usb 3-1: config 0 descriptor?? [ 1289.669986][T25919] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6987'. [ 1289.750490][T13563] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 1289.951246][T13563] usb write operation failed. (-71) [ 1289.965466][T13563] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1290.020929][T13563] dvbdev: DVB: registering new adapter (Terratec H7) [ 1290.061055][T13563] usb 3-1: media controller created [ 1290.100758][T13563] usb read operation failed. (-71) [ 1290.130933][T13563] usb write operation failed. (-71) [ 1290.149022][T13563] dvb_usb_az6007: probe of 3-1:0.0 failed with error -5 [ 1290.220779][T13563] usb 3-1: USB disconnect, device number 109 [ 1291.941151][T25951] netlink: 84 bytes leftover after parsing attributes in process `syz.1.6997'. [ 1292.329462][T25953] loop2: detected capacity change from 0 to 1024 [ 1292.661607][T25957] hfsplus: bad catalog entry type [ 1293.306666][ T4325] hfsplus: b-tree write err: -5, ino 4 [ 1293.598367][T25964] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7005'. [ 1293.940688][T18464] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 1294.150702][T18464] usb 3-1: Using ep0 maxpacket: 32 [ 1294.825297][T18464] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1294.843573][T18464] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1294.858212][T18464] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1294.870707][T18464] usb 3-1: Product: syz [ 1294.876904][T18464] usb 3-1: Manufacturer: syz [ 1294.884032][T18464] usb 3-1: SerialNumber: syz [ 1294.890416][T18464] usb 3-1: config 0 descriptor?? [ 1295.314048][T18464] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 1295.726143][T18464] gs_usb 3-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 1296.270712][ T4273] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1296.280746][ T4273] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1296.288598][ T4273] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1296.297073][ T4273] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1296.304672][ T4273] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1296.340923][ T4273] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1296.446101][T25982] infiniband syz2: set down [ 1296.513017][T18464] usb 3-1: USB disconnect, device number 110 [ 1296.548742][T25982] infiniband syz2: added ipvlan1 [ 1296.573920][T25982] rdma_rxe: unable to create cq [ 1296.591013][T25982] infiniband syz2: Couldn't create ib_mad CQ [ 1296.615337][T25982] infiniband syz2: Couldn't open port 1 [ 1296.775565][T25996] loop2: detected capacity change from 0 to 4096 [ 1296.838160][T25982] RDS/IB: syz2: added [ 1296.861015][T25982] smc: adding ib device syz2 with port count 1 [ 1296.915492][T25982] smc: ib device syz2 port 1 has pnetid [ 1297.294026][T26000] Illegal XDP return value 4294967282 on prog (id 77) dev N/A, expect packet loss! [ 1297.319936][ T26] kauditd_printk_skb: 61 callbacks suppressed [ 1297.319952][ T26] audit: type=1800 audit(1745721875.595:2865): pid=26000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.7016" name="file1" dev="loop2" ino=34 res=0 errno=0 [ 1297.730598][T25988] chnl_net:caif_netlink_parms(): no params data found [ 1298.082127][T25988] bridge0: port 1(bridge_slave_0) entered blocking state [ 1298.131439][T25988] bridge0: port 1(bridge_slave_0) entered disabled state [ 1298.156466][T25988] device bridge_slave_0 entered promiscuous mode [ 1298.194634][T25988] bridge0: port 2(bridge_slave_1) entered blocking state [ 1298.231084][T25988] bridge0: port 2(bridge_slave_1) entered disabled state [ 1298.266132][T25988] device bridge_slave_1 entered promiscuous mode [ 1298.380724][ T4265] Bluetooth: hci0: command 0x0409 tx timeout [ 1298.521950][T25988] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1298.544265][T25988] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1298.664372][T25988] team0: Port device team_slave_0 added [ 1298.690023][T25988] team0: Port device team_slave_1 added [ 1298.768276][T25988] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1298.800959][T25988] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1298.858072][T25988] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1298.892850][T25988] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1298.920174][T25988] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1298.978844][T25988] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1299.066156][T25988] device hsr_slave_0 entered promiscuous mode [ 1299.083550][T25988] device hsr_slave_1 entered promiscuous mode [ 1299.101063][T25988] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1299.118945][T25988] Cannot create hsr debugfs directory [ 1299.823762][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 1299.830368][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 1299.928905][T25988] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1300.461190][ T4265] Bluetooth: hci0: command 0x041b tx timeout [ 1300.899679][T26021] netlink: 84 bytes leftover after parsing attributes in process `syz.2.7018'. [ 1301.188063][T25988] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1301.467228][T25988] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1301.612240][T25988] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1301.652857][T26023] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7020'. [ 1302.540702][ T4265] Bluetooth: hci0: command 0x040f tx timeout [ 1304.620690][ T4265] Bluetooth: hci0: command 0x0419 tx timeout [ 1304.893126][T25988] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1305.022387][T25988] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1305.081119][T25988] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1305.098240][T25988] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1305.434509][T25988] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1305.500135][T22189] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1305.503795][T26057] loop1: detected capacity change from 0 to 128 [ 1305.541660][T22189] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1305.553260][T25988] 8021q: adding VLAN 0 to HW filter on device team0 [ 1305.589382][T26052] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7028'. [ 1305.611318][T26057] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 1305.705251][T26057] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1305.740754][ T7] usb 1-1: new full-speed USB device number 113 using dummy_hcd [ 1305.909464][T23882] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1305.919047][T23882] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1305.942138][ T7] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1305.953680][ T7] usb 1-1: not running at top speed; connect to a high speed hub [ 1305.970106][T23882] bridge0: port 1(bridge_slave_0) entered blocking state [ 