last executing test programs: 32m25.513239934s ago: executing program 3 (id=19): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x46041, 0x0) ioctl$TUNSETCARRIER(r3, 0x400454e2, &(0x7f0000000040)=0x1) socket$inet6(0xa, 0x1, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) keyctl$set_reqkey_keyring(0xe, 0x4) request_key(&(0x7f0000000340)='asymmetric\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000380)=')\x80', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0x3, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x725, 0x0, 0x0, 0x0, 0xd}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xa4, 0x7, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_EXPRESSIONS={0x88, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}, {0x24, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DYNSET_FLAGS={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_DYNSET_SET_ID={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x50, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x23}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xb}]}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x50}, 0x40004) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x34, 0x2, 0x3, 0x301, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x3f}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x7}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1e}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x6000048}, 0x0) 32m23.503658717s ago: executing program 3 (id=22): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000019, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x20045a, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./file0\x00') r1 = syz_socket_connect_nvme_tcp() recvfrom$inet_nvme(r1, &(0x7f0000000040)=""/42, 0x2a, 0x162, &(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x4, 0x3, 0x4, 0x2, {0xa, 0x4e22, 0x7ff, @dev={0xfe, 0x80, '\x00', 0x3d}}}}, 0x80) mount$binderfs(0x0, &(0x7f0000000400)='./binderfs\x00', 0x0, 0x10254ab, 0x0) r2 = creat(&(0x7f0000000080)='./file1\x00', 0x1) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000)={0x20052f9, 0xfffffff8, 0x100802, 0x2, 0x8}) 32m23.102593936s ago: executing program 3 (id=26): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000006680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000340)={[{@data_ordered}]}, 0x41, 0xbaf, &(0x7f0000009440)="$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") keyctl$instantiate_iov(0x14, 0x0, &(0x7f00000065c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000140)="3cba54ec4de645ae5c600f73168450c7983affc7d160806ec656b4c59a717f65c4b80923c3daeea1cc748c84137a2bfb55be7f566878c3954e19b6ebc7ef78df3a6562334242c4e8eff2cdbf7f6a9984ad88dae41ed83af59b2b4fe8a2a39b90292fb403eccafe4d713216b969bc31bea2b10f63d6a2c891308cd54cf96a95880cc10b", 0x83}], 0xa, 0x0) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) madvise(&(0x7f00003e7000/0x3000)=nil, 0x3000, 0x16) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r3, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x53, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/109, 0x20001c34}], 0x1, 0x0) 32m19.719209898s ago: executing program 3 (id=28): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) pwrite64(r0, &(0x7f0000000100)="b1", 0xc01, 0xc00) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'netdevsim0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0xfc}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) r7 = fcntl$dupfd(r6, 0x406, r6) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x24048001}, 0x24040084) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) io_setup(0x7d, &(0x7f0000000600)) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 32m17.371105878s ago: executing program 3 (id=35): read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x4000, &(0x7f0000005700)=ANY=[@ANYBLOB="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"], 0x1, 0x551e, &(0x7f0000005800)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) pwrite64(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x9) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() syz_emit_ethernet(0x7e, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) lsetxattr$security_selinux(0x0, &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000003140)='./bus\x00', 0x1008002, &(0x7f0000000400)={[{@grpquota}, {@delalloc}, {@resuid}, {@i_version}, {@i_version}, {@nojournal_checksum}, {@lazytime}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000021e000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f00000002c0)="66b9044d564b66b80030000066ba000000000f302e0f01cf6767660f629968c29aae0f32baa000ecd9fc64f26426f0809b5d0000d9ad09003667df16660f38823d", 0x41}], 0x1, 0x42, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1195412, 0x0, 0x40, 0x0, &(0x7f0000000140)) unlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x8010, &(0x7f0000000640)=ANY=[@ANYRES8=0x0, @ANYBLOB="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", @ANYRESDEC, @ANYRESDEC, @ANYRESHEX], 0x2, 0x246, &(0x7f0000000340)="$eJzs3c9qE20UB+AzSdov/VwkC1ciOKALV6XtFbRIBbErJQt1ocW2IEkoWAi0irErr8DLcuMdeAFCd7ooRKaTNCmkTVvyR+rzbHrovL+cM5kJWc2bN3eb9a3dvZ3Djz+iHEkUVmM1OYqoRiF6PgcAcJP87nTiqJO7WrJUmNRMAMBkXfL7f2GKIwEAE/b8xcunaxsb68/StBzR/NKqJZH/zY+v7cS7aMR2LEUljiM6p/L68ZON9SilmWo8aLZbtSzZfP2t+/prPyNO8stRierw/HKaG8i3W7W5+L/bfzXLr0Qlbg/PrwzJR20+Ht4fmH8xKvH9bexGI7Yiy/bzn5bT9FHn668Pr7KJs3zSbtX+O1nX1ylO/eIAAAAAAAAAAAAAAAAAAAAAAHBjLaZpmnZ31Gmf2X+neHxyfDHtqZ7dnyfPn7c/UHtgf52lrEWSr+/nS3GnFKVZnjsAAAAAAAAAAAAAAAAAAAD8Lfb2D+qbjcb2+7EWvcf6Ry5eiAl0v6iIYkQ5G62RREyr6ahiIZtnOr3uxcW9Igb+U7rG1YnC/kG9d3fVN5MYkSqPvkmuVXSG3H7Fc1PzY+o+f2u8Z5FExNzpm3nR4nLMjfmTAgAAAAAAAAAAAAAAAAAATFn/od8hBw9nMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzED/9/+vULS74UumZnyKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/AP+BAAA//9fcXl7") rt_tgsigqueueinfo(0x0, 0x0, 0x12, &(0x7f00000003c0)={0x1b, 0x2, 0x7}) write$cgroup_subtree(r0, 0x0, 0x10448) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c9, &(0x7f0000000100)) 32m16.529576495s ago: executing program 3 (id=38): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000002000010025bd7000fbdbdf250a0040000000070600000008000a00ffc0780008000e000500000000"], 0x2c}, 0x1, 0x0, 0x0, 0x24048860}, 0x40084) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/stat\x00', 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000300)=0x8000, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) ppoll(&(0x7f0000000240)=[{r1, 0x4000}], 0x1, 0x0, 0x0, 0x0) unshare(0x6020400) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 32m16.001202367s ago: executing program 32 (id=38): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000002000010025bd7000fbdbdf250a0040000000070600000008000a00ffc0780008000e000500000000"], 0x2c}, 0x1, 0x0, 0x0, 0x24048860}, 0x40084) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/stat\x00', 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000300)=0x8000, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) ppoll(&(0x7f0000000240)=[{r1, 0x4000}], 0x1, 0x0, 0x0, 0x0) unshare(0x6020400) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 16.993430365s ago: executing program 4 (id=7029): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x20, &(0x7f0000000c00), 0x1, 0xb87, &(0x7f0000002380)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file1/file0\x00', 0x200400, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x20045a, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000380)='net_prio.prioidx\x00', 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) fsopen(&(0x7f0000000440)='mqueue\x00', 0x1) ioctl$AUTOFS_IOC_PROTOVER(r1, 0x80049363, &(0x7f0000000500)) write$char_usb(r1, &(0x7f00000007c0)='\v', 0x1) syz_usb_ep_read(0xffffffffffffffff, 0x1, 0xa1, &(0x7f0000000000)=""/161) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000300)={0x30, 0x5, 0x0, {0x0, 0x0, 0x9, 0x3}}, 0x30) rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000140)='./file1\x00') r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r3, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)='z', 