last executing test programs: 1m50.976086759s ago: executing program 32 (id=175): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x62}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) sendmsg$nl_xfrm(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000500)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@private0, @in6=@mcast2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, {0x1, 0xf85}, 0x0, 0x4}}, [@mark={0xc}]}, 0xcc}}, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/llc/socket\x00') r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r1) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r3, 0x300, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8011}, 0x40000) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x9}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x24040800}, 0x4) 1m36.597938688s ago: executing program 33 (id=261): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x800000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0xc6) r1 = openat$incfs(r0, &(0x7f0000000800)='.pending_reads\x00', 0x400, 0x19a) syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000000)='./file0\x00', 0xa18c14, &(0x7f0000000280)={[{@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@uni_xlate}, {@fat=@codepage={'codepage', 0x3d, '950'}}, {@uni_xlateno}, {@uni_xlateno}, {@utf8}, {@shortname_win95}, {@shortname_lower}, {@fat=@check_strict}, {@shortname_win95}, {@shortname_winnt}, {@utf8no}]}, 0x1, 0x29b, &(0x7f0000000580)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000001c0)={0x38, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x38}}, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, r3, 0x20, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x7}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x6}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x7}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x81}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x44011}, 0x8048004) read$FUSE(r1, 0x0, 0x0) 1m27.582875353s ago: executing program 34 (id=313): syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', 0x82078, &(0x7f0000000080)=ANY=[@ANYRESHEX, @ANYRES64=0x0], 0x0, 0x0, &(0x7f0000000100)) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) memfd_create(&(0x7f0000001080)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\xfb\'\t\x19\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b\xca\xb3\xf0\x1e\xe9+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZj*\xa7z\xfd\xb9\n\xed\'\x92\xfe\xe7w\xf1$\xeax\xa7%(a\xba\xaee\xb6P}\x1f\x06og\"F\xeeL\x16[\xc6\xfbn\r\xa1\xbd\xa7\xdbm\x94G2v\xc6x\xa3\x8a\xfb\xfa\xbb\xcc\x8f\x8a\xfb-%6\x1a4\fbTR\xb4)5?NL\x96\x85\x14\fK\xfb<\xa4\f&g\n\xe1\xc8\x9f\"X\x84n\xce\tIo\x1c\xb4\xdeu_\x93Y\xb5\n\'\xba\xbdv\x8aU\x88\x88\xa9\xcaiv\xbcc\xc3\xb9\xb3\x1d\xea\xdf\x1cQ\x02\xf3\xe8+U\f(h\x1a+\x9d\xae\x19\xf2\x8fr\xca\xa4NUD\x00\xab\xe8\xbf+\xa5\xeb\xaf\x17\x8e\xfbQ\x05\xed!\xfe_L\xb1\x97\xe7\x02)\x1e\xd0\xfcj#r\xcb\xb4\xa6\t\xc3:w\x0f\x82,\xd3\xe5\r\xe1\x85\v\xc5y\x88\x89z_)\x8dV>M5\x90\xd3.\x8a_\xfa\x9d\x98\xef\x97\tiBY5\x84~\xff\x8d\xbb}I\xa1)\xea\xb5l\x19\x00\xac\xc1\x14#\xbc=\xf4\xac\xde}\xf5\x12\xc5\x83\xf6\v\x1b\x92\x02\"\x10^\n\x96\xc2\xbcK9\x02\xb74B\xb3\xcbt\xde\x9e\x82S\x8f\xdb\x94\x02\x90Sb\xb8\xcbS\xbb\xca\x83x\xd5j\x90\xf1\x91\xe0\x8aQl\n^\xbc\xea\x90$\xb7\xaa)\xad,\xb1g\x94UGj\x8c\xc6}U\x02\\\"fb\xc3\x0e\x84%F\xa5\x14\xfb\x89t\xef\a\xdb\xab/\xe3\x8c 5A\xcd\x02t', 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000340)=0x7) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, 0x0, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x1815, 0x0, 0x0, 0x0, 0x0) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r0, 0x0, 0x4004) r1 = syz_open_dev$evdev(&(0x7f0000000280), 0xa3, 0x400) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000380)=""/82) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$UI_SET_PHYS(r4, 0x4008556c, &(0x7f0000000440)='syz1\x00') sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r5, 0x541c, &(0x7f0000000000)) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) epoll_create1(0x0) r6 = signalfd(0xffffffffffffffff, &(0x7f00000000c0)={[0x6]}, 0x8) ioctl$PIO_FONT(r6, 0x4b61, &(0x7f0000000600)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)}, 0x4040001) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) 1m13.175439456s ago: executing program 35 (id=400): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x270}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x1}) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x145}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, &(0x7f0000000200)='\x00\x00') 1m10.751447725s ago: executing program 36 (id=418): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0xfffffffd, 0x0, "8100e1c8e80b598c36ff000800"}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000006080)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, r5, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000180)=ANY=[], 0x0) ioctl$VT_RELDISP(r1, 0x5605) r6 = syz_open_pts(r0, 0x40601) ioctl$TIOCCONS(r6, 0x541d) setitimer(0x1, 0x0, 0x0) ioctl$TIOCSRS485(r6, 0x542f, &(0x7f0000000180)={0x4, 0x1f231703, 0x82}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x0, &(0x7f0000000080)={[{@xino_on}, {@userxattr}, {@xino_on}]}) 1m6.701923923s ago: executing program 7 (id=451): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x800718, &(0x7f00000003c0)={[{@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x60}}, {@nobh}, {@resgid}, {@resuid}, {@nombcache}, {@noblock_validity}, {@usrquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}]}, 0x2, 0x4a3, &(0x7f00000004c0)="$eJzs281rXFUbAPDn3nz2M3n79v1orRotQlBMmrRqF24UBZGKgi7qMk6mJXTaSBPBfmCjiCtBCroWl6J/gbgRQdSV4Epw5UoKRbNp6ypyZ+5NMpNM2iSTTO38fjCZc+aemXueOffce+45kwA61lD2J4nYHRG/RsRALVtfYKj2dHP+cunW/OVSEgsLr/6RVMvdmL9cKooW79uVZ4bTiPT9JN9JvZkLF89MVCrl83l+dPZsX56cOF0+XT43fvz4saNjTz05/kRL4sziunHwnelDB154/epLpZNX3/jhy6y+u/Pty+NYp19Gm2wYygL/c6GqcdsjG9zZ3WrPsnTS3caKsC5dEZE1V0+1/w9EVyw13kA8/15bKwdsqeza1Nd889wCcA9Lot01ANqjuNDvnO8qZffAK++DB7Zy+NF215+p3QBlcd/MH7Ut3ZHmZXoa7m9baSgiTs799Wn2iM3NQwAA3JEPS5+c6I2IS7e+eDEbeyyN9tLu/1aff6v+3ZuPBAcj4l8RsS8i/h0R+yPiPxGRlf1fRPx/k/VZOf5Jr23yI9eUjf+ezte26sd/xegvBrvy3J5q/D3JqalK+Uj+nQxHT1+WH1tjH9889/NHzbYtH/9lj2z/xVgwr8e17oYJusmJ2YnqoLQFrr8bcbA7SVbGnyyuBCQRcSAiDq7vo/cWialHPz/UrNDt419DC9aZFj7LwpvL2n8uGuIvJLX1yTdHZy5cfHzqbOP65Gh/VMpHRoujYqUff/rglWb7r8Xfn+dWj3/H5sNs6nq59rys/ZdtXewDS+u1M63d/waP/7Q3ea26ztybv/b2xOzs+bGI3uRENV/3+vjSe4t8UT47/ocPr97/9+Xvydr/vojIDuL7I+KBiHgwr/tDEfFwRBxeI8bvn719/JFu4PhvgSz+yVXPf4vH/2BS1/7rT3Sd+e6rZvu/s/Y/Vk0N569Uz38Nkob8atXpjuhrrOBmvz8AAAD4J0irv4FP0pHFdJqOjNR+w78/dqaV6ZnZx05Nv3VusvZb+cHoSYuZroF8PrQyVSmPJXP5J9bmR8fzueJivvRoPm/8cdeOan6kNF2ZbHPs0Ol2Nen/md+72l07YIvVLy8VC8DjvW2pDLDNGtfR0/rslZfDyQDuVf5fGzrXbfp/ul31ALaf6z90rtX6/5WGvLUAuDe5/kPn0v+hQ6Xfrvry19teEaAdXP+hI23m//q3MNF/d1SjPYntbpRYV+EoEmnbv6hWJfrjrqjGxhOX8t7cyk9u84kJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgRf4OAAD//+Nr2uw=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYRES64, @ANYRESOCT=r0], 0x44}}, 0x0) mount$cgroup(0x0, &(0x7f0000000380)='./bus\x00', &(0x7f0000000980), 0x1020002, &(0x7f00000009c0)={[{@xattr}, {@clone_children}, {@noprefix}, {@none}], [{@fsname={'fsname', 0x3d, 'resuid'}}]}) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x184, r1, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x7c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}, @TIPC_NLA_SOCK={0xd8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xab}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9f}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffe}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xa743}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6b2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xc}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x854}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x20000000}, 0x8020) chdir(&(0x7f0000000140)='./file0\x00') creat(&(0x7f00000000c0)='./bus\x00', 0x0) 1m6.493538584s ago: executing program 7 (id=452): socket$inet(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f0000000f00)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x1e, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/59, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) sched_setaffinity(0x0, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) syz_emit_ethernet(0x4a, &(0x7f0000000380)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 1m6.41393894s ago: executing program 7 (id=455): syz_mount_image$erofs(&(0x7f0000000140), &(0x7f0000000200)='./file1\x00', 0x3808000, &(0x7f0000000000)=ANY=[], 0x1, 0x1f0, &(0x7f0000000440)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)={0x3c, r2, 0x7, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x739}]}, 0x3c}, 0x1, 0x0, 0x0, 0x81}, 0x0) getdents64(r0, &(0x7f0000000180)=""/42, 0x2a) 1m6.379504533s ago: executing program 7 (id=456): r0 = syz_clone(0x40000200, &(0x7f0000000100)="20e8322b23e0893ef666237169cd2a20b98238e23f657d1786db9fa462a619b5dc6a5ed9deed22240f0db53ff699dcf729b43efd877b0e3a0fb87b7b6c26e44892e49bcd7e4599447de9c89a38b4cc3fe9ba3e7c0bd94461038c4ee3bdb71166f28f783893bb13589261e8bb1fe5d9966043301302db233e84fb3aaac3e8fe3e5eb61c090cf4f1a1fa661fb7e7dfa07327e0ef181699e61d3330f172209adb44ebabce0bca5e8b315684581f0b617a3ec19c69834ba9f5893ac7c5cdee00d04007fc", 0xc2, &(0x7f0000000000), &(0x7f0000000200), &(0x7f0000001200)="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") r1 = syz_pidfd_open(r0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r1}, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r3, 0x4068aea3, &(0x7f0000000240)={0x8f, 0x0, 0x2}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) r5 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000340)="920eb82469ce", 0x6}], 0x2, &(0x7f0000000240)=[@ip_tos_u8={{0x11, 0x0, 0x7}}], 0x18}, 0x40010) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000140)="640fae71d2360f68514ba5660f1ecb0f01cf0faef666b8002800000f23d80f21f86635800000100f23f80fc7b8990dbaa100b8e081efba4200b0c3ee", 0x3c}], 0x1, 0x4492d4af48962e51, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x10a78c0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x0, 0x0}, 0x6) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r6, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x19, 0xc, &(0x7f0000001180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000031000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m6.120023565s ago: executing program 7 (id=457): syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000c00)=ANY=[@ANYBLOB="666c7573682c756e695f786c6174653d312c6e6f6e756d7461696c3d302c726f6469722c757466383d312c6e6f6e756d7461696c3d302c756e695f786c6174653d312c6e6f6e756d7461696c3d302c756e695f786c6174653d302c757466383d312c756e695f786c6174653d302c757466383d312c756e695f786c6174653d312c6e6f6e756d7461696c3d302c646f733178666c6f7070792c726f6469722c756e695f786c6174653d312c71756965742c00aaed2e6322e12ca43d55f4e47d9fb6f319fab9c81cd7b9b508d5df5619dad30ed85701f46d5bb2b85a6aecd28cb992054878a859b15b1598ee0b05192ff4df579d2dd32fb9a6a092bb22740cfe0636a3d8ff4e975e21fc6d6e2d6ece2beac2098361fe652ea69917e6d47463ceb0b35bc7a2f8799debe5e7b6e82c84ab25d06157c08f006d90e62a8026a845835dbf4ac25eec51c3ec73c82014eee15eaaa123084415546ca2e37c23d441b343cec1f74e52bc1f21eb18053a9b98d3a304fba3751bd0121940bc9d276f1e5352b9f4e674bb80ffeaaff6843ef1c8a7a7e0d592893a77ae91e025a35840e7ff4fdb3571d1986ed6f5a23d9ee6bf1cec94fb17af0627c04bf47586ce288a466c039a1ead7fd99feacc51d9f7a2e67f46a0b8ff45e5d7cb4affc1c539a764f5", @ANYRES32, @ANYRES64], 0x23, 0x318, &(0x7f0000000780)="$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") r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000099000000bca900000000000035090200000300006e000d0000000000b702000000000000739af0ff00000000c5090000190f0020c38af0ff00000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m5.93458916s ago: executing program 7 (id=460): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3800003, 0x4031, 0xffffffffffffffff, 0x0) unshare(0x6020400) bind$bt_hci(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) pipe(&(0x7f0000000000)) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x4e22, @broadcast}, 0x2, 0x9800}}, 0x2e) connect$pppl2tp(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)=@known='system.posix_acl_access\x00') r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000500)=0x2) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000001180)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) 1m5.840264883s ago: executing program 37 (id=460): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3800003, 0x4031, 0xffffffffffffffff, 0x0) unshare(0x6020400) bind$bt_hci(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) pipe(&(0x7f0000000000)) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x4e22, @broadcast}, 0x2, 0x9800}}, 0x2e) connect$pppl2tp(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)=@known='system.posix_acl_access\x00') r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000500)=0x2) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000001180)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) 1m4.357795148s ago: executing program 9 (id=466): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, &(0x7f00000004c0)=0x30000) 1m4.248108577s ago: executing program 9 (id=467): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3800003, 0x4031, 0xffffffffffffffff, 0x0) unshare(0x6020400) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) pipe(&(0x7f0000000000)) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0x20048a, &(0x7f0000000300), 0x12, 0x522, &(0x7f0000000440)="$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") r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e22, @broadcast}, 0x2, 0x9800}}, 0x2e) connect$pppl2tp(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)=@known='system.posix_acl_access\x00') r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000500)=0x2) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000001180)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) 1m4.107246021s ago: executing program 9 (id=468): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000300)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYRESDEC=r0], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000c400000000000010000000850000006c00000095", @ANYRES8=0x0, @ANYBLOB="4f08c895e1f871e481bbd176df78eebd7b781b68e79b557a3ed448b75a7daf5b6c24af6436c7f70fbf63f257dd7efe9cd26c2cdb9df776b8ae02fe8a9b7201c8f44295af2fadcc3cc75782becf0e4a8a35b57070767adb91ddfe9696cd891a819ac66b9e2061ed0acbfd4221f7854db3fd3d718d348674ee9a4ea9f29b50d339313a8f49826d891fdbb2f426feeb27f7f01fc9be13bd9d5e38968520f433e4df3359a7a5f5450c7997ab75eef9c368b464c0871bb54984713ca54bbd23e5522dcf906578bb6188c8cedc6335c87b1928c9a239880818807f2b50c67edbdd164a19c7952dcc7f4cb684d5da6e8c69e8f21a9bbd88a72de6b611deaaea3a"], &(0x7f00000000c0)='GPL\x00', 0x1, 0xa6, &(0x7f00000003c0)=""/166}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{}, &(0x7f0000000000), &(0x7f0000000400)='%pi6 \x00'}, 0x20) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r2, &(0x7f0000000e00)=ANY=[@ANYRES64=r1, @ANYBLOB="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", @ANYRESOCT], 0xfffffffffffffddd) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000240)={0xffffffff, 0x80000, 0x80000, 0x0, 0xa, "0062ba7d82000000160000000000f738096304"}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000009c0)=@raw={'raw\x00', 0x8, 0x3, 0x238, 0x108, 0xffffffff, 0xffffffff, 0x108, 0xffffffff, 0x1a0, 0xffffffff, 0xffffffff, 0x1a0, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0xa8, 0x108, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x0, 0x1000000}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast, [0x0, 0xffffff00, 0xff, 0xff], 0x4e22, 0x4e23, 0x4e22, 0x4e20, 0x8, 0x6, 0x50b5, 0x4, 0x4}}}, {{@ip={@local, @local, 0x0, 0x0, 'veth0_to_team\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2dd) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000010) ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5000940a, &(0x7f0000003f40)={{}, "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"}) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_TIOCOUTQ(r4, 0x5411, &(0x7f0000004f40)) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x96, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6002000000600600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="800200"], 0x0) r6 = syz_open_pts(r2, 0x900) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r9 = getpid() ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r7, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000780)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000425bd7000fcdbdf251400000008001c00", @ANYRES32=r9, @ANYBLOB="08001d00", @ANYRES32, @ANYBLOB="08001c00", @ANYRES32=0x0, @ANYBLOB="0800010002000000080001000000000008000300", @ANYRES32=r10, @ANYBLOB="08001d00", @ANYRES32, @ANYBLOB="c2d6e9da5033d90874622d0ecaebe969598915182fb44c0b2a079aec016de9c8b4c0bdc5a33559f9c6b0696f6760c8951f1001c8b6d4457a1a138e2b174c4272165bd1b0f72ce14e8d31267ae49f40b19eac8cc7f2a06e1ce3"], 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r11 = dup3(r6, r2, 0x80000) read(r11, &(0x7f00000000c0)=""/226, 0xe2) mount$tmpfs(0x0, 0x0, 0x0, 0x802, 0x0) epoll_create1(0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@getchain={0x34, 0x66, 0x300, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x4, 0xf}, {0xb, 0xfff1}, {0x3, 0xffe0}}, [{0x8}, {0x8, 0xb, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x8000) 1m4.020772945s ago: executing program 9 (id=470): r0 = syz_clone(0x40000200, &(0x7f0000000100)="20e8322b23e0893ef666237169cd2a20b98238e23f657d1786db9fa462a619b5dc6a5ed9deed22240f0db53ff699dcf729b43efd877b0e3a0fb87b7b6c26e44892e49bcd7e4599447de9c89a38b4cc3fe9ba3e7c0bd94461038c4ee3bdb71166f28f783893bb13589261e8bb1fe5d9966043301302db233e84fb3aaac3e8fe3e5eb61c090cf4f1a1fa661fb7e7dfa07327e0ef181699e61d3330f172209adb44ebabce0bca5e8b315684581f0b617a3ec19c69834ba9f5893ac7c5cdee00d04007fc", 0xc2, &(0x7f0000000000), &(0x7f0000000200), &(0x7f0000001200)="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") r1 = syz_pidfd_open(r0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r1}, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r3, 0x4068aea3, &(0x7f0000000240)={0x8f, 0x0, 0x2}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) r5 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000340)="920eb82469ce", 0x6}], 0x2, &(0x7f0000000240)=[@ip_tos_u8={{0x11, 0x0, 0x7}}], 0x18}, 0x40010) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000140)="640fae71d2360f68514ba5660f1ecb0f01cf0faef666b8002800000f23d80f21f86635800000100f23f80fc7b8990dbaa100b8e081efba4200b0c3ee", 0x3c}], 0x1, 0x4492d4af48962e51, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x10a78c0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x0, 0x0}, 0x6) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r6, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x19, 0xc, &(0x7f0000001180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000031000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m3.527374853s ago: executing program 9 (id=476): syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000000)='./file1\x00', 0xa18c56, &(0x7f0000000080)=ANY=[@ANYBLOB='uni_xlate=1,shortname=winnt,uni_xlate=0,codepage=865,shorYname=win95,shortname=lower,shortname=win95,check=normal,shortname=lower,iocharset=cp737,uni_xlate=0,rodir,utf8=0,\x00'], 0x80, 0x29b, &(0x7f0000000580)="$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") timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x23, 0x803, 0x1000b6f) madvise(&(0x7f00000b0000/0x1000)=nil, 0x1000, 0x19) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f00000001c0)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r1) timer_delete(r0) 1m3.320342255s ago: executing program 9 (id=477): socket$inet(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f0000000f00)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x1e, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/59, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) sched_setaffinity(0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) syz_emit_ethernet(0x4a, &(0x7f0000000380)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 1m3.055644526s ago: executing program 38 (id=477): socket$inet(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f0000000f00)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x1e, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/59, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) sched_setaffinity(0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) syz_emit_ethernet(0x4a, &(0x7f0000000380)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 41.357241844s ago: executing program 2 (id=574): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000005c0)='./bus\x00', 0x8205, &(0x7f00000027c0), 0x81, 0x633, &(0x7f0000000600)="$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") syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180cc, &(0x7f0000000580)=ANY=[], 0x1, 0x242, &(0x7f0000000300)="$eJzs3bFqFFEUBuBjskmWNKYWiwEbq0WtbBeJIA4IK1No5UC0SUSYNKPVPIbP4CP5GKnSjZhZsklcbczm7s58Hyz3wM/Cuc3eLc6d+fDw8/HRl9NP7c/vMR5nMYpo2jbiILZiOzr35uvWRb0bVzUBAGya2aycpu6B1aqqabkTEXt/JMWPJA0BAAAAAAAAAADw35bN/8e5+X8A6DPz//1XVdNyf/7/7Trz/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEA65217v/3HJ3V/AMDtc/4DwPA4/wFgeJz/ADA8b9+9fz3N88NZlo0jzpq6qItu7fKXr/LDJ9mFg8W3zuq62L7Mn3Z5dj3fif15/mxpvhuPH3X57+zFm/xGvhdHq98+AAAAAAAAAAAAAAAAAAAArIVJdmnp/f7J5G95V115PsCN+/ujeDC6s20AAAAAAAAAAAAAAAAAAADARjv9+u24PDn5WCl6U8TztWjjrouItWijL0XqXyYAAAAAAAAAAAAAAAAAABiexaXf1J0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQDqL9/+vroiIpu2k3i4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQY78CAAD//139ms4=") bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e20, @private=0xa010100}, 0x10) mprotect(&(0x7f000000b000/0x2000)=nil, 0x2000, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000280)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x2) 41.041650095s ago: executing program 2 (id=577): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1200040, &(0x7f0000000340)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@bsdgroups}, {@auto_da_alloc}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x5}}]}, 0x1, 0x5a2, &(0x7f00000003c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x10) write$binfmt_register(r0, &(0x7f0000000140)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x5, 0x3a, '/*_', 0x3a, '/.