1305.977319][T23882] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1306.003513][ T7] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1306.021705][T26057] ext2 filesystem being mounted at /240/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1306.036345][T23882] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1306.051597][ T7] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1306.062364][T23882] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1306.090607][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1306.093100][T23882] bridge0: port 2(bridge_slave_1) entered blocking state [ 1306.105762][T23882] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1306.164410][ T7] usb 1-1: Product: ꒇ蔤孯♐龾ꮬ槠飧곁‷ᎎ웦﨔溙錧熌區缍໼⣶쬑귛ꍾ˛ᘑ㯐嗼Ωꑨ퀭뒟范㶸鴑瀑휿㠕훊΍쁞挌閇獡ݢ㞵ꍬ䙧﯀蘛봔宨囨ꄆ㪉缀ꜹ☩⒅폹떿簒꠵ࢬ닱蓰礙걎蛕쇃㧷箳鿇椹熼ᘀ숢혫㾖ᾁ쨵㫙걤㈥뜻ȫ劗魌䕀꘱邡긺䁌ಶ녪ꇣ걭둗蟡醭䁀ස띫踖㚤퍒ᜋ [ 1306.189236][T23882] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1306.302414][T23882] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1306.320594][ T7] usb 1-1: Manufacturer: 嘋䶟偏眆⴫㗖馷瀒稍ิ縃삱匦䦷飋є灕啠见ꬦ쾁シꛨ怮䣲둾ﲱ㲝姾ऍ庌鵃燋膸娄頣򿢨톖쑇գ੄饬䓱鋏Ӿꐷ時궼䓡︸嵞喙⟷셝瑯褾鱊軖돟䷆谗끹쯜䕿ꣵ픭䮵猱拮쿜惪ꈻ讽텴㪐灧恺嬃涨휥◧苭ꆳ讄黐볋퇋壷㊼䉨頮汆ᷯञ⤭ᆰ [ 1306.393542][T23882] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1306.422350][T23882] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1306.450724][ T7] usb 1-1: SerialNumber: 꾨ᐯ㝄㿪鎠怰⊑壐䊄⤢tඬ㴛鏻襳簳錗켟ꓡ菷圩 [ 1306.501993][T23882] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1306.554517][T23882] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1306.610410][T23882] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1306.671790][T23882] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1306.741428][T23882] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1306.776084][T23882] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1306.816764][T22441] EXT4-fs (loop1): unmounting filesystem. [ 1306.872100][T23882] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1306.909249][T23882] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1306.958048][T25988] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1307.063629][T26072] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7032'. [ 1307.225465][T26075] loop2: detected capacity change from 0 to 128 [ 1307.302418][ T6725] blk_print_req_error: 62 callbacks suppressed [ 1307.302436][ T6725] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1308.068861][T23285] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1308.087231][T23285] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1308.133832][T25988] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1308.221655][T23395] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1308.323620][ T7] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 113 if 0 alt 243 proto 3 vid 0x0525 pid 0xA4A8 [ 1308.385299][ T7] usb 1-1: USB disconnect, device number 113 [ 1308.411459][T23395] usb 3-1: too many configurations: 253, using maximum allowed: 8 [ 1308.429683][ T7] usblp0: removed [ 1308.452202][T23395] usb 3-1: string descriptor 0 read error: -71 [ 1308.458449][T23395] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1308.505145][T23395] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1308.560753][T23395] usb 3-1: can't set config #1, error -71 [ 1308.587028][T23395] usb 3-1: USB disconnect, device number 111 [ 1310.527091][T26092] netlink: 84 bytes leftover after parsing attributes in process `syz.3.7035'. [ 1311.769808][T26106] loop1: detected capacity change from 0 to 1024 [ 1312.127249][T26110] hfsplus: bad catalog entry type [ 1312.769316][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1313.001099][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1313.054262][T25988] device veth0_vlan entered promiscuous mode [ 1313.122642][T26120] loop3: detected capacity change from 0 to 8 [ 1313.191002][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805699a000: rx timeout, send abort [ 1313.216222][T26120] SQUASHFS error: xz decompression failed, data probably corrupt [ 1313.224304][T26120] SQUASHFS error: Failed to read block 0x108: -5 [ 1313.230737][T26120] SQUASHFS error: Unable to read metadata cache entry [106] [ 1313.238071][T26120] SQUASHFS error: Unable to read inode 0x11f [ 1314.293640][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880564e6800: rx timeout, send abort [ 1314.301918][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805699a000: abort rx timeout. Force session deactivation [ 1314.848593][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880564e6800: abort rx timeout. Force session deactivation [ 1314.870574][T25988] device veth1_vlan entered promiscuous mode [ 1314.919646][T26113] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7042'. [ 1315.563792][ T4713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1315.582227][ T4713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1315.592119][ T4713] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1315.601664][ T4713] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1315.609647][ T4713] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1315.688826][ T4325] hfsplus: b-tree write err: -5, ino 4 [ 1315.773533][ T4713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1315.794746][ T4713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1315.851376][T26129] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7044'. [ 1315.902319][T25988] device veth0_macvtap entered promiscuous mode [ 1315.930370][T25988] device veth1_macvtap entered promiscuous mode [ 1316.026257][T25988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1316.118119][T25988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1316.320489][T26137] loop3: detected capacity change from 0 to 128 [ 1316.362414][T25988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1316.598573][T26137] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 1316.609170][T25988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1316.864650][T25988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1316.878232][T26137] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1316.905559][T26137] ext2 filesystem being mounted at /189/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1316.916785][T25988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1316.977808][T25988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1317.029286][T25988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1317.083204][T25988] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1317.104732][T22644] EXT4-fs (loop3): unmounting filesystem. [ 1317.160906][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1317.169891][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1317.199673][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1317.251254][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1317.275484][T25988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1317.318792][T25988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1317.348404][T25988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1317.404840][T25988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1317.414839][T25988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1317.422466][T26134] loop1: detected capacity change from 0 to 32768 [ 1317.425469][T25988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1317.447105][T25988] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1317.463998][T26134] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1317.492214][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1317.542511][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1317.556746][T26134] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1317.667217][T25988] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1317.739609][T25988] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1317.828167][T25988] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1317.917739][T25988] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1317.932566][T26134] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 24ms [ 1318.015523][T18463] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 1318.030340][T18463] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 1318.691302][T18463] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 660ms [ 1318.783136][T18463] gfs2: fsid=syz:syz.0: jid=0: Done [ 1318.813486][T26134] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 1318.869257][T26134] gfs2: fsid=syz:syz.0: can't start logd thread: -4 [ 1319.021117][T23882] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1319.054366][T23882] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1319.092031][T23158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1319.109087][T23158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1319.119240][T26151] ptrace attach of "./syz-executor exec"[23344] was attempted by "./syz-executor exec"[26151] [ 1319.128593][T23405] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1319.151957][T23405] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1320.652820][T26161] loop5: detected capacity change from 0 to 8 [ 1320.700799][T23783] usb 3-1: new full-speed USB device number 112 using dummy_hcd [ 1321.215922][T26164] SQUASHFS error: xz decompression failed, data probably corrupt [ 1321.224922][T26164] SQUASHFS error: Failed to read block 0xa8: -5 [ 1321.443321][T26164] SQUASHFS error: xz decompression failed, data probably corrupt [ 1321.451677][T26164] SQUASHFS error: Failed to read block 0xa8: -5 [ 1321.459030][ T26] audit: type=1800 audit(1745721899.735:2866): pid=26164 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.7008" name="file0" dev="loop5" ino=3 res=0 errno=0 [ 1322.622652][T26167] loop3: detected capacity change from 0 to 1024 [ 1322.787183][T26169] loop1: detected capacity change from 0 to 8 [ 1322.850858][T26167] hfsplus: invalid extended attribute record [ 1322.959047][T26169] SQUASHFS error: xz decompression failed, data probably corrupt [ 1323.019043][T26169] SQUASHFS error: Failed to read block 0x108: -5 [ 1323.049092][T26169] SQUASHFS error: Unable to read metadata cache entry [106] [ 1323.076460][T26169] SQUASHFS error: Unable to read inode 0x11f [ 1323.241163][ T4755] hfsplus: b-tree write err: -5, ino 4 [ 1323.762246][T26178] loop3: detected capacity change from 0 to 1024 [ 1323.893638][T26177] tipc: Started in network mode [ 1323.920763][T26177] tipc: Node identity 4a78d6dd51cd, cluster identity 4711 [ 1325.981133][T23783] usb 3-1: device descriptor read/all, error -110 [ 1326.245012][T26186] hfsplus: bad catalog entry type [ 1326.634407][T26177] tipc: Enabled bearer , priority 0 [ 1326.710691][T23783] usb 3-1: new full-speed USB device number 113 using dummy_hcd [ 1326.774048][ T4713] hfsplus: b-tree write err: -5, ino 4 [ 1326.870695][T23783] usb 3-1: device descriptor read/64, error -32 [ 1326.906365][T26177] tipc: Resetting bearer [ 1326.990976][T23783] usb usb3-port1: attempt power cycle [ 1327.083901][T26193] loop5: detected capacity change from 0 to 2048 [ 1327.176254][T26193] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1328.052450][ T4338] tipc: Node number set to 464901853 [ 1328.946504][T26206] loop3: detected capacity change from 0 to 40427 [ 1329.019622][T26206] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x3ffff [ 1329.099373][T26206] F2FS-fs (loop3): invalid crc value [ 1329.174895][T26206] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1329.182244][T26196] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 1329.444817][T26206] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1329.760369][ T26] audit: type=1804 audit(1745721908.035:2867): pid=26213 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.7063" name="/newroot/194/file1/bus" dev="loop3" ino=17 res=1 errno=0 [ 1329.849598][ T26] audit: type=1804 audit(1745721908.135:2868): pid=26212 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.7063" name="/newroot/194/file1/bus" dev="loop3" ino=17 res=1 errno=0 [ 1329.946152][T22644] syz-executor: attempt to access beyond end of device [ 1329.946152][T22644] loop3: rw=2049, sector=45096, nr_sectors = 24 limit=40427 [ 1333.135482][T26177] tipc: Disabling bearer [ 1333.284393][T25988] EXT4-fs (loop5): unmounting filesystem. [ 1333.506388][T26226] loop5: detected capacity change from 0 to 1024 [ 1333.606287][T26226] hfsplus: invalid extended attribute record [ 1333.644725][T26220] loop1: detected capacity change from 0 to 4096 [ 1333.777746][ T4755] hfsplus: b-tree write err: -5, ino 4 [ 1334.087383][T26235] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1334.095092][T26235] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1334.612993][T26234] loop5: detected capacity change from 0 to 128 [ 1334.788808][T26239] ptrace attach of "./syz-executor exec"[21465] was attempted by "./syz-executor exec"[26239] [ 1335.452109][T26246] loop5: detected capacity change from 0 to 1024 [ 1335.610917][ T4338] usb 1-1: new full-speed USB device number 114 using dummy_hcd [ 1337.483262][T26250] hfsplus: bad catalog entry type [ 1337.742423][ T4338] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1337.986119][ T41] hfsplus: b-tree write err: -5, ino 4 [ 1338.321632][ T4338] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1338.329231][ T4338] usb 1-1: can't read configurations, error -71 [ 1338.460047][T26260] loop3: detected capacity change from 0 to 1024 [ 1338.531319][T26260] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1338.673028][T26260] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1339.587993][T22644] EXT4-fs (loop3): unmounting filesystem. [ 1339.767574][T26277] loop2: detected capacity change from 0 to 1024 [ 1339.904292][T26277] hfsplus: invalid extended attribute record [ 1341.085479][T22993] hfsplus: b-tree write err: -5, ino 4 [ 1341.243462][T26285] loop2: detected capacity change from 0 to 512 [ 