0x1}], 0x1, &(0x7f00000010c0)=ANY=[], 0xa1}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000900)=' ', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000003c0)="12", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000001c0)='^', 0x1}], 0x1}}], 0x4, 0x2401c444) write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, &(0x7f0000000580)={0x28, 0x2, 0x0, {0x6, 0x4, 0x80000000}}, 0x28) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.numa_stat\x00', 0x275a, 0x0) lseek(r4, 0xffffffffffffffff, 0x4) syz_usb_connect(0x3, 0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="92010002508bf5088205cae60bd30102030109023400010301600209042d0202ff6229010a24010c000302010209050101000203ff0609050a0308000301010725"], 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f00000001c0)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1000000}}]}, {0x4}, {0xc}, {0xc, 0x9}}}]}]}, 0x68}}, 0x0) sendmmsg$inet6(r3, &(0x7f0000003740)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000000c0)="9789b5", 0x7ffd}], 0x1}}], 0x1, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000cc0)='./file2\x00', 0x307) 14.36962618s ago: executing program 0 (id=7035): sigaltstack(&(0x7f0000000000)={&(0x7f0000000280)=""/4124, 0x80000001, 0x101c}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 14.269102913s ago: executing program 0 (id=7038): r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) getpid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r4, 0x560f, &(0x7f0000000040)={0x1, 0x4002, 0x2, 0x2, 0x3f000000, 0x0}) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r5, 0x300, 0x70bd29, 0x25dfdbfe}, 0x1c}, 0x1, 0x0, 0x0, 0x200000b1}, 0x4000) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000008c0)={'veth1_to_hsr\x00', &(0x7f0000006d00)=@ethtool_gstrings={0x1b, 0x8, 0x5, "c8b41d57c2"}}) socket$inet6(0xa, 0x2, 0x0) 13.113748607s ago: executing program 4 (id=7041): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="91f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e0000ea4feb931647fc5393de2500000000000000", 0x3f}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2d000078104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d", 0x84}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2090) syz_mount_image$f2fs(&(0x7f0000000180), &(0x7f0000000040)='./file1\x00', 0x8, &(0x7f00000059c0)=ANY=[@ANYBLOB="6e6f646973636172642c6e6f636865636b706f696e745f6d657267652c616c6c6f635f6d6f64653d64656661756c742c6163746976655f6c6f67733d362c666c7573685f6d657267652c6661756c745f696e6a656374696f6e3d30303030303030303030303030303030303235362c646973636172642c6e6f61636c2c6673796e635f6d6f64653d706f7369782c616c6c6f635f6d6f64653d64656661756c742c6e6f657874656e745f63616368652c6163746976655f6c6f67733d322c6661756c745f747970653d30303030303030303030303031363737373231342c0002d1c71f8348abae1fff96ec907a723dca530cf5aea9622c1169c27c91b4d703f02da55a70e4108d30dd0a1b6e467d05c6c0237e3772dfb37da0e9705c62c7f6dc21ef782f52303a65f3196af86a3d58c8bfb0ef60c974b0e0b44af5ce33f407facb3838bd4bf9b7a99d612518ac3ddddf95b10ead9f78580da79051b5011a94bc44336ebf9378b479860af435366b6d4cdb9c5ffd949b52f82ac9c92de853"], 0x5, 0x5513, &(0x7f0000005d80)="$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") sendto$inet(r0, &(0x7f00000000c0)="f43945ca", 0x4, 0x340080d1, 0x0, 0x0) 12.844478782s ago: executing program 0 (id=7044): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x3008, &(0x7f00000002c0)=ANY=[@ANYRES8=0x0, @ANYRESHEX=0xee00, @ANYBLOB=',check=normal,fmask=00000000000000000000002,sys_immutable,nodots,dots,nodots,nodots,nodots,fmask=00000000000000000177777,dots,quiet,nodots,nodots,check=relaxed,nodots,umask=00000000000000000076645,nodots,nodots,nfs=stale_rw,nodots,smackfsfloor=fmask,defcontext=unconfined_u,permit_directio,permit_directio,fscontext=staff_u,seclabel,euid>', @ANYRESDEC, @ANYRESDEC], 0x0, 0x1f5, &(0x7f0000000600)="$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") syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x8040, 0x20) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40081271, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r4 = gettid() r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@can_newroute={0x14, 0x18, 0x1, 0x70bd29, 0x25dfdbfd, {0x1d, 0x1, 0x4}}, 0x14}}, 0x4c0c8) tkill(r4, 0xb) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0) read$FUSE(r6, &(0x7f0000000500)={0x2020}, 0x2020) epoll_pwait(0xffffffffffffffff, &(0x7f0000000040)=[{}], 0x1, 0x2, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 12.02901832s ago: executing program 4 (id=7048): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x32e5ea5344bdaf5f) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0500000008002000050000007f00000001"], 0x50) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x109001, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x4000009b}]}) r4 = syz_open_pts(0xffffffffffffffff, 0x4a00) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000000c0)) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mlockall(0x7) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x9}) syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = io_uring_setup(0x7c91, &(0x7f0000000180)={0x0, 0x0, 0x2}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x42, 0x6, 0x5, 0x0, 0x1}, 0x50) io_uring_setup(0x75e5, &(0x7f00000000c0)={0x0, 0x0, 0x22, 0x0, 0x0, 0x0, r5}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000004043554200000000000001090224000100008006090400041103000100092106000101222a00090548b40800408100"], 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) 11.907070742s ago: executing program 1 (id=7050): sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000004) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) close(0x3) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) r3 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r3, &(0x7f00000005c0)={&(0x7f0000000400)={0x2, 0x0, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @empty}}}], 0x20}, 0x2400c004) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, &(0x7f0000000000)='bridge0\x00') r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000200)={'gretap0\x00', {0x2, 0x4e23, @empty}}) r5 = syz_open_procfs(0x0, &(0x7f0000002080)='pagemap\x00') lseek(r5, 0xfffffffffffffffd, 0x1) sendfile(r5, r5, &(0x7f0000000000)=0x4, 0x8) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x0) r7 = openat$dir(0xffffffffffffff9c, 0x0, 0x800, 0xc) getdents(r7, &(0x7f00000023c0)=""/4096, 0x1000) recvmmsg$unix(r6, &(0x7f0000002380)=[{{0x0, 0x4000000, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0xecc}], 0x1}}], 0x8, 0x0, 0x0) 10.881134323s ago: executing program 0 (id=7053): read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x4000, &(0x7f0000005700)=ANY=[@ANYBLOB="6e6f657874656e745f63616368652c6a71666d743d7666736f6c642c6e6f71756f74612c6e6f71756f74612c66617374626f6f742c6e6f696e6c696e655f64656e7472792c6a71666d743d76667376312c6673796e635f6d6f64653d7374726963742c6772706a71756f74613d278c006c6c6f635f6d6f64653d64656661756c742c696e6c696e655f78617474722c00a2b4db502b6ba8210424f7f797a6ddd50d26e73f72a841707ea019cc81c223d959a991615e17b58a4e3ec9b2e54b87aafbaf0036421993a261bd97b95beab3b8db73ad782b6009737439da6f1d157405f23efa22e2b774ebcf1fbf96b0f516775ed21aecaa6ba0f6d45e71"], 0x1, 0x551e, &(0x7f0000005800)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) pwrite64(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x9) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() syz_emit_ethernet(0x7e, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000003140)='./bus\x00', 0x1008002, &(0x7f0000000400)={[{@grpquota}, {@delalloc}, {@resuid}, {@i_version}, {@i_version}, {@nojournal_checksum}, {@lazytime}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000001680)=ANY=[@ANYBLOB="020000000100070000000000040004000000ffff1000070000000000200000003beaadfd6559eb48be5898bceeeba982455a0e2bb45a3094619246916b52d6aa60bcd69e1e482d6d068357a6f1dfaeedb2b0d0451d94ed5ae36e695ab64fcc323f73c8b1d275e80c3b7858940d5942d72ee74da605ae0c85fb9a5fab5954d3b01f2c0f47ba77293a6157d2fc890747e132f7e85741222f35e30d972f89a51d32c5e0ef351f2196bf0f41096030d02acb7c52d3ffe2a68226bce2e0ca5f003bc4a85a8585"], 