^},', 0x3a, './file1'}, 0x2f) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x800c1e, &(0x7f0000000000)={[{@test_dummy_encryption}, {@usrjquota}]}, 0xff, 0x249, &(0x7f0000000500)="$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") fallocate(0xffffffffffffffff, 0x0, 0x9, 0x10001) 40.759276773s ago: executing program 2 (id=579): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000380)='./file1\x00', 0x2000c16, &(0x7f0000000300), 0xff, 0x25e, &(0x7f0000000e80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x11, 0x3000000, 0x8000000) write$binfmt_script(r0, &(0x7f00000003c0)={'#! ', './file0', [{}, {0x20, 'ext4\x00'}, {0x20, 'ramfs\x00'}, {0x20, 'ext4\x00'}, {0x20, 'ext4\x00'}], 0xa, "a482f318a4b7c02e5d4bdb375c7418ff2a3671f7152ec3ddbfe3a02333d5288d405ef6dd0108902bf2226559f1945989e5548ef7666f47ad8fa8a12c064eed07be8d3a896aa22c87d2c3e000b675fa1f69957efc931af63f59f29bec683dd5612e14e1fe6573955febe5774038dea8378e5797e3877d73029f78b411944db75db3b37cb8e46ff3d3b26e0dbdba0d1694ea89e1edda2b4dd681664c22a26af3baf45a2e25ed4671fe665fdeb5427a1af60f866f21"}, 0xd9) openat(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x1010c3, 0x4c) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x102) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000900)='ramfs\x00', 0x2210011, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@verity_on}]}) chdir(&(0x7f0000000140)='./bus\x00') mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file1\x00', &(0x7f0000002100), 0x10000, &(0x7f00000003c0)=ANY=[]) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x28a5291, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) statx(r0, &(0x7f0000000240)='./file1\x00', 0x1000, 0x400, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, r1, &(0x7f0000000280)={0xa7bf, 0x9, 0x8, 0x5, 0x2, 0x0, 0xfff, 0x7fff, 0x9}) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') pread64(r2, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c) io_uring_register$IORING_REGISTER_CLOCK(r2, 0x1d, &(0x7f0000000080)={0x6}, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x8) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000006c0)="b9ca01aa000f320bbaa17e000042f4b9860400000f32450f01c366baf80cb88481c68fef66bafc0ced66bad104b075ee66baf80cb8d5c0e68eef66bafc0cec420f01c466410f380309", 0x49}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 40.200995429s ago: executing program 2 (id=582): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0xc0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r2, &(0x7f0000000040)={0x2020}, 0x229) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002080)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x9, 0x1, 0xb8}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0xf}, 0x94) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r3 = dup(r1) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) syz_mount_image$f2fs(&(0x7f00000105c0), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0063edcea4", @ANYRESDEC], 0x1, 0x105c7, &(0x7f0000020c40)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r4, 0x11, 0x0, 0x8000000) pwritev2(r4, &(0x7f0000001640)=[{&(0x7f00000000c0)="4c7108972cfb9d5108", 0x9}], 0x1, 0x9, 0x0, 0x4) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1000) statfs(&(0x7f0000000180)='./file0\x00', 0x0) 38.59020009s ago: executing program 2 (id=591): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3800003, 0x4031, 0xffffffffffffffff, 0x0) unshare(0x6020400) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) pipe(&(0x7f0000000000)) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0x20048a, &(0x7f0000000300), 0x12, 0x522, &(0x7f0000000440)="$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") r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e22, @broadcast}, 0x2, 0x9800}}, 0x2e) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r5, &(0x7f0000004140)="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", 0x2000, &(0x7f0000000440)={&(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x1122070}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, &(0x7f00000007c0)="e0332f8f5747b9f778142cc174a9b5f0244b78bb6346cb5fc9135b8220090ee698fddc241870359d32327f299718466d88c89e68097036bb35abfe03e3c02234dcdb2c7d1209c657485ca1aa3f2fb80e71397b80fca6f3cf2367fb19eb95e5b4a0170063374645d9e020099ffd7def3d94cd29412b3d7b7a47bc70121be848cfcecea78d41a93622b134bd06e84dec07a9e5abc29cb02d5b9091e748cffacf48352628822bab7b24a17bdf4b3f3bd9fb17793496aa6490da3f58039ce5b40745dd63f82d93bed80b50ca5742d67d39029a98db95c9392e2d5fd9a35bad30cfe98682b5a069738a12c3cfd25949106cfc839202fd21c2b28e44be73280d5037351ead2dd1c277d9cc9088c6b14365eb0937ea9685f6b26232293803260f2c8cfe176b55df304bc2865b8f52581afc4beed445ae8cc405cb7bcc51103aef812c41437c5b070a3591ad0964677f4f9017bb300727dfab009056bee3671a9694be2e2f2173fcc06ceba5aed0d9da697cd88365c5c354788efcc705e90d572e34e9e566fc206a8167970ecb9cbc43f4d9de4d43688582b6600dfcfc7379c831e756a45835647bd87879a3e3942c61b9ea2c2af35d49a4caa9a109b0beb972996ff8924ea371e15dc48efd12b1203a7f1fe354977fcf9e4ee2c8f210387e551ddb55e5f67ee6bb9bc8772649693b0adf24606e8ccc59f020834d8cbfcadfa1770549fe464dfc412308fbaee8d30bd20c002794bfb923bac6b490841248d12ad9a0e54d1d96e3aff5dc4930a6c8b7c75264a46af7a6339725fb84e0363463ebaaaf58d6b9309ae7c87a8df8c68d2487d684011de1fa7645f3f48cf3bb61bee8bcace2f8ef5f967f2765f8086aeaa5dcc34c84e379a7ddd6438cccb5b8098dfbffffffffffffeadbc4ad2b2ef98412a46f74a171ad056429dbb723cdb9ca9f9f03170dba2870e5988b7cb755599d1eb8f7eaf5c8ded4b56022cb479d0bdfae18f69f9ecc42f4c181ea10838229ba5db7f088ad8d5f77e49c1fd93ed6b983c43b23c7eeb1233f0c114885057a27cd3f67a309e3fecba241836bc92308b830b10b04af6c9595b44e859b9ca7ef079e151fdd500060787be3a7a5b3e23b06ec70f087134504f8b8e7b6799ebfe14f698ba7a813a380e6f92cace9230aa8094a2465f7224e2becad469d0aaf0e48b0098eacfb17abdb69bb2ebba97a09d2b739b532d70db91fcb0fcb38bccdc01d7c8113024ea8b619e385e58d31899721416e10b408504a9c4fcf870d21051227440a616cf62f6637b62eceaee09029f88009be02269cb5e5ed090c6f5e6c652c31214aef301bd23ec2504f90991cd27539c1b8b54db51825e951d076cd0e70f56de4b91894ce22049205483a0fe7d7886b36118bebd96d138980e26604b6e70a7275c6b81501143119a8c2c271558202eda196704ef9ae3c33301e1afbe56d069ce4926bf531d960f3df58192f3da558adc169d48d39e24e04e95c406b34b1f4ed2726ef0f6a67dd84c75636984191d019cebfa883fdf99affcdb4c874614a5312455403895891daf7469d6721583ccd1290ab05b14516f22965fc52c4a528f1a5c20cc133fea279d9efc991ec4d51d2654daceda234f6d3b0c635db697aba3eeaf8356319adba42428266ac09a6e6495ca8f60c1c4e052068511696296e88ef86a591948627ba97df634e0063eb5f208df00a069b1213c29e58cf76f591253d60de9d7c01d29992ccc728140299c429fec0df9d90f83fa2467ce00de83b16d10c7edb80ff8d4b1b19eea9bd1e2783a0d41215c9cf23bc3ca1ff414e3f29aadba00c5a8d5b44c28c10e99140e5428278e54bfd880a93fd1b54b560422ab2bfcf120a7902373b6442c6e9867b19aa0a6b77b1634ab6fd1c8a1d90d99ebb9ebcb89d593562b266fbc53c40501f9298690283c45059b3f6ee278e46cb3904c947446c28af8855b2a68e6e0c0da205a6e12fdd15b393d579039b31c1a54230ac2ea13cf1f5540046b4dcccdd731fff7323c4880e5d2d8668d8a7f08920715c17ef9652eb55f224c82a6fdb970dbf1032403f283bd868a23f4785a6ab9c0bcd2308dba1a1f258ae512cf64784e501008db366ab7093a6cc4b6ee86154d44a1a15c10834602dd5ccf730f6d1142ac19d113496dbcb80021cb5733924265d082a8453b5c21e0245e4a2627e8df090da6a129ee49c58c1a7437369acdee15f5e4e5638f05d9f6391572d9890219def702a013a2b05239664dba44feec2a9508a3200b47de03e6a784bca2f3633df534af33da0a95a34ca845b61a22ff55a5a4c04ff9e06e7162f458a8c56e106e75ffb76a921f4057dd73d5f3801aa78ca4c78d6b79bce560404c2fe3d57876287f73e84c27c486ffb997951f9e0b3aa81a5e7804ac7360add11e7851842d0ed8df041c999e50226fef006373bbb53d5d8e9d1653924e60234fd0b6645b821746f3d88591ff66e294e8e958ca425ddbc7d604f7cbbcb9d5fe0d4ad53878eb16bc801def1005e1eb12a6d4924d2179948e7aa542f2600ba3c6c600629d64c529c7326c1f38aa4e1a6cc259e58f86400d65d67856c8f4fffc33ad4c279dc05367307f562f8127f37b03c3cf38a97cfde0c02aad8ac40d347a9e0a496f227c068dc6c666fb2b6a18990f607399b0707d135752d93739e1840b5b4c125c81eeeb318869b408f87778451e49f3ad988a8aa97672989ad367833ff7e7f0e79c37ac794fe466623e122127fb94ebbc01bc775183b26b2dc407b1aa1a55d4ce04dbe1df4fba0377fea4c4bfa5a37c4dd733fd116b9c7f50b11dd512ad68646b9ddca295fe27bee78476901fbb5c8d2856ae0e9e21ab26e3587c1325f1fa28edb4081f2ba309d5fc39f7f54abbd0d5a152c2f7e3a8b3a5ef6e097b109061c91124f41f33055a7bb86706629f614d40346715cf2fe387ef4e4fc6646839824d3ef85eeac85bc5e681320f6fa7057e0a10de8c4678b48510f77b91bb397dd1209eaba8ea1f237c348e9e0d7af1229e2c04b6560e48e3a7491f3066b63a8923becdcfd8594c1c55098a51283b599765b049831cacd9478e5e996c778d524b476f6677218c94886d7548be7617e5796e35bb3c9b13d70e4897867d85f0350e9329985f051fb556b861aef7dead54e6b29b9ad837cb4774f47a5371ef034612aa0c151345546b876b53e9f2c06e3ce0113e67eba8842f4ac5b51a61315bf050078c710dcf14371d9593730b1d0302ef999f488bbf42b7360171da98ad68932bda4937358fd1d0c2bcd04f7dbe2beaffa0d53cccda316cb19270cf4aa56695ef3203b49fe92d1623cc1d714da6b8f94112db1781562ab2ae50bda23debd55da440434299c992f2f8c264310d6d8ccdd042737db0253d6889d8bf36fe99a131b73300c9798b8fd58b5fc681b97e71230cd3094e441fe5cf1294bbc28f41146f06e39d5e19e673dd489dbddfc16fe281160a8008e375025cbf25e84945f2f0a5ffb2cd58273328ea9d7533b2f0861eff95823cea18dc1877183fefab808bda0890f91f1d79b36953b138fd62caea3411900647a4afadfecade2ff6274175f06614d108daaf9821c413a137e33c826957953bb39e2d852097f978c3577abcb71d68b45794247d8e82614979708f6d6d0e469828206b22913d6d320d815d42c0d943640c63196f703f946089f535eac511e26c6a5a529e875eb15aaf65fd50dcbaf37a009f2f9081cdbc744cf7aa2336913e89f1961581ad4bb6aeb1d23a787e2d3f99639871df5842c30581263d5139128f0a3f37ef48bb636d7aae06581de6baa55a12019d3ed831950915fdc1eee819dd01047bda606f2852699529718c99606246a92bb1dd9435d8f3a48646c0e423441bc783be358c0c91e6846419b6c0a81354500cb2721834dc11ba40c3bbe5717e5142922a168ca0e20fc269ea584c7f68ff7cced62c4277385368b4ad596b79c45a9c4575c37f300cab37a5693cb777fabed412934d3a77505b17cb2628119ddff45f3fcbffb50386eb9cfb6f82b37fa852ad4b65bf8e2898b11bf051cb7fb0fa81cbf81b9ceebb05498aeb2691eb15297edd682976d5a4f444cdaa82f063bc4482c28c4e6257c7cf3e5ee5a502c6527b77b12725e7526ff896ee2f8066536dce04d63072a34c19d533d4dbdb93e7185482cbf7510c5eef2f8aebebad011727cd8061a367b7e1868252bb43d9a74c9c6a10539e357d5367fac69a9296fe5a79a2e5b45950ff462e0e882aa32ff7f29b5644e5311f3e0b076c58683de29ad9dd8b2c92a41ca8313ac997e44981e82aec550bbf6c88adf3d54e9fdf93d9dce95289e9086043d888f19d209cbea79f8f5b2c81b2c3889eae1cb5305e282b883c4cfa3798eceeabb442a74ff6a8470020a296ef01d8e32553663c844e67e5a3a44375f0074ce9547a6c489ee86d7652219491f35c6b904d51a26c3d2cc77d8ff97050dd0d0aed4a1ecf1db7ac48673a1dcc70ac16f709dcf4b90148aede5302111ceaa3a81c49b724cfa206283b62513f96c1da77efafe2d2d08a5f391ab690b5d974ceed2e95e85b1039def0e94c79cc0aa1de1f8133e985adfadf4a657710487b265bb6692fd2b91a06ac98d50b052b8a13168e2638b93209238fbe67f4590a81a2cdbcc479ca9178720a6ec05bc9457f27ad2e2fd2f4e9c643ef85b6287a01f7fd597799cce7d6464ed3c95110733d4ba92314ba3dd81e51f541a6e37f8bb14376e41560f9049b4ff349a467defc205f915a345b5f06d090645180ca642c719f03e9813bff7fd635660efe38b022130d42f2cedd792bcba2bfb14385c6d1cbe5ff2e38c22f1f8d5e4d93d296042507e43f24ff904827b16f2a3572d26078d7fdb0cfdbe2e6bee07b94ae441e510681c96f97ef0ddbd7efbd80ce0689f6e2022a189dd2937d3eadd82a154a5fac91b5ef48523706957b8d5f55077973e9a036009d745a6df39ba154dc59c4ef784d62b3f2d782dc508242a1b0e4cc294b6e62e98ef946f0d984c3174cf86b8a0beb615f046ec50dd0c8a9c0f36df60bd162f1130f894085e7c47b6c28ff336f5d75166c1840e7ad07204fc10ce976505f6aece0316d8c65b973f61cea2fe4c6db722717985c25249f041c07a86b878702a8c9ab7c33fe41039041aa38489b02a28f18d69ab34619e9e35514c54592c8059984ace64b5302b5f22d68c35c7ffb23c63ce877a1e1b160dd2c329eabcc0e1e3072021bd811de3c0c7a68af20ddb9e2912b7eecc2a8cf083a252d0fe31629b20559f7b976e4d8625644385c692b8cdc2886a42d750962d0dee10a1546ecb7ef961216cc456d2450a44aab07014fe0be076ca6bcb46b644af844b2ad8b3817f1895a5d579af3dc937541f4b7e9203e7a7af534b406d8f6e3bc555d767603122ab1c4e62de19d6af63be8e39fe45732859d6d92e11f1a847f7d62764b6364aa7f95f03cc7deba178fb03a467da5be71657ae50ff6bf93c51efb7d19ac9887e92fe5f3c9d545209eff307c9e02073bd3404827e148aa63c135ed668589bdfec38cb47716201a9d02f1b03993f89e96b33b32e52ddffb0580dac45422ba7a3fef76e519a3dc8d12eac60c2d2f8c4303aafa3e80135c403360d51c9cdeba3ffb31e664302f587e0e983ede7f9b2bfe2bc64bd5029cfa88445e043e08f3e9affee25e980e75d2664738726e3d2eade7dce0ece78a514bbbe5a54c121374d079e3b05996052d66889742232b73e950e1a9892e7352c9e546a8cfb48332d2b2be6327208ca51dc2869a562581947f62b0d5bfb3e0911d4854f822d6738b4deb195840d2bbae0b074b8d1e1010c24ec00052dce7d259e3044aab1a99d261fb3b49cf09dfc85473f94db06d49e202ca12182283d48144f8389a5301679901600bf8130d36315b277a99204b85a1598f84bd2d4c4893108f6717bf44234181467d6eeee61e1823268b5c60bf04d0e13e429f411b51adfca20ff1a1b1eee203d59b03da1643c3e9fc474a91470116c6c5275542adb10f3adae2ae87e88b93f334e0ceb6216fc081e8d84d8b0a503196dc50599b22b89b807627b427a815aea0dbca69e5fb215ee996395d8a21a1c67ac295be33c6517504e1f00f579f8c484873cc670b5b9e787b1c30ca1f0b25f8bb8f4bde3b3f4fa730c292cbf97b25068ba9c65f78c555d5f75d52a57958d7111e824f3afa16484f625abf62afc80654c36fd9f8284466422fb18e08274e8febc719d45b784974d50d187ad2349429af3f7930252a4d45997762e9d5f5493d408ca144532aa89aa3d43c46951dafb8f81794e2e9679ce238cfe86e112f4f046d87feec3be04461032819d62f217faa71fa9dc6da8861015567d1f7309090e25b7015dcc6d72a5e7ba53296ab1bc72467ac50831628cf5238155aed3fb189a8b527ebd38771e16454fe51e3edde55cea454414690491207c23f6cf33aaeeda432de2d1ede04e039a16245e66cce6f4e4ea534f290f02a2a81a46d6ffea7967dfbe37461f83d472091156594852823392efc953f4ac099d74e2d0328d9f47bd952352981a34055acd0273309484ab56afa85ff0c22fb53ac5d7cc8e346b4c2f38a4e2451738146b7b90c14f826c7dbc1b2be79d83772a8d629f2dfaf15286a15be1ea22a05d4ee3de6a6bfb7e208dbbcc88e77baac940d6438aeeb77c3a32db08b46e795484a58083c1bd433092bc9116668c338ab35c01cb5871167868c6b61bd4c0ca5f96e5ce2465da06c4a320839f3bb7c0dffd40d5bb9a32fcbc6f691787de7211da062616272c77c62ac83e4cb29fb954ab27d9009877b79be54acd336bfe2a6e087abaab004743f5ea4ec8ddfb8086920e8e458a413adb98077a3cf860513cc8a453eb129556c871be7e7232a6130c4332819ad17b289fdb31f8f8854dffb4cfeca6d792567b444c750820a2a8a2e0f93779e61a4966650909369fc8bd5bd2bad4ff95cc8a14f6cd83ae6411b4bfe1a9b5cdf1fcf32c54cef1731edc47d41fa581376b25006fc859b98805d70a157e481a2cb2ab425340965213adfecdb5addb2b4b2ec5cc6935e4e279bb98283fb20dfcd8a2c91aefda9dc5a57bba4d8803d1eb0f4ba9529de01e39c2aa60a91267c31d036a3f669b9377661837f58c6950fdf38986ea13ff5e9c4d966bf999002da1a854d54aa225b259d91eb88425328e7d13b06dea321a151a8dfc44755214da97168e8acf027d66b7fff45ded94fcde53ff80342d4595644549c4ed827225596e2b30480e94eb049b6cd718fe8424d044bb5098e0206047ddb81755e3cb92131dd47ec754b64c4b78f663e364cf8a74cdd9857c81316dabfbc9d6a23ee6d1eaf6b8fc1544cfeb06002c8a40fb0e49859d2073a7b1cb112713518ad5e007d0a256f901469bfa5cae98841f877faeb584d41bfe695da72ca5700ae085f39c99f769502ea9f43c0b84ca4611441d5adb3e5d0a426297e535258748169cad487f97d171c0630642943508206ce648aad2971297f3d4037d73e5fbc73460ca7401b7dbd7807273ae077a81fd0d4bc90b6068e3ec95afcfeab16619306fb23942a4308e8253b35f4912df392dfc5daf35dd842a5a1f78fc294cbdbd504056f0c7779121b5b3db7461e437347452476f3b0bb22e63aa23cb9d3e797c6c95513058d8fb2c27864ac0e1f5001c988e29c79bfa4236c7be41dee5561d825c1f0fbebc0c06cc4712e88ad5efd94f4eb4e93794af42a9752a2ebc57dc2f3881c75bbb23ad25b69619f9f5b07fe114ba291d2b5b4c1c175e1aa3ee3eda55e6126b3ad1e613bf8e0bbac727b879e7796fa0ad100893677a18b53f5eb31db43a97370d3749afa92fd0291fa96b05daa6beb43b9c1c11d9515976976d1cc1e44f35d317299ceb68ea2545f2a2b92b4e1046f6f92c33aae6995593189bb2611576599fd765b8e6fe2e88674ffd57ee8252287b1904d622c36a502db45c72b0d5fc3d983cc44bc955eb43911404667a4ab147d72b69ef2514dfb820ad75758e85df88499cea94ed658b4c1c2f49fe2bbb8d2dd97f844a6df289296cfb9cd5bc8d17aa235e2c4501b1422b25acd6dbc3a91d03904c545320524f9034955ab02f5d058097c37d23984baf808d28b3e12821eb8919a77c1b6a8bdeceecfcc487c39db592817dd378a7c5127b427e7279b2a82f6b8eec6b3fabe0947e353e7a386475b15011de93e2f2891f772ef90f4aba1ee1c4d7321c81ce4dcaa378daeabb93182c319494436dbe67d252a01291cacb59686ebd53c6df21c083e98fa299cf5e9b59f1ccea95c62b1437c8ff8754a6372b5b879ebc3241f6430871eafe35337d75cb68c42862846df4342ab434f7f0a7b9f66824e1e696e3dbecde179592774b7511e5a7a1a06ba601eb5f2a935c7cef0f83ecd412a84afdd05120fceb1afb6445ebfcdf12c2287bfb75dddccc45afb4f5bb1308d39309c92c0b61a322d5229881fa5d598113cce54107036ca9f63fe863d257c706fe89d5c7ae59a459c6f15ba48d80da4aff541797b26418acddb987df3544bc4918cdbbdd8dd1bc2163c89635044e7b4da878457727a667c0146a12b4c46639497243259bfe4aa5ea50eb79f39fa9209256c9a685e3e39d6d8b6a9ca7d3554fbff0908ad6c6ecf68e506c20b16cd4a98e3ada9eb0cb3eb0b75b13b6d80bf99eddf2282da52cec085d3a725b71c29395d605e1eb26143290946a3a0d24347fa46145735dbf4eabc12150b8d5f7eeca804d7ed1fecd0132d1b94ebec65cbc07dfd4d54a5140567e77c646bd92666922c43aca8e482c59b970fa43087eb76d6715e4e8e5ebe54ca391383ef685b133534fcc1e5c5eb56f9d76a888506c4ac8d289c37039e0c4f927b0e11e85c5c7ec1cf4b19bebee6014cb89ee57f2ade8d166005e956d46a0c01f60b58299479e8a59a2e88f1a7ffd08b27d92fc2772b338959bd0a1c9cb95075c3cc17043c818345b29b76c0b8ed41c8c7259cc780c657cb9509daec1558453cfe061f54e08523a55d3223897559d51096b680802144f1dfbc114cee5ba322e007c2af0c08867291dd732bfe4b24d1d5ae517a7f5903c369ac6b157d42eb6ca8c0d7b50fd533a56c814e7cf04db3012eebd53ec1b123d65ab1e462d9f9182b690d56a88ad5a1f4d89f1749b005e88085505cc6d7de8eeee08def67bc1d1519d44b7a62dc07e491f328f786956d9200f00d78829e6af7c1a5835366201374b9487330920d4c57e2f7073292e173acc2424bb0d5e0e9448b4c02f9cfc99bc408110b6a3e9bc3799e4b178c2871069bc7d9ceba564378f02b2932c36f159478b5facd452b595a86d119216af9d860bd3997305320159a69a70fc62284141d23d2dc1e5394b271d99e5570450f1c55807e96c7cbe1b7c2e3e96f69fecf0f375e36e0d2acf319e37199e98486a8d145ce2d996c1909402744cce63664a75e480b197c345360321e830e5572d1d7bfe5a129a67fa98e6eda5268fa588047859daa11d087d0dbf0ccc7e120e3a5820cb4f5dc06748317e3f866518eb66e39dc8a68a7411b3403fc8eeab8283dee4d767e8e5842ed922e03ae5b3c9c494d5ebc61527ccd1222740fedd9e469ba6b30761cf387d654081c7e63182860e4548748058914a9cea01caf074fe6a78fafa2b45c516f9f20af9ac6773a400fa9661a872f6b55f0ed52a9be9e9c35502604b924f0eb628d6545da322e0713f9a5587e87e4b04fa495423b7c72093b764adfd1430a2e608b7af3d2bf80fef00e5b69abe386618274921ff57621bb99739de2e066ff17e95eba027f6a35170af3a69e93359a9643e155832d45c1aa9a8f71ad35504b99d3d0a1c11ae108664ea36f4dcded083aee17ac9efe7ee3fdf7b63c7c09bcef62caa88708510d45cea79d323083ddbfe7e5d3d9138f206a7af82ef1d26c85015c3e55a285a35d0052546493536b9061db27291a9292033753b7bddac63dac6f6271689240e43523c434a65e1d35299e386c953d0c92f21057e0b7883e049d20961e75069587eb3df6206496f76bbfd96635bb19837ba2ab193d79072ffb8829306b63697ff104a65031b8a38c24cca9ba23d5cdf753169a00fe2b2c3849f234a7029b657b3324c10d553e601aa97d17024f7bf5a99f96392f4a079a83daa27f4e3b512ee8536e764ce4dc36fd0874dfa502a693e55bd9f116202c5e906703e2c43d84448598b7af78aa60a205c152841e75e23436738ccaa6bbcef87e6a237d86d1a5e38e56c162cd6d61a4fb8b410b1643ad557a22348edfa82c23db11c9abdd8141fce263a66537512e93a930a4801ad862a902c7c1e00eb7c7466b1351318b7196c2a9016c55a05e104e124bdb568132f9397e31b10d04e5284bd029ea2f6a3ed11854e09b5871d6a725c21a9ef5d7e729a90a8206d5f61e6e42e47dda3e31b9134d47872a0dd7a576b665ec6ceaa5fd7d85ed7feede9ac9fc23e40241c0318077edda75b62eb271e28fb3705f7b4950c14b721a3a74a7a4e4de02cef5de76a1602b906016c0892ef37db51b0a1dd53f28b3d896f20abbad11150fd584dd184bb43278d2d68ff21ac0daeef5408348cb80f4a9e0e606f6048bbaa517289451f084fffb63c5d904788cfc310b5495528a58f4650dafc4e4675b99d35ebab710ac6fefcee6c51a2835510fb6d2dbd8f97c3e53fb7a23c3f3c0283eb2271504581b9c1fa31e35c117e56a5d668a9c57df3b4e1129ca019a8b877fa4a22768dfbdd9d2154e17f4a7755b065090d88982471bfb242d89af5c6782693a6ab1b1be74dfa5655ac3b5ef4ace8dc595803cf4025bdf5c0e9fbe7a12a3a313311809591da08a2cc6cd8480dc960e1f79fa208440a0e589be5756c36d5830a51c4bdc39c2a85c0431bae3a7331b2ffdf23623693d343a7938a8a8a4dd4d523c6450a705bccbb38427f06f4f84a18adf303c0ddecf4ce2b6cdde4e09a4c31816195f0fe9f05fcdc0609f8a75ad2f23d5c24faaf346c13ec0512a5c29477ac561c878085d1a323f6bab08e2fb9ee57d7bb621ef21caf3609d74036c6dc1d7be0b6058d89dcb8d9aa4462fa0a740be66e3fdaa957f27c5a26dc586ac8c927ab2d7cf1b761798ea4191be8f4423cf1a6727d0c5f27a9969a753573afa584dea82678f3471ba36d726c396d68c671e579120f1a11cd50fa66b26fc2d6cb74ba07edbd5d3a288cf58ed1255381df02b2fb8983b7cf833433d1ab8fdef12651c3507e4b69fbc4b234678cca36761e8da434e5f036f204a1400da15277ef27ac140e2d574b89c0fd617da27e6ce862883bbe81c288834b9477d0d440c15dad505b363fcc1cfef8e2e3a96438809505844196acd0af751dedfced67f209c2ffa9c6da842c93ff4b5fd54a67df904f2f31b4236728c99582a667a8461d397770a657ffa7d514b0f076d7f35e9704a836e7882a2acf0a0ec2158ac7234953c3696abdc791c0b163ee76fbcc5adc18b6fa0f51f76f3d313a0d891f1deb69f6e44289b1aa43a768b8d13270959763a2c45129daeea493a5b0d7b36753b223dca9a8037368653400", 0x2000, &(0x7f00000005c0)={&(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x28, 0x3e, 0xb235333, 0x1, 0x4, 0x4000005, 0x0, 0x0, 0x0, 0xe, 0x6}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)=@known='system.posix_acl_access\x00') ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001180)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) 37.128266958s ago: executing program 2 (id=600): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000611858000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x1c0002, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r1, 0x24, 0x0, 0x5, &(0x7f0000000000)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) write$vga_arbiter(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0500000a5333d24c110000deffff68"], 0xf) r2 = signalfd(r0, &(0x7f0000000000), 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xe, 0x4, &(0x7f0000001300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000000}, [@call={0x85, 0x0, 0x0, 0x1a}]}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x6d) ioctl$PPPIOCGMRU(r2, 0x80047453, &(0x7f0000000080)) 37.122794797s ago: executing program 39 (id=600): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000611858000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x1c0002, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r1, 0x24, 0x0, 0x5, &(0x7f0000000000)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) write$vga_arbiter(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0500000a5333d24c110000deffff68"], 0xf) r2 = signalfd(r0, &(0x7f0000000000), 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xe, 0x4, &(0x7f0000001300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000000}, [@call={0x85, 0x0, 0x0, 0x1a}]}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x6d) ioctl$PPPIOCGMRU(r2, 0x80047453, &(0x7f0000000080)) 37.078694379s ago: executing program 1 (id=602): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c756e695f786c6174653d312c757466383d312c757466383d312c646973636172642c757466383d302c756e695f786c6174653d302c666c7573682c73686f72746e616d653d6d697865642c73686f72746e616d653d6c6f7765722c646f733178666c6f7070792c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c757466382c0014697a7960fb374b723f64329787434c6c9f891d2e309efaf1d4e529e1ba0f697fedffb095592bc19d5a8f8141ee9bf46262f3a2b1452bf206c0e2ae8a465e6e1be6eeb5d588035a24458d476fc1f9a234cdc4ba352a4185614ce67df4870bff796357ee95fffb99cde9"], 0x1, 0x2bc, &(0x7f00000015c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x22442, 0xc0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4012011, r0, 0x0) statx(0xffffffffffffffff, 0x0, 0x400, 0x8, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYBLOB="f7ffffff00000000", @ANYRES32=0x0, @ANYBLOB], 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="19000000e3000000080000000800003a25ce130000414db1c5512b6fc14302025e3362e471b111926d17658ddf8c63123f0ad13294d95ff8d5b3a7e454bab3112a81ffd445e0d48f9b7754a1ea1bc21947d819d0d45e36188e6e344c3d4f2d33888c8762774272d7e600"/121, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000005380)={0x30, 0x2c, 0x1, 0x70bd28, 0x25dfdbff, "", [@typed={0x8, 0x4, 0x0, 0x0, @fd}, @nested={0x18, 0x11a, 0x0, 0x1, [@nested={0x14, 0xdb, 0x0, 0x1, [@nested={0x10, 0x75, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x47, 0x0, 0x0, @ipv4=@private=0xa010103}]}]}]}]}]}, 0x30}], 0x1, 0x0, 0x0, 0x849c4}, 0xc000) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x967f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) setitimer(0x2, &(0x7f0000000180)={{r1, r2/1000+60000}, {r3, r4/1000+60000}}, &(0x7f0000000200)) write$P9_RREADLINK(r0, &(0x7f00000001c0)={0xe, 0x17, 0x2, {0x5, './bus'}}, 0xe) ioctl$XFS_IOC_GETBMAP(r5, 0xc0205826, &(0x7f0000000240)={0x0, 0x401, 0x3, 0x547d, 0x5}) syz_usb_connect$uac3(0x0, 0xa0, &(0x7f0000000480)=ANY=[@ANYRES64=0x0], &(0x7f00000000c0)={0x5e, 0x0, 0x0, 0x0}) 33.780122546s ago: executing program 1 (id=621): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000180)={{0x1, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x18a03, 0x0) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000280)={0x2, {0x2, 0x2, 0x6, 0x3, 0x8}}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x0, 0x20000881) recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x10002, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) r7 = socket(0x840000000002, 0x3, 0xff) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000540)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r8, @ANYBLOB=',dmask=00000000000000000000152,fmask=00000000000000000000006,gid=', @ANYRESHEX=r9, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x1, 0x14f2, &(0x7f0000001580)="$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") quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f0000000180)=@sr0, r8, &(0x7f0000000340)) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0xe}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x438, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xe, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_fw={{0x7}, {0x40c, 0x2, [@TCA_FW_POLICE={0x408, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x80000000, 0xffffffff, 0xff, 0x74e2, 0x518d, 0x7, 0x10000, 0x1, 0x9, 0x1, 0x7, 0x6, 0x7fff, 0x6be, 0x8, 0x8, 0x9, 0x8, 0x8d5, 0x0, 0x7fff, 0x0, 0x1000, 0xfffffffb, 0x2eff, 0x2, 0x56, 0x7fff, 0x9, 0x5, 0x3, 0x3, 0x200, 0x0, 0x4, 0x9, 0x80, 0x6, 0xc, 0xe069, 0x7ff, 0x4f0, 0x1306, 0x5, 0x3ff, 0x0, 0x400, 0x7fffffff, 0xe6, 0x0, 0x0, 0x72c67ae4, 0x4, 0x6, 0x1, 0x101, 0x9, 0x6, 0x0, 0x2106, 0x0, 0x3, 0x5, 0x9, 0x1000, 0x3e7a, 0x5, 0x0, 0x2, 0x4, 0x10000, 0x6, 0x1, 0x8, 0x8, 0x7, 0x80, 0x4, 0x9, 0xfffffffb, 0xc3, 0x5, 0xe40, 0x19, 0x8, 0x0, 0x2, 0x2, 0x7, 0x7fff, 0x9, 0xfff, 0x2, 0x0, 0x1, 0x3, 0x5, 0xb337, 0xe, 0x0, 0x3, 0x400, 0x1, 0x61c, 0x6, 0x1, 0x4, 0xff, 0x3, 0x1, 0x7, 0x2de7, 0x7ff, 0x94f, 0xd, 0x1, 0x8, 0x0, 0x7, 0x8001, 0x1, 0x2, 0x5, 0xa, 0x7, 0xfffffff7, 0x8, 0x1, 0x7, 0x4, 0x6a, 0x400, 0x7ac, 0x17f, 0x7, 0x77f4, 0x2, 0x1, 0x0, 0x51c70d7f, 0x3d43, 0x34, 0x1, 0x3, 0x3, 0x7, 0x1, 0xf, 0x8, 0x4, 0x3, 0x5, 0x1, 0xfff, 0x2, 0x3, 0xa, 0x1, 0x9, 0x6, 0x1, 0x3, 0x8, 0x8, 0x6, 0x5, 0xdb8e, 0x6, 0x200, 0x101, 0x3, 0x2, 0x3, 0x100, 0x8, 0x2, 0x5, 0x353, 0x1, 0x8, 0x9, 0x3ed051a2, 0x80000001, 0x9, 0xe8, 0x45f79937, 0x2, 0x4992, 0x6, 0x7, 0x0, 0x3, 0x90db, 0xe, 0x8, 0x100, 0x80000000, 0x7, 0x8, 0xfff, 0x4, 0xe48, 0x1, 0x2, 0x3, 0x9, 0xfffffffa, 0x6, 0xfffffffc, 0x8, 0x6, 0x4, 0x6, 0x81, 0x6, 0x80000001, 0x7f, 0x0, 0x4, 0x7, 0x7, 0x1, 0x9f0d, 0x0, 0xc, 0x0, 0x6, 0x9, 0x6, 0x7, 0x8, 0x37f, 0x4, 0x3, 0x9, 0x6, 0x3, 0x0, 0x56f, 0x800, 0x1, 0x4, 0x8, 0x6, 0x5, 0x4, 0x9, 0x10000, 0x6, 0xffff, 0x1, 0xe, 0x5, 0x40, 0x0, 0x1]}]}]}}]}, 0x438}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x20080, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/meminfo\x00', 0x0, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(r7, &(0x7f0000000b40)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f0000000a80)={0xa4, 