1341.662371][T26285] EXT4-fs: Ignoring removed nobh option [ 1341.806018][T26285] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.7089: invalid indirect mapped block 256 (level 2) [ 1341.954157][T26285] EXT4-fs (loop2): 2 truncates cleaned up [ 1342.008689][T26285] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1342.275348][T21465] EXT4-fs (loop2): unmounting filesystem. [ 1342.732690][T26310] loop1: detected capacity change from 0 to 1024 [ 1342.740146][T26310] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1342.802822][T26310] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1342.840890][T13228] usb 3-1: new full-speed USB device number 115 using dummy_hcd [ 1343.623406][T26319] ptrace attach of "./syz-executor exec"[25988] was attempted by "./syz-executor exec"[26319] [ 1344.540805][ T4265] Bluetooth: hci0: command 0x2016 tx timeout [ 1344.649966][T13228] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1344.658315][T13228] usb 3-1: not running at top speed; connect to a high speed hub [ 1344.679647][T13228] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1344.694024][T13228] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1344.704081][T13228] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1344.712750][T13228] usb 3-1: Product: ꒇ蔤孯♐龾ꮬ槠飧곁‷ᎎ웦﨔溙錧熌區缍໼⣶쬑귛ꍾ˛ᘑ㯐嗼Ωꑨ퀭뒟范㶸鴑瀑휿㠕훊΍쁞挌閇獡ݢ㞵ꍬ䙧﯀蘛봔宨囨ꄆ㪉缀ꜹ☩⒅폹떿簒꠵ࢬ닱蓰礙걎蛕쇃㧷箳鿇椹熼ᘀ숢혫㾖ᾁ쨵㫙걤㈥뜻ȫ劗魌䕀꘱邡긺䁌ಶ녪ꇣ걭둗蟡醭䁀ස띫踖㚤퍒ᜋ [ 1344.715001][T22441] EXT4-fs (loop1): unmounting filesystem. [ 1344.748140][ C1] vkms_vblank_simulate: vblank timer overrun [ 1344.748810][T13228] usb 3-1: Manufacturer: 嘋䶟偏眆⴫㗖馷瀒稍ิ縃삱匦䦷飋є灕啠见ꬦ쾁シꛨ怮䣲둾ﲱ㲝姾ऍ庌鵃燋膸娄頣򿢨톖쑇գ੄饬䓱鋏Ӿꐷ時궼䓡︸嵞喙⟷셝瑯褾鱊軖돟䷆谗끹쯜䕿ꣵ픭䮵猱拮쿜惪ꈻ讽텴㪐灧恺嬃涨휥◧苭ꆳ讄黐볋퇋壷㊼䉨頮汆ᷯञ⤭ᆰ [ 1344.791440][ C1] vkms_vblank_simulate: vblank timer overrun [ 1344.800103][T13228] usb 3-1: SerialNumber: 꾨ᐯ㝄㿪鎠怰⊑壐䊄⤢tඬ㴛鏻襳簳錗켟ꓡ菷圩 [ 1345.602387][T26334] loop3: detected capacity change from 0 to 512 [ 1345.632717][T26334] EXT4-fs: Ignoring removed nobh option [ 1345.739003][T13228] usb 3-1: can't set config #1, error -71 [ 1345.754490][T26334] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.7104: invalid indirect mapped block 256 (level 2) [ 1345.770903][T26334] EXT4-fs (loop3): 2 truncates cleaned up [ 1345.776713][T26334] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1345.776967][T13228] usb 3-1: USB disconnect, device number 115 [ 1345.873876][T26340] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 1345.881267][T26340] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1346.370053][T22644] EXT4-fs (loop3): unmounting filesystem. [ 1346.387754][T26340] vhci_hcd vhci_hcd.0: Device attached [ 1346.650668][T13228] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 1347.221551][T26341] vhci_hcd: connection reset by peer [ 1347.231331][ T4325] vhci_hcd: stop threads [ 1347.236325][ T4325] vhci_hcd: release socket [ 1347.264454][ T4325] vhci_hcd: disconnect device [ 1347.330647][T26361] loop2: detected capacity change from 0 to 2048 [ 1347.446242][T26361] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1348.631581][T21465] EXT4-fs (loop2): unmounting filesystem. [ 1349.211875][T26374] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7113'. [ 1349.821324][T23132] usb 6-1: new full-speed USB device number 57 using dummy_hcd [ 1349.870656][T18463] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 1350.063875][T23132] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1350.097078][T26391] loop1: detected capacity change from 0 to 512 [ 1350.116663][T23132] usb 6-1: not running at top speed; connect to a high speed hub [ 1350.220113][T26391] EXT4-fs: Ignoring removed nobh option [ 1350.245811][T23132] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1350.343265][T23132] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1350.464402][T26391] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.7120: invalid indirect mapped block 256 (level 2) [ 1350.485079][T23132] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1350.564145][T23132] usb 6-1: Product: ꒇ蔤孯♐龾ꮬ槠飧곁‷ᎎ웦﨔溙錧熌區缍໼⣶쬑귛ꍾ˛ᘑ㯐嗼Ωꑨ퀭뒟范㶸鴑瀑휿㠕훊΍쁞挌閇獡ݢ㞵ꍬ䙧﯀蘛봔宨囨ꄆ㪉缀ꜹ☩⒅폹떿簒꠵ࢬ닱蓰礙걎蛕쇃㧷箳鿇椹熼ᘀ숢혫㾖ᾁ쨵㫙걤㈥뜻ȫ劗魌䕀꘱邡긺䁌ಶ녪ꇣ걭둗蟡醭䁀ස띫踖㚤퍒ᜋ [ 1350.599814][ C1] vkms_vblank_simulate: vblank timer overrun [ 1350.658228][T26391] EXT4-fs (loop1): 2 truncates cleaned up [ 1350.708215][T26391] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1351.081330][T23132] usb 6-1: Manufacturer: 嘋䶟偏眆⴫㗖馷瀒稍ิ縃삱匦䦷飋є灕啠见ꬦ쾁シꛨ怮䣲둾ﲱ㲝姾ऍ庌鵃燋膸娄頣򿢨톖쑇գ੄饬䓱鋏Ӿꐷ時궼䓡︸嵞喙⟷셝瑯褾鱊軖돟䷆谗끹쯜䕿ꣵ픭䮵猱拮쿜惪ꈻ讽텴㪐灧恺嬃涨휥◧苭ꆳ讄黐볋퇋壷㊼䉨頮汆ᷯञ⤭ᆰ [ 1351.467250][T23132] usb 6-1: SerialNumber: 꾨ᐯ㝄㿪鎠怰⊑壐䊄⤢tඬ㴛鏻襳簳錗켟ꓡ菷圩 [ 1351.836337][T13228] vhci_hcd: vhci_device speed not set [ 1351.997232][T23132] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 57 if 0 alt 243 proto 3 vid 0x0525 pid 0xA4A8 [ 1352.035006][T18463] usb 1-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=da.8e [ 1352.048820][T18463] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1352.061163][T23132] usb 6-1: USB disconnect, device number 57 [ 1352.065397][T18463] usb 1-1: Product: syz [ 1352.074270][T22441] EXT4-fs (loop1): unmounting filesystem. [ 1352.078108][T18463] usb 1-1: Manufacturer: syz [ 1352.097020][T18463] usb 1-1: SerialNumber: syz [ 1352.113590][T23132] usblp0: removed [ 1352.116257][T18463] usb 1-1: config 0 descriptor?? [ 1352.139501][T18463] usbsevseg 1-1:0.0: USB 7 Segment device now attached [ 1352.343610][T18463] usb 1-1: USB disconnect, device number 116 [ 1352.350142][T18463] usbsevseg 1-1:0.0: USB 7 Segment now disconnected [ 1352.572611][T26403] loop3: detected capacity change from 0 to 2048 [ 1352.695005][T26403] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1352.839945][T26399] loop1: detected capacity change from 0 to 32768 [ 1353.285714][T26411] loop5: detected capacity change from 0 to 1024 [ 1353.309781][T26411] EXT4-fs: Ignoring removed oldalloc option [ 1353.316133][T26411] EXT4-fs: Ignoring removed bh option [ 1353.538437][T26411] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1353.552151][T26408] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 1354.067995][T26411] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1354.125811][ T26] audit: type=1800 audit(1745721932.405:2869): pid=26409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.7126" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 1354.175639][T26409] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:3841: comm syz.5.7126: Allocating blocks 449-513 which overlap fs metadata [ 1354.277466][T26409] EXT4-fs (loop5): pa ffff8880742bfe00: logic 256, phys. 385, len 8 [ 1354.286308][T26409] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 4 [ 1354.293875][T22644] EXT4-fs (loop3): unmounting filesystem. [ 1354.316140][T26399] XFS (loop1): Mounting V5 Filesystem [ 1354.444556][ T26] audit: type=1326 audit(1745721932.725:2870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26420 comm="syz.0.7127" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcaa8f8e969 code=0x0 [ 1354.449342][T26399] XFS (loop1): Ending clean mount [ 1354.482895][T26399] XFS (loop1): Quotacheck needed: Please wait. [ 1354.513967][T25988] EXT4-fs (loop5): unmounting filesystem. [ 1354.604576][T26399] XFS (loop1): Quotacheck: Done. [ 1354.644607][T26429] loop3: detected capacity change from 0 to 8 [ 1354.756456][T26431] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7130'. [ 1354.819773][T26435] SQUASHFS error: xz decompression failed, data probably corrupt [ 1354.828775][T26435] SQUASHFS error: Failed to read block 0xa8: -5 [ 1355.525772][T26435] SQUASHFS error: xz decompression failed, data probably corrupt [ 1355.534135][T26435] SQUASHFS error: Failed to read block 0xa8: -5 [ 1355.547851][ T26] audit: type=1800 audit(1745721933.825:2871): pid=26435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.7128" name="file0" dev="loop3" ino=3 res=0 errno=0 [ 1356.157948][T26434] loop2: detected capacity change from 0 to 32768 [ 1356.187418][ T6725] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by udevd (6725) [ 1357.121714][T26434] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1357.150891][T26434] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 1357.159605][T26434] BTRFS info (device loop2): force clearing of disk cache [ 1357.166981][T26434] BTRFS info (device loop2): force zlib compression, level 3 [ 1357.174850][T26434] BTRFS info (device loop2): enabling auto defrag [ 1357.188919][T26434] BTRFS info (device loop2): max_inline at 0 [ 1357.195195][T26434] BTRFS info (device loop2): using free space tree [ 1357.292096][T22441] XFS (loop1): Unmounting Filesystem [ 1357.426447][T26434] BTRFS info (device loop2): enabling ssd optimizations [ 1357.448815][T26434] BTRFS info (device loop2): rebuilding free space tree [ 1357.871606][T23005] usb 4-1: new full-speed USB device number 103 using dummy_hcd [ 1357.924836][T21465] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1358.836573][T23005] usb 4-1: config 0 interface 0 altsetting 253 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1358.855502][T23005] usb 4-1: config 0 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1358.869758][T26484] loop1: detected capacity change from 0 to 8 [ 1358.877309][T23005] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1358.906157][T23005] usb 4-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 1358.950683][T23005] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1358.996149][T23005] usb 4-1: config 0 descriptor?? [ 1359.003130][T26488] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7144'. [ 1359.021274][T26470] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1359.211228][T26493] SQUASHFS error: xz decompression failed, data probably corrupt [ 1359.219353][T26493] SQUASHFS error: Failed to read block 0xa8: -5 [ 1359.357807][T26493] SQUASHFS error: xz decompression failed, data probably corrupt [ 1359.370780][T26493] SQUASHFS error: Failed to read block 0xa8: -5 [ 1359.482070][ T26] audit: type=1800 audit(1745721937.765:2872): pid=26493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.7143" name="file0" dev="loop1" ino=3 res=0 errno=0 [ 1360.592657][T26503] loop2: detected capacity change from 0 to 128 [ 1360.778469][T23005] usbhid 4-1:0.0: can't add hid device: -71 [ 1360.784986][T23005] usbhid: probe of 4-1:0.0 failed with error -71 [ 1361.274269][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.281070][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.551921][T23005] usb 4-1: USB disconnect, device number 103 [ 1361.927445][T26511] loop5: detected capacity change from 0 to 8 [ 1363.158929][T26511] SQUASHFS error: xz decompression failed, data probably corrupt [ 1363.166970][T26511] SQUASHFS error: Failed to read block 0x108: -5 [ 1363.173485][T26511] SQUASHFS error: Unable to read metadata cache entry [106] [ 1363.181062][T26511] SQUASHFS error: Unable to read inode 0x11f [ 1364.851457][ T26] audit: type=1326 audit(1745721943.135:2873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26529 comm="syz.5.7155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e10b8e969 code=0x7ffc0000 [ 1364.954680][ T26] audit: type=1326 audit(1745721943.135:2874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26529 comm="syz.5.7155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e10b8e969 code=0x7ffc0000 [ 1365.008780][T26538] loop1: detected capacity change from 0 to 8 [ 1365.057170][ T26] audit: type=1326 audit(1745721943.135:2875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26529 comm="syz.5.7155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f5e10b8e969 code=0x7ffc0000 [ 1365.248204][T26541] SQUASHFS error: xz decompression failed, data probably corrupt [ 1365.256817][T26541] SQUASHFS error: Failed to read block 0xa8: -5 [ 1365.293617][T26541] SQUASHFS error: xz decompression failed, data probably corrupt [ 1365.301829][T26541] SQUASHFS error: Failed to read block 0xa8: -5 [ 1366.812186][ T26] audit: type=1326 audit(1745721943.135:2876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26529 comm="syz.5.7155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e10b8e969 code=0x7ffc0000 [ 1366.844589][T26540] loop5: detected capacity change from 0 to 2048 [ 1366.872274][T26543] loop2: detected capacity change from 0 to 128 [ 1366.929764][ T26] audit: type=1326 audit(1745721943.135:2877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26529 comm="syz.5.7155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e10b8e969 code=0x7ffc0000 [ 1366.973519][T26540] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1367.090777][ T26] audit: type=1800 audit(1745721943.585:2878): pid=26541 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.7158" name="file0" dev="loop1" ino=3 res=0 errno=0 [ 1367.779311][T26554] loop1: detected capacity change from 0 to 1024 [ 1367.786510][T26554] EXT4-fs: Ignoring removed oldalloc option [ 1367.792560][T26554] EXT4-fs: Ignoring removed bh option [ 1367.809203][T26554] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1368.061877][T26554] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1368.117673][ T26] audit: type=1800 audit(1745721946.395:2879): pid=26550 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7162" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 1368.162502][T26550] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3841: comm syz.1.7162: Allocating blocks 449-513 which overlap fs metadata [ 1368.177048][T26550] EXT4-fs (loop1): pa ffff888049973b60: logic 256, phys. 385, len 8 [ 1368.185338][T26550] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 4 [ 1368.613828][T25354] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1368.675426][T22441] EXT4-fs (loop1): unmounting filesystem. [ 1368.762786][T26565] loop5: detected capacity change from 0 to 8 [ 1368.886029][T25354] usb 3-1: config 0 has no interfaces? [ 