0x24, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000021e000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f00000002c0)="66b9044d564b66b80030000066ba000000000f302e0f01cf6767660f629968c29aae0f32baa000ecd9fc64f26426f0809b5d0000d9ad09003667df16660f38823d", 0x41}], 0x1, 0x42, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1195412, 0x0, 0x40, 0x0, &(0x7f0000000140)) unlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x8010, &(0x7f0000000640)=ANY=[@ANYRES8=0x0, @ANYBLOB="b25f92172cec7e12eb54e35e3a1feeb1fc6de669babbe66b7be5d0f346aafefdafd961726e6d73ca3740c3d3c7d1f94c35ae27b51a47afdf760e9b0b8bd946e25d2d37739f10d56f2fc313d450ad56efbf62946263b16a2b1cedd9d02b26585ee3d4b2e4bf0d6fa2dc32d41b0759466ffdc29688a4167c78e653a6ef5f94c0c1b595d33c12805dc3177c97dae7745d0f0da01c22a15a6e58650d65a9e7c7f1a05d115793231dd85b467e07b1e9f1e50dfc265b638075525fb67dda23a08016bf36f6234097c9bdd237fef51a65cf0251cfb37d06c27e6467dc9da4fc85e0664e3d41aedf4762b4bebb728f783bdd2aafc8965b235b4eb58195bbe08e3526fc7520c7f3e24c3004b3f01136ae749531456bb2821d3034b5543a7e2f337e894d8c8cc52da9a5e76afd3b71b536e1e43278657884c0deba54406a5862aafd95012acc6babcd3c2fa038656e703257390a5682b2b13ba63d42300b395e014a8494ae016eec62338bf0b04bb8fe6802b4582252a2bc3ebf5f5abb3af07690a03d3b9f778db202c990211be48f71dcc31b7f6f27301dba054f5c12def237a7408f2069913b4ad6cdef401e72cac4b40e5b1181fdc2a4200c80a9f73dc7dcbc86f0c667a828d970a5d445f3664d0bc01d7717289e99becd948ff320d1015044c1eaf351ff2940741eb0b1eec8890e9ff03778e335398949549209b38b5632cf4a9a61c4be0cc1971ab5c59458184ebc98fdd6b417f14c75f0d6da556c32e097b9e4b167ec8f28dc13e6a36e12bb5ba42694b2ef54f3c88e4c5f37674efc357cc0b242c866c252e142987a221e9379457f16e6175d2e2c4e913a1749255815dd438b39bdb514c9de28244f2d85ef9899213936901ce7d7a71e19f66c951bab441201b108fbb3142aab322992fbfec43d629989714d9e42cd49797098297f9bfcb60afedd9d5ea4bdcadbbe8cd6f1c68755977ee0cb259dad87371a5c0c4b9befda66b9f455afa7642d7c23862911e3e315cc5fc32a3fb17d87214c2b470d3c6b55de39cdbe72d5d14df2520b9d68dc38b91ffa01f11b4be2ce8c0817fc2e32f666e2d8d6f48dcdac662ded503193081bc130a75deb1970420c6d157b12323cef3cafbc0dab3b32e33eada81153614d4566bc35811a6a96eb5a774d800bb6b8e1858ce3ef3102d310f1001df3dadd74715aeb620a5ec1e6ae2ff81a0fddfe22ae6c7b8b06de5011797f95ed075b5b06897374d0a5703732fa12dd7989acb42216226fc5c35549917d8f881731dd4a528d28457917808074f3e4007394ea5ea9c2d263c456ddf96c7ffdeab1d5069ab2f235c16080904e9a4afa0d0ccac534f3100ce946804fb888d13877e865150bb49da333880c9611ed67c388385d769fa28321516bd650dd417a0ea93c31bab8e90086d44d60fedb2cdb20aa0431fed5101cc7da888b3c3cf218d10fab7ae2c0e240517763d59899aed92d0f242b170d4f8e0b87985086c48a151751607cc81ef2596654d75ba76909c67331cd7913a4a60e2f5a0d35aa5bdeb49b0c6616091a55a919fd701829ba4c27a3fbb4a9490cadbf0bbcaf211720580063f48d72282cbabaac4230a3f82ac5014f59ea5a3a3bf3bf6e24dbbd35991345e0b64b8c45085949abd45e19b71ed8deddc7f0652e13c713406b0edfd9d261b78b5f22912764a428d8b87b21840a48fdb91434d72d1b77f67d6f7e1695592cc26f4a3a91b95ece1549427a6268265fa7eb2fe37d81c050c69e553b84bfab3c989aed1a345c3bdd041dabc2b97593ab8bf37f4166b155b5a00a84b2eabfa299f7b7de36db23c45c65b446ba53b1daea7a50ec6cb8c67db0bca70b6bb98540fedb5651964e3dfaf1655a6a4ac39037411237647da789058947379f2196cd7d3a57b8c63d6be2f0dc5f2e2a5bff51f53dad41a32362443c10bc8bf2d364a6f667b354914be63c51276ef0b31a9a3a8763656e78709fa5641cf76a6850dbdf2b0e04aef86b3ebc8780597ba4a6f627cb846ebd2e365743fee9ded68ec48f1c8a2fc9defbbaca43a38422ffa2756ca1bf8191afa66e008f4a1210a464bf59729583c793a71c8f3234a5eb6a4d14ee4dc7543fa0e9d4e645dc74f0840f06d0abf9a4ef300261c1c8d44d780c186cbb04339e21990d81059305fdaf68e101a0b2e112a976a55447006448eb616b0542385aed9304c3a8fc1017d5694ffac7090b39ac22f1385281c37b1a53f0301702cb72a8c1648eae0ceedf7e13b6c6419ba0d2b24fbb749638607305101c84001f72fa585a01bdf73b40f30da439b6b5983b430e0fbdec1e0523277d6233efc86cfe54cf95c378bc62f38cdf33f58804a05ec59d7bb7cef539bd98be834b42c4f745e8f181367c717fe36296b0b389d950510680207a2444407199a703dc46a7ed4a69b1d2c593a403d7f06290deaec38d8dfac0e4863c19962c4a04bf53d508b8843897d3207e0156cb26f31410460a4987610d34f6ec7519ee9e2520c4e228bdef83d781b721688fd590e88de41af8468e65ea2a80bb9ea969372ed668e30386aafadfccbeaa7c8263785ac55ae0819a9c651c5cdd3e54615ade2c1facca5c2f306be19752d5b6d3421342b9a92bb4d7ad080b42af7ec30b48cbe49cbe797fb62f4c5da6cefcda488e15130f95cf6fbfc20bf1103938981bff9d58c1ebf40a667325bd5efb29a4e582d3e4246d9fa94dadfc3026e659c6fa5de5f13a9e404b94d8a0d7d5df35767e3e47e0f5236dd891748040aa4773e8546fc0c1c4da0f892a468eb4c1c49d86897c815532f5b0aa4ee3b11c05641079e155fe5f5244f949fe15f15f2e5df7dcbefb49416f27a4b1e7e3933c45cb8cbcbdde4c7f6fb8b63c32150cd0cb632d43b818d87dfbaf887245471e4db67c71ecac325ab3e7305a8799060ff79ad0eebb2ef47c48d33b283d751b2ec27273da3aafb70963c5136fcfce62f0a5bd45b2259a3dcfceb02eb29a0829d55b119ab3977fa88f8c4ed115e7b80b4b29a44f31835611467b4c7dc019319842f5d44b2344daacd601757a9a11a819af9ff5d3e234a832d507a8bcb2fd16a01f48af964dab68609d27d45485a174bf55bd94b59466b4dadbf8a800dfdcec668af09249766ed6f14457fc7a238c4b8bcddb41673fae28477d64fb7b90a8c46d549d71aee2a3aab0f9e38822be1da8a3b346df7e21736c6e353155db4899a8c4b26c17fd52309956b9cc8db1ec9bf7cfd51472c23d0ba01f74fc33f991078d38962c4aefa76db551bfdc59425775bdaef9f1124a2175c39d95ea9296f4e71593c7f47dd6e985e879f93b9ca843e0c2aeb301e3f0743106d5aa1d730b1db8563070259ca9bbcc133863f09393576f898b0156123202436c0f901d7069c95b751ef676a960eedbed8e3f1ce3308146c42c770eb37fc8a6a852079c5b56fc35ad0d360b7d3328438f865ff5b37218e22e8182b79a854c21ed7ba256d0ff095d4f7ccb976d1378a0ae7fbe77b6217f960b39c430bf8f23befcec0554eccce9e34f567cdd1479005aaec6a03e50ef85f71bea2bb3989b53c8257d941e5128cb0bcaa5d3d92c38451bd0525f6fcf9627dd71499b874c4c74d16fe136afeffa897d1077107f5ce5aa917b60e138d74382bc4d1bed58f0e87630ea37a7f2d10aeca6586ecbfe5622c303cbc2fce82f8be0f2fc06f2f65274b2a88031bb6863405a2ac455eaf8cd6fad310f52551ad629474fce63003b88c9ec73e4ecb65ea01c069db7a8d9b8d3841eae76c7c3774dcaf0626285159047981c1dcf69d613580b6ef762f2efe9818eba775db1b6ccafcb25ca979eb3f3512f59c2815f551023650c210b03dd93514e1ccbc97d08f128e5e7c2689ba66fe79e96cfb1f4fb0bf5763bb12e4e2e997be2d3fe6bd3ed7bce87dd92fdfef572b0f6aea88d83cd48fa02ed9b983b32db49e647bb28c3a46973d7ca40cb2062688ec19ff9f6ac4a0870af721344fb392ed0c2ba4ac2b338332a1287d409dd5251e79c94d3d9f8c5dcb368eb472aa2b95f06d38b20e1e41b30148f2795490bb5aa7d7796307100f451c3772588b6af720af3a5a54cfe3afd48194fdc51fa996a5dba0a7b4e51834f88146830d488648f4b2a3037a2c5a3c810a0f792c34cb09aeb02f5fae14b0bb1550d41b205f6297a9367301d0596c8a472bc9bec30a515f4d2daf6bfc04c08cf29d7cd837cfb08c44f9c0cfb6cfbe44fe8a37bd596ad0d5af0c5549189db599a785af2415ce05f114fd0d679845df111de3b77bdffdea55ce21843897b50726f49d1cabc8b9f330a73a5d93a3e2fed7881bb13e51c1d1af2cd6096073437cb1974697c3419bd96b7d07b07624d79b4240029ef457e4c092cf8bdf481b737c80725ff14f5d62b86bb66cbe7f74299793715cc395f0731555552fa599cb19d75026d58e09bf23b1de5e2e3c2936782d16fc4e7ea5496d15237be566876142d34eaec43a3ccecc80a18c743659cf6ae32bc26cb96247ef075bc8033a06021d96c959a1a8d9dea3217aff00ec5f9c5a348f4e0e1ed34ae0ce91fcc0819d99e36523008b316c5b086900ec1428727ce12a123a5531e1c52dffc434d198980df59b143ef05aa188c3f86c52e74e40307509ed1e8434b55a3e2f6ef58e8ecf348ed33046aeaa96e1ff1ce8fde70d2bbe72d073e1f14f695532a53275ba2ff9bbc9d85fd9ce7c835f11ffbad431c7c62d0b13fbc4259503e9db463069f6e12d6134274c01a7765a173cc7ba2a8db90f2ec8a2443d6acdca6f2d521f86c5d7a9085c667c23218bad5f74263309f384215c57441df7544222066129e8673a382bc8913ccd9df735afe99920b81078111b239c8666814ffca78d6ca1b5c0063d73875ee740f708fb7dd4e21a9d4c254bfc14206f59caa2a4223e7f6e8c12c67a5f66ac5989ab8580676eb5d7ef31372ad66d7d9349a49579067c049f1edc9cbbdd57951622a370d84f2a5b66f476e7d502c468322c1e4e7976e643cd972c7236fc64f1302f4df2af5514bcd5c8a568905f28a1092a6c105d7da1335e5a069d42f9308f0fc3015ec9872915beea3c4689d6c96a1ed6ea118bc5ee2fe7aeb7398ae063d2a4cb816359bac1efcc6b3d675e79633055453fc9135648019295ebaec650c435ffa6d14a168684626df949e4597b9c0723fe97d46fdd6f2113431913640764d908eb648f1793cdefcca6e017b05d0353e38cd03cfb9d84ba2be033efb03c9e902cf8b6728f5a1a35c868227e85a1ad2ee268adca9eebe0fa476fccf1cf0705eb80862f58bc5355f05dccaa5effa0c793c355c82a3ad9d483d943d4a7be9c2930cc321deec247c30ca62b8302e68b484ab0e89f5ce3202e21b72f07b0fde7205b218bcdc728581a17becca818d1c346a9707e3d6cc5ea45d34ec29927062a429dc409a5ad7cb8761a343a6e3f1fcfda5a913a1833409ea528d9f3bbc4ee97dc548e4dc734b30499e68c3a860579bb657dcfb34fc628a3f8f15ec1e9bc3692f84670abe3ea60054554ea807ce8da74c394a9e19810b37bc92994e3b379de15356456fdcd0467beef6edbf784d0e9810288c4dd00f983016f041026adc14511912aafe534469712da5c74467dfcfeeef540e45a63844cee876c555f2dfa278dfe03ab058a2967ee50072d516341232b5e4a0977da618ac2b47fd8b506e27ab8420451615cfdca1462f53be9cbe5c2e228afa74d721a964fa474b27631c0866dda3f8bb7e18adac81238cf035443ad02078fa4fc3e61e966c78893d1832268387fa0232bf3cdd434902dc", @ANYRESDEC, @ANYRESDEC, @ANYRESHEX], 