0x3, 0x7, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x10}, @NFACCT_FILTER={0x54, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x5}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x189}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xfffffff9}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x365}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1ff}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xb34}, @NFACCT_QUOTA={0xc}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x6}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0xa4}, 0x1, 0x0, 0x0, 0x90}, 0x8002) 33.562421616s ago: executing program 1 (id=623): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000340)={'geneve0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0xa) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100}, 0x1c) sendmsg$inet(r1, &(0x7f0000000740)={&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}, 0x20000020) syz_mount_image$exfat(&(0x7f0000000700), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000a00)=ANY=[], 0x5, 0x1501, &(0x7f0000002a80)="$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") mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000040)=ANY=[]) unshare(0x64000600) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getpgrp(0x0) pidfd_send_signal(0xffffffffffffffff, 0x19, &(0x7f0000001fc0)={0x19, 0x1000000, 0x8}, 0x0) 32.899782733s ago: executing program 1 (id=629): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000140)={[{@debug}, {@delalloc}, {@inlinecrypt}, {@test_dummy_encryption}, {@errors_continue}, {@errors_continue}, {@delalloc}, {@test_dummy_encryption_v1}]}, 0x1, 0xbc8, &(0x7f0000002380)="$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") r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) recvmmsg(r3, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f0000000a40)}, 0x7}], 0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)={0x80000011}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x77540947ad9a168d}) 32.320259755s ago: executing program 1 (id=631): syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000000)='./file1\x00', 0xa18c56, &(0x7f0000000080)={[{@uni_xlate}, {@shortname_winnt}, {@uni_xlateno}, {@fat=@codepage={'codepage', 0x3d, '865'}}, {@shortname_win95}, {@shortname_lower}, {@shortname_win95}, {@fat=@check_normal}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp737'}}, {@uni_xlateno}, {@rodir}, {@utf8no}]}, 0x80, 0x29b, &(0x7f0000000580)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$netlink(0x10, 0x3, 0xf) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r4 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400), 0x2, 0x0) statx(0xffffffffffffffff, &(0x7f0000000480)='./file0\x00', 0x6000, 0x4, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000340), 0x8) sendmsg$netlink(r2, &(0x7f00000004c0)={&(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfb, 0x40000000}, 0xc, &(0x7f0000000380)=[{&(0x7f00000002c0)={0x10, 0x16, 0x300, 0x70bd2b, 0x25dfdbfb}, 0x10}], 0x1, &(0x7f00000006c0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r3, @ANYRES32, @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="24000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=r1, @ANYRES32, @ANYBLOB="000000003f000000000000000100000001", @ANYRES32=r1, @ANYRES32, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="00000000adfdffff000000000100000002000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB, @ANYRES32=r1, @ANYRES32, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1], 0xc0, 0x804}, 0x4004004) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000180)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000280)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@noextend}, {@cache_none}, {@mmap}, {@aname={'aname', 0x3d, 'uni_xlate=1'}}, {@ignoreqv}, {@aname={'aname', 0x3d, 'cp737'}}, {@dfltgid={'dfltgid', 0x3d, r6}}, {@aname}, {@version_9p2000}], [{@uid_eq={'uid', 0x3d, r7}}, {@dont_hash}, {@flag='sync'}, {@context={'context', 0x3d, 'staff_u'}}, {@smackfsdef={'smackfsdef', 0x3d, '-:+'}}]}}) 32.271866626s ago: executing program 1 (id=632): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') pread64(r2, 0x0, 0x0, 0xffff) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) socket(0x1e, 0x4, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x71d4, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0xe, 0x2, 0x1, 0x7f, 0x6, 0xfffffff9, 0xfffffff2, 0x5f, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x1, 0xe661, 0x4, 0x9, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x8001, 0xfffffffd, 0x3, 0x5, 0x4, 0x8, 0x2, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x8, 0x12f, 0x8000, 0x0, 0x8, 0x129432e3, 0xcb, 0xf6, 0xb, 0x2bf, 0x6c9, 0x9, 0xfffffffe, 0x7, 0x0, 0x7, 0x5, 0x2000002f, 0xe, 0x312, 0x78, 0xea4, 0x73b, 0x4, 0x4000, 0x8000, 0x9, 0x400, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x7f, 0x5f33, 0x4, 0x0, 0x6, 0x2, 0x9, 0x20000004, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x0, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0xb, 0xc, 0x48c93690, 0x3, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8ce, 0x9, 0x2, 0x1, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x6, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xd, 0x5, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0x4ccd, 0x7, 0x53cf697b, 0x7, 0x6, 0x54fe12d6, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x3, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x0, 0x3], [0x9, 0xbb2f, 0x3, 0x7, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x8ad, 0x5, 0x3, 0x4, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x6, 0xfffffffe, 0x14c, 0x60a7, 0x6, 0x5, 0xffffffff, 0x7ffffffe, 0x5, 0x8, 0x400c8, 0x3, 0x3, 0xfffe, 0x3, 0x9, 0x7, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x2, 0x8, 0x2b93, 0x4, 0x8, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x8c, 0x200, 0xffff3441, 0xff]}, 0x45c) unshare(0x2000400) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb0100180000000000000014000000140000000900000005000000010000060400000004000000000000000030303d615f"], &(0x7f00000017c0)=""/4096, 0x35, 0x1000, 0x1}, 0x28) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) close_range(r0, 0xffffffffffffffff, 0x2) utimensat(r0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000140)=ANY=[@ANYBLOB="e9b7f69cd717f952a0e924e6c44582224eb527260455c2ef4b423d593ed8a9b2fe987ad0b729e3e458d2427a602126076338bcfc5e52acaffd1ba533031f51b209ab71367b78c753ed97c18673d28cc088a4110b8797e908"], 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000001c0)={r0, 0x40, {0x0, 0x0, 0x0, 0x275, 0x7, 0x0, 0x5, 0x1, 0xd, "52c5389dc6771a2c6cc4f36c155149e14c79dab1051097dc613da48d4d3f6c4532cb1e080d62c252bc72e105869088aec23318c106a093a375a04530969fa961", "8abbd21460df823cbba9ff5bf36f1f44d54dca1a783455110e7e75ed67673f0b85094809702e2bcc71e1f76652bc9f64d485b78ab2b9a918f97fa986a400037e", "f898a81a6826dc057b42c0b85e4cbb44660fc79d3f9593872a6c306f4e8191ec", [0x6, 0xcd]}}) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000001e00190f00003fffffffda060200000000e80001dd0008040d000d00ea11c21d0005000000", 0x29}], 0x1) write$binfmt_register(r0, &(0x7f0000000340)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x4, 0x3a, '\\-', 0x3a, '(', 0x3a, './file0', 0x3a, [0x43, 0x46, 0x46, 0x0, 0x46]}, 0x2f) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550"], 0x0}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x2, &(0x7f0000000100)=0x711, 0xffc5) getsockopt$inet6_buf(r5, 0x29, 0x6, 0xffffffffffffffff, &(0x7f0000000180)=0xa4) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000880)={0x0, {}, 0x0, {}, 0x3, 0x6, 0x1f, 0x18, "8c5ab85fd05a15bb589f4b3735121ee72d6c4c1380ba7b3ff4b9ba3a4c3ba2e91c1708fc770a3157009e22e3d5181ed3cc7f0910c423e100fa68e2920f17c97d", "439079b58d056e5c6b1182bd4b736d19480099a7235315956db21998168c1f42", [0x974, 0x2]}) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000000)) 17.216169938s ago: executing program 40 (id=632): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') pread64(r2, 0x0, 0x0, 0xffff) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) socket(0x1e, 0x4, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x71d4, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0xe, 0x2, 0x1, 0x7f, 0x6, 0xfffffff9, 0xfffffff2, 0x5f, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x1, 0xe661, 0x4, 0x9, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x8001, 0xfffffffd, 0x3, 0x5, 0x4, 0x8, 0x2, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x8, 0x12f, 0x8000, 0x0, 0x8, 0x129432e3, 0xcb, 0xf6, 0xb, 0x2bf, 0x6c9, 0x9, 0xfffffffe, 0x7, 0x0, 0x7, 0x5, 0x2000002f, 0xe, 0x312, 0x78, 0xea4, 0x73b, 0x4, 0x4000, 0x8000, 0x9, 0x400, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x7f, 0x5f33, 0x4, 0x0, 0x6, 0x2, 0x9, 0x20000004, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x0, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0xb, 0xc, 0x48c93690, 0x3, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8ce, 0x9, 0x2, 0x1, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x6, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xd, 0x5, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0x4ccd, 0x7, 0x53cf697b, 0x7, 0x6, 0x54fe12d6, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x3, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x0, 0x3], [0x9, 0xbb2f, 0x3, 0x7, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x8ad, 0x5, 0x3, 0x4, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x6, 0xfffffffe, 0x14c, 0x60a7, 0x6, 0x5, 0xffffffff, 0x7ffffffe, 0x5, 0x8, 0x400c8, 0x3, 0x3, 0xfffe, 0x3, 0x9, 0x7, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x2, 0x8, 0x2b93, 0x4, 0x8, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x8c, 0x200, 0xffff3441, 0xff]}, 0x45c) unshare(0x2000400) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb0100180000000000000014000000140000000900000005000000010000060400000004000000000000000030303d615f"], &(0x7f00000017c0)=""/4096, 0x35, 0x1000, 0x1}, 0x28) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) close_range(r0, 0xffffffffffffffff, 0x2) utimensat(r0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000140)=ANY=[@ANYBLOB="e9b7f69cd717f952a0e924e6c44582224eb527260455c2ef4b423d593ed8a9b2fe987ad0b729e3e458d2427a602126076338bcfc5e52acaffd1ba533031f51b209ab71367b78c753ed97c18673d28cc088a4110b8797e908"], 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000001c0)={r0, 0x40, {0x0, 0x0, 0x0, 0x275, 0x7, 0x0, 0x5, 0x1, 0xd, "52c5389dc6771a2c6cc4f36c155149e14c79dab1051097dc613da48d4d3f6c4532cb1e080d62c252bc72e105869088aec23318c106a093a375a04530969fa961", "8abbd21460df823cbba9ff5bf36f1f44d54dca1a783455110e7e75ed67673f0b85094809702e2bcc71e1f76652bc9f64d485b78ab2b9a918f97fa986a400037e", "f898a81a6826dc057b42c0b85e4cbb44660fc79d3f9593872a6c306f4e8191ec", [0x6, 0xcd]}}) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000001e00190f00003fffffffda060200000000e80001dd0008040d000d00ea11c21d0005000000", 0x29}], 0x1) write$binfmt_register(r0, &(0x7f0000000340)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x4, 0x3a, '\\-', 0x3a, '(', 0x3a, './file0', 0x3a, [0x43, 0x46, 0x46, 0x0, 0x46]}, 0x2f) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550"], 0x0}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x2, &(0x7f0000000100)=0x711, 0xffc5) getsockopt$inet6_buf(r5, 0x29, 0x6, 0xffffffffffffffff, &(0x7f0000000180)=0xa4) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000880)={0x0, {}, 0x0, {}, 0x3, 0x6, 0x1f, 0x18, "8c5ab85fd05a15bb589f4b3735121ee72d6c4c1380ba7b3ff4b9ba3a4c3ba2e91c1708fc770a3157009e22e3d5181ed3cc7f0910c423e100fa68e2920f17c97d", "439079b58d056e5c6b1182bd4b736d19480099a7235315956db21998168c1f42", [0x974, 0x2]}) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000000)) 15.376393566s ago: executing program 3 (id=821): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a8008000280", @ANYRES16=r2, @ANYRES32=r2], 0x44}}, 0x2000800) 15.371131186s ago: executing program 3 (id=823): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001a00010029bd70000000000002"], 0x34}}, 0x0) 15.327425037s ago: executing program 3 (id=825): sched_setscheduler(0x0, 0x1, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) splice(r0, 0x0, r1, 0x0, 0x4ffe2, 0x0) 15.28438749s ago: executing program 3 (id=827): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) syz_mount_image$vfat(&(0x7f0000000540), &(0x7f00000010c0)='./file1\x00', 0xa18c14, &(0x7f0000001280)=ANY=[@ANYBLOB="756e695f786c6174653d312c73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c636f6465706167653d3933362c696f636861727365743d69736f383835392d362c73686f72746e616d653d6d697865642c757466383d312c757466383d302c696f636861727365743d63703836312c73686f72746e616d653d77696e6e742c757466383d302c726f6469722c73686f72746e616d653d6c6f7765722c008fdf0d274b5c9aeb03e618396e205c4dce5a101eef05bb4b49c70ac8f2a09b403389203d6e8617ec0dc7e2775a05e467610612b14e2bc7dabc1aa2674e044dbdd138366335c20f8d02c2e28b98e3a7583942393a7b4e8c0c7f551f31933afb82f783ebd05ac2699bd9972f981f5e82e394dcc2b26afe0bc8d13124bf66dc7909ff053f3d8d4810d9733da0d21b2ef43e0d2e339768aa812b996916ad4e91b0b0d83c304add73a00641b7b5d13c6e322b5c8e3f5411a23ddeda23b59e3a75607fc7dd96ed1029a573da43662ebd1a7bc490ed287d68ec503cd1614549e266321ced4b36686242b2996cc58d95a0b508d16582e453545a7098973407680f05e095e17b9ecac4d97a9ed932d6380f0af5a90c265d66d5a5d0adb8479bba6323960a5cbd701653753cb7bfe44bdd577806ff632b018a6206f1b8c5638302ed52d619f822fe7472e1493b6005c4fd6d12f4c41ef41d40756dcc70eaa922dc4a682d57395e03f6fe0c7e96228960ce92e0722d6144d2afe5ff972a5e956f24f9a79cdbafa9ce12ed60166a12a73b68ec1954fcaec7850b9e2147c823e611110e0bbd487f2abeba14f093d9bbf4ff036533e63fa4df931ae8c4d5dbb1afb4db66927690d245804d3012fef047a2c84e"], 0x81, 0x29b, &(0x7f00000015c0)="$eJzs3c9qK1UYAPBv0iRNVEgWrkRwQBeuwr33CW6QChezUrLQjV5sC5KEQgMB/2Dsyr3gynfwHXwAN76BC5eCO7sQR5KZSdI0bY3EVOrvt5kvc74v509OWyjMyUevjgbHZ+PTiy9+jkYjicrTeBqXSbSjEqWvAgB4SC6zLH7LcnflVqMeEVmreFXZw/AAgH/BNn//AYCH4b33P3in2+sdvZumjYjR15N+Evk1b++exicxjJN4FK34IyJbyOOXnvWOopqm5T8DJs3oR4w+/LF43f01Yl7/OFrRXq+vF1npXLwxmk76s55n11q8kER0syRPeRKteDkiq0XxJvnl7We9oyfp9fro1+PN178rxv/nSXSiFT99HGcxjOP5Wyzrv3ycpm9l3/7+eT6DfkQynfQP53lL2cFePhAAAAAAAAAAAAAAAAAAAAAAAP4XOulCe/X8nPI0wE5nc/uN5wMVJ/xMV87XeZSmaXmMz6Rfi7y+Gq9Uo3p/MwcAAAAAAAAAAAAAAAAAAID/jvGnnw2eD4cn51eCH7JZ0Lw1Zz2ortwpH+u/u2pzMPg+YvuqvxPEQTG0YXKti6Rs2kFfh9skNzd1GpWb1rA6jHzw32w/sNd2NcFbg3J3DZ4ncUdyY/MmWdl15TY8HydbbMhsw9Id3FhV39Hc6y/+0/LmxoWazbi2WMyrVY3ZJ7lyp7bjn5Q1yc5/9wAAAAAAAAAAAAAAAAAAAFctH/qNX641XtzLkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg75bf/78Ior1+Zz2YFsXzO5Xbkw/Pxxu6be95mgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADxwfwUAAP//5OlVhQ==") r0 = syz_io_uring_setup(0x5143, &(0x7f0000000000)={0x0, 0x74a8, 0x800, 0x2, 0x25e}, &(0x7f0000000080), &(0x7f00000000c0)) signalfd4(0xffffffffffffffff, &(0x7f0000000100)={[0x18b0]}, 0x8, 0x80800) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x1c0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000200)=[r1], 0x1) 15.209700225s ago: executing program 3 (id=833): syz_emit_ethernet(0x4f, &(0x7f00000000c0)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x19, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, [{0x3, 0x1, "bd3e6d47065980"}]}}}}}}, 0x0) 15.035730273s ago: executing program 3 (id=845): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='stat\x00') read$FUSE(r0, &(0x7f0000002440)={0x2020}, 0x2020) 14.993035315s ago: executing program 41 (id=845): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='stat\x00') read$FUSE(r0, &(0x7f0000002440)={0x2020}, 0x2020) 6.374979144s ago: executing program 6 (id=1088): syz_usb_connect(0x0, 0x3e, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000020dafb2099041010f5050102030109022c00010000000009040000018a2bae000824020100020000092402020000000000090585da"], 0x0) 5.915394199s ago: executing program 4 (id=1096): syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x4, 0x0, 0x0, @irqchip={0xfe, 0xa8f}}]}) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024917720042322023f77010203010902120001000010000904"], 0x0) 4.756869623s ago: executing program 6 (id=1109): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001c00010a00000000fbc298"], 0x14}}, 0x20008000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x800000000000000, 0x1000000000, 0x5, 0x41, 0x4, 0x0, 0x2004cb, 0x0, 0x42000000000a1d, 0x68ff, 0x5, 0x0, 0x3, 0x2, 0x0, 0xee], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x6, 0xf9}, {0xffff1000, 0x10000, 0x1f, 0x0, 0x2, 0x2, 0x0, 0x0, 0x7, 0xff, 0x0, 0x5}, {0xeeee0000, 0xeeee1000, 0xc, 0x0, 0x7, 0xc4, 0x0, 0x1, 0x48, 0x3, 0x0, 0x3}, {0x1, 0xffff1000, 0xe, 0x0, 0x1, 0x0, 0x9, 0x5, 0x8, 0x0, 0x4}, {0x6000, 0xffff1000, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x40}, {0x100000, 0x0, 0x0, 0x74, 0x5, 0x5, 0x2, 0x0, 0x0, 0x2, 0x5}, {0x0, 0xeeee8000, 0xa, 0x4, 0x0, 0x3, 0xa1, 0x20, 0x0, 0x9}, {0x0, 0x6000, 0x8, 0x0, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0x5}, {0xeeef0000, 0x3}, {0xdddd1000, 0x400}, 0xddf8ffdb, 0x0, 0x0, 0x400, 0x0, 0xf801, 0x0, [0x80000001, 0x0, 0x1]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.725689238s ago: executing program 6 (id=1110): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xff7fff01, 0x6, 0x3, 0x7, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x9, 0x80008071, 0x3, 0x44e, 0x1, 0xb, 0x5, 0x3e, 0x8e, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x6, 0xffff, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xbe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x7, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x3, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xd, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x83, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 4.280252135s ago: executing program 4 (id=1115): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000000)={0x3, 0x100, 0x4}) 3.084412872s ago: executing program 6 (id=1121): mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x200103, 0x0) close(r2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="000003"]) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r5, 0x0, 0x0, 0x2004c860, &(0x7f00000001c0)={0x11, 0x3, r4, 0x1, 0x3}, 0x14) 3.066282769s ago: executing program 6 (id=1122): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 2.408250837s ago: executing program 8 (id=1125): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0xf88e470f}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000080)={[0xeeee0000, 0xeeef0000, 0xdddd0000, 0xb000], 0x2000000db, 0xc}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0x4000, 0x4, 0x5, 0x0, 0x8, 0x3, 0xa, 0x7e, 0x4, 0x11, 0x5, 0x80204}, {0x804, 0x1, 0x1, 0x45, 0x7, 0x2, 0x1, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0x1, 0x3, 0x38, 0x5, 0x84, 0x7, 0x3, 0x50, 0x0, 0x70, 0x4, 0x5}], 0xffffffff}) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x20000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0xffffffffffffffff, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0x101, 0x0, 0x2, 0x0, 0x4002004c4, 0x1008, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x8000000b3, 0x8d], 0xeeee8000, 0x14d3}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x881, 0x0) 2.349862596s ago: executing program 8 (id=1126): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0xc0010058, 0x0, 0x2000000}]}) 2.31586717s ago: executing program 8 (id=1127): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003173610ef171e7206de010203010902f3c8010000000009040000000206"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000280)={0x20, 0x15, 0x4, "216827dd"}, 0x0, 0x0, 0x0, 0x0}) 1.718708829s ago: executing program 0 (id=1135): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c0000000906010200000000000000000200ffff08000940000000390900020073797a310000000005000100070000005c0008801c0007801800018014000240"], 0x8c}, 0x1, 0x0, 0x0, 0x10000182}, 0x4000080) 1.661052608s ago: executing program 0 (id=1136): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) 1.660860928s ago: executing program 0 (id=1137): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x0, 0x23, 0x94, {0x94, 0x7, "6939966d00ba042597dfbc3803094105141fac92867b4e094a39100ecf981c2c0d30fd7dd8425e9aa26dd1959eb262adbc003c49396a6e61d73c73e10b575313fe90b60dbd2030f2570122db846c9d1435dc5e4837d31c676e049ba725b54c5766832e2310b95a12194f1adb85c84582d7b36b619e57753672b5d859f2b205d3640309787ca929711556a623cdae7f9f085f"}}, 0x0}, 0x0) 1.587182575s ago: executing program 5 (id=1138): syz_usb_connect(0x0, 0x24, &(0x7f0000000640)={{0x12, 0x1, 0x110, 0x97, 0x11, 0xc, 0x20, 0x47ed, 0x31ab, 0xa655, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x8, 0xa0, 0xf2, "", [{{0x9, 0x4, 0xc9, 0x9, 0x0, 0x8, 0x6, 0x62}}]}}]}}, 0x0) 1.299399551s ago: executing program 4 (id=1139): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x24, @short={0x2, 0xffff, 0xaaa3}}, 0x14, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x6000}, 0x4806c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 1.228418508s ago: executing program 4 (id=1140): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20004880, &(0x7f00000001c0)={0xa, 0x4e21, 0x1747, @dev={0xfe, 0x80, '\x00', 0x29}, 0x9}, 0x1c) 1.228222808s ago: executing program 4 (id=1141): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r1, 0x5408, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x2, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf"}) ioctl$TIOCGPGRP(r0, 0x5437, 0x0) 1.164422036s ago: executing program 0 (id=1142): syz_usb_connect$uac3(0x3, 0x80, &(0x7f00000001c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x1235, 0x10, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0xd8, 0x80, 0xc, {0x8, 0xb, 0x1, 0x2, 0x1, 0x1, 0x30, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xe, 0x0, 0x3, {0xa, 0x25, 0x25, 0x80000001, 0xc, 0x180}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x7f, 0x4, 0x0, {0xa, 0x25, 0x25, 0x400, 0x8f, 0x2}}}}}}}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) 1.064042107s ago: executing program 5 (id=1143): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000240)="b805000000b9fa0000000f01d9660f78c4020a1bf7b805000000b90000c0fe0fae41d901000000b87f8b7f26ba000000000f30660fc775022e0fba600c98c4e3a90d78df000f3566b857000f00d0", 0x4e}], 0x1, 0x10, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fd6000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, 0x64}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.012373178s ago: executing program 5 (id=1144): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000810087406d040e0a759400000001090212000100000000090400200003"], 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) syz_usb_connect$uac2(0x5, 0x0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 980.638792ms ago: executing program 4 (id=1145): setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}], 0x4) syz_usb_connect(0xf400, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000094037b40fd080200fdca010203010902120001000000000904"], 0x0) 650.556391ms ago: executing program 0 (id=1146): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f0000000280)={0x3, 0x100, 0x0, 0xb0, 0x80000, 0x7ffd}) 500.528642ms ago: executing program 5 (id=1147): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)="98bd80", 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x40408d0) 500.352142ms ago: executing program 5 (id=1148): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000003940)={0x0, 0x0, &(0x7f0000003900)={&(0x7f0000002880)={0x268, 0x1, 0x5, 0x801, 0x0, 0x0, {0xa, 0x0, 0x9}, [{{0x254, 0x1, {{0x2}, 0x4, 0x0, 0x27, 0x3, 0xd, 'syz0\x00', "16cd9fd2497c711b588b767151c8e5a4770e1a10adb609c8bf33990a29f3e223", "f210842f69c745c8321281d437c94b66e8103dc19895faef1d64be0c1a1fd0bd", [{0x1000, 0xfffd, {0x1, 0xfffffc00}}, {0x6, 0x0, {0x6, 0x5}}, {0x1, 0x5c8, {0x3, 0x6}}, {0x7, 0xef0, {0x0, 0x9}}, {0x9, 0x2, {0x2}}, {0x0, 0xa, {0x0, 0x4}}, {0x4, 0x9, {0x1, 0xffffffff}}, {0x3, 0x101, {0x3, 0x6e}}, {0x200, 0x1a3e, {0x2, 0x48}}, {0x3, 0x1ff, {0x2, 0x6}}, {0x5, 0xf8ad, {0x3, 0xe3}}, {0xa, 0x1, {0x0, 0x9}}, {0xa, 0x6, {0x3, 0x3}}, {0x45c, 0x8d, {0x3, 0x9}}, {0x785, 0x4, {0x0, 0x5}}, {0x4, 0x378, {0x1, 0xffffffff}}, {0x3, 0x9, {0x1, 0xfffffffe}}, {0xf2c, 0x7, {0x1, 0x2}}, {0x6, 0xd, {0x3, 0x2}}, {0x86, 0xb69, {0x2, 0x1}}, {0x7, 0x0, {0x0, 0x100}}, {0x101, 0x8, {0x3, 0x6}}, {0x8, 0x0, {0x1, 0x5}}, {0x8, 0x2, {0x0, 0x947}}, {0x6e30, 0x40, {0x1, 0x1000}}, {0x8, 0x8, {0x2}}, {0xb7, 0xffff, {0x3, 0x62c}}, {0x9, 0x45df, {0x1, 0x6}}, {0x3, 0x1, {0x0, 0xe}}, {0x4, 0x8, {0x1, 0x9}}, {0x2, 0x7, {0x2, 0x4}}, {0xbd79, 0x6, {0x2, 0x9}}, {0x327, 0x3, {0x3, 0x970b}}, {0x7, 0x1, {0x1, 0x2}}, {0x1ff, 0x5, {0x1, 0x4}}, {0x7, 0x2, {0x0, 0x8}}, {0x8, 0x3, {0x0, 0xb}}, {0xdcd4, 0x6, {0x3, 0x7}}, {0x6, 0x6, {0x0, 0x6}}, {0x5, 0x0, {0x2, 0x9}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x4}, 0x40000) 500.200812ms ago: executing program 5 (id=1149): syz_usb_connect$uac1(0x2, 