1368.892530][T25354] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1368.901715][T25354] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1369.146703][T26565] SQUASHFS error: xz decompression failed, data probably corrupt [ 1369.155360][T26565] SQUASHFS error: Failed to read block 0x108: -5 [ 1369.161930][T26565] SQUASHFS error: Unable to read metadata cache entry [106] [ 1369.169281][T26565] SQUASHFS error: Unable to read inode 0x11f [ 1369.449753][T25354] usb 3-1: config 0 descriptor?? [ 1370.910472][T26585] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7170'. [ 1370.965053][T18460] usb 3-1: USB disconnect, device number 116 [ 1371.896577][T26593] loop1: detected capacity change from 0 to 128 [ 1372.910665][T13227] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1373.121626][T13227] usb 6-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=da.8e [ 1373.180021][T13227] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1373.270130][T13227] usb 6-1: Product: syz [ 1373.320074][T13227] usb 6-1: Manufacturer: syz [ 1373.368414][T13227] usb 6-1: SerialNumber: syz [ 1373.507840][T13227] usb 6-1: config 0 descriptor?? [ 1373.670684][T13227] usbsevseg 6-1:0.0: USB 7 Segment device now attached [ 1373.914552][T26602] loop3: detected capacity change from 0 to 4096 [ 1373.935548][T26602] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 1373.993532][T13227] usb 6-1: USB disconnect, device number 58 [ 1374.000043][T13227] usbsevseg 6-1:0.0: USB 7 Segment now disconnected [ 1374.071947][T26602] ntfs3: loop3: Failed to load $Extend. [ 1374.670603][T26614] loop2: detected capacity change from 0 to 1024 [ 1374.690304][T26614] EXT4-fs: Ignoring removed oldalloc option [ 1374.696875][T26614] EXT4-fs: Ignoring removed bh option [ 1374.785886][T26614] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1375.225438][T26614] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1375.303430][ T26] audit: type=1800 audit(1745721953.585:2880): pid=26611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.7177" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 1375.349935][T26611] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3841: comm syz.2.7177: Allocating blocks 449-513 which overlap fs metadata [ 1375.368570][T26611] EXT4-fs (loop2): pa ffff8880742bf8c0: logic 256, phys. 385, len 8 [ 1375.376716][T26611] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 4 [ 1375.648591][T21465] EXT4-fs (loop2): unmounting filesystem. [ 1376.007745][T26636] loop2: detected capacity change from 0 to 8 [ 1376.235052][T26636] SQUASHFS error: xz decompression failed, data probably corrupt [ 1376.243122][T26636] SQUASHFS error: Failed to read block 0xa8: -5 [ 1376.254774][T26636] SQUASHFS error: xz decompression failed, data probably corrupt [ 1376.262816][T26636] SQUASHFS error: Failed to read block 0xa8: -5 [ 1376.269357][ T26] audit: type=1800 audit(1745721954.545:2881): pid=26636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.7182" name="file0" dev="loop2" ino=3 res=0 errno=0 [ 1376.381668][T26640] loop3: detected capacity change from 0 to 128 [ 1376.498180][T26645] loop2: detected capacity change from 0 to 4096 [ 1377.261315][T26645] NILFS (loop2): invalid segment: Checksum error in segment payload [ 1377.410685][T26645] NILFS (loop2): trying rollback from an earlier position [ 1378.456930][T26645] NILFS (loop2): recovery complete [ 1378.615189][T26653] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1378.803896][ T26] audit: type=1800 audit(1745721957.085:2882): pid=26655 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.7189" name="file1" dev="loop2" ino=12 res=0 errno=0 [ 1380.241751][T18462] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 1380.484574][T18462] usb 4-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=da.8e [ 1380.500803][T18462] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1380.529312][T18462] usb 4-1: Product: syz [ 1380.550672][T18462] usb 4-1: Manufacturer: syz [ 1380.555318][T18462] usb 4-1: SerialNumber: syz [ 1380.654820][T18462] usb 4-1: config 0 descriptor?? [ 1381.345302][T26691] loop2: detected capacity change from 0 to 8 [ 1382.135349][T18462] usbsevseg 4-1:0.0: USB 7 Segment device now attached [ 1382.148828][T26691] SQUASHFS error: xz decompression failed, data probably corrupt [ 1382.156844][T26691] SQUASHFS error: Failed to read block 0xa8: -5 [ 1382.169146][T26691] SQUASHFS error: xz decompression failed, data probably corrupt [ 1382.176990][T26691] SQUASHFS error: Failed to read block 0xa8: -5 [ 1382.269071][ T26] audit: type=1800 audit(1745721960.465:2883): pid=26691 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.7202" name="file0" dev="loop2" ino=3 res=0 errno=0 [ 1382.358993][T18462] usb 4-1: USB disconnect, device number 104 [ 1382.384065][T18462] usbsevseg 4-1:0.0: USB 7 Segment now disconnected [ 1382.647422][T26696] netlink: 224 bytes leftover after parsing attributes in process `syz.5.7199'. [ 1384.621435][T26726] loop5: detected capacity change from 0 to 8 [ 1384.973968][T26726] SQUASHFS error: xz decompression failed, data probably corrupt [ 1384.981997][T26726] SQUASHFS error: Failed to read block 0xa8: -5 [ 1385.033808][T26733] loop3: detected capacity change from 0 to 8 [ 1386.141169][T26726] SQUASHFS error: xz decompression failed, data probably corrupt [ 1386.149019][T26726] SQUASHFS error: Failed to read block 0xa8: -5 [ 1386.158837][T26733] SQUASHFS error: xz decompression failed, data probably corrupt [ 1386.167643][T26733] SQUASHFS error: Failed to read block 0x108: -5 [ 1386.174343][T26733] SQUASHFS error: Unable to read metadata cache entry [106] [ 1386.181769][T26733] SQUASHFS error: Unable to read inode 0x11f [ 1386.210825][ T26] audit: type=1800 audit(1745721964.445:2884): pid=26726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.7216" name="file0" dev="loop5" ino=3 res=0 errno=0 [ 1386.470672][T13228] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1387.453880][T13228] usb 3-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=da.8e [ 1387.483889][T13228] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1387.512633][T13228] usb 3-1: Product: syz [ 1387.526188][T13228] usb 3-1: Manufacturer: syz [ 1387.543440][T13228] usb 3-1: SerialNumber: syz [ 1387.564289][T26748] netlink: 52 bytes leftover after parsing attributes in process `syz.5.7220'. [ 1387.741999][T13228] usb 3-1: config 0 descriptor?? [ 1387.898075][T13228] usbsevseg 3-1:0.0: USB 7 Segment device now attached [ 1388.481842][T13228] usb 3-1: USB disconnect, device number 117 [ 1388.488316][T13228] usbsevseg 3-1:0.0: USB 7 Segment now disconnected [ 1388.594854][T26756] loop1: detected capacity change from 0 to 256 [ 1388.631119][T26756] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011f41, chksum : 0x31e44978, utbl_chksum : 0xe619d30d) [ 1390.740271][T26774] loop1: detected capacity change from 0 to 1024 [ 1390.823104][T26777] loop3: detected capacity change from 