0x2, 0x246, &(0x7f0000000340)="$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") rt_tgsigqueueinfo(0x0, 0x0, 0x12, &(0x7f00000003c0)={0x1b, 0x2, 0x7}) write$cgroup_subtree(r0, 0x0, 0x10448) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c9, &(0x7f0000000100)) 9.793695926s ago: executing program 1 (id=7054): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000240)={[{@dioread_nolock}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x9}}]}, 0xff, 0x4b2, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x4f, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[], 0x0, 0x42}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x6, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r4, 0x0, 0x2}, 0x50) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x11) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0)) r6 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) pwrite64(r6, &(0x7f0000000140)='2', 0x1, 0x8080c61) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 9.501424912s ago: executing program 5 (id=7055): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x20, &(0x7f0000000c00), 0x1, 0xb87, &(0x7f0000002380)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file1/file0\x00', 0x200400, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x20045a, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='net_prio.prioidx\x00', 0x0, 0x0) r0 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201100107010340b804020240000102030109021b000101fbb00c0904000001e7ff01000905010220"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) fsopen(&(0x7f0000000440)='mqueue\x00', 0x1) ioctl$AUTOFS_IOC_PROTOVER(r1, 0x80049363, &(0x7f0000000500)) write$char_usb(r1, &(0x7f00000007c0)='\v', 0x1) syz_usb_ep_read(r0, 0x1, 0xa1, &(0x7f0000000000)=""/161) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000300)={0x30, 0x5, 0x0, {0x0, 0x0, 0x9, 0x3}}, 0x30) rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000140)='./file1\x00') r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r3, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)='z', 0x1}], 0x1, &(0x7f00000010c0)=ANY=[], 0xa1}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000900)=' ', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000003c0)="12", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000001c0)='^', 0x1}], 0x1}}], 0x4, 0x2401c444) write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, &(0x7f0000000580)={0x28, 0x2, 0x0, {0x6, 0x4, 0x80000000}}, 0x28) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.numa_stat\x00', 0x275a, 0x0) lseek(r4, 0xffffffffffffffff, 0x4) syz_usb_connect(0x3, 0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="92010002508bf5088205cae60bd30102030109023400010301600209042d0202ff6229010a24010c000302010209050101000203ff0609050a0308000301010725"], 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f00000001c0)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1000000}}]}, {0x4}, {0xc}, {0xc, 0x9}}}]}]}, 0x68}}, 0x0) sendmmsg$inet6(r3, &(0x7f0000003740)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000000c0)="9789b5", 0x7ffd}], 0x1}}], 0x1, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000cc0)='./file2\x00', 0x307) 5.011216316s ago: executing program 0 (id=7056): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x2a, 0x2, 0x8) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newtfilter={0xac, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x2, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x5c, 0x2, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xe, 0x3, '\x00'/10}, @TCA_DEF_PARMS={0x18, 0x2, {0x55b, 0x2, 0x10000000, 0xb, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0xd}}, @TCA_RATE={0x6, 0x5, {0xf, 0x8}}, @TCA_RATE={0x6, 0x5, {0x80, 0x8}}]}, 0xac}}, 0x801) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c) socket$inet6(0xa, 0x2, 0x0) setsockopt$packet_buf(r4, 0x107, 0xd, &(0x7f0000000600)="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", 0x1000) ioctl$PPPIOCGUNIT(r3, 0x80047456, &(0x7f0000000000)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r6, r9, 0x100000af5, 0x0) close(r8) close(r7) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000005c0)=[@mss, @sack_perm, @mss={0x2, 0x4}, @sack_perm, @window={0x3, 0x0, 0x401}, @window={0x3, 0x0, 0x8a08}, @timestamp, @timestamp], 0x20000072) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) shutdown(r0, 0x1) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) 5.010328676s ago: executing program 5 (id=7057): recvmsg$can_raw(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=""/36, 0x24}, 0x2) r0 = open(0x0, 0x66842, 0x21) pwritev2(r0, 0x0, 0x0, 0x5a00, 0x0, 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000", @ANYRES64=0x0, @ANYRESDEC=0x0], &(0x7f0000000180)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000001c0), 0x10}, 0x94) r2 = socket$unix(0x1, 0x1, 0x0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, &(0x7f0000000000)=0xf, 0x4) getsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, 0x0, &(0x7f0000000380)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x0, 0x0) setsockopt$inet6_int(r4, 0x29, 0x5, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r4, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r1, 0x26}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0}) r6 = socket$inet6(0xa, 0x2, 0x3a) r7 = dup(r6) bind$unix(r7, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r5, &(0x7f0000000280)={0x2, 0x0, @multicast2}, 0x10) sendmmsg$inet(r5, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x1, 0x20040f44) openat$cgroup_int(r0, &(0x7f0000000300)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x60, 0x1, 0x4, 0x201, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFULA_CFG_CMD={0x5, 0x1, 0x4}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x9}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x25b}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1}, @NFULA_CFG_MODE={0xa, 0x2, {0x2, 0x1}}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x7}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0xffff0001}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000800}, 0x60000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000540)={&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/225, 0xe1, 0x0, &(0x7f0000000480)=""/185, 0xb9}, &(0x7f0000000580)=0x40) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.006185615s ago: executing program 4 (id=7059): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="91f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e0000ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2d000078104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d", 0x84}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2090) syz_mount_image$f2fs(&(0x7f0000000180), &(0x7f0000000040)='./file1\x00', 0x8, &(0x7f00000059c0)=ANY=[@ANYBLOB="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"], 0x5, 0x5513, &(0x7f0000005d80)="$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") sendto$inet(r0, &(0x7f00000000c0), 