0x85, &(0x7f0000000140)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x73, 0x3, 0x1, 0xdf, 0x20, 0x5, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x1d}, [@processing_unit={0xa, 0x24, 0x7, 0x1, 0x5, 0x3, "0ddf4d"}, @output_terminal={0x9, 0x24, 0x3, 0x4, 0x405, 0x6, 0x1, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0xa, 0xd, 0x6, {0x7, 0x25, 0x1, 0x0, 0x7, 0x200}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x1, 0x1, 0xff, {0x7, 0x25, 0x1, 0x4, 0x3, 0x6}}}}}}}}]}}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}) 500.063992ms ago: executing program 8 (id=1150): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x28, r2, 0x1, 0x0, 0xffffffff, {{0x11}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0xec0}, 0x20000010) 499.425532ms ago: executing program 8 (id=1151): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000900)="640f23ae2e2e0fc71fb800008ec0440f20c0663506000000440f22c0baf80c66b82dd4c88166efbafc0cb066eef32eda166e5c366d0f0f01aa0f20e06635010000000f22e00f01cf", 0x48}], 0x1, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fb", 0x1}], 0x1}, 0x0) recvmsg(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x40fd) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 453.207784ms ago: executing program 8 (id=1152): syz_usb_connect$cdc_ecm(0x3, 0x68, &(0x7f0000000540)=ANY=[@ANYBLOB="12010102020000202505a1a44000010203010902560001010050000904000902020600e905240600000524002d0009240f"], &(0x7f0000000a00)={0x0, 0x0, 0x5, &(0x7f0000000640)={0x5, 0xf, 0x5}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x11, 0xffffffffffffffff, 0xbd5e4000) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) 136.673355ms ago: executing program 0 (id=1153): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000000a40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)={0x40, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000001240)={0x40, 0x30, 0x1, "c2"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000080)={0x20, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)={0x0, 0x13}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x40, 0x1e, 0x1, 0x9}, 0x0}) 0s ago: executing program 6 (id=1154): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x4e21, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0xb}}}, 0xb8}}, 0x0) kernel console output (not intermixed with test programs): oop7: rw=2049, want=45104, limit=40427 [ 109.590411][ T301] usb 7-1: device descriptor read/8, error -71 [ 109.598153][ T2013] EXT4-fs (loop3): Ignoring removed oldalloc option [ 109.624292][ T2013] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c028, mo2=0002] [ 109.632849][ T2013] System zones: 0-7 [ 109.637790][ T2013] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,nodioread_nolock,barrier=0x0000000000000007,oldalloc,nojournal_checksum,min_batch_time=0x000000000000c619,errors=remount-ro,. Quota mode: none. [ 109.662885][ T2013] EXT4-fs (loop3): shut down requested (2) [ 109.785093][ T2021] loop7: detected capacity change from 0 to 512 [ 109.804820][ T2021] FAT-fs (loop7): Unrecognized mount option "" or missing value [ 109.813328][ T301] usb 7-1: device descriptor read/8, error -71 [ 109.854152][ T20] smartjoyplus 0003:0925:0005.0004: unknown main item tag 0x0 [ 109.869550][ T20] smartjoyplus 0003:0925:0005.0004: unknown main item tag 0x0 [ 109.878002][ T20] smartjoyplus 0003:0925:0005.0004: unknown main item tag 0x0 [ 109.886680][ T20] smartjoyplus 0003:0925:0005.0004: unknown main item tag 0x0 [ 109.894358][ T20] smartjoyplus 0003:0925:0005.0004: unknown main item tag 0x0 [ 109.902004][ T20] smartjoyplus 0003:0925:0005.0004: unknown main item tag 0x0 [ 109.909658][ T20] smartjoyplus 0003:0925:0005.0004: unknown main item tag 0x0 [ 109.917256][ T20] smartjoyplus 0003:0925:0005.0004: unknown main item tag 0x0 [ 109.925447][ T20] smartjoyplus 0003:0925:0005.0004: unknown main item tag 0x0 [ 109.943266][ T20] smartjoyplus 0003:0925:0005.0004: unknown main item tag 0x0 [ 109.957435][ T20] smartjoyplus 0003:0925:0005.0004: unknown main item tag 0x0 [ 109.972843][ T20] smartjoyplus 0003:0925:0005.0004: unknown main item tag 0x0 [ 109.993330][ T20] smartjoyplus 0003:0925:0005.0004: unknown main item tag 0x0 [ 110.000924][ T20] smartjoyplus 0003:0925:0005.0004: unknown main item tag 0x0 [ 110.009055][ T20] smartjoyplus 0003:0925:0005.0004: unknown main item tag 0xe [ 110.017047][ T20] smartjoyplus 0003:0925:0005.0004: unknown main item tag 0x0 [ 110.025486][ T20] smartjoyplus 0003:0925:0005.0004: unknown main item tag 0x0 [ 110.033080][ T20] smartjoyplus 0003:0925:0005.0004: unknown main item tag 0xe [ 110.040890][ T20] smartjoyplus 0003:0925:0005.0004: unknown main item tag 0x0 [ 110.385898][ T20] smartjoyplus 0003:0925:0005.0004: unknown main item tag 0x0 [ 110.393695][ T20] smartjoyplus 0003:0925:0005.0004: unknown main item tag 0x0 [ 110.401290][ T20] smartjoyplus 0003:0925:0005.0004: unknown main item tag 0x0 [ 110.409008][ T20] smartjoyplus 0003:0925:0005.0004: unknown main item tag 0x0 [ 110.423235][ T20] smartjoyplus 0003:0925:0005.0004: item fetching failed at offset 40/41 [ 110.443440][ T20] smartjoyplus 0003:0925:0005.0004: parse failed [ 110.449984][ T20] smartjoyplus: probe of 0003:0925:0005.0004 failed with error -22 [ 110.459771][ T20] usb 10-1: USB disconnect, device number 2 [ 110.565478][ T2038] loop6: detected capacity change from 0 to 8192 [ 110.678820][ T2019] loop3: detected capacity change from 0 to 131072 [ 110.739022][ T2044] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.746594][ T2044] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.756293][ T2019] F2FS-fs (loop3): Invalid log sectorsize (67108873) [ 110.763614][ T2019] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 110.775811][ T2044] device bridge_slave_1 left promiscuous mode [ 110.782094][ T2044] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.790966][ T2019] F2FS-fs (loop3): invalid crc value [ 110.797170][ T2044] device bridge_slave_0 left promiscuous mode [ 110.808798][ T2044] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.811848][ T2046] loop7: detected capacity change from 0 to 512 [ 110.823819][ T2019] F2FS-fs (loop3): Found nat_bits in checkpoint [ 110.833668][ T39] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 110.863063][ T2046] EXT4-fs (loop7): Ignoring removed nobh option [ 110.873400][ T2050] netlink: 20 bytes leftover after parsing attributes in process `syz.9.450'. [ 110.878202][ T2019] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 110.894516][ T2019] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 110.902938][ T2046] EXT4-fs (loop7): 1 orphan inode deleted [ 110.909120][ T2046] EXT4-fs (loop7): mounted filesystem without journal. Opts: delalloc,journal_dev=0x00000000040000ff,debug_want_extra_isize=0x0000000000000060,nobh,resgid=0x0000000000000000,resuid=0x0000000000000000,nombcache,noblock_validity,usrquota,journal_ioprio=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 110.954543][ T2019] SELinux: Context :syz3:E:00000000000000000004:f2fs is not valid (left unmapped). [ 111.051500][ T2059] loop7: detected capacity change from 0 to 16 [ 111.061720][ T2059] erofs: (device loop7): mounted with root inode @ nid 36. [ 111.103740][ T39] usb 2-1: Using ep0 maxpacket: 16 [ 111.181353][ T2054] loop9: detected capacity change from 0 to 40427 [ 111.265088][ T39] usb 2-1: unable to get BOS descriptor or descriptor too short [ 111.278569][ T2054] F2FS-fs (loop9): invalid crc value [ 111.299247][ T2054] F2FS-fs (loop9): Found nat_bits in checkpoint [ 111.343420][ T39] usb 2-1: too many endpoints for config 1 interface 1 altsetting 1: 232, using maximum allowed: 30 [ 111.368764][ T39] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 232 [ 111.400080][ T39] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 111.420908][ T2054] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 111.458706][ T30] audit: type=1400 audit(1773346387.693:397): avc: denied { sys_admin } for pid=2071 comm="syz.6.458" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 111.573348][ T39] usb 2-1: New USB device found, idVendor=08e4, idProduct=0163, bcdDevice= 0.40 [ 111.582447][ T39] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.611273][ T39] usb 2-1: Product: syz [ 111.618081][ T39] usb 2-1: Manufacturer: syz [ 111.623314][ T39] usb 2-1: SerialNumber: syz [ 111.693233][ T302] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 111.820855][ T2082] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.838172][ T2082] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.850652][ T2082] device bridge_slave_0 entered promiscuous mode [ 111.859430][ T1929] attempt to access beyond end of device [ 111.859430][ T1929] loop9: rw=2049, want=45104, limit=40427 [ 111.882069][ T2082] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.893248][ T309] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 111.903552][ T2082] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.911143][ T2082] device bridge_slave_1 entered promiscuous mode [ 111.933184][ T302] usb 4-1: Using ep0 maxpacket: 8 [ 112.005691][ T2082] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.012815][ T2082] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.020175][ T2082] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.027611][ T2082] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.086584][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 112.095407][ T303] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.110395][ T303] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.113644][ T302] usb 4-1: unable to get BOS descriptor or descriptor too short [ 112.133189][ T309] usb 7-1: Using ep0 maxpacket: 8 [ 112.138489][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 112.155630][ T303] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.162725][ T303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.172390][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 112.181566][ T303] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.188685][ T303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.262121][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 112.269983][ T309] usb 7-1: config index 0 descriptor too short (expected 5924, got 36) [ 112.278377][ T309] usb 7-1: config 250 has an invalid interface number: 228 but max is -1 [ 112.287057][ T309] usb 7-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 112.289432][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 112.296618][ T309] usb 7-1: config 250 has no interface number 0 [ 112.371251][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 112.416472][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 112.429327][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 112.439680][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 112.448040][ T302] usb 4-1: New USB device found, idVendor=0499, idProduct=1008, bcdDevice= 0.40 [ 112.475231][ T2082] device veth0_vlan entered promiscuous mode [ 112.488831][ T302] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.524200][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 112.534657][ T302] usb 4-1: Product: syz [ 112.558077][ T2082] device veth1_macvtap entered promiscuous mode [ 112.565376][ T302] usb 4-1: Manufacturer: በ[ 112.585006][ T302] usb 4-1: SerialNumber: syz [ 112.611815][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 112.622129][ T309] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 112.634273][ T309] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 112.644868][ T309] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 112.655596][ T309] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 112.666258][ T309] usb 7-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 112.680093][ T309] usb 7-1: config 250 interface 228 has no altsetting 0 [ 112.687952][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 112.696541][ T302] snd-usb-audio: probe of 4-1:1.0 failed with error -2 [ 112.705456][ T302] snd-usb-audio: probe of 4-1:1.1 failed with error -2 [ 112.717495][ T302] snd-usb-audio: probe of 4-1:1.2 failed with error -2 [ 112.813273][ T2091] netlink: 'syz.2.461': attribute type 1 has an invalid length. [ 112.821338][ T2091] netlink: 56 bytes leftover after parsing attributes in process `syz.2.461'. [ 112.830587][ T309] usb 7-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 112.840378][ T8] device bridge_slave_1 left promiscuous mode [ 112.846597][ T309] usb 7-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 112.855125][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.862582][ T309] usb 7-1: Product: syz [ 112.867134][ T309] usb 7-1: SerialNumber: syz [ 112.872532][ T8] device bridge_slave_0 left promiscuous mode [ 112.879428][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.887747][ T8] device veth1_macvtap left promiscuous mode [ 112.893956][ T8] device veth0_vlan left promiscuous mode [ 112.900398][ T26] usb 4-1: USB disconnect, device number 18 [ 112.914843][ T309] hub 7-1:250.228: bad descriptor, ignoring hub [ 112.921513][ T309] hub: probe of 7-1:250.228 failed with error -5 [ 113.076825][ T2094] F2FS-fs (loop2): invalid crc value [ 113.084145][ T2094] F2FS-fs (loop2): Found nat_bits in checkpoint [ 113.125581][ T309] usblp 7-1:250.228: usblp0: USB Bidirectional printer dev 13 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 113.137317][ T2094] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 113.235181][ T2106] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 113.246622][ T2106] ext4 filesystem being mounted at /9/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.264099][ T2106] Quota error (device loop9): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 113.275173][ T2106] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 113.285654][ T2106] EXT4-fs error (device loop9): ext4_acquire_dquot:6225: comm syz.9.467: Failed to acquire dquot type 0 [ 113.353742][ T2081] erofs: (device loop6): mounted with root inode @ nid 36. [ 113.367952][ T2081] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 113.372641][ T2113] netlink: 12 bytes leftover after parsing attributes in process `syz.9.468'. [ 113.406313][ T2113] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 113.463769][ T2115] exfat: Deprecated parameter 'utf8' [ 113.473229][ T2115] exfat: Deprecated parameter 'utf8' [ 113.478626][ T2115] exfat: Deprecated parameter 'utf8' [ 113.503752][ T26] usb 7-1: USB disconnect, device number 13 [ 113.520186][ T2115] exfat: Unknown parameter 'aOlow_utime' [ 113.527234][ T26] usblp0: removed [ 113.573342][ T39] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 113.613252][ T39] usb 2-1: 2:1 : format type 0 is detected, processed as PCM [ 113.620791][ T39] usb 2-1: 2:1 : sample bitwidth 240 in over sample bytes 1 [ 113.733320][ T39] snd-usb-audio: probe of 2-1:1.0 failed with error -71 [ 113.755915][ T39] usb 2-1: USB disconnect, device number 11 [ 113.871272][ T2125] set_capacity_and_notify: 4 callbacks suppressed [ 113.871291][ T2125] loop1: detected capacity change from 0 to 40427 [ 113.924458][ T2125] F2FS-fs (loop1): invalid crc value [ 114.013847][ T2125] F2FS-fs (loop1): Found nat_bits in checkpoint [ 114.271153][ T2125] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 114.410873][ T2082] attempt to access beyond end of device [ 114.410873][ T2082] loop2: rw=2049, want=45104, limit=40427 [ 114.549750][ T2146] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.565517][ T2146] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.575257][ T281] attempt to access beyond end of device [ 114.575257][ T281] loop1: rw=2049, want=45104, limit=40427 [ 114.592267][ T2146] device bridge_slave_0 entered promiscuous mode [ 114.629721][ T2146] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.641801][ T2144] loop3: detected capacity change from 0 to 40427 [ 114.661833][ T2146] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.671208][ T2146] device bridge_slave_1 entered promiscuous mode [ 114.686118][ T2144] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 114.711423][ T2144] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 114.740394][ T2144] F2FS-fs (loop3): invalid crc value [ 114.813900][ T2146] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.821011][ T2146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.828464][ T2146] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.835635][ T2146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.863738][ T303] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.873575][ T303] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.907965][ T2144] F2FS-fs (loop3): Found nat_bits in checkpoint [ 114.918622][ T2160] loop2: detected capacity change from 0 to 512 [ 114.956548][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 114.987966][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 114.996228][ T2160] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 115.015206][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 115.024625][ T2144] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 115.031700][ T2144] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 115.032865][ T2160] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 115.055127][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 115.063597][ T303] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.070878][ T303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.079372][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 115.087775][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 115.096180][ T303] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.103526][ T303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.190482][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 115.198808][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 115.214707][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 115.223440][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 115.240166][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 115.248889][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 115.265153][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 115.273304][ T30] audit: type=1326 audit(1773346391.503:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2157 comm="syz.6.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fb547e799 code=0x7ffc0000 [ 115.368925][ T2171] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 115.378296][ T2171] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: writeback. [ 115.390065][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 115.398159][ T30] audit: type=1326 audit(1773346391.643:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2157 comm="syz.6.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f4fb547e799 code=0x7ffc0000 [ 115.442070][ T2146] device veth0_vlan entered promiscuous mode [ 115.456179][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 115.468846][ T26] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 115.478417][ T30] audit: type=1326 audit(1773346391.663:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2157 comm="syz.6.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fb547e799 code=0x7ffc0000 [ 115.502030][ T30] audit: type=1326 audit(1773346391.663:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2157 comm="syz.6.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4fb543efce code=0x7ffc0000 [ 115.525758][ T30] audit: type=1326 audit(1773346391.663:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2157 comm="syz.6.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fb547e799 code=0x7ffc0000 [ 115.549674][ T30] audit: type=1326 audit(1773346391.663:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2157 comm="syz.6.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4fb543efce code=0x7ffc0000 [ 115.563108][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 115.582905][ T30] audit: type=1326 audit(1773346391.663:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2157 comm="syz.6.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4fb543efce code=0x7ffc0000 [ 115.611602][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 115.623693][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 115.633624][ T2146] device veth1_macvtap entered promiscuous mode [ 115.645459][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 115.653630][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 115.661954][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 115.680740][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 115.689484][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 115.723414][ T26] usb 2-1: Using ep0 maxpacket: 16 [ 115.745201][ T2174] loop0: detected capacity change from 0 to 256 [ 115.766177][ T2174] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 115.814178][ T2174] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 115.827596][ T2176] loop6: detected capacity change from 0 to 256 [ 115.883361][ T26] usb 2-1: unable to get BOS descriptor or descriptor too short [ 115.902309][ T2176] netlink: 8 bytes leftover after parsing attributes in process `syz.6.485'. [ 115.913837][ T2176] device vlan2 entered promiscuous mode [ 115.963265][ T26] usb 2-1: too many endpoints for config 1 interface 1 altsetting 1: 232, using maximum allowed: 30 [ 115.967575][ T2184] loop6: detected capacity change from 0 to 256 [ 115.981850][ T26] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 232 [ 115.995018][ T26] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 116.122981][ T2188] loop3: detected capacity change from 0 to 256 [ 116.153462][ T2188] exfat: Deprecated parameter 'utf8' [ 116.159210][ T2188] exfat: Unknown parameter 'uf8' [ 116.166073][ T8] device veth1_macvtap left promiscuous mode [ 116.172219][ T8] device veth0_vlan left promiscuous mode [ 116.222936][ T26] usb 2-1: New USB device found, idVendor=08e4, idProduct=0163, bcdDevice= 0.40 [ 116.232782][ T302] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 116.241045][ T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.249220][ T26] usb 2-1: Product: syz [ 116.253558][ T26] usb 2-1: Manufacturer: syz [ 116.258182][ T26] usb 2-1: SerialNumber: syz [ 116.285872][ T309] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 116.493203][ T302] usb 3-1: Using ep0 maxpacket: 8 [ 116.623417][ T302] usb 3-1: config index 0 descriptor too short (expected 5924, got 36) [ 116.632125][ T302] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 116.641156][ T302] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 116.650530][ T302] usb 3-1: config 250 has no interface number 0 [ 116.657298][ T302] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 116.669314][ T302] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 116.679910][ T302] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 116.683282][ T309] usb 1-1: Using ep0 maxpacket: 8 [ 116.690837][ T302] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 116.706178][ T302] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 116.720604][ T302] usb 3-1: config 250 interface 228 has no altsetting 0 [ 116.813275][ T309] usb 1-1: config index 0 descriptor too short (expected 5924, got 36) [ 116.821820][ T309] usb 1-1: config 250 has an invalid interface number: 228 but max is -1 [ 116.831180][ T309] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 116.840540][ T309] usb 1-1: config 250 has no interface number 0 [ 116.846850][ T309] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 116.859526][ T309] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 116.870785][ T309] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 116.881603][ T309] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 116.892717][ T309] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 116.906848][ T309] usb 1-1: config 250 interface 228 has no altsetting 0 [ 116.926675][ T302] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 116.936047][ T302] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 116.944566][ T302] usb 3-1: Product: syz [ 116.948779][ T302] usb 3-1: SerialNumber: syz [ 117.005158][ T302] hub 3-1:250.228: bad descriptor, ignoring hub [ 117.011584][ T302] hub: probe of 3-1:250.228 failed with error -5 [ 117.053330][ T309] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 117.062916][ T309] usb 1-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 117.071838][ T309] usb 1-1: Product: syz [ 117.241411][ T2180] loop2: detected capacity change from 0 to 16 [ 117.283322][ T530] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 117.294158][ T2180] erofs: (device loop2): mounted with root inode @ nid 36. [ 117.310263][ T309] usb 1-1: SerialNumber: syz [ 117.321948][ T2180] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 117.334041][ T302] usblp 3-1:250.228: usblp0: USB Bidirectional printer dev 7 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 117.354292][ T309] hub 1-1:250.228: bad descriptor, ignoring hub [ 117.362457][ T309] hub: probe