0 to 8 [ 1390.833974][T26774] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1390.960685][T26774] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1391.202124][T26785] loop5: detected capacity change from 0 to 8 [ 1391.336020][T26785] SQUASHFS error: xz decompression failed, data probably corrupt [ 1391.344201][T26785] SQUASHFS error: Failed to read block 0x108: -5 [ 1391.350697][T26785] SQUASHFS error: Unable to read metadata cache entry [106] [ 1391.358120][T26785] SQUASHFS error: Unable to read inode 0x11f [ 1392.114493][T26787] SQUASHFS error: xz decompression failed, data probably corrupt [ 1392.133515][ T6725] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1392.140822][T26787] SQUASHFS error: Failed to read block 0xa8: -5 [ 1392.961680][T22441] EXT4-fs (loop1): unmounting filesystem. [ 1393.002333][T26787] SQUASHFS error: xz decompression failed, data probably corrupt [ 1393.052584][T26787] SQUASHFS error: Failed to read block 0xa8: -5 [ 1393.059285][ T26] audit: type=1800 audit(1745721971.335:2885): pid=26787 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.7232" name="file0" dev="loop3" ino=3 res=0 errno=0 [ 1394.569690][T23132] hid-generic FFF9:0000:0203.000F: unknown main item tag 0x0 [ 1394.580411][T23132] hid-generic FFF9:0000:0203.000F: unknown main item tag 0x0 [ 1394.589148][T23132] hid-generic FFF9:0000:0203.000F: unknown main item tag 0x0 [ 1394.615443][T23132] hid-generic FFF9:0000:0203.000F: unknown main item tag 0x0 [ 1394.659411][T23132] hid-generic FFF9:0000:0203.000F: unknown main item tag 0x0 [ 1394.938542][T23132] hid-generic FFF9:0000:0203.000F: unknown main item tag 0x0 [ 1395.172634][T23132] hid-generic FFF9:0000:0203.000F: unknown main item tag 0x0 [ 1395.206897][T23132] hid-generic FFF9:0000:0203.000F: unknown main item tag 0x0 [ 1395.219635][T23132] hid-generic FFF9:0000:0203.000F: unknown main item tag 0x0 [ 1395.230764][T23132] hid-generic FFF9:0000:0203.000F: unknown main item tag 0x0 [ 1395.259140][T23132] hid-generic FFF9:0000:0203.000F: unknown main item tag 0x0 [ 1395.267266][T23132] hid-generic FFF9:0000:0203.000F: unknown main item tag 0x0 [ 1395.289285][T23132] hid-generic FFF9:0000:0203.000F: unknown main item tag 0x0 [ 1395.306175][T23132] hid-generic FFF9:0000:0203.000F: unknown main item tag 0x0 [ 1395.319031][T23132] hid-generic FFF9:0000:0203.000F: unknown main item tag 0x0 [ 1395.327031][T23132] hid-generic FFF9:0000:0203.000F: unknown main item tag 0x0 [ 1395.336941][T23132] hid-generic FFF9:0000:0203.000F: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1395.959557][T26828] loop3: detected capacity change from 0 to 1024 [ 1395.991414][T26828] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1395.994869][T26825] loop2: detected capacity change from 0 to 4096 [ 1396.090455][T26825] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 1396.152013][T26828] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1396.235232][T26837] loop1: detected capacity change from 0 to 256 [ 1396.244404][T26837] exfat: Deprecated parameter 'utf8' [ 1396.249848][T26837] exfat: Unknown parameter 'zero_size_dir' [ 1397.199277][T26825] ntfs3: loop2: Failed to load $Extend. [ 1397.320110][T26841] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7249'. [ 1397.486178][T22644] EXT4-fs (loop3): unmounting filesystem. [ 1397.722423][T26850] loop3: detected capacity change from 0 to 128 [ 1397.852563][T26852] loop1: detected capacity change from 0 to 2048 [ 1398.007001][T26852] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1399.128402][T22441] EXT4-fs (loop1): unmounting filesystem. [ 1403.227711][T26890] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7262'. [ 1403.747064][T26898] loop1: detected capacity change from 0 to 1024 [ 1403.806059][T26901] loop2: detected capacity change from 0 to 128 [ 1403.862104][T26898] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1404.835975][T26907] loop3: detected capacity change from 0 to 2048 [ 1404.977411][T13225] hid-generic FFF9:0000:0203.0010: unknown main item tag 0x0 [ 1404.987149][T13225] hid-generic FFF9:0000:0203.0010: unknown main item tag 0x0 [ 1404.995298][T13225] hid-generic FFF9:0000:0203.0010: unknown main item tag 0x0 [ 1405.002834][T13225] hid-generic FFF9:0000:0203.0010: unknown main item tag 0x0 [ 1405.010346][T13225] hid-generic FFF9:0000:0203.0010: unknown main item tag 0x0 [ 1405.036026][T13225] hid-generic FFF9:0000:0203.0010: unknown main item tag 0x0 [ 1405.064468][T26907] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1405.092459][T13225] hid-generic FFF9:0000:0203.0010: unknown main item tag 0x0 [ 1405.266175][T13225] hid-generic FFF9:0000:0203.0010: unknown main item tag 0x0 [ 1405.807237][T22644] EXT4-fs (loop3): unmounting filesystem. [ 1405.845990][T13225] hid-generic FFF9:0000:0203.0010: unknown main item tag 0x0 [ 1405.886328][T13225] hid-generic FFF9:0000:0203.0010: unknown main item tag 0x0 [ 1405.901387][T13225] hid-generic FFF9:0000:0203.0010: unknown main item tag 0x0 [ 1405.913581][T26898] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1405.935381][T13225] hid-generic FFF9:0000:0203.0010: unknown main item tag 0x0 [ 1405.956530][T13225] hid-generic FFF9:0000:0203.0010: unknown main item tag 0x0 [ 1405.991884][T13225] hid-generic FFF9:0000:0203.0010: unknown main item tag 0x0 [ 1406.013365][T13225] hid-generic FFF9:0000:0203.0010: unknown main item tag 0x0 [ 1406.324492][T13225] hid-generic FFF9:0000:0203.0010: unknown main item tag 0x0 [ 1407.157097][T26923] page:ffffea0001fb65c0 refcount:4 mapcount:1 mapping:ffff88804296a2f8 index:0x0 pfn:0x7ed97 [ 1407.168642][T26923] memcg:ffff888027c7a000 [ 1407.172912][T26923] aops:shmem_aops ino:20f [ 1407.177257][T26923] flags: 0xfff60000080015(locked|uptodate|lru|swapbacked|node=0|zone=1|lastcpupid=0x7ff) [ 1407.187121][T26923] raw: 00fff60000080015 ffff888027c78248 ffffea0001448c08 ffff88804296a2f8 [ 1407.195731][T26923] raw: 0000000000000000 0000000000000000 0000000400000000 ffff888027c7a000 [ 1407.204323][T26923] page dumped because: VM_BUG_ON_FOLIO(folio_mapped(folio)) [ 1407.211628][T26923] page_owner tracks the page as allocated [ 1407.218594][T26923] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 26928, tgid 26923 (syz.2.7270), ts 1406643122813, free_ts 1405774138545 [ 1407.236676][T26923] post_alloc_hook+0x173/0x1a0 [ 1407.241447][T26923] get_page_from_freelist+0x1a26/0x1ac0 [ 1407.247053][T26923] __alloc_pages+0x1df/0x4e0 [ 1407.251656][T26923] __folio_alloc+0xe/0x30 [ 1407.255996][T26923] vma_alloc_folio+0x4a3/0x900 [ 1407.260771][T26923] shmem_alloc_and_acct_folio+0x42e/0xb60 [ 1407.266514][T26923] shmem_get_folio_gfp+0x1361/0x3400 [ 1407.271808][T26923] shmem_read_mapping_page_gfp+0x99/0x2b0 [ 1407.277554][T26923] udmabuf_create+0x841/0xf80 [ 1407.282254][T26923] udmabuf_ioctl+0x1d1/0x2c0 [ 1407.286851][T26923] __se_sys_ioctl+0xfa/0x170 [ 1407.291460][T26923] do_syscall_64+0x4c/0xa0 [ 1407.295887][T26923] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1407.301777][T26923] page last free stack trace: [ 1407.306438][T26923] free_unref_page_prepare+0x8b4/0x9a0 [ 1407.311898][T26923] free_unref_page_list+0xbb/0x8e0 [ 1407.317013][T26923] release_pages+0x1f92/0x2200 [ 1407.321781][T26923] __pagevec_release+0x6d/0xe0 [ 1407.326549][T26923] shmem_undo_range+0x75b/0x2050 [ 1407.331490][T26923] shmem_evict_inode+0x248/0xa40 [ 1407.336443][T26923] evict+0x485/0x870 [ 1407.340336][T26923] __dentry_kill+0x431/0x650 [ 1407.344930][T26923] dentry_kill+0xb8/0x290 [ 1407.349250][T26923] dput+0xfa/0x1d0 [ 1407.352961][T26923] __fput+0x5e0/0x920 [ 1407.356944][T26923] task_work_run+0x1ca/0x250 [ 1407.361548][T26923] do_exit+0x936/0x2400 [ 1407.365720][T26923] do_group_exit+0x217/0x2d0 [ 1407.370476][T26923] get_signal+0x1272/0x1350 [ 1407.374988][T26923] arch_do_signal_or_restart+0xb0/0x1230 [ 1407.380732][T26923] ------------[ cut here ]------------ [ 1407.386177][T26923] kernel BUG at mm/filemap.c:153! [ 1407.391290][T26923] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 1407.397345][T26923] CPU: 1 PID: 26923 Comm: syz.2.7270 Not tainted 6.1.135-syzkaller #0 [ 1407.405568][T26923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1407.415613][T26923] RIP: 0010:filemap_unaccount_folio+0x5cf/0xa80 [ 1407.421847][T26923] Code: 07 38 c1 0f 8c 19 fe ff ff 4c 89 e7 e8 8a 71 27 00 e9 0c fe ff ff e8 80 03 d6 ff 48 89 df 48 c7 c6 20 0c 75 8a e8 a1 e1 11 00 <0f> 0b e8 6a 03 d6 ff 48 89 df 48 c7 c6 80 11 75 8a e8 8b e1 11 00 [ 1407.441460][T26923] RSP: 0018:ffffc90003d2f618 EFLAGS: 00010046 [ 1407.447521][T26923] RAX: 490c70abd0739800 RBX: ffffea0001fb65c0 RCX: 490c70abd0739800 [ 1407.455490][T26923] RDX: 0000000000000002 RSI: ffffffff8a6c1080 RDI: ffffffff8abf0ea0 [ 1407.463452][T26923] RBP: ffffc90003d2f778 R08: dffffc0000000000 R09: fffffbfff1bfcf4e [ 1407.471430][T26923] R10: fffffbfff1bfcf4e R11: 1ffffffff1bfcf4d R12: dffffc0000000000 [ 1407.479391][T26923] R13: dffffc0000000000 R14: ffff88804296a2f8 R15: ffff88804296a300 [ 1407.487353][T26923] FS: 000055556882c500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1407.496283][T26923] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1407.502851][T26923] CR2: 000000110c3f433c CR3: 0000000077268000 CR4: 00000000003506e0 [ 1407.510813][T26923] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1407.518774][T26923] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1407.526740][T26923] Call Trace: [ 1407.530024][T26923] [ 1407.532962][T26923] __filemap_remove_folio+0xbb/0x860 [ 1407.538253][T26923] ? __rwlock_init+0x140/0x140 [ 1407.543021][T26923] ? __bpf_trace_file_check_and_advance_wb_err+0x30/0x30 [ 1407.550044][T26923] ? _raw_spin_lock_irq+0xab/0xe0 [ 1407.555068][T26923] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 1407.560439][T26923] filemap_remove_folio+0xed/0x2c0 [ 1407.565562][T26923] truncate_inode_folio+0x59/0x70 [ 1407.570598][T26923] shmem_undo_range+0x4d2/0x2050 [ 1407.575540][T26923] ? shmem_truncate_range+0xb0/0xb0 [ 1407.580742][T26923] ? do_raw_spin_lock+0x11d/0x280 [ 1407.585767][T26923] ? __rwlock_init+0x140/0x140 [ 1407.590542][T26923] shmem_evict_inode+0x248/0xa40 [ 1407.595479][T26923] ? _raw_spin_unlock+0x24/0x40 [ 1407.600323][T26923] ? inode_wait_for_writeback+0x1b0/0x200 [ 1407.606043][T26923] ? shmem_free_in_core_inode+0xb0/0xb0 [ 1407.611604][T26923] ? do_raw_spin_lock+0x11d/0x280 [ 1407.616639][T26923] ? bit_waitqueue+0x30/0x30 [ 1407.621235][T26923] ? do_raw_spin_unlock+0x11d/0x230 [ 1407.626441][T26923] ? shmem_free_in_core_inode+0xb0/0xb0 [ 1407.631989][T26923] evict+0x485/0x870 [ 1407.635881][T26923] ? __lock_acquire+0x7c50/0x7c50 [ 1407.640911][T26923] ? proc_nr_inodes+0x2f0/0x2f0 [ 1407.645760][T26923] ? do_raw_spin_unlock+0x11d/0x230 [ 1407.650959][T26923] ? _raw_spin_unlock+0x24/0x40 [ 1407.655805][T26923] ? iput+0x768/0x980 [ 1407.659780][T26923] __dentry_kill+0x431/0x650 [ 1407.664368][T26923] dentry_kill+0xb8/0x290 [ 1407.668705][T26923] ? dput+0x37/0x1d0 [ 1407.672587][T26923] dput+0xfa/0x1d0 [ 1407.676296][T26923] __fput+0x5e0/0x920 [ 1407.680290][T26923] task_work_run+0x1ca/0x250 [ 1407.684976][T26923] ? task_work_cancel+0x230/0x230 [ 1407.689991][T26923] ? __close_range+0x1c5/0x730 [ 1407.694750][T26923] ? exit_to_user_mode_loop+0x3b/0x110 [ 1407.700211][T26923] exit_to_user_mode_loop+0xe6/0x110 [ 1407.705486][T26923] exit_to_user_mode_prepare+0xb1/0x140 [ 1407.711025][T26923] syscall_exit_to_user_mode+0x16/0x40 [ 1407.716480][T26923] do_syscall_64+0x58/0xa0 [ 1407.720888][T26923] ? clear_bhb_loop+0x45/0xa0 [ 1407.725546][T26923] ? clear_bhb_loop+0x45/0xa0 [ 1407.730209][T26923] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1407.736099][T26923] RIP: 0033:0x7f02b798e969 [ 1407.740511][T26923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1407.760109][T26923] RSP: 002b:00007ffef71d5368 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1407.768510][T26923] RAX: 0000000000000000 RBX: 00007f02b7bb7ba0 RCX: 00007f02b798e969 [ 1407.776471][T26923] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1407.784429][T26923] RBP: 00007f02b7bb7ba0 R08: 00000000000001d8 R09: 0000001af71d565f [ 1407.792394][T26923] R10: 00007f02b7bb7ac0 R11: 0000000000000246 R12: 0000000000157892 [ 1407.800363][T26923] R13: 00007f02b7bb6160 R14: ffffffffffffffff R15: 00007ffef71d5480 [ 1407.808340][T26923] [ 1407.811354][T26923] Modules linked in: [ 1407.815247][T26923] ---[ end trace 0000000000000000 ]--- [ 1407.820684][T26923] RIP: 0010:filemap_unaccount_folio+0x5cf/0xa80 [ 1407.826934][T26923] Code: 07 38 c1 0f 8c 19 fe ff ff 4c 89 e7 e8 8a 71 27 00 e9 0c fe ff ff e8 80 03 d6 ff 48 89 df 48 c7 c6 20 0c 75 8a e8 a1 e1 11 00 <0f> 0b e8 6a 03 d6 ff 48 89 df 48 c7 c6 80 11 75 8a e8 8b e1 11 00 [ 1407.846554][T26923] RSP: 0018:ffffc90003d2f618 EFLAGS: 00010046 [ 1407.852617][T26923] RAX: 490c70abd0739800 RBX: ffffea0001fb65c0 RCX: 490c70abd0739800 [ 1407.860586][T26923] RDX: 0000000000000002 RSI: ffffffff8a6c1080 RDI: ffffffff8abf0ea0 [ 1407.868548][T26923] RBP: ffffc90003d2f778 R08: dffffc0000000000 R09: fffffbfff1bfcf4e [ 1407.876601][T26923] R10: fffffbfff1bfcf4e R11: 1ffffffff1bfcf4d R12: dffffc0000000000 [ 1407.884586][T26923] R13: dffffc0000000000 R14: ffff88804296a2f8 R15: ffff88804296a300 [ 1407.892550][T26923] FS: 000055556882c500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1407.901473][T26923] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1407.908048][T26923] CR2: 000000110c3f433c CR3: 0000000077268000 CR4: 00000000003506e0 [ 1407.916028][T26923] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1407.923988][T26923] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1407.931959][T26923] Kernel panic - not syncing: Fatal exception [ 1407.938403][T26923] Kernel Offset: disabled [ 1407.942745][T26923] Rebooting in 86400 seconds..