0x0, 0x340080d1, 0x0, 0x0) 4.921420368s ago: executing program 1 (id=7061): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth0_virt_wifi\x00'}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f0000000700)={[{@nodiscard}, {@jqfmt_vfsv0}, {@errors_remount}, {@noquota}]}, 0xfc, 0x4b4, &(0x7f0000000c80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000280)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x9}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40480c0}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x12d, 0x70bd2c, 0x6, {0x0, 0x0, 0x0, r6, {0xfff3, 0xfffe}, {0x5, 0xfff1}, {0xd, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4041880) fstat(r3, 0x0) r7 = socket(0x840000000002, 0x3, 0x100) connect$inet(r7, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r7, &(0x7f0000005240), 0xe, 0xc000) setreuid(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) r8 = open(&(0x7f0000000040)='./file0\x00', 0x8000, 0x50) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r8, 0x800c6613, &(0x7f0000000100)=@v1={0x0, @adiantum, 0x1a, @desc1}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) 4.905946258s ago: executing program 5 (id=7062): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x32e5ea5344bdaf5f) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xca, r0}, 0x38) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x109001, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x4000009b}]}) r5 = syz_open_pts(0xffffffffffffffff, 0x4a00) ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f00000000c0)) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) io_uring_setup(0x75e5, &(0x7f00000000c0)={0x0, 0x0, 0x22}) 3.229786513s ago: executing program 5 (id=7064): r0 = socket$netlink(0x10, 0x3, 0xf) r1 = socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000480)='./file1\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x474, &(0x7f00000004c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000000c0)="ff", 0x1}], 0x1, 0x5405, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ec00000021000100feffffff000000000000000000000000000000000000000000000000007c0000000000000000000000000000000000001700a00000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c00110000000000000000000000000000000000fe8000000000000000000000000000bbac14142100000000000000000000000020010000000000000000000000000000000000000000000000000a0000000000000000000000000000000000fe8000"/119], 0xec}}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r4, 0xffffffffffffffff, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x6001, 0x4, 0x3f0, 0xe8, 0x1f8, 0xe8, 0x3f0, 0x308, 0x308, 0x4, 0x0, {[{{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0xff, 0xff000000, 0x2, 0x7, {@empty, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, {@mac, {[0x0, 0x0, 0x0, 0xff, 0xff]}}, 0x7ff, 0x9d, 0xf9, 0xd, 0x0, 0x7, 'ip6tnl0\x00', 'hsr0\x00', {}, {0xfd}}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xe8}}, {{@arp={@multicast2, @remote, 0x0, 0x0, 0x0, 0x8, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 'veth1_vlan\x00', 'team_slave_0\x00', {0x101}, {}, 0x0, 0xe2}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast2, @private, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="f9bcdc63c0c8", @mac, @multicast2, @rand_addr=0x64010101, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000003c0)=0x101, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$FITHAW(r0, 0xc0045878) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000500)={'virt_wifi0\x00', 0xc201}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x570, 0x298, 0x298, 0xd0, 0x1c8, 0x388, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x6, 0x0, {[{{@ipv6={@remote, @private1, [0xff], [0x0, 0xffffffff, 0xffffff00], 'gre0\x00', 'syzkaller1\x00', {}, {0xff}, 0x0, 0x0, 0x7}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x599c, 0x6}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x4, 0x820, 0x7}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x298}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x388}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x20}, @ipv6=@remote, 0x3a, 0x8, 0x6}}}, {{@ipv6={@local, @empty, [0x0, 0xff000000, 0xff000000], [0x0, 0x0, 0xffffff00], 'tunl0\x00', '\x00', {}, {0xf7d589580f149d60}, 0x0, 0x4a, 0x7}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0x3, 0x1, 0x0, [0x9, 0xfff2, 0x4, 0x2, 0x5, 0xe, 0x2, 0xc7b, 0x5, 0x1ff, 0x3, 0x8, 0xf25, 0x7, 0x0, 0xff6b], 0x5}}]}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b40000001300000200000000fbdbdf257f000001000000000000000000000000fe8000000400000000000000000000aa00000004000000000a006080"], 0xb4}, 0x1, 0x0, 0x0, 0x80}, 0x4051) sendmsg$nl_xfrm(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)={0xa4, 0x0, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x16}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_ZONE={0x6}, @CTA_NAT_SRC={0x58, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}, @CTA_NAT_V4_MINIP={0x8, 0x1, @local}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast2}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}]}]}, 0xa4}}, 0x12) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021a40300001e0a05010000000000000000070000070900020073797a31000000000900010073797a300000000078030380740300800800034000000002680301802c00"], 0x428}}, 0x40088) sendmsg$nl_xfrm(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000040)={0x93f, 0x2, 0x4, 0x7}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xb, 0x2, 0xfffffff0, 0x9f, 0x4000, 0xffffffffffffffff, 0xe826, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x3}, 0x50) 3.135258145s ago: executing program 2 (id=7065): sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000004) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) close(0x3) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) r3 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r3, &(0x7f00000005c0)={&(0x7f0000000400)={0x2, 0x0, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @empty}}}], 0x20}, 0x2400c004) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, &(0x7f0000000000)='bridge0\x00') r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000200)={'gretap0\x00', {0x2, 0x4e23, @empty}}) r5 = syz_open_procfs(0x0, &(0x7f0000002080)='pagemap\x00') lseek(r5, 0xfffffffffffffffd, 0x1) sendfile(r5, r5, &(0x7f0000000000)=0x4, 0x8) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x0) r7 = openat$dir(0xffffffffffffff9c, 0x0, 0x800, 0xc) getdents(r7, &(0x7f00000023c0)=""/4096, 0x1000) recvmmsg$unix(r6, &(0x7f0000002380)=[{{0x0, 0x4000000, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0xecc}], 0x1}}], 0x8, 0x0, 0x0) 2.642800545s ago: executing program 5 (id=7066): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) keyctl$set_reqkey_keyring(0xe, 0x4) request_key(&(0x7f0000000340)='asymmetric\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000380)=')\x80', 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x300, 0x18c, 0x203, 0x0, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d}, {0x20}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x0, 0xfe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffff}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xa4, 0x7, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_EXPRESSIONS={0x88, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}, {0x24, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DYNSET_FLAGS={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_DYNSET_SET_ID={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x50, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x23}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xb}]}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x50}, 0x40004) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x34, 0x2, 0x3, 0x301, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x3f}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x7}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1e}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x6000048}, 