of 1-1:250.228 failed with error -5 [ 117.373795][ T302] usb 3-1: USB disconnect, device number 7 [ 117.380915][ T302] usblp0: removed [ 117.543180][ T530] usb 7-1: Using ep0 maxpacket: 16 [ 117.574334][ T309] usblp 1-1:250.228: usblp0: USB Bidirectional printer dev 13 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 117.703370][ T530] usb 7-1: unable to get BOS descriptor or descriptor too short [ 117.783265][ T530] usb 7-1: too many endpoints for config 1 interface 1 altsetting 1: 232, using maximum allowed: 30 [ 117.796309][ T530] usb 7-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 232 [ 117.809814][ T530] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 117.848476][ T2200] loop0: detected capacity change from 0 to 16 [ 117.944322][ T2200] erofs: (device loop0): mounted with root inode @ nid 36. [ 117.973320][ T530] usb 7-1: New USB device found, idVendor=08e4, idProduct=0163, bcdDevice= 0.40 [ 117.976152][ T2199] loop3: detected capacity change from 0 to 40427 [ 117.982694][ T530] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.982720][ T530] usb 7-1: Product: syz [ 118.006048][ T530] usb 7-1: Manufacturer: syz [ 118.010827][ T530] usb 7-1: SerialNumber: syz [ 118.024992][ T2199] F2FS-fs (loop3): invalid crc value [ 118.033972][ T2199] F2FS-fs (loop3): Found nat_bits in checkpoint [ 118.068948][ T2199] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 118.076926][ T26] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 118.103285][ T26] usb 2-1: 2:1 : format type 0 is detected, processed as PCM [ 118.111518][ T26] usb 2-1: 2:1 : sample bitwidth 240 in over sample bytes 1 [ 118.123413][ T60] usb 1-1: USB disconnect, device number 13 [ 118.130340][ T60] usblp0: removed [ 118.193307][ T26] snd-usb-audio: probe of 2-1:1.0 failed with error -71 [ 118.202393][ T26] usb 2-1: USB disconnect, device number 12 [ 118.553206][ T26] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 118.683964][ T284] attempt to access beyond end of device [ 118.683964][ T284] loop3: rw=2049, want=45104, limit=40427 [ 118.729255][ T2212] F2FS-fs (loop0): Unrecognized mount option "" or missing value [ 118.796361][ T26] usb 2-1: Using ep0 maxpacket: 8 [ 118.890141][ T2220] netem: incorrect ge model size [ 118.895391][ T2220] netem: change failed [ 118.929473][ T2218] set_capacity_and_notify: 1 callbacks suppressed [ 118.929490][ T2218] loop0: detected capacity change from 0 to 16 [ 118.943680][ T26] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 118.952114][ T26] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 118.960977][ T2218] erofs: (device loop0): mounted with root inode @ nid 36. [ 118.969307][ T2218] attempt to access beyond end of device [ 118.969307][ T2218] loop0: rw=524288, want=328, limit=16 [ 118.980846][ T2218] attempt to access beyond end of device [ 118.980846][ T2218] loop0: rw=524288, want=336, limit=16 [ 118.992174][ T2218] attempt to access beyond end of device [ 118.992174][ T2218] loop0: rw=524288, want=1049296, limit=16 [ 119.004120][ T2218] attempt to access beyond end of device [ 119.004120][ T2218] loop0: rw=524288, want=1049304, limit=16 [ 119.015579][ T2218] attempt to access beyond end of device [ 119.015579][ T2218] loop0: rw=524288, want=40, limit=16 [ 119.026603][ T2218] attempt to access beyond end of device [ 119.026603][ T2218] loop0: rw=524288, want=48, limit=16 [ 119.037741][ T2218] attempt to access beyond end of device [ 119.037741][ T2218] loop0: rw=524288, want=408, limit=16 [ 119.049033][ T26] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 119.058302][ T26] usb 2-1: config 250 has no interface number 0 [ 119.065741][ T26] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 119.077451][ T26] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 119.088324][ T26] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 119.099114][ T26] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 119.110741][ T26] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 119.124337][ T26] usb 2-1: config 250 interface 228 has no altsetting 0 [ 119.243241][ T26] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 119.252841][ T26] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 119.283211][ T26] usb 2-1: Product: syz [ 119.287518][ T26] usb 2-1: SerialNumber: syz [ 119.334176][ T26] hub 2-1:250.228: bad descriptor, ignoring hub [ 119.340621][ T26] hub: probe of 2-1:250.228 failed with error -5 [ 119.386184][ T2215] loop2: detected capacity change from 0 to 131072 [ 119.426785][ T2215] F2FS-fs (loop2): Test dummy encryption mode enabled [ 119.437713][ T2215] F2FS-fs (loop2): invalid crc value [ 119.447043][ T2215] F2FS-fs (loop2): Found nat_bits in checkpoint [ 119.483710][ T2215] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 119.553999][ T26] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 13 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 119.655119][ T2228] loop3: detected capacity change from 0 to 40427 [ 119.734589][ T2228] F2FS-fs (loop3): invalid crc value [ 119.778082][ T2228] F2FS-fs (loop3): Found nat_bits in checkpoint [ 119.830033][ T2228] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 119.844417][ T2237] loop1: detected capacity change from 0 to 16 [ 119.865842][ T2228] attempt to access beyond end of device [ 119.865842][ T2228] loop3: rw=2049, want=45104, limit=40427 [ 119.906211][ T2228] attempt to access beyond end of device [ 119.906211][ T2228] loop3: rw=0, want=45104, limit=40427 [ 119.925778][ T2237] erofs: (device loop1): mounted with root inode @ nid 36. [ 119.940504][ T2205] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 119.964734][ T284] attempt to access beyond end of device [ 119.964734][ T284] loop3: rw=2049, want=45112, limit=40427 [ 119.983841][ T2241] loop6: detected capacity change from 0 to 16 [ 119.993854][ T2241] erofs: (device loop6): mounted with root inode @ nid 36. [ 120.005990][ T2241] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 120.063398][ T530] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 120.073665][ T1698] usb 2-1: USB disconnect, device number 13 [ 120.082034][ T2244] loop6: detected capacity change from 0 to 256 [ 120.088949][ T309] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 120.093500][ T530] usb 7-1: 2:1 : format type 0 is detected, processed as PCM [ 120.101286][ T1698] usblp0: removed [ 120.119064][ T2244] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 196) [ 120.132868][ T530] usb 7-1: 2:1 : sample bitwidth 240 in over sample bytes 1 [ 120.137455][ T2244] FAT-fs (loop6): Filesystem has been set read-only [ 120.149878][ T2244] loop7: detected capacity change from 0 to 7 [ 120.230400][ T1403] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 196) [ 120.239017][ T530] snd-usb-audio: probe of 7-1:1.0 failed with error -71 [ 120.251310][ T530] usb 7-1: USB disconnect, device number 14 [ 120.292112][ T2250] loop6: detected capacity change from 0 to 256 [ 120.343241][ T309] usb 3-1: Using ep0 maxpacket: 8 [ 120.463283][ T309] usb 3-1: config index 0 descriptor too short (expected 5924, got 36) [ 120.901007][ T309] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 120.909728][ T309] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 120.919480][ T309] usb 3-1: config 250 has no interface number 0 [ 120.933235][ T309] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 120.955719][ T309] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 120.966575][ T1698] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 120.986789][ T309] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 121.022483][ T309] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 121.043332][ T309] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 121.057815][ T309] usb 3-1: config 250 interface 228 has no altsetting 0 [ 121.174819][ T2257] loop0: detected capacity change from 0 to 40427 [ 121.183261][ T309] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 121.204310][ T309] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 121.220308][ T2257] F2FS-fs (loop0): invalid crc value [ 121.228967][ T309] usb 3-1: Product: syz [ 121.232081][ T2255] loop1: detected capacity change from 0 to 40427 [ 121.236259][ T1698] usb 4-1: Using ep0 maxpacket: 16 [ 121.252607][ T2255] F2FS-fs (loop1): invalid crc value [ 121.256367][ T309] usb 3-1: SerialNumber: syz [ 121.264936][ T2257] F2FS-fs (loop0): Found nat_bits in checkpoint [ 121.292373][ T2255] F2FS-fs (loop1): Found nat_bits in checkpoint [ 121.333792][ T309] hub 3-1:250.228: bad descriptor, ignoring hub [ 121.340095][ T309] hub: probe of 3-1:250.228 failed with error -5 [ 121.358029][ T2257] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 121.383276][ T2255] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 121.423271][ T1698] usb 4-1: unable to get BOS descriptor or descriptor too short [ 121.477340][ T2261] F2FS-fs (loop6): invalid crc value [ 122.513778][ T1698] usb 4-1: too many endpoints for config 1 interface 1 altsetting 1: 232, using maximum allowed: 30 [ 122.544205][ T2261] F2FS-fs (loop6): Found nat_bits in checkpoint [ 122.577233][ T1698] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 232 [ 122.596570][ T309] usblp 3-1:250.228: usblp0: USB Bidirectional printer dev 8 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 122.611937][ T1698] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 122.648760][ T2261] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 122.656934][ T281] attempt to access beyond end of device [ 122.656934][ T281] loop1: rw=2049, want=45104, limit=40427 [ 122.686850][ T2146] attempt to access beyond end of device [ 122.686850][ T2146] loop0: rw=2049, want=45104, limit=40427 [ 122.793243][ T1698] usb 4-1: New USB device found, idVendor=08e4, idProduct=0163, bcdDevice= 0.40 [ 122.812571][ T1698] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.822876][ T1698] usb 4-1: Product: syz [ 122.829197][ T1698] usb 4-1: Manufacturer: syz [ 122.834264][ T1698] usb 4-1: SerialNumber: syz [ 122.867337][ T2276] erofs: (device loop2): mounted with root inode @ nid 36. [ 122.913299][ T309] usb 3-1: USB disconnect, device number 8 [ 122.934955][ T309] usblp0: removed [ 122.983467][ T1403] attempt to access beyond end of device [ 122.983467][ T1403] loop6: rw=2049, want=45104, limit=40427 [ 122.995820][ T2281] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2757: inode #11: comm syz.1.510: corrupted xattr block 95 [ 123.008559][ T2281] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2807: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 123.022581][ T2281] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.510: bg 0: block 7: invalid block bitmap [ 123.035517][ T2281] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 123.044815][ T2281] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2923: inode #11: comm syz.1.510: corrupted xattr block 95 [ 123.065032][ T2281] EXT4-fs warning (device loop1): ext4_evict_inode:303: xattr delete (err -117) [ 123.074787][ T2281] EXT4-fs (loop1): 1 orphan inode deleted [ 123.080576][ T2281] EXT4-fs (loop1): mounted filesystem without journal. Opts: noinit_itable,nodiscard,barrier=0x0000000000008001,noload,nobarrier,noblock_validity,discard,abort,,errors=continue. Quota mode: none. [ 123.226222][ T2287] netlink: 8 bytes leftover after parsing attributes in process `syz.6.512'. [ 123.504333][ T2289] F2FS-fs (loop6): invalid crc value [ 123.516605][ T2291] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 123.528509][ T2291] ext4 filesystem being mounted at /8/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.539864][ T2289] F2FS-fs (loop6): Found nat_bits in checkpoint [ 123.585188][ T2279] F2FS-fs (loop0): Test dummy encryption mode enabled [ 123.608821][ T2279] F2FS-fs (loop0): invalid crc value [ 123.644216][ T2279] F2FS-fs (loop0): Found nat_bits in checkpoint [ 123.670933][ T2289] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 123.737013][ T2279] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 123.860568][ T2298] F2FS-fs (loop1): invalid crc value [ 123.869714][ T2298] F2FS-fs (loop1): Found nat_bits in checkpoint [ 124.077585][ T2303] set_capacity_and_notify: 7 callbacks suppressed [ 124.077603][ T2303] loop2: detected capacity change from 0 to 40427 [ 124.244514][ T2303] F2FS-fs (loop2): invalid crc value [ 124.283631][ T1403] attempt to access beyond end of device [ 124.283631][ T1403] loop6: rw=2049, want=45104, limit=40427 [ 124.304151][ T2298] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 124.353482][ T2303] F2FS-fs (loop2): Found nat_bits in checkpoint [ 124.393257][ T1698] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 124.423206][ T1698] usb 4-1: 2:1 : format type 0 is detected, processed as PCM [ 124.433640][ T1698] usb 4-1: 2:1 : sample bitwidth 240 in over sample bytes 1 [ 124.453206][ T2303] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 124.991643][ T1698] snd-usb-audio: probe of 4-1:1.0 failed with error -71 [ 125.001606][ T281] attempt to access beyond end of device [ 125.001606][ T281] loop1: rw=2049, want=45104, limit=40427 [ 125.017648][ T1698] usb 4-1: USB disconnect, device number 19 [ 125.042284][ T2321] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4068521576 (4068521576 ns) > initial count (2794446801 ns). Using initial count to start timer. [ 125.150049][ T2328] loop6: detected capacity change from 0 to 512 [ 125.162089][ T2082] attempt to access beyond end of device [ 125.162089][ T2082] loop2: rw=2049, want=45104, limit=40427 [ 125.235683][ T2328] EXT4-fs (loop6): Ignoring removed nobh option [ 125.242064][ T2328] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 125.312392][ T2328] EXT4-fs (loop6): 1 truncate cleaned up [ 125.371596][ T2329] loop0: detected capacity change from 0 to 40427 [ 125.378807][ T2328] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro,nobh,debug_want_extra_isize=0x0000000000000068,mb_optimize_scan=0x0000000000000001,max_batch_time=0x0000000000000007,dioread_lock,. Quota mode: none. [ 125.412090][ T2333] loop1: detected capacity change from 0 to 512 [ 125.455084][ T2337] loop2: detected capacity change from 0 to 512 [ 125.462626][ T2329] F2FS-fs (loop0): invalid crc value [ 125.477318][ T2335] loop3: detected capacity change from 0 to 512 [ 125.496778][ T2329] F2FS-fs (loop0): Found nat_bits in checkpoint [ 125.536104][ T2337] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.532: inode has both inline data and extents flags [ 125.550069][ T2329] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 125.555417][ T2333] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 125.575996][ T2335] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 125.615958][ T2333] ext4 filesystem being mounted at /99/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.627639][ T2335] ext4 filesystem being mounted at /116/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.639177][ T2337] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.532: couldn't read orphan inode 15 (err -117) [ 125.933366][ T2337] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 126.040275][ T2146] attempt to access beyond end of device [ 126.040275][ T2146] loop0: rw=2049, want=45104, limit=40427 [ 126.059240][ T2335] __quota_error: 56 callbacks suppressed [ 126.059258][ T2335] Quota error (device loop3): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 126.077381][ T2333] Quota error (device loop1): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 126.105945][ T2335] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 126.128459][ T2333] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 126.138640][ T2335] EXT4-fs error (device loop3): ext4_acquire_dquot:6225: comm syz.3.522: Failed to acquire dquot type 0 [ 126.165163][ T2333] EXT4-fs error (device loop1): ext4_acquire_dquot:6225: comm syz.1.520: Failed to acquire dquot type 0 [ 126.266353][ T2361] loop1: detected capacity change from 0 to 512 [ 126.331141][ T2365] loop2: detected capacity change from 0 to 16 [ 126.353391][ T2365] erofs: (device loop2): mounted with root inode @ nid 36. [ 126.362483][ T2361] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 126.411459][ T2353] loop6: detected capacity change from 0 to 40427 [ 126.421465][ T2361] ext4 filesystem being mounted at /100/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.433054][ T2353] F2FS-fs (loop6): invalid crc value [ 126.450022][ T2361] Quota error (device loop1): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 126.461473][ T2361] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 126.471902][ T2361] EXT4-fs error (device loop1): ext4_acquire_dquot:6225: comm syz.1.527: Failed to acquire dquot type 0 [ 126.484464][ T2353] F2FS-fs (loop6): Found nat_bits in checkpoint [ 126.563255][ T2353] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 126.684582][ T2358] loop3: detected capacity change from 0 to 40427 [ 126.708393][ T2358] F2FS-fs (loop3): invalid crc value [ 126.742069][ T2358] F2FS-fs (loop3): Found nat_bits in checkpoint [ 126.744199][ T2372] F2FS-fs (loop2): invalid crc value [ 126.764883][ T2372] F2FS-fs (loop2): Found nat_bits in checkpoint [ 126.788568][ T2367] F2FS-fs (loop0): invalid crc value [ 126.812845][ T2358] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 126.813314][ T2367] F2FS-fs (loop0): Found nat_bits in checkpoint [ 126.844621][ T2372] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 126.863369][ T60] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 126.898712][ T2367] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 128.696716][ T1403] attempt to access beyond end of device [ 128.696716][ T1403] loop6: rw=2049, want=45104, limit=40427 [ 128.828588][ T60] usb 2-1: Using ep0 maxpacket: 8 [ 128.837814][ T2082] attempt to access beyond end of device [ 128.837814][ T2082] loop2: rw=2049, want=45104, limit=40427 [ 128.844076][ T284] attempt to access beyond end of device [ 128.844076][ T284] loop3: rw=2049, want=45104, limit=40427 [ 128.973231][ T60] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 128.981659][ T60] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 129.025683][ T60] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 129.051294][ T60] usb 2-1: config 250 has no interface number 0 [ 129.061474][ T60] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 129.073681][ T60] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 129.093279][ T60] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 129.109810][ T60] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 129.123186][ T60] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 129.139275][ T60] usb 2-1: config 250 interface 228 has no altsetting 0 [ 129.192885][ T2397] set_capacity_and_notify: 2 callbacks suppressed [ 129.192904][ T2397] loop2: detected capacity change from 0 to 512 [ 129.206946][ T2146] attempt to access beyond end of device [ 129.206946][ T2146] loop0: rw=2049, want=45104, limit=40427 [ 129.399985][ T2400] netlink: 8 bytes leftover after parsing attributes in process `syz.6.531'. [ 129.578571][ T60] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 129.587918][ T60] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 129.596550][ T60] usb 2-1: Product: syz [ 129.600747][ T60] usb 2-1: SerialNumber: syz [ 129.643343][ T60] usb 2-1: can't set config #250, error -71 [ 129.653946][ T2406] loop1: detected capacity change from 0 to 1024 [ 129.661444][ T60] usb 2-1: USB disconnect, device number 14 [ 129.672783][ T2397] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 129.692825][ T2397] ext4 filesystem being mounted at /14/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.719610][ T2406] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,bsdgroups,auto_da_alloc,auto_da_alloc=0x0000000000000005,,errors=continue. Quota mode: none. [ 129.745785][ T2406] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.751972][ T2413] loop3: detected capacity change from 0 to 512 [ 129.766741][ T2397] Quota error (device loop2): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 129.805288][ T2406] EXT4-fs error (device loop1): ext4_map_blocks:740: inode #15: comm syz.1.536: lblock 0 mapped to illegal pblock 0 (length 1) [ 129.822514][ T2397] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 129.877240][ T2397] EXT4-fs error (device loop2): ext4_acquire_dquot:6225: comm syz.2.534: Failed to acquire dquot type 0 [ 129.902725][ T2410] loop0: detected capacity change from 0 to 40427 [ 129.916350][ T303] EXT4-fs error (device loop1): ext4_map_blocks:740: inode #15: comm kworker/u4:3: lblock 0 mapped to illegal pblock 0 (length 1) [ 129.933078][ T303] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 129.945544][ T303] EXT4-fs (loop1): This should not happen!! Data will be lost [ 129.945544][ T303] [ 130.001427][ T2410] F2FS-fs (loop0): invalid crc value [ 130.041434][ T2420] loop2: detected capacity change from 0 to 16 [ 130.059333][ T2410] F2FS-fs (loop0): Found nat_bits in checkpoint [ 130.146998][ T2420] erofs: (device loop2): mounted with root inode @ nid 36. [ 130.162814][ T2420] overlayfs: failed to resolve './file1': -2 [ 130.169105][ T2410] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 130.223911][ T2416] loop6: detected capacity change from 0 to 40427 [ 130.247899][ T2408] netlink: 104 bytes leftover after parsing attributes in process `syz.3.537'. [ 130.321084][ T2408] netlink: 104 bytes leftover after parsing attributes in process `syz.3.537'. [ 130.350953][ T2408] netlink: 104 bytes leftover after parsing attributes in process `syz.3.537'. [ 130.373200][ T530] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 130.406410][ T2416] F2FS-fs (loop6): invalid crc value [ 130.453244][ T2416] F2FS-fs (loop6): Found nat_bits in checkpoint [ 130.504445][ T2416] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 130.549416][ T2146] attempt to access beyond end of device [ 130.549416][ T2146] loop0: rw=2049, want=45104, limit=40427 [ 130.612474][ T2434] loop3: detected capacity change from 0 to 40427 [ 130.633196][ T530] usb 2-1: Using ep0 maxpacket: 8 [ 130.703180][ T39] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 130.753379][ T530] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 130.762251][ T530] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 130.981448][ T2434] F2FS-fs (loop3): invalid crc value [ 130.982566][ T530] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 130.990137][ T1403] attempt to access beyond end of device [ 130.990137][ T1403] loop6: rw=2049, want=45104, limit=40427 [ 130.996702][ T530] usb 2-1: config 250 has no interface number 0 [ 131.015877][ T530] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 131.028215][ T530] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 131.035229][ T2434] F2FS-fs (loop3): Found nat_bits in checkpoint [ 131.050130][ T530] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 131.079440][ T530] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 131.111592][ T530] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 131.136461][ T530] usb 2-1: config 250 interface 228 has no altsetting 0 [ 131.147222][ T2434] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 131.183261][ T39] usb 3-1: unable to get BOS descriptor or descriptor too short [ 131.256261][ T2442] loop0: detected capacity change from 0 to 40427 [ 131.263325][ T39] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 131.273657][ T530] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 131.286150][ T530] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 131.290189][ T2442] F2FS-fs (loop0): invalid crc value [ 131.296031][ T39] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 131.309399][ T530] usb 2-1: Product: syz [ 131.313869][ T530] usb 2-1: SerialNumber: syz [ 131.320738][ T2442] F2FS-fs (loop0): Found nat_bits in checkpoint [ 131.339483][ T284] attempt to access beyond end of device [ 131.339483][ T284] loop3: rw=2049, want=45104, limit=40427 [ 131.353845][ T530] hub 2-1:250.228: bad descriptor, ignoring hub [ 131.370264][ T530] hub: probe of 2-1:250.228 failed with error -5 [ 131.380405][ T2442] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 131.535168][ T39] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 131.544881][ T39] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.553003][ T39] usb 3-1: Product: syz [ 131.557915][ T39] usb 3-1: Manufacturer: syz [ 131.562538][ T39] usb 3-1: SerialNumber: syz [ 131.591400][ T1698] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 131.597874][ T530] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 15 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 131.614567][ T39] usb 3-1: selecting invalid altsetting 1 [ 131.622633][ T39] usb 3-1: unit 6 not found! [ 131.864409][ T39] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 132.017980][ T2146] attempt to access beyond end of device [ 132.017980][ T2146] loop0: rw=2049, want=45104, limit=40427 [ 132.054744][ T2462] loop1: detected capacity change from 0 to 16 [ 132.083231][ T1698] usb 7-1: Using ep0 maxpacket: 8 [ 132.104227][ T2462] erofs: (device loop1): mounted with root inode @ nid 36. [ 132.113470][ T2423] overlayfs: failed to resolve './file1': -2 [ 132.133314][ T574] usb 2-1: USB disconnect, device number 15 [ 132.141608][ T574] usblp0: removed [ 132.213261][ T1698] usb 7-1: config index 0 descriptor too short (expected 5924, got 36) [ 132.222062][ T1698] usb 7-1: config 250 has an invalid interface number: 228 but max is -1 [ 132.231175][ T1698] usb 7-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 132.241072][ T1698] usb 7-1: config 250 has no interface number 0 [ 132.247836][ T1698] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 132.260064][ T1698] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 132.270871][ T1698] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 132.281454][ T1698] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 132.292437][ T1698] usb 7-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 132.338326][ T1698] usb 7-1: config 250 interface 228 has no altsetting 0 [ 132.360264][ T2464] loop0: detected capacity change from 0 to 40427 [ 132.379226][ T2464] F2FS-fs (loop0): invalid crc value [ 132.390029][ T2464] F2FS-fs (loop0): Found nat_bits in checkpoint [ 132.427598][ T2464] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 132.457995][ T2469] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.548: inode has both inline data and extents flags [ 132.473299][ T1698] usb 7-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 132.482666][ T2469] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.548: couldn't read orphan inode 15 (err -117) [ 132.492999][ T1698] usb 7-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 132.496147][ T2469] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 132.502979][ T1698] usb 7-1: Product: syz [ 132.519411][ T1698] usb 7-1: SerialNumber: syz [ 132.564105][ T1698] hub 7-1:250.228: bad descriptor, ignoring hub [ 132.570753][ T1698] hub: probe of 7-1:250.228 failed with error -5 [ 132.974115][ T1698] usblp 7-1:250.228: usblp0: USB Bidirectional printer dev 15 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 133.048546][ T2146] attempt to access beyond end of device [ 133.048546][ T2146] loop0: rw=2049, want=45104, limit=40427 [ 133.076659][ T2477] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,bsdgroups,auto_da_alloc,auto_da_alloc=0x0000000000000005,,errors=continue. Quota mode: none. [ 133.105587][ T2477] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.134070][ T43] EXT4-fs error (device loop1): ext4_map_blocks:740: inode #15: comm kworker/u4:2: lblock 0 mapped to illegal pblock 0 (length 1) [ 133.148042][ T43] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 133.160995][ T43] EXT4-fs (loop1): This should not happen!! Data will be lost [ 133.160995][ T43] [ 133.171794][ T2475] F2FS-fs (loop3): invalid crc value [ 133.194191][ T2475] F2FS-fs (loop3): Found nat_bits in checkpoint [ 133.224459][ T2451] erofs: (device loop6): mounted with root inode @ nid 36. [ 133.266503][ T2451] netlink: 20 bytes leftover after parsing attributes in process `syz.6.545'. [ 133.277053][ T20] usb 3-1: USB disconnect, device number 9 [ 133.302704][ T2451] netem: invalid attributes len -8 [ 133.334463][ T2493] EXT4-fs (loop2): Ignoring removed nobh option [ 133.340999][ T2475] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 133.342393][ T2481] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 133.360876][ T2451] netem: change failed [ 133.374472][ T2493] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 133.389729][ T2493] EXT4-fs (loop2): 1 truncate cleaned up [ 133.396054][ T2493] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nobh,debug_want_extra_isize=0x0000000000000068,mb_optimize_scan=0x0000000000000001,max_batch_time=0x0000000000000007,dioread_lock,. Quota mode: none. [ 133.493260][ T1698] usb 7-1: USB disconnect, device number 15 [ 133.537751][ T1698] usblp0: removed [ 134.987408][ T2508] set_capacity_and_notify: 5 callbacks suppressed [ 134.987428][ T2508] loop0: detected capacity change from 0 to 256 [ 135.025687][ T2512] loop6: detected capacity change from 0 to 512 [ 135.033609][ T2508] exfat: Bad value for 'time_offset' [ 135.057857][ T2512] EXT4-fs (loop6): Ignoring removed nobh option [ 135.084076][ T2512] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 135.134444][ T2515] netlink: 8 bytes leftover after parsing attributes in process `syz.0.560'. [ 135.157651][ T2512] EXT4-fs (loop6): 1 truncate cleaned up [ 135.172519][ T2512] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro,nobh,debug_want_extra_isize=0x0000000000000068,mb_optimize_scan=0x0000000000000001,max_batch_time=0x0000000000000007,dioread_lock,. Quota mode: none. [ 135.312058][ T2525] loop0: detected capacity change from 0 to 1024 [ 135.323929][ T284] attempt to access beyond end of device [ 135.323929][ T284] loop3: rw=2049, want=45104, limit=40427 [ 135.358001][ T2525] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,bsdgroups,auto_da_alloc,auto_da_alloc=0x0000000000000005,,errors=continue. Quota mode: none. [ 135.625524][ T2525] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.752464][ T43] EXT4-fs error (device loop0): ext4_map_blocks:740: inode #15: comm kworker/u4:2: lblock 0 mapped to illegal pblock 0 (length 1) [ 135.774838][ T43] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 135.788579][ T43] EXT4-fs (loop0): This should not happen!! Data will be lost [ 135.788579][ T43] [ 135.789693][ T2487] loop1: detected capacity change from 0 to 131072 [ 135.845784][ T2534] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4068521576 (4068521576 ns) > initial count (2794446801 ns). Using initial count to start timer. [ 135.864928][ T2534] kvm [2533]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc2 data 0x9d00 [ 135.874410][ T2534] kvm [2533]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc1 data 0x9d00 [ 136.061231][ T2487] F2FS-fs (loop1): Found nat_bits in checkpoint [ 136.080460][ T2554] netlink: 8 bytes leftover after parsing attributes in process `syz.2.572'. [ 136.140351][ T2558] loop2: detected capacity change from 0 to 1024 [ 136.174249][ T2558] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 136.177616][ T2487] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 136.204126][ T2558] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 136.236818][ T2558] EXT4-fs (loop2): orphan cleanup on readonly fs [ 136.252442][ T2558] EXT4-fs error (device loop2): ext4_read_inode_bitmap:168: comm syz.2.574: Inode bitmap for bg 0 marked uninitialized [ 136.273491][ T2558] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 136.293185][ T301] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 136.498348][ T30] audit: type=1400 audit(1773346412.733:461): avc: denied { read write } for pid=2565 comm="syz.6.578" name="uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 136.536435][ T530] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 136.540546][ T2568] loop2: detected capacity change from 0 to 1024 [ 136.556240][ T30] audit: type=1400 audit(1773346412.753:462): avc: denied { open } for pid=2565 comm="syz.6.578" path="/dev/uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 136.572401][ T530] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 136.600897][ T2569] loop6: detected capacity change from 0 to 512 [ 136.601338][ T530] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz1 [ 136.622624][ T2568] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,bsdgroups,auto_da_alloc,auto_da_alloc=0x0000000000000005,,errors=continue. Quota mode: none. [ 136.645431][ T2568] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.699444][ T8] EXT4-fs error (device loop2): ext4_map_blocks:740: inode #15: comm kworker/u4:0: lblock 0 mapped to illegal pblock 0 (length 1) [ 136.714615][ T8] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 136.725915][ T301] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 248, changing to 4 [ 136.742743][ T8] EXT4-fs (loop2): This should not happen!! Data will be lost [ 136.742743][ T8] [ 136.792891][ T301] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 136.847745][ T301] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 4 [ 136.926525][ T2576] loop2: detected capacity change from 0 to 128 [ 136.934253][ T2569] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 136.970955][ T2573] fido_id[2573]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 136.988254][ T2569] ext4 filesystem being mounted at /55/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 137.004908][ T2576] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 137.016229][ T2576] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.027233][ T301] usb 1-1: New USB device found, idVendor=15ca, idProduct=1806, bcdDevice= 0.40 [ 137.037647][ T2566] EXT4-fs error (device loop6): ext4_do_update_inode:5253: inode #2: comm syz.6.578: corrupted inode contents [ 137.053957][ T301] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.064789][ T2576] overlayfs: unrecognized mount option "verity=on" or missing value [ 137.065506][ T30] audit: type=1400 audit(1773346413.293:463): avc: denied { mounton } for pid=2575 comm="syz.2.579" path="/28/file1/file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 137.073045][ T301] usb 1-1: Product: syz [ 137.100664][ T2566] EXT4-fs error (device loop6): ext4_dirty_inode:6089: inode #2: comm syz.6.578: mark_inode_dirty error [ 137.112537][ T301] usb 1-1: Manufacturer: syz [ 137.112559][ T301] usb 1-1: SerialNumber: syz [ 137.123589][ T2566] EXT4-fs error (device loop6): ext4_do_update_inode:5253: inode #2: comm syz.6.578: corrupted inode contents [ 137.152360][ T2566] EXT4-fs error (device loop6): __ext4_ext_dirty:183: inode #2: comm syz.6.578: mark_inode_dirty error [ 137.163812][ T30] audit: type=1400 audit(1773346413.373:464): avc: denied { write } for pid=2575 comm="syz.2.579" name="igmp" dev="proc" ino=4026533016 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 137.191923][ T2585] loop1: detected capacity change from 0 to 1024 [ 137.203646][ T2583] EXT4-fs (loop6): shut down requested (1) [ 137.215318][ T2566] EXT4-fs warning (device loop6): ext4_evict_inode:303: xattr delete (err -5) [ 137.244198][ T2585] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 137.262105][ T2585] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.306528][ T2585] EXT4-fs error (device loop1): ext4_map_blocks:740: inode #15: comm syz.1.575: lblock 0 mapped to illegal pblock 0 (length 1) [ 137.385085][ T2589] kvm [2580]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc2 data 0x9d00 [ 137.413292][ T301] usb 1-1: BAAD SPEAKERPHONE c_chmask mismatch [ 137.419625][ T301] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 137.511734][ T301] usb 1-1: USB disconnect, device number 14 [ 137.523601][ T2589] kvm [2580]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc1 data 0x9d00 [ 138.042989][ T2614] loop0: detected capacity change from 0 to 16 [ 138.060204][ T2614] erofs: (device loop0): mounted with root inode @ nid 36. [ 138.085049][ T30] audit: type=1326 audit(1773346414.323:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2613 comm="syz.0.587" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3d0e0a2799 code=0x0 [ 138.305185][ T2617] EXT4-fs (loop3): Ignoring removed bh option [ 138.334409][ T2617] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 138.355925][ T2619] EXT4-fs (loop6): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,bsdgroups,auto_da_alloc,auto_da_alloc=0x0000000000000005,,errors=continue. Quota mode: none. [ 138.375274][ T2617] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (31873!=20869) [ 138.389362][ T2617] EXT4-fs (loop3): failed to open journal device unknown-block(0,5) -6 [ 138.417914][ T2619] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.454930][ T2619] EXT4-fs error (device loop6): ext4_map_blocks:740: inode #15: comm syz.6.589: lblock 0 mapped to illegal pblock 0 (length 1) [ 138.537575][ T8] EXT4-fs error (device loop6): ext4_map_blocks:740: inode #15: comm kworker/u4:0: lblock 0 mapped to illegal pblock 0 (length 1) [ 138.565816][ T8] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 138.585050][ T8] EXT4-fs (loop6): This should not happen!! Data will be lost [ 138.585050][ T8] [ 138.596624][ T2593] F2FS-fs (loop2): invalid crc value [ 138.616790][ T2593] F2FS-fs (loop2): Found nat_bits in checkpoint [ 138.742091][ T2593] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 138.785768][ T30] audit: type=1400 audit(1773346415.023:466): avc: denied { getattr } for pid=2592 comm="syz.2.582" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 138.851399][ T2082] F2FS-fs (loop2): invalid namelen(0), ino:8, run fsck to fix. [ 138.910800][ T2633] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 138.951663][ T2082] F2FS-fs (loop2): f2fs_unlink: inode (ino=4) has zero i_nlink [ 139.061087][ T2633] exfat: Deprecated parameter 'utf8' [ 139.116915][ T2633] exfat: Deprecated parameter 'utf8' [ 139.161159][ T2633] exfat: Deprecated parameter 'utf8' [ 139.212579][ T2633] exfat: Bad value for 'allow_utime' [ 139.594637][ T30] audit: type=1326 audit(1773346415.773:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2643 comm="syz.1.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f2520799 code=0x7ffc0000 [ 139.663435][ T30] audit: type=1326 audit(1773346415.773:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2643 comm="syz.1.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f94f2520799 code=0x7ffc0000 [ 139.688427][ T2649] netlink: 'syz.1.596': attribute type 1 has an invalid length. [ 139.696499][ T2649] netlink: 68 bytes leftover after parsing attributes in process `syz.1.596'. [ 139.733936][ T1914] device bridge_slave_1 left promiscuous mode [ 139.740551][ T1914] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.749524][ T1914] device bridge_slave_0 left promiscuous mode [ 139.756467][ T1914] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.764767][ T1914] device veth1_macvtap left promiscuous mode [ 139.771057][ T1914] device veth0_vlan left promiscuous mode [ 139.842081][ T30] audit: type=1326 audit(1773346415.773:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2643 comm="syz.1.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f2520799 code=0x7ffc0000 [ 139.854574][ T2651] kvm [2644]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc2 data 0x9d00 [ 140.166592][ T30] audit: type=1326 audit(1773346415.773:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2643 comm="syz.1.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f94f2520799 code=0x7ffc0000 [ 140.213510][ T2651] kvm [2644]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc1 data 0x9d00 [ 140.275420][ T2654] netlink: 8 bytes leftover after parsing attributes in process `syz.6.599'. [ 140.388107][ T2658] set_capacity_and_notify: 4 callbacks suppressed [ 140.388124][ T2658] loop1: detected capacity change from 0 to 256 [ 140.424127][ T2658] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 140.623300][ T2658] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779264) [ 140.631560][ T2658] FAT-fs (loop1): Filesystem has been set read-only [ 140.651877][ T2659] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.653520][ T2658] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 140.667331][ T2659] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.673435][ T2658] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 140.683643][ T2659] device bridge_slave_0 entered promiscuous mode [ 140.694367][ T2658] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 140.702447][ T2658] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 140.703105][ T2659] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.717996][ T2659] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.725481][ T2658] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 140.741612][ T2658] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 140.743076][ T2659] device bridge_slave_1 entered promiscuous mode [ 140.803162][ T574] usb 4-1: new low-speed USB device number 20 using dummy_hcd [ 140.821898][ T2659] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.829285][ T2659] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.836640][ T2659] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.843803][ T2659] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.870063][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 140.879228][ T1914] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.887404][ T1914] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.904260][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 140.913407][ T1914] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.920882][ T1914] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.929364][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 140.939015][ T1914] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.946252][ T1914] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.954069][ T2655] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 140.975701][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 140.984931][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 140.993538][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 141.002350][ T2639] loop0: detected capacity change from 0 to 131072 [ 141.012536][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 141.022540][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 141.030793][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 141.040050][ T2659] device veth0_vlan entered promiscuous mode [ 141.048824][ T2639] F2FS-fs (loop0): Found nat_bits in checkpoint [ 141.070843][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 141.085456][ T2659] device veth1_macvtap entered promiscuous mode [ 141.097090][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 141.108887][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 141.121889][ T2639] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 141.163259][ T574] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 4 [ 141.166733][ T2678] loop5: detected capacity change from 0 to 512 [ 141.175704][ T574] usb 4-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 141.189951][ T574] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.198958][ T574] usb 4-1: config 0 descriptor?? [ 141.243233][ T2655] usb 2-1: device descriptor read/64, error -71 [ 141.245149][ T574] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 141.260604][ T2678] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.606: inode has both inline data and extents flags [ 141.274367][ T2678] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.606: couldn't read orphan inode 15 (err -117) [ 141.289094][ T2678] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 141.366440][ T2684] loop5: detected capacity change from 0 to 512 [ 141.385172][ T2684] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 141.398773][ T2684] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.424068][ T2684] fuse: Unknown parameter '' [ 141.482555][ T553] usb 4-1: USB disconnect, device number 20 [ 141.633193][ T2655] usb 2-1: device descriptor read/64, error -71 [ 141.778283][ T2697] loop0: detected capacity change from 0 to 512 [ 141.838229][ T2689] loop6: detected capacity change from 0 to 40427 [ 141.850081][ T2697] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 141.861997][ T2697] ext4 filesystem being mounted at /25/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.884126][ T2697] __quota_error: 50 callbacks suppressed [ 141.884172][ T2697] Quota error (device loop0): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 141.901398][ T2697] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 141.911864][ T2697] EXT4-fs error (device loop0): ext4_acquire_dquot:6225: comm syz.0.611: Failed to acquire dquot type 0 [ 141.911882][ T2655] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 141.974996][ T2689] F2FS-fs (loop6): invalid crc value [ 142.082484][ T2689] F2FS-fs (loop6): Found nat_bits in checkpoint [ 142.104871][ T30] audit: type=1400 audit(1773346418.343:521): avc: denied { read } for pid=2705 comm="syz.3.613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 142.160231][ T30] audit: type=1400 audit(1773346418.373:522): avc: denied { connect } for pid=2705 comm="syz.3.613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 142.181380][ T2710] loop0: detected capacity change from 0 to 512 [ 142.193464][ T2655] usb 2-1: device descriptor read/64, error -71 [ 142.337534][ T2710] EXT4-fs (loop0): mounted filesystem without journal. Opts: min_batch_time=0x000000000000031f,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 142.340851][ T2689] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 142.873312][ T2717] /dev/loop0: Can't open blockdev [ 143.163542][ T43] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 143.176322][ T2710] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.196455][ T574] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 143.203930][ T574] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 143.215195][ T574] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz0] on syz1 [ 143.225706][ T2721] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=2721 comm=syz.5.616 [ 143.246346][ T2720] loop3: detected capacity change from 0 to 512 [ 143.265851][ T2722] fido_id[2722]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 143.346523][ T2720] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 143.413196][ T2655] usb 2-1: device descriptor read/64, error -71 [ 143.477424][ T2720] ext4 filesystem being mounted at /137/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 143.530059][ T2720] EXT4-fs error (device loop3): ext4_do_update_inode:5253: inode #2: comm syz.3.617: corrupted inode contents [ 143.543250][ T2655] usb usb2-port1: attempt power cycle [ 143.553563][ T2720] EXT4-fs error (device loop3): ext4_dirty_inode:6089: inode #2: comm syz.3.617: mark_inode_dirty error [ 143.565607][ T1403] attempt to access beyond end of device [ 143.565607][ T1403] loop6: rw=2049, want=45104, limit=40427 [ 143.579368][ T2720] EXT4-fs error (device loop3): ext4_do_update_inode:5253: inode #2: comm syz.3.617: corrupted inode contents [ 143.624451][ T2720] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #2: comm syz.3.617: mark_inode_dirty error [ 143.656760][ T2720] EXT4-fs (loop3): shut down requested (1) [ 143.706233][ T2734] loop1: detected capacity change from 0 to 256 [ 143.746015][ T2736] loop3: detected capacity change from 0 to 512 [ 143.793155][ T2734] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xa05bf55d, utbl_chksum : 0xe619d30d) [ 143.824762][ T2736] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 143.853924][ T2724] F2FS-fs (loop5): invalid crc value [ 143.912542][ T2736] ext4 filesystem being mounted at /138/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.934388][ T2724] F2FS-fs (loop5): Found nat_bits in checkpoint [ 144.043199][ T2736] Quota error (device loop3): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 144.064437][ T2744] geneve0: tun_chr_ioctl cmd 2147767511 [ 144.072541][ T2724] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 144.074687][ T2736] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 144.130982][ T2736] EXT4-fs error (device loop3): ext4_acquire_dquot:6225: comm syz.3.622: Failed to acquire dquot type 0 [ 144.170338][ T2724] attempt to access beyond end of device [ 144.170338][ T2724] loop5: rw=2049, want=45104, limit=40427 [ 144.182399][ T2730] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0) [ 144.205242][ T2730] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 144.224896][ T2743] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 144.243871][ T2730] F2FS-fs (loop0): invalid crc value [ 144.283964][ T2730] F2FS-fs (loop0): Found nat_bits in checkpoint [ 144.313547][ T2755] EXT4-fs (loop3): Ignoring removed bh option [ 144.330004][ T2755] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 144.342065][ T2724] attempt to access beyond end of device [ 144.342065][ T2724] loop5: rw=0, want=45104, limit=40427 [ 144.355813][ T2755] EXT4-fs (loop3): 1 truncate cleaned up [ 144.361555][ T2755] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 144.395616][ T2755] EXT4-fs warning (device loop3): verify_group_input:147: Cannot add at group 1986356271 (only 1 groups) [ 144.430192][ T2730] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 144.437575][ T2730] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 144.489158][ T2659] attempt to access beyond end of device [ 144.489158][ T2659] loop5: rw=2049, want=45112, limit=40427 [ 144.523533][ T2749] F2FS-fs (loop6): invalid crc value [ 144.557440][ T281] exFAT-fs (loop1): invalid start cluster (4278190088) [ 144.578388][ T2749] F2FS-fs (loop6): Found nat_bits in checkpoint [ 144.620792][ T30] audit: type=1400 audit(1773346420.853:523): avc: denied { write } for pid=2768 comm="syz.1.629" name="ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 144.712814][ T2769] EXT4-fs (loop1): Test dummy encryption mode enabled [ 144.728675][ T2749] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 144.744732][ T2769] EXT4-fs (loop1): Can't change test_dummy_encryption on remount [ 145.060305][ T1403] attempt to access beyond end of device [ 145.060305][ T1403] loop6: rw=2049, want=45104, limit=40427 [ 145.344582][ T2785] netlink: 'syz.1.632': attribute type 13 has an invalid length. [ 145.896343][ T2791] netlink: 8 bytes leftover after parsing attributes in process `syz.5.633'. [ 146.431438][ T2790] set_capacity_and_notify: 7 callbacks suppressed [ 146.431458][ T2790] loop6: detected capacity change from 0 to 40427 [ 146.445058][ T1698] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 146.467599][ T2790] F2FS-fs (loop6): invalid crc value [ 146.475023][ T2801] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2050 sclass=netlink_route_socket pid=2801 comm=syz.3.637 [ 146.476730][ T2790] F2FS-fs (loop6): Found nat_bits in checkpoint [ 146.531658][ T2790] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 146.583160][ T26] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 146.632583][ T2815] geneve0: tun_chr_ioctl cmd 2147767511 [ 146.640656][ T2815] loop3: detected capacity change from 0 to 256 [ 146.687098][ T2815] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 146.813348][ T1698] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.831767][ T284] exFAT-fs (loop3): invalid start cluster (4278190088) [ 146.833268][ T1698] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.848933][ T1698] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 146.862359][ T1698] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 146.871991][ T1698] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.883504][ T1403] attempt to access beyond end of device [ 146.883504][ T1403] loop6: rw=2049, want=45104, limit=40427 [ 146.893675][ T1698] usb 2-1: config 0 descriptor?? [ 146.923727][ T2819] loop3: detected capacity change from 0 to 1024 [ 146.941665][ T2819] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 146.980387][ T2819] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,noauto_da_alloc,data_err=ignore,delalloc,noload,grpquota,noblock_validity,user_xattr,mb_optimize_scan=0x0000000000000001,errors=remount-ro,sb=0x4000000000000000,sb=0x000000000000000d. Quota mode: writeback. [ 147.013245][ T26] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 147.029876][ T26] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.050670][ T26] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 147.064108][ T26] usb 6-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 147.073258][ T26] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.082332][ T26] usb 6-1: config 0 descriptor?? [ 147.113764][ T2825] loop6: detected capacity change from 0 to 2048 [ 147.140183][ T2825] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 147.217985][ T2819] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3885: comm syz.3.641: Allocating blocks 257-513 which overlap fs metadata [ 147.232314][ T2819] EXT4-fs (loop3): Remounting filesystem read-only [ 147.270055][ T2829] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.642: bg 0: block 234: padding at end of block bitmap is not set [ 147.304057][ T2829] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1216 with error 28 [ 147.327582][ T2829] EXT4-fs (loop6): This should not happen!! Data will be lost [ 147.327582][ T2829] [ 147.353167][ T2829] EXT4-fs (loop6): Total free blocks count 0 [ 147.364146][ T1698] plantronics 0003:047F:FFFF.0007: item fetching failed at offset 6/15 [ 147.369727][ T2829] EXT4-fs (loop6): Free/Dirty block details [ 147.380925][ T1698] plantronics 0003:047F:FFFF.0007: parse failed [ 147.389853][ T2829] EXT4-fs (loop6): free_blocks=0 [ 147.396712][ T1698] plantronics: probe of 0003:047F:FFFF.0007 failed with error -22 [ 147.405180][ T2829] EXT4-fs (loop6): dirty_blocks=1216 [ 147.414979][ T2829] EXT4-fs (loop6): Block reservation details [ 147.423567][ T2829] EXT4-fs (loop6): i_reserved_data_blocks=76 [ 147.606075][ T2793] UDC core: couldn't find an available UDC or it's busy: -16 [ 147.683234][ T2793] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 147.704095][ T26] cypress 0003:04B4:0001.0008: unknown main item tag 0x0 [ 147.711293][ T26] cypress 0003:04B4:0001.0008: unknown main item tag 0x4 [ 147.719435][ T26] cypress 0003:04B4:0001.0008: hidraw0: USB HID v0.06 Device [HID 04b4:0001] on usb-dummy_hcd.5-1/input0 [ 147.808916][ T2846] netlink: 8 bytes leftover after parsing attributes in process `syz.6.645'. [ 148.081796][ T2655] usb 6-1: USB disconnect, device number 8 [ 148.336990][ T2831] loop0: detected capacity change from 0 to 131072 [ 148.458031][ T2852] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 148.736674][ T2655] usb 2-1: USB disconnect, device number 19 [ 148.991835][ T2859] geneve0: tun_chr_ioctl cmd 2147767511 [ 149.015837][ T2859] loop0: detected capacity change from 0 to 256 [ 149.024634][ T2861] geneve0: tun_chr_ioctl cmd 2147767511 [ 149.032504][ T2861] loop5: detected capacity change from 0 to 256 [ 149.075926][ T2861] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 149.092902][ T2859] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 149.234970][ T2659] exFAT-fs (loop5): invalid start cluster (4278190088) [ 149.282441][ T2146] exFAT-fs (loop0): invalid start cluster (4278190088) [ 149.307982][ T2868] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 149.322590][ T2868] netlink: 112 bytes leftover after parsing attributes in process `syz.5.654'. [ 149.361569][ T2872] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 149.400413][ T2877] loop0: detected capacity change from 0 to 16 [ 149.431820][ T2877] erofs: (device loop0): mounted with root inode @ nid 36. [ 149.454651][ T2877] overlayfs: missing 'lowerdir' [ 149.600029][ T2881] netlink: 8 bytes leftover after parsing attributes in process `syz.5.658'. [ 149.948835][ T30] audit: type=1400 audit(1773346426.183:524): avc: denied { mounton } for pid=2883 comm="syz.6.661" path="/proc/208/task" dev="proc" ino=27989 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 149.980486][ T2880] loop0: detected capacity change from 0 to 40427 [ 149.998420][ T2880] F2FS-fs (loop0): invalid crc value [ 150.016678][ T2880] F2FS-fs (loop0): Found nat_bits in checkpoint [ 150.059171][ T2880] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 150.068920][ T2892] loop6: detected capacity change from 0 to 256 [ 150.106710][ T30] audit: type=1400 audit(1773346426.343:525): avc: denied { associate } for pid=2883 comm="syz.6.661" name="file1" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 150.384264][ T2900] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 150.402912][ T2900] ext4 filesystem being mounted at /13/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.432347][ T2146] attempt to access beyond end of device [ 150.432347][ T2146] loop0: rw=2049, want=45104, limit=40427 [ 150.548037][ T30] audit: type=1400 audit(1773346426.783:526): avc: denied { watch watch_reads } for pid=2908 comm="syz.5.668" path="/15" dev="tmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 150.795195][ T2917] erofs: (device loop6): mounted with root inode @ nid 36. [ 150.831693][ T2917] overlayfs: missing 'lowerdir' [ 151.438408][ T2926] exfat: Bad value for 'gid' [ 151.747104][ T2909] set_capacity_and_notify: 3 callbacks suppressed [ 151.747123][ T2909] loop5: detected capacity change from 0 to 131072 [ 151.845088][ T2935] loop5: detected capacity change from 0 to 256 [ 151.914704][ T2935] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 151.953491][ T2935] FAT-fs (loop5): error, invalid FAT chain (i_pos 196, last_block 8200) [ 151.961976][ T2935] FAT-fs (loop5): Filesystem has been set read-only [ 152.242706][ T2941] loop3: detected capacity change from 0 to 512 [ 152.276102][ T2938] loop6: detected capacity change from 0 to 40427 [ 152.305286][ T2941] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 152.317674][ T2941] ext4 filesystem being mounted at /154/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.336635][ T2938] F2FS-fs (loop6): invalid crc value [ 152.384030][ T2938] F2FS-fs (loop6): Found nat_bits in checkpoint [ 152.525683][ T2932] loop0: detected capacity change from 0 to 131072 [ 152.563474][ T2938] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 152.583417][ T2932] F2FS-fs (loop0): Test dummy encryption mode enabled [ 152.603764][ T2932] F2FS-fs (loop0): invalid crc value [ 152.994503][ T2932] F2FS-fs (loop0): Found nat_bits in checkpoint [ 153.093714][ T1403] attempt to access beyond end of device [ 153.093714][ T1403] loop6: rw=2049, want=45104, limit=40427 [ 153.117256][ T2932] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 153.163055][ T2947] loop5: detected capacity change from 0 to 40427 [ 153.175108][ T2947] F2FS-fs (loop5): invalid crc value [ 153.199170][ T2947] F2FS-fs (loop5): Found nat_bits in checkpoint [ 153.255974][ T2947] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 153.308436][ T2966] loop6: detected capacity change from 0 to 1024 [ 153.392243][ T2966] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 153.404167][ T2966] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.417748][ T2969] geneve0: tun_chr_ioctl cmd 2147767511 [ 153.426027][ T2969] loop3: detected capacity change from 0 to 256 [ 153.604803][ T2969] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 153.843876][ T2976] loop6: detected capacity change from 0 to 16 [ 153.858511][ T2659] attempt to access beyond end of device [ 153.858511][ T2659] loop5: rw=2049, want=45104, limit=40427 [ 153.896131][ T2976] erofs: (device loop6): mounted with root inode @ nid 36. [ 153.905659][ T2976] overlayfs: missing 'lowerdir' [ 154.035173][ T284] exFAT-fs (loop3): invalid start cluster (4278190088) [ 154.915096][ T2974] loop0: detected capacity change from 0 to 131072 [ 155.009937][ T2974] F2FS-fs (loop0): Test dummy encryption mode enabled [ 155.019887][ T2974] F2FS-fs (loop0): invalid crc value [ 155.047063][ T2991] FAULT_INJECTION: forcing a failure. [ 155.047063][ T2991] name failslab, interval 1, probability 0, space 0, times 0 [ 155.079941][ T2974] F2FS-fs (loop0): Found nat_bits in checkpoint [ 155.093191][ T2991] CPU: 0 PID: 2991 Comm: syz.3.688 Tainted: G W syzkaller #0 [ 155.101943][ T2991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 155.112036][ T2991] Call Trace: [ 155.115344][ T2991] [ 155.118301][ T2991] __dump_stack+0x21/0x30 [ 155.122672][ T2991] dump_stack_lvl+0x110/0x170 [ 155.127392][ T2991] ? show_regs_print_info+0x20/0x20 [ 155.133083][ T2991] dump_stack+0x15/0x20 [ 155.137455][ T2991] should_fail+0x3c1/0x510 [ 155.141901][ T2991] __should_failslab+0xa4/0xe0 [ 155.146697][ T2991] should_failslab+0x9/0x20 [ 155.151328][ T2991] slab_pre_alloc_hook+0x3b/0xe0 [ 155.156342][ T2991] __kmalloc+0x6d/0x2c0 [ 155.160669][ T2991] ? __se_sys_memfd_create+0xf2/0x3b0 [ 155.166224][ T2991] ? strnlen_user+0x13b/0x1c0 [ 155.171104][ T2991] __se_sys_memfd_create+0xf2/0x3b0 [ 155.176341][ T2991] __x64_sys_memfd_create+0x5b/0x70 [ 155.181677][ T2991] x64_sys_call+0x473/0x9a0 [ 155.186293][ T2991] do_syscall_64+0x4c/0xa0 [ 155.190891][ T2991] ? clear_bhb_loop+0x50/0xa0 [ 155.195732][ T2991] ? clear_bhb_loop+0x50/0xa0 [ 155.200466][ T2991] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 155.206495][ T2991] RIP: 0033:0x7f2006d58799 [ 155.211029][ T2991] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.230830][ T2991] RSP: 002b:00007f20057b2e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 155.239468][ T2991] RAX: ffffffffffffffda RBX: 000000000000152f RCX: 00007f2006d58799 [ 155.247544][ T2991] RDX: 00007f20057b2ee0 RSI: 0000000000000000 RDI: 00007f2006deee79 [ 155.255534][ T2991] RBP: 00002000000037c0 R08: 00000000ffffffff R09: 0000000000000000 [ 155.263674][ T2991] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000000 [ 155.271671][ T2991] R13: 00007f20057b2ee0 R14: 00007f20057b2ea0 R15: 0000200000000100 [ 155.280148][ T2991] [ 155.318569][ T2974] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 155.333305][ T2974] F2FS-fs (loop0): Start checkpoint disabled! [ 155.344826][ T2974] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 155.385418][ T2974] netlink: 232 bytes leftover after parsing attributes in process `syz.0.681'. [ 155.433169][ T1698] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 155.531632][ T2985] F2FS-fs (loop5): Invalid log sectors per block(570425347) log sectorsize(9) [ 155.553173][ T2985] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 155.574356][ T2985] F2FS-fs (loop5): invalid crc value [ 155.586479][ T2985] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 155.603291][ T301] usb 4-1: new low-speed USB device number 21 using dummy_hcd [ 155.625410][ T2985] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=3000000, run fsck to fix. [ 155.635588][ T2985] F2FS-fs (loop5): Bad quota inode 2:50331648 [ 155.641871][ T2985] F2FS-fs (loop5): Failed to enable quota tracking (type=2, err=-22). Please run fsck to fix. [ 155.652693][ T2985] F2FS-fs (loop5): Cannot turn on quotas: error -22 [ 155.661855][ T2985] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 155.671664][ T2985] F2FS-fs (loop5): Mounted with checkpoint version = 753bd00b [ 155.793728][ T30] audit: type=1400 audit(1773346432.033:527): avc: denied { getopt } for pid=2984 comm="syz.5.684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 155.833461][ T1698] usb 7-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 155.852669][ T1698] usb 7-1: config 0 interface 0 altsetting 16 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 155.888424][ T1698] usb 7-1: config 0 interface 0 has no altsetting 0 [ 155.896679][ T1698] usb 7-1: New USB device found, idVendor=0925, idProduct=0005, bcdDevice= 0.00 [ 155.908549][ T3001] F2FS-fs (loop0): invalid crc value [ 155.923356][ T1698] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.940913][ T1698] usb 7-1: config 0 descriptor?? [ 155.954769][ T3001] F2FS-fs (loop0): Found nat_bits in checkpoint [ 155.984001][ T1698] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 155.994481][ T3001] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 156.043245][ T301] usb 4-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 156.054003][ T301] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 156.143237][ T301] usb 4-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 156.161891][ T301] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 156.190998][ T1698] usb 7-1: USB disconnect, device number 16 [ 156.263340][ T301] usb 4-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 156.288850][ T301] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 156.393253][ T301] usb 4-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 156.416558][ T301] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 156.533206][ T301] usb 4-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 156.553154][ T301] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 156.658938][ T2146] attempt to access beyond end of device [ 156.658938][ T2146] loop0: rw=2049, want=45104, limit=40427 [ 156.793197][ T301] usb 4-1: string descriptor 0 read error: -22 [ 156.799698][ T301] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 156.819053][ T301] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.884141][ T301] usb 4-1: invalid UAC_HEADER (v1) [ 156.889830][ T301] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 156.991546][ T3012] set_capacity_and_notify: 2 callbacks suppressed [ 156.991560][ T3012] loop5: detected capacity change from 0 to 131072 [ 157.056541][ T3012] F2FS-fs (loop5): Test dummy encryption mode enabled [ 157.073585][ T3012] F2FS-fs (loop5): invalid crc value [ 157.100099][ T20] usb 4-1: USB disconnect, device number 21 [ 157.113042][ T3012] F2FS-fs (loop5): Found nat_bits in checkpoint [ 157.156402][ T3012] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 157.620898][ T3028] loop5: detected capacity change from 0 to 16 [ 157.653251][ T3028] erofs: (device loop5): mounted with root inode @ nid 36. [ 157.678144][ T3028] overlayfs: missing 'lowerdir' [ 157.776504][ T3035] netlink: 4 bytes leftover after parsing attributes in process `syz.5.698'. [ 158.153441][ T3041] netlink: 88 bytes leftover after parsing attributes in process `syz.6.700'. [ 158.483198][ T2655] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 158.923225][ T2655] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 158.933502][ T2655] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 158.942702][ T2655] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.131993][ T2655] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 159.142025][ T2655] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.150203][ T2655] usb 7-1: Product: syz [ 159.154692][ T2655] usb 7-1: Manufacturer: syz [ 159.159336][ T2655] usb 7-1: SerialNumber: syz [ 159.179350][ T3085] device syzkaller0 entered promiscuous mode [ 159.203530][ T2655] hub 7-1:1.0: bad descriptor, ignoring hub [ 159.209787][ T2655] hub: probe of 7-1:1.0 failed with error -5 [ 159.217646][ T2655] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 159.533242][ T2655] usb 7-1: USB disconnect, device number 17 [ 159.806671][ T3105] netlink: 20 bytes leftover after parsing attributes in process `syz.3.726'. [ 159.880260][ T3118] netlink: 56 bytes leftover after parsing attributes in process `syz.3.731'. [ 159.905584][ T3123] netlink: 72 bytes leftover after parsing attributes in process `syz.3.734'. [ 159.914658][ T3123] netlink: 8 bytes leftover after parsing attributes in process `syz.3.734'. [ 160.079633][ T3144] netlink: 12 bytes leftover after parsing attributes in process `syz.6.744'. [ 160.089100][ T3144] netlink: 56 bytes leftover after parsing attributes in process `syz.6.744'. [ 160.372270][ T3180] loop3: detected capacity change from 0 to 128 [ 160.391119][ T3167] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.398458][ T3167] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.409017][ T3180] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 160.423000][ T3167] device bridge_slave_0 entered promiscuous mode [ 160.430440][ T3167] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.437607][ T3167] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.445535][ T3167] device bridge_slave_1 entered promiscuous mode [ 160.544282][ T3167] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.551539][ T3167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.558937][ T3167] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.566430][ T3167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.603695][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 160.619099][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 160.630259][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 160.639605][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 160.662921][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 160.682236][ T3203] netlink: 'syz.0.764': attribute type 4 has an invalid length. [ 160.695328][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 160.713521][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 160.725182][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 160.733563][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 160.741195][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 160.749990][ T3167] device veth0_vlan entered promiscuous mode [ 160.770564][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 160.781445][ T3167] device veth1_macvtap entered promiscuous mode [ 160.793717][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 160.807476][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 160.924450][ T30] audit: type=1400 audit(1773346437.163:528): avc: denied { append } for pid=3209 comm="syz.4.751" name="001" dev="devtmpfs" ino=160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 160.976628][ T3223] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3223 comm=syz.3.774 [ 161.129282][ T3235] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2182154216 (4364308432 ns) > initial count (507749598 ns). Using initial count to start timer. [ 161.148949][ T3235] user requested TSC rate below hardware speed [ 161.545539][ T3270] loop6: detected capacity change from 0 to 512 [ 161.575128][ T3270] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 161.624558][ T3277] loop3: detected capacity change from 0 to 256 [ 161.809679][ T30] audit: type=1400 audit(1773346438.043:529): avc: denied { create } for pid=3301 comm="syz.0.810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 161.937192][ T3317] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 161.960783][ T3317] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 161.970321][ T3317] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 161.979614][ T3317] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 161.988719][ T3317] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 161.997648][ T3317] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 162.006466][ T3317] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 162.016853][ T3327] 8021q: VLANs not supported on gre0 [ 162.045892][ T3317] syz.3.815 (3317) used greatest stack depth: 20544 bytes left [ 162.056637][ T3331] netlink: 12 bytes leftover after parsing attributes in process `syz.0.822'. [ 162.091305][ T3337] netlink: 24 bytes leftover after parsing attributes in process `syz.3.823'. [ 162.153612][ T3345] loop3: detected capacity change from 0 to 256 [ 162.246158][ T284] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 162.264654][ T284] FAT-fs (loop3): Filesystem has been set read-only [ 162.294109][ T284] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 162.368419][ T3370] netlink: 12 bytes leftover after parsing attributes in process `syz.5.840'. [ 162.431022][ T3380] netlink: 20 bytes leftover after parsing attributes in process `syz.0.846'. [ 162.495519][ T3389] fuse: Bad value for 'rootmode' [ 162.534998][ T30] audit: type=1400 audit(1773346438.773:530): avc: denied { create } for pid=3393 comm="syz.0.853" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 162.562219][ T30] audit: type=1400 audit(1773346438.773:531): avc: denied { read } for pid=3393 comm="syz.0.853" name="file2" dev="tmpfs" ino=461 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 162.590735][ T30] audit: type=1400 audit(1773346438.773:532): avc: denied { open } for pid=3393 comm="syz.0.853" path="/80/file2" dev="tmpfs" ino=461 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 162.630503][ T30] audit: type=1400 audit(1773346438.773:533): avc: denied { ioctl } for pid=3393 comm="syz.0.853" path="/80/file2" dev="tmpfs" ino=461 ioctlcmd=0x4c06 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 162.655022][ T30] audit: type=1400 audit(1773346438.793:534): avc: denied { unlink } for pid=2146 comm="syz-executor" name="file2" dev="tmpfs" ino=461 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 162.716864][ T3392] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.730473][ T3392] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.744057][ T3392] device bridge_slave_0 entered promiscuous mode [ 162.759393][ T3392] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.779654][ T3392] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.798292][ T3392] device bridge_slave_1 entered promiscuous mode [ 162.956816][ T3430] netlink: 132 bytes leftover after parsing attributes in process `syz.6.867'. [ 163.014104][ T3392] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.021235][ T3392] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.028719][ T3392] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.035804][ T3392] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.060378][ T8] device veth1_macvtap left promiscuous mode [ 163.067410][ T8] device veth0_vlan left promiscuous mode [ 163.118808][ T30] audit: type=1400 audit(1773346439.353:535): avc: denied { connect } for pid=3432 comm="syz.4.870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 163.162140][ T3442] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.170801][ T3442] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.194126][ T3436] netlink: 12 bytes leftover after parsing attributes in process `syz.4.870'. [ 163.206836][ T3449] netlink: 'syz.6.873': attribute type 16 has an invalid length. [ 163.215276][ T3449] netlink: 'syz.6.873': attribute type 17 has an invalid length. [ 163.233851][ T3449] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.240959][ T3449] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.250633][ T30] audit: type=1400 audit(1773346439.493:536): avc: denied { write } for pid=3461 comm="syz.4.881" name="rtc0" dev="devtmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 163.280868][ T3449] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.287991][ T3449] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.312129][ T1914] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.321565][ T1914] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.334237][ T3460] device bridge_slave_0 left promiscuous mode [ 163.340579][ T3460] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.354851][ T3460] device bridge_slave_1 left promiscuous mode [ 163.361218][ T3460] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.387880][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 163.401650][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 163.410955][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 163.420298][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.427509][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.439301][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 163.448418][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 163.457468][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.464605][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.483622][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 163.492221][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 163.500902][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 163.510335][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 163.535305][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 163.549351][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 163.568939][ T3392] device veth0_vlan entered promiscuous mode [ 163.578193][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 163.587156][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 163.602843][ T3392] device veth1_macvtap entered promiscuous mode [ 163.610180][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 163.619451][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 163.627096][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 163.636937][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 163.645880][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 163.660991][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 163.669735][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 163.678392][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 163.687468][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 163.731985][ T3488] loop8: detected capacity change from 0 to 256 [ 163.754606][ T30] audit: type=1326 audit(1773346439.993:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3491 comm="syz.0.