0x0) 1.981262079s ago: executing program 1 (id=7067): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x2a, 0x2, 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000680)=ANY=[], 0x44}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newtfilter={0xac, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x2, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x5c, 0x2, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xe, 0x3, '\x00'/10}, @TCA_DEF_PARMS={0x18, 0x2, {0x55b, 0x2, 0x10000000, 0xb, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0xd}}, @TCA_RATE={0x6, 0x5, {0xf, 0x8}}, @TCA_RATE={0x6, 0x5, {0x80, 0x8}}]}, 0xac}}, 0x801) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000080)) socket$packet(0x11, 0x2, 0x300) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) shutdown(r0, 0x1) 1.972259549s ago: executing program 4 (id=7068): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000005000000080000000f"], 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() prlimit64(0x0, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000840)) futex(0x0, 0x8b, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sync_file_range(r3, 0xe00, 0x6, 0x5) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x40046109, &(0x7f0000000040)={0xd0, 0xfffffffffffffffe, 0x1000000}) r4 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x78) fallocate(r4, 0x0, 0x0, 0x1001ed) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) preadv(r1, &(0x7f0000000ac0)=[{&(0x7f0000000280)=""/63, 0x3f}, {&(0x7f0000000300)=""/138, 0x8a}, {&(0x7f0000000500)=""/162, 0xa2}, {&(0x7f00000005c0)=""/165, 0xa5}, {&(0x7f0000000680)=""/229, 0xe5}, {&(0x7f0000000880)=""/224, 0xe0}, {&(0x7f0000000980)=""/44, 0x2c}, {&(0x7f0000000a00)=""/160, 0xa0}], 0x8, 0x7, 0x3) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x18, 0x1, 0x1, 0x801, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_TUPLE_ORIG={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x4894) 1.971704439s ago: executing program 0 (id=7069): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socket$pppl2tp(0x18, 0x1, 0x1) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b\x00\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0) syz_usb_connect$cdc_ecm(0x1, 0x4d, &(0x7f0000000140)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x4, 0x0, 0x2, "", [{{0x9, 0x4, 0x0, 0x80, 0x2, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x186, 0x7ff, 0x1, 0x7}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x6, 0x0, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x18, 0x9, 0x5, 0x4}}}}}]}}]}}, 0x0) syz_usb_ep_write(r1, 0x81, 0x1, &(0x7f0000000040)="80") close_range(r0, 0xffffffffffffffff, 0x0) 1.971297989s ago: executing program 2 (id=7070): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x10, 0x0, 0x7fffffff}]}) mlock2(&(0x7f00001e2000/0x1000)=nil, 0x1000, 0x1) syz_open_dev$loop(&(0x7f0000000140), 0x100000a, 0x14201) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) clock_nanosleep(0x7, 0x0, 0x0, 0x0) ioprio_set$pid(0x2, 0xffffffffffffffff, 0x4000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x1, 0x32, 0x0, 0xffffd000) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)) 1.593644397s ago: executing program 1 (id=7071): recvmsg$can_raw(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000005c0)=""/103, 0x67}], 0x1, &(0x7f0000000680)=""/36, 0x24}, 0x2) r0 = open(0x0, 0x66842, 0x21) pwritev2(r0, 0x0, 0x0, 0x5a00, 0x0, 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000", @ANYRES64=0x0, @ANYRESDEC=0x0], &(0x7f0000000180)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000001c0), 0x10}, 0x94) r2 = socket$unix(0x1, 0x1, 0x0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, &(0x7f0000000000)=0xf, 0x4) getsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, 0x0, &(0x7f0000000380)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x0, 0x0) setsockopt$inet6_int(r4, 0x29, 0x5, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r4, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r1, 0x26}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0}) r6 = socket$inet6(0xa, 0x2, 0x3a) r7 = dup(r6) bind$unix(r7, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r5, 0x0, 0x0) sendmmsg$inet(r5, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x1, 0x20040f44) openat$cgroup_int(r0, &(0x7f0000000300)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x60, 0x1, 0x4, 0x201, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFULA_CFG_CMD={0x5, 0x1, 0x4}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x9}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x25b}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1}, @NFULA_CFG_MODE={0xa, 0x2, {0x2, 0x1}}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x7}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0xffff0001}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000800}, 0x60000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000540)={&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/225, 0xe1, 0x0, &(0x7f0000000480)=""/185, 0xb9}, &(0x7f0000000580)=0x40) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.357541112s ago: executing program 1 (id=7072): read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x4000, &(0x7f0000005700)=ANY=[@ANYBLOB="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"], 0x1, 0x551e, &(0x7f0000005800)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) pwrite64(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x9) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000003140)='./bus\x00', 0x1008002, &(0x7f0000000400)={[{@grpquota}, {@delalloc}, {@resuid}, {@i_version}, {@i_version}, {@nojournal_checksum}, {@lazytime}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") setxattr$system_posix_acl(0x0, &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000001680)=ANY=[@ANYBLOB="020000000100070000000000040004000000ffff1000070000000000200000003beaadfd6559eb48be5898bceeeba982455a0e2bb45a3094619246916b52d6aa60bcd69e1e482d6d068357a6f1dfaeedb2b0d0451d94ed5ae36e695ab64fcc323f73c8b1d275e80c3b7858940d5942d72ee74da605ae0c85fb9a5fab5954d3b01f2c0f47ba77293a6157d2fc890747e132f7e85741222f35e30d972f89a51d32c5e0ef351f2196bf0f41096030d02acb7c52d3ffe2a68226bce2e0ca5f003bc4a85a8585"], 0x24, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1195412, 0x0, 0x40, 0x0, &(0x7f0000000140)) unlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200) 1.234691174s ago: executing program 2 (id=7073): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x46041, 0x0) ioctl$TUNSETCARRIER(r3, 0x400454e2, &(0x7f0000000040)=0x1) r4 = socket$inet6(0xa, 0x1, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) keyctl$set_reqkey_keyring(0xe, 0x4) request_key(&(0x7f0000000340)='asymmetric\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000380)=')\x80', 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x300, 0x18c, 0x203, 0x0, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d}, {0x20}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x0, 0xfe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffff}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0x3, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x725, 0x0, 0x0, 0x0, 0xd}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r5, 0x0, 0x40004) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x6000048}, 0x0) 1.099522207s ago: executing program 5 (id=7074): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth0_virt_wifi\x00'}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f0000000700)={[{@nodiscard}, {@jqfmt_vfsv0}, {@errors_remount}, {@noquota}]}, 0xfc, 