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d0e0a2799 code=0x7ffc0000 [ 163.868761][ T3508] fuse: Bad value for 'group_id' [ 163.966798][ T3514] loop8: detected capacity change from 0 to 8192 [ 165.071348][ T3622] device ip6gre1 entered promiscuous mode [ 165.101650][ T3622] syz.0.953 (3622) used greatest stack depth: 18208 bytes left [ 166.681627][ T3751] loop8: detected capacity change from 0 to 128 [ 166.908620][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 166.908639][ T30] audit: type=1400 audit(1773346443.143:550): avc: denied { read } for pid=3783 comm="syz.5.1027" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 167.253198][ T301] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 167.303173][ T60] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 167.493188][ T301] usb 5-1: Using ep0 maxpacket: 32 [ 167.613239][ T301] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 167.622059][ T301] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 167.632607][ T301] usb 5-1: config 0 has no interface number 0 [ 167.638742][ T301] usb 5-1: config 0 interface 196 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 167.651830][ T301] usb 5-1: config 0 interface 196 has no altsetting 0 [ 167.813264][ T301] usb 5-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 167.822624][ T301] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.831469][ T301] usb 5-1: Product: syz [ 167.836022][ T301] usb 5-1: Manufacturer: syz [ 167.840642][ T301] usb 5-1: SerialNumber: syz [ 167.845393][ T2655] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 167.853299][ T60] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 167.863051][ T60] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.863872][ T301] usb 5-1: config 0 descriptor?? [ 167.872354][ T60] usb 9-1: Product: syz [ 167.880774][ T60] usb 9-1: Manufacturer: syz [ 167.885752][ T60] usb 9-1: SerialNumber: syz [ 167.914434][ T301] ipheth 5-1:0.196: Unable to find alternate settings interface [ 168.090637][ T30] audit: type=1400 audit(1773346444.323:551): avc: denied { create } for pid=3831 comm="syz.5.1052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 168.116258][ T26] usb 5-1: USB disconnect, device number 23 [ 168.224817][ T3836] xt_CT: You must specify a L4 protocol and not use inversions on it [ 168.233244][ T2655] usb 7-1: config 12 has an invalid interface number: 94 but max is 1 [ 168.246928][ T2655] usb 7-1: config 12 has an invalid interface number: 237 but max is 1 [ 168.271244][ T2655] usb 7-1: config 12 has no interface number 0 [ 168.277945][ T2655] usb 7-1: config 12 has no interface number 1 [ 168.284272][ T2655] usb 7-1: config 12 interface 94 altsetting 15 has an invalid endpoint with address 0x0, skipping [ 168.295352][ T2655] usb 7-1: config 12 interface 94 has no altsetting 0 [ 168.302309][ T2655] usb 7-1: config 12 interface 237 has no altsetting 0 [ 168.483229][ T2655] usb 7-1: New USB device found, idVendor=03f0, idProduct=421d, bcdDevice=6a.6e [ 168.492480][ T2655] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.500555][ T2655] usb 7-1: Product: syz [ 168.504781][ T2655] usb 7-1: Manufacturer: syz [ 168.509389][ T2655] usb 7-1: SerialNumber: syz [ 168.634057][ T3840] tmpfs: Unknown parameter 'usrquota' [ 168.795082][ T2655] usb 7-1: USB disconnect, device number 18 [ 169.428247][ T3867] overlayfs: failed to clone upperpath [ 169.593175][ T301] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 169.813192][ T60] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 169.993293][ T301] usb 7-1: unable to get BOS descriptor or descriptor too short [ 170.050993][ T1698] usb 9-1: USB disconnect, device number 2 [ 170.073218][ T301] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 170.084265][ T301] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 170.094789][ T301] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 170.233192][ T60] usb 5-1: unable to get BOS descriptor or descriptor too short [ 170.273192][ T60] usb 5-1: not running at top speed; connect to a high speed hub [ 170.273256][ T301] usb 7-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 170.291162][ T301] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.299630][ T301] usb 7-1: Product: syz [ 170.304614][ T301] usb 7-1: Manufacturer: syz [ 170.316521][ T301] usb 7-1: SerialNumber: syz [ 170.325264][ T301] usb 7-1: config 0 descriptor?? [ 170.353184][ T60] usb 5-1: config 86 has an invalid interface number: 117 but max is 0 [ 170.364546][ T60] usb 5-1: config 86 has no interface number 0 [ 170.385090][ T60] usb 5-1: config 86 interface 117 has no altsetting 0 [ 170.566205][ T1698] usb 7-1: USB disconnect, device number 19 [ 170.603282][ T60] usb 5-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=de.f7 [ 170.612754][ T60] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.621096][ T60] usb 5-1: Product: syz [ 170.626040][ T60] usb 5-1: Manufacturer: syz [ 170.630913][ T60] usb 5-1: SerialNumber: syz [ 170.975375][ T60] usb 5-1: USB disconnect, device number 24 [ 171.183183][ T1698] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 171.353203][ T20] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 171.423242][ T1698] usb 9-1: Using ep0 maxpacket: 8 [ 171.593194][ T20] usb 7-1: Using ep0 maxpacket: 32 [ 171.713249][ T20] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 171.723686][ T1698] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 171.732750][ T1698] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.741134][ T20] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 171.751100][ T1698] usb 9-1: Product: syz [ 171.755337][ T1698] usb 9-1: Manufacturer: syz [ 171.760089][ T1698] usb 9-1: SerialNumber: syz [ 171.765717][ T1698] usb 9-1: config 0 descriptor?? [ 171.813171][ T60] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 171.903257][ T20] usb 7-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 171.913575][ T20] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.921910][ T20] usb 7-1: Product: syz [ 171.926290][ T20] usb 7-1: Manufacturer: syz [ 171.931065][ T20] usb 7-1: SerialNumber: syz [ 171.937335][ T20] usb 7-1: config 0 descriptor?? [ 171.974246][ T20] snd-usb-audio: probe of 7-1:0.0 failed with error -12 [ 172.053203][ T60] usb 5-1: Using ep0 maxpacket: 32 [ 172.173263][ T60] usb 5-1: config 0 has an invalid interface number: 10 but max is 0 [ 172.180261][ T301] usb 7-1: USB disconnect, device number 20 [ 172.181648][ T60] usb 5-1: config 0 has no interface number 0 [ 172.353265][ T60] usb 5-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 172.362498][ T60] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.370767][ T60] usb 5-1: Product: syz [ 172.375087][ T60] usb 5-1: Manufacturer: syz [ 172.379866][ T60] usb 5-1: SerialNumber: syz [ 172.386259][ T60] usb 5-1: config 0 descriptor?? [ 172.624807][ T1698] usb 5-1: USB disconnect, device number 25 [ 172.709209][ T3960] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 173.003198][ T20] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 173.079997][ T26] usb 9-1: USB disconnect, device number 3 [ 173.373255][ T20] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 173.382127][ T20] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 173.393159][ T20] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 173.402408][ T20] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 173.413668][ T20] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 173.423272][ T2655] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 173.543192][ T26] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 173.550856][ T20] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 173.560022][ T20] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 173.568208][ T20] usb 7-1: Product: syz [ 173.572795][ T20] usb 7-1: Manufacturer: syz [ 173.617268][ T20] cdc_wdm 7-1:1.0: skipping garbage [ 173.622701][ T20] cdc_wdm 7-1:1.0: skipping garbage [ 173.631685][ T20] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 173.793286][ T2655] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 173.804306][ T2655] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 173.818949][ T2655] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 173.824126][ T20] usb 7-1: USB disconnect, device number 21 [ 173.828402][ T2655] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.845413][ T2655] usb 5-1: config 0 descriptor?? [ 173.883862][ T2655] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 173.943261][ T26] usb 9-1: unable to get BOS descriptor or descriptor too short [ 174.023433][ T26] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.034299][ T26] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 174.044875][ T26] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 174.054865][ T26] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 174.223909][ T26] usb 9-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 174.233055][ T26] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.241278][ T26] usb 9-1: Product: syz [ 174.245528][ T26] usb 9-1: Manufacturer: syz [ 174.250147][ T26] usb 9-1: SerialNumber: syz [ 174.255979][ T26] usb 9-1: config 0 descriptor?? [ 174.273371][ T3975] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 174.334947][ T3987] device syzkaller0 entered promiscuous mode [ 174.495548][ T26] usb 9-1: USB disconnect, device number 4 [ 174.663313][ T2655] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 174.903156][ T2655] usb 7-1: Using ep0 maxpacket: 8 [ 175.114102][ T4002] kvm [4001]: vcpu0, guest rIP: 0xfff0 unimplemented MMIO_CONF_BASE wrmsr: 0x2000000 [ 175.193252][ T2655] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 175.202459][ T2655] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.210572][ T2655] usb 7-1: Product: syz [ 175.214813][ T2655] usb 7-1: Manufacturer: syz [ 175.219423][ T2655] usb 7-1: SerialNumber: syz [ 175.225187][ T2655] usb 7-1: config 0 descriptor?? [ 175.413187][ T20] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 175.653190][ T20] usb 9-1: Using ep0 maxpacket: 16 [ 175.711487][ T4017] overlayfs: failed to clone lowerpath [ 175.750640][ T4023] overlayfs: failed to clone upperpath [ 175.783234][ T20] usb 9-1: config index 0 descriptor too short (expected 51443, got 18) [ 175.943242][ T20] usb 9-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 175.952574][ T20] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.961019][ T20] usb 9-1: Product: syz [ 175.965249][ T20] usb 9-1: Manufacturer: syz [ 175.969872][ T20] usb 9-1: SerialNumber: syz [ 175.975175][ T20] r8152-cfgselector 9-1: config 0 descriptor?? [ 176.148216][ T1698] usb 5-1: USB disconnect, device number 26 [ 176.163422][ T30] audit: type=1400 audit(2000000004.770:552): avc: denied { write } for pid=4029 comm="syz.4.1139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 176.453234][ T20] r8152-cfgselector 9-1: Unknown version 0x0000 [ 176.459922][ T20] r8152-cfgselector 9-1: bad CDC descriptors [ 176.483229][ T20] r8152-cfgselector 9-1: Unknown version 0x0000 [ 176.490473][ T20] r8152-cfgselector 9-1: USB disconnect, device number 5 [ 176.743178][ T60] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 177.103201][ T60] usb 5-1: config 0 has an invalid interface number: 15 but max is 0 [ 177.111734][ T60] usb 5-1: config 0 has no interface number 0 [ 177.273211][ T20] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 177.280947][ T60] usb 5-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 177.290341][ T60] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.298526][ T60] usb 5-1: Product: syz [ 177.302887][ T60] usb 5-1: Manufacturer: syz [ 177.307766][ T60] usb 5-1: SerialNumber: syz [ 177.321158][ T60] usb 5-1: config 0 descriptor?? [ 177.406667][ T60] usb 7-1: USB disconnect, device number 22 [ 177.420234][ T4064] ================================================================== [ 177.421418][ T30] audit: type=1400 audit(2000000006.030:553): avc: denied { setopt } for pid=4063 comm="syz.6.1154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 177.428645][ T4064] BUG: KASAN: slab-out-of-bounds in xfrm_policy_inexact_list_reinsert+0x606/0x6c0 [ 177.428680][ T4064] Read of size 1 at addr ffff888107ba0bf8 by task syz.6.1154/4064 [ 177.428699][ T4064] [ 177.428706][ T4064] CPU: 1 PID: 4064 Comm: syz.6.1154 Tainted: G W syzkaller #0 [ 177.428728][ T4064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 177.428741][ T4064] Call Trace: [ 177.428747][ T4064] [ 177.428756][ T4064] __dump_stack+0x21/0x30 [ 177.428780][ T4064] dump_stack_lvl+0x110/0x170 [ 177.428801][ T4064] ? show_regs_print_info+0x20/0x20 [ 177.428825][ T4064] ? load_image+0x3e0/0x3e0 [ 177.428845][ T4064] ? unwind_get_return_address+0x4d/0x90 [ 177.428871][ T4064] print_address_description+0x7f/0x2c0 [ 177.428894][ T4064] ? xfrm_policy_inexact_list_reinsert+0x606/0x6c0 [ 177.428917][ T4064] kasan_report+0xf1/0x140 [ 177.428936][ T4064] ? xfrm_policy_inexact_list_reinsert+0x606/0x6c0 [ 177.428958][ T4064] __asan_report_load1_noabort+0x14/0x20 [ 177.428980][ T4064] xfrm_policy_inexact_list_reinsert+0x606/0x6c0 [ 177.523324][ T20] usb 9-1: Using ep0 maxpacket: 32 [ 177.523581][ T4064] xfrm_policy_inexact_insert_node+0x938/0xb50 [ 177.564734][ T4064] ? xfrm_netlink_rcv+0x72/0x90 [ 177.569103][ T1698] usb 5-1: USB disconnect, device number 27 [ 177.569822][ T4064] ? netlink_unicast+0x876/0xa40 [ 177.580671][ T4064] ? netlink_sendmsg+0x879/0xb80 [ 177.586194][ T4064] ? ____sys_sendmsg+0x5b7/0x8f0 [ 177.591262][ T4064] ? ___sys_sendmsg+0x236/0x2e0 [ 177.596254][ T4064] ? x64_sys_call+0x4b/0x9a0 [ 177.601240][ T4064] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 177.607587][ T4064] xfrm_policy_inexact_alloc_chain+0x53d/0xb30 [ 177.614031][ T4064] xfrm_policy_inexact_insert+0x70/0x1130 [ 177.619851][ T4064] ? __kasan_check_write+0x14/0x20 [ 177.624990][ T4064] ? _raw_spin_lock_bh+0x94/0xf0 [ 177.629942][ T4064] ? policy_hash_bysel+0x13f/0x6f0 [ 177.635060][ T4064] xfrm_policy_insert+0x126/0x9a0 [ 177.640193][ T4064] ? xfrm_policy_construct+0x54f/0x1f00 [ 177.645772][ T4064] xfrm_add_policy+0x4ed/0x850 [ 177.650570][ T4064] ? xfrm_dump_sa_done+0xc0/0xc0 [ 177.655800][ T4064] xfrm_user_rcv_msg+0x4dc/0x7b0 [ 177.660764][ T4064] ? xfrm_netlink_rcv+0x90/0x90 [ 177.665837][ T4064] ? avc_has_perm_noaudit+0x490/0x490 [ 177.671235][ T4064] ? x64_sys_call+0x4b/0x9a0 [ 177.675849][ T4064] ? selinux_nlmsg_lookup+0x237/0x4c0 [ 177.681234][ T4064] netlink_rcv_skb+0x1f5/0x440 [ 177.686013][ T4064] ? xfrm_netlink_rcv+0x90/0x90 [ 177.690984][ T4064] ? netlink_ack+0xb50/0xb50 [ 177.695676][ T4064] ? wait_for_completion_killable_timeout+0x10/0x10 [ 177.702447][ T4064] ? __netlink_lookup+0x387/0x3b0 [ 177.707760][ T4064] xfrm_netlink_rcv+0x72/0x90 [ 177.712552][ T4064] netlink_unicast+0x876/0xa40 [ 177.717433][ T4064] netlink_sendmsg+0x879/0xb80 [ 177.722605][ T4064] ? netlink_getsockopt+0x530/0x530 [ 177.727817][ T4064] ? do_futex+0xde8/0x2800 [ 177.732248][ T4064] ? security_socket_sendmsg+0x82/0xa0 [ 177.733407][ T20] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 177.737734][ T4064] ? netlink_getsockopt+0x530/0x530 [ 177.748748][ T20] usb 9-1: config 1 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 177.753367][ T4064] ____sys_sendmsg+0x5b7/0x8f0 [ 177.753404][ T4064] ? __sys_sendmsg_sock+0x40/0x40 [ 177.771569][ T20] usb 9-1: config 1 interface 0 has no altsetting 0 [ 177.776448][ T4064] ? import_iovec+0x7c/0xb0 [ 177.776477][ T4064] ___sys_sendmsg+0x236/0x2e0 [ 177.792976][ T4064] ? __sys_sendmsg+0x280/0x280 [ 177.797762][ T4064] ? __fdget+0x1a1/0x230 [ 177.802029][ T4064] __x64_sys_sendmsg+0x206/0x2f0 [ 177.806977][ T4064] ? ___sys_sendmsg+0x2e0/0x2e0 [ 177.811924][ T4064] ? __kasan_check_write+0x14/0x20 [ 177.817132][ T4064] ? switch_fpu_return+0x15d/0x2c0 [ 177.822258][ T4064] x64_sys_call+0x4b/0x9a0 [ 177.826769][ T4064] do_syscall_64+0x4c/0xa0 [ 177.831192][ T4064] ? clear_bhb_loop+0x50/0xa0 [ 177.835869][ T4064] ? clear_bhb_loop+0x50/0xa0 [ 177.840546][ T4064] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 177.846529][ T4064] RIP: 0033:0x7f4fb547e799 [ 177.851144][ T4064] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.871013][ T4064] RSP: 002b:00007f4fb3ed9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 177.879521][ T4064] RAX: ffffffffffffffda RBX: 00007f4fb56f7fa0 RCX: 00007f4fb547e799 [ 177.887502][ T4064] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000006 [ 177.895655][ T4064] RBP: 00007f4fb5514c99 R08: 0000000000000000 R09: 0000000000000000 [ 177.903637][ T4064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 177.911666][ T4064] R13: 00007f4fb56f8038 R14: 00007f4fb56f7fa0 R15: 00007fff3ddbd068 [ 177.919774][ T4064] [ 177.923491][ T4064] [ 177.925827][ T4064] Allocated by task 4064: [ 177.930154][ T4064] __kasan_kmalloc+0xda/0x110 [ 177.934843][ T4064] __kmalloc+0x13d/0x2c0 [ 177.939100][ T4064] sk_prot_alloc+0xed/0x320 [ 177.943544][ T20] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 177.943715][ T4064] sk_alloc+0x38/0x430 [ 177.943739][ T4064] pfkey_create+0x12a/0x660 [ 177.953071][ T20] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.961588][ T4064] __sock_create+0x38d/0x7a0 [ 177.961620][ T4064] __sys_socket+0xec/0x190 [ 177.970192][ T20] usb 9-1: Product: syz [ 177.974497][ T4064] __x64_sys_socket+0x7a/0x90 [ 177.974523][ T4064] x64_sys_call+0x8c5/0x9a0 [ 177.979925][ T20] usb 9-1: Manufacturer: syz [ 177.983207][ T4064] do_syscall_64+0x4c/0xa0 [ 177.983233][ T4064] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 177.988734][ T20] usb 9-1: SerialNumber: syz [ 177.992440][ T4064] [ 177.992448][ T4064] Last potentially related work creation: [ 177.992455][ T4064] kasan_save_stack+0x3a/0x60 [ 178.025152][ T4064] __kasan_record_aux_stack+0xd2/0x100 [ 178.030710][ T4064] kasan_record_aux_stack_noalloc+0xb/0x10 [ 178.036673][ T4064] kvfree_call_rcu+0xb6/0x840 [ 178.041356][ T4064] drop_sysctl_table+0x2f5/0x430 [ 178.046410][ T4064] unregister_sysctl_table+0x7a/0x120 [ 178.051788][ T4064] unregister_net_sysctl_table+0x15/0x20 [ 178.057885][ T4064] neigh_sysctl_unregister+0x78/0x90 [ 178.063245][ T4064] addrconf_ifdown+0x160d/0x18d0 [ 178.068314][ T4064] addrconf_notify+0x3bd/0xde0 [ 178.073257][ T4064] raw_notifier_call_chain+0x90/0x100 [ 178.078646][ T4064] unregister_netdevice_many+0x10a1/0x1aa0 [ 178.084485][ T4064] ip_tunnel_delete_nets+0x34b/0x3a0 [ 178.090026][ T4064] ipgre_tap_exit_batch_net+0x22/0x30 [ 178.095640][ T4064] cleanup_net+0x60a/0xae0 [ 178.100100][ T4064] process_one_work+0x6be/0xba0 [ 178.105185][ T4064] worker_thread+0xa59/0x1200 [ 178.109992][ T4064] kthread+0x411/0x500 [ 178.114190][ T4064] ret_from_fork+0x1f/0x30 [ 178.118719][ T4064] [ 178.121071][ T4064] The buggy address belongs to the object at ffff888107ba0800 [ 178.121071][ T4064] which belongs to the cache kmalloc-1k of size 1024 [ 178.135257][ T4064] The buggy address is located 1016 bytes inside of [ 178.135257][ T4064] 1024-byte region [ffff888107ba0800, ffff888107ba0c00) [ 178.148927][ T4064] The buggy address belongs to the page: [ 178.154895][ T4064] page:ffffea00041ee800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x107ba0 [ 178.165148][ T4064] head:ffffea00041ee800 order:3 compound_mapcount:0 compound_pincount:0 [ 178.173636][ T4064] flags: 0x4000000000010200(slab|head|zone=1) [ 178.179723][ T4064] raw: 4000000000010200 0000000000000000 0000000100000001 ffff888100043080 [ 178.188330][ T4064] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 178.197029][ T4064] page dumped because: kasan: bad access detected [ 178.203541][ T4064] page_owner tracks the page as allocated [ 178.209264][ T4064] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 282, ts 26396552787, free_ts 26381406207 [ 178.228743][ T4064] post_alloc_hook+0x192/0x1b0 [ 178.233804][ T4064] prep_new_page+0x1c/0x110 [ 178.238334][ T4064] get_page_from_freelist+0x2d3a/0x2dc0 [ 178.243899][ T4064] __alloc_pages+0x1a2/0x460 [ 178.248638][ T4064] new_slab+0xa1/0x4d0 [ 178.252736][ T4064] ___slab_alloc+0x381/0x810 [ 178.257421][ T4064] __slab_alloc+0x49/0x90 [ 178.262113][ T4064] __kmalloc+0x16a/0x2c0 [ 178.266484][ T4064] __register_sysctl_table+0xeb/0x1250 [ 178.271987][ T4064] register_net_sysctl+0x238/0x250 [ 178.277118][ T4064] neigh_sysctl_register+0x9a7/0xa90 [ 178.282429][ T4064] addrconf_sysctl_register+0xb3/0x1a0 [ 178.284148][ T20] usb 9-1: bad CDC descriptors [ 178.287902][ T4064] ipv6_add_dev+0xc03/0x1150 [ 178.297384][ T4064] addrconf_notify+0x582/0xde0 [ 178.302185][ T4064] raw_notifier_call_chain+0x90/0x100 [ 178.307784][ T4064] call_netdevice_notifiers+0x119/0x190 [ 178.313522][ T4064] page last free stack trace: [ 178.316467][ T20] usb 9-1: USB disconnect, device number 6 [ 178.318311][ T4064] free_unref_page_prepare+0x542/0x550 [ 178.329606][ T4064] free_unref_page+0xae/0x540 [ 178.334316][ T4064] __free_pages+0x6c/0x100 [ 178.338858][ T4064] __free_slab+0xe8/0x1e0 [ 178.343218][ T4064] __unfreeze_partials+0x160/0x190 [ 178.348589][ T4064] put_cpu_partial+0xc6/0x120 [ 178.353280][ T4064] __slab_free+0x1d4/0x290 [ 178.357826][ T4064] ___cache_free+0x104/0x120 [ 178.362751][ T4064] qlink_free+0x4d/0x90 [ 178.366943][ T4064] qlist_free_all+0x5f/0xb0 [ 178.371485][ T4064] kasan_quarantine_reduce+0x14a/0x170 [ 178.377056][ T4064] __kasan_slab_alloc+0x2f/0xf0 [ 178.381932][ T4064] slab_post_alloc_hook+0x4f/0x2b0 [ 178.387149][ T4064] kmem_cache_alloc_trace+0xfb/0x270 [ 178.392573][ T4064] kset_create_and_add+0x59/0x2c0 [ 178.397604][ T4064] netdev_register_kobject+0x1ec/0x360 [ 178.403068][ T4064] [ 178.405567][ T4064] Memory state around the buggy address: [ 178.411449][ T4064] ffff888107ba0a80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 178.419896][ T4064] ffff888107ba0b00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 178.427980][ T4064] >ffff888107ba0b80: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc [ 178.436216][ T4064] ^ [ 178.444425][ T4064] ffff888107ba0c00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 178.452605][ T4064] ffff888107ba0c80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 178.460692][ T4064] ================================================================== [ 178.468860][ T4064] Disabling lock debugging due to kernel taint