0x4b4, &(0x7f0000000c80)="$eJzs3E9sFNUfAPDvbHdpgR8/KiIKoi6isdHYQkHh4AWjiQdMjHjQY9MWghRqaE2EECmJwaMh8W48evXgVb0ZTyZe8WhiSIjhAnhaM7sz7e52t//Y7oL7+SRL35t9s+99982bfTNvlwD6Vjn9J4n4X0TcjIidtWxjgXLtz707Vybv37kyGQuVyqm/k2q5u2k+k++3PcuMFCIKXyRNL1gzd+nyuYmZmemLWX5s/vwnY3OXLr969vzEmekz0xfGjx8/euTwsdfHX1t/UC3qS+O6u+/z2f173/noxruTxXz7UPa3Po5OKUe5VVOqXux0ZT22oy6dFHvYENZlICLS7ipVx//OGAidB/2iUqlUBts/vVBpdm3ZFuCRlUSvWwD0Rv5Bn17/5o8uTT0eCrdP1C6A0rjvZY/aM8UoZGVKTde3nTQUER8u/PNN+ohNug8BAFDvpxP5TLB5/leIPXXl/p+toQxHxGMRsSsiHo+I3RHxRES17JMR8VTT65cjorJC/eWm/PL5T+HWAwW4inT+90a2ttU4/8tnfzE8kOV2ROQT5ulD2XsyEqXB02dnpg+vUMfPb/3+VbvnynXzv/SR1p/PBbN23Co23aCbmpif2HDATW5fi9hXbI4/KUYkiysBSUTsjYh963jd4br02Ze/27+YKTWWWz3+qkrLdbQOLFVUvo14qdb/C9HQ/0s1JiuvT44Nxcz0obH0KDjUso5ff7v+Xrv6V43/hz+bd3n72I+nHjTsRWn/b6s7/iNfv12KfziJSBbXa+fWX8f1P75se02ztuP/asM+6fG/Jfmgmt6SbftsYn7+4uGILcnJ5dvHl/bN83n5NP6Rg63H/65sn/SdeDoi0oP4mYh4NiKey9p+ICKej4iDK8T/y5svfLzx+DdXGv9Uy/NfQ/8vrdfPncwTl9aaGDh34Ob9NiePtfX/0WpqJNvS+vyXNJwi1trADryFAAAA8NArRPW7/4XRxXShMDpauwe0O7YVZmbn5l85PfvphanabwSGo1TI73TV7geXkvz+53BdfrwpfyS7b/z1wNZqfnRydmaq18FDn9teHfPJsvGf+mug160DNp2f/ED/Wm3877nRpYYAXefzH/pX3fhfaFNkwTdl4L+p9ed/qevtALqv1fi/uoF9gEdLxViGvmb8Q/8qxvuL6UJPWwJ0m89/6Etr/xX/RhKVwdZPDcXywjG0Oc3Y2qKuniTSmVVPat+6kb3y/02hbZkorPY6xYZjbDCWlxmInvTFmT0dP/gr2XflO93U71cep/l0fRPeqO6ehwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADbLvwEAAP//cdfX0w==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000280)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x9}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40480c0}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x12d, 0x70bd2c, 0x6, {0x0, 0x0, 0x0, r6, {0xfff3, 0xfffe}, {0x5, 0xfff1}, {0xd, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4041880) fstat(r3, 0x0) r7 = socket(0x840000000002, 0x3, 0x100) connect$inet(r7, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r7, &(0x7f0000005240), 0xe, 0xc000) setreuid(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) r8 = open(&(0x7f0000000040)='./file0\x00', 0x8000, 0x50) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r8, 0x800c6613, &(0x7f0000000100)=@v1={0x0, @adiantum, 0x1a, @desc1}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) 222.288895ms ago: executing program 2 (id=7075): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000001c00)=ANY=[@ANYBLOB="28010000190001002bbd70000000000000000000000000000000000000000001fe80000000000000eeffffffffffff0e00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32], 0x128}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) socket$inet6(0xa, 0x3, 0x1) 113.383018ms ago: executing program 2 (id=7076): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r2, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) socket$key(0xf, 0x3, 0x2) epoll_create1(0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x19}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="700000001e005f5b25bd7000fcdbdf250a0101010000000000000000"], 0x70}, 0x1, 0x0, 0x0, 0x840}, 0x20004810) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) ioctl$EVIOCSFF(r4, 0x40304580, &(0x7f00000003c0)={0x57, 0x1, 0x7, {0xffff, 0x1}, {0x48, 0x2}, @cond=[{0x8, 0x5388, 0x8, 0x800, 0x80cb, 0x7}, {0x1, 0x5, 0x1, 0x7, 0x6, 0x1}]}) write$char_usb(r4, &(0x7f0000000040)="e2", 0x2250) ioctl$EVIOCSKEYCODE_V2(r4, 0x40284504, &(0x7f0000000000)={0x5b, 0x5, 0x7, 0x3, "9c2b45e4f5d79691f27b531f369941f2a0f2705a4bf9f627ddcd18809190aa8c"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f0000000500)=0x100000001, 0x4) ioctl$TIOCCBRK(0xffffffffffffffff, 0x5428) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) connect$inet(r5, 0x0, 0x0) 90.340598ms ago: executing program 4 (id=7077): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000240)={[{@dioread_nolock}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x9}}]}, 0xff, 0x4b2, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x4f, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="9feb01001800000000000000ff0f000000000000020000837a000100000000000001e5ff000002bc000000000000019921bb6ca5d95641bd03597a1b07efb560e1bdfab26d477d63a8d33037a30ceeeff396fa884d225d6d73dfa7d91009ce33531e038f"], 0x0, 0x42}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x6, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r4, 0x0, 0x2}, 0x50) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x11) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0)) r6 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) pwrite64(r6, &(0x7f0000000140)='2', 0x1, 0x8080c61) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 0s ago: executing program 2 (id=7078): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x32e5ea5344bdaf5f) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0500000008002000050000007f00000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xca, r0}, 0x38) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x109001, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x4000009b}]}) r7 = syz_open_pts(0xffffffffffffffff, 0x4a00) ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f00000000c0)) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mlockall(0x7) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x9}) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = io_uring_setup(0x7c91, &(0x7f0000000180)={0x0, 0x0, 0x2}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x42, 0x6, 0x5, 0x0, 0x1}, 0x50) io_uring_setup(0x75e5, &(0x7f00000000c0)={0x0, 0x0, 0x22, 0x0, 0x0, 0x0, r8}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000004043554200000000000001090224000100008006090400041103000100092106000101222a00090548b40800408100"], 0x0) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) kernel console output (not intermixed with test programs): detected capacity change from 0 to 512 [ 1752.945373][T21817] loop4: detected capacity change from 0 to 16 [ 1752.984111][T21814] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 1752.996047][T21819] loop1: detected capacity change from 0 to 16 [ 1753.038358][T21814] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.6450: bg 0: block 393: padding at end of block bitmap is not set [ 1753.052941][T21814] EXT4-fs (loop0): Remounting filesystem read-only [ 1753.060011][T21814] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 1753.069242][T21814] EXT4-fs (loop0): Remounting filesystem read-only [ 1753.076086][T21814] EXT4-fs (loop0): 2 truncates cleaned up [ 1753.082099][T21814] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodiscard,jqfmt=vfsv0,errors=remount-ro,noquota,. Quota mode: writeback. [ 1753.092451][T21819] erofs: (device loop1): mounted with root inode @ nid 36. [ 1753.142328][T21817] erofs: (device loop4): mounted with root inode @ nid 36. [ 1753.380269][T21828] EXT4-fs error (device loop0): empty_inline_dir:1887: inode #12: block 7: comm syz.0.6450: bad entry in directory: rec_len % 4 != 0 - offset=4, inode=4278190093, rec_len=255, size=60 fake=0 [ 1753.783602][T21828] EXT4-fs (loop0): Remounting filesystem read-only [ 1753.790160][T21828] EXT4-fs warning (device loop0): empty_inline_dir:1894: bad inline directory (dir #12) - inode 4278190093, rec_len 255, name_len 0inline size 60 [ 1758.687145][ T556] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1760.604905][T21875] loop5: detected capacity change from 0 to 512 [ 1760.688682][T21875] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 1760.704453][ T556] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1760.725578][ T556] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1760.750533][T21875] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.6466: bg 0: block 393: padding at end of block bitmap is not set [ 1760.776070][T21875] EXT4-fs (loop5): Remounting filesystem read-only [ 1760.782856][T21875] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 1760.797260][T21872] loop4: detected capacity change from 0 to 40427 [ 1760.801725][T21875] EXT4-fs (loop5): Remounting filesystem read-only [ 1760.810588][T21875] EXT4-fs (loop5): 2 truncates cleaned up [ 1760.816821][T21875] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodiscard,jqfmt=vfsv0,errors=remount-ro,noquota,. Quota mode: writeback. [ 1760.823296][ T556] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1760.843415][ T556] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1760.881433][T21872] F2FS-fs (loop4): fault_injection options not supported [ 1760.904977][ T556] usb 2-1: SerialNumber: syz [ 1760.910525][T21872] F2FS-fs (loop4): fault_type options not supported [ 1760.918393][T21872] F2FS-fs (loop4): invalid crc value [ 1760.927534][T21872] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1760.966581][T21872] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1760.976795][T21885] EXT4-fs error (device loop5): empty_inline_dir:1887: inode #12: block 7: comm syz.5.6466: bad entry in directory: rec_len % 4 != 0 - offset=4, inode=4278190093, rec_len=255, size=60 fake=0 [ 1760.985670][ T6] usb 1-1: new low-speed USB device number 46 using dummy_hcd [ 1760.995830][T21885] EXT4-fs (loop5): Remounting filesystem read-only [ 1761.007987][T21886] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 1761.010146][T21885] EXT4-fs warning (device loop5): empty_inline_dir:1894: bad inline directory (dir #12) - inode 4278190093, rec_len 255, name_len 0inline size 60 [ 1761.203093][ T556] usb 2-1: 0:2 : does not exist [ 1761.207647][T21889] loop4: detected capacity change from 0 to 40427 [ 1761.251409][ T556] usb 2-1: USB disconnect, device number 50 [ 1761.266765][T21889] F2FS-fs (loop4): invalid crc value [ 1761.274936][T21845] udevd[21845]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1761.283265][T21889] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1761.321267][T21889] F2FS-fs (loop4): Start checkpoint disabled! [ 1761.328518][T21889] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 1761.429821][ T6] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1762.400219][T21900] loop0: detected capacity change from 0 to 256 [ 1762.426343][ T6] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1762.443480][ T6] usb 1-1: can't read configurations, error -71 [ 1762.478374][ T431] attempt to access beyond end of device [ 1762.478374][ T431] loop4: rw=2049, want=40976, limit=40427 [ 1763.167598][T21901] loop1: detected capacity change from 0 to 40427 [ 1763.181552][T21901] F2FS-fs (loop1): invalid crc value [ 1763.201404][T21901] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 1763.231990][T21901] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 1763.239215][T21901] F2FS-fs (loop1): Start checkpoint disabled! [ 1763.246195][T21901] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 1763.295241][T15800] attempt to access beyond end of device [ 1763.295241][T15800] loop1: rw=2049, want=45104, limit=40427 [ 1765.340098][ T2530] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1765.585415][T21932] loop0: detected capacity change from 0 to 40427 [ 1765.620612][T21932] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 1765.633723][T11593] bridge0: port 3(syz_tun) entered disabled state [ 1765.641452][T11593] device syz_tun left promiscuous mode [ 1765.647449][T11593] bridge0: port 3(syz_tun) entered disabled state [ 1765.648343][T21932] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 1765.713903][T21932] F2FS-fs (loop0): invalid crc value [ 1765.726706][T21932] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 1765.738273][T21939] bridge0: port 1(bridge_slave_0) entered blocking state [ 1765.745360][T21939] bridge0: port 1(bridge_slave_0) entered disabled state [ 1765.752900][T21939] device bridge_slave_0 entered promiscuous mode [ 1765.756771][T21932] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 1765.760007][T21939] bridge0: port 2(bridge_slave_1) entered blocking state [ 1765.766625][ T2530] usb 6-1: config 0 interface 0 altsetting 4 has an invalid endpoint with address 0x48, skipping [ 1765.773676][T21939] bridge0: port 2(bridge_slave_1) entered disabled state [ 1765.784030][T21932] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1765.792046][T21939] device bridge_slave_1 entered promiscuous mode [ 1765.805018][ T2530] usb 6-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1765.829243][ T2530] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1765.836398][ T2530] usb 6-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 1765.942304][ T2530] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1766.068557][ T2530] usb 6-1: config 0 descriptor?? [ 1766.136447][ T2530] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1766.366972][T21939] bridge0: port 2(bridge_slave_1) entered blocking state [ 1766.374106][T21939] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1766.381432][T21939] bridge0: port 1(bridge_slave_0) entered blocking state [ 1766.388458][T21939] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1766.422377][T15800] bridge0: port 1(bridge_slave_0) entered disabled state [ 1766.430192][T18989] attempt to access beyond end of device [ 1766.430192][T18989] loop0: rw=2049, want=45104, limit=40427 [ 1766.442866][T15800] bridge0: port 2(bridge_slave_1) entered disabled state [ 1766.454159][T15800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1766.469337][T15800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1766.517430][T15800] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1766.530672][T15800] bridge0: port 1(bridge_slave_0) entered blocking state [ 1766.537800][T15800] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1766.545888][T15800] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1766.555551][T15800] bridge0: port 2(bridge_slave_1) entered blocking state [ 1766.562622][T15800] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1766.575401][T15800] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1766.584988][T15800] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1766.823545][ T658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1766.879120][ T658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1766.902229][ T658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1766.910827][ T658] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1766.918366][ T658] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1766.928307][T21939] device veth0_vlan entered promiscuous mode [ 1766.935636][ T431] device bridge_slave_1 left promiscuous mode [ 1766.941873][ T431] bridge0: port 2(bridge_slave_1) entered disabled state [ 1766.949724][ T431] device bridge_slave_0 left promiscuous mode [ 1766.956081][ T431] bridge0: port 1(bridge_slave_0) entered disabled state [ 1766.964039][ T431] device veth1_macvtap left promiscuous mode [ 1766.970216][ T431] device veth0_vlan left promiscuous mode [ 1767.210621][T21939] device veth1_macvtap entered promiscuous mode [ 1767.225231][T15800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1767.236188][T15800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1767.244540][T15800] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1767.252521][T15800] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1767.262952][T15800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1767.271706][T15800] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1767.280165][T15800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1767.579191][T21976] loop0: detected capacity change from 0 to 256 [ 1769.731601][ T6] usb 6-1: USB disconnect, device number 55 [ 1769.829492][T21986] loop1: detected capacity change from 0 to 512 [ 1769.869539][T21986] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 1769.988096][T21986] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.6483: bg 0: block 393: padding at end of block bitmap is not set [ 1770.012652][T21986] EXT4-fs (loop1): Remounting filesystem read-only [ 1770.019538][T21986] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 1770.076110][T21986] EXT4-fs (loop1): Remounting filesystem read-only [ 1770.083407][T21986] EXT4-fs (loop1): 2 truncates cleaned up [ 1770.127697][T21986] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodiscard,jqfmt=vfsv0,errors=remount-ro,noquota,. Quota mode: writeback. [ 1771.659503][T21983] loop4: detected capacity change from 0 to 40427 [ 1771.689017][T21995] loop0: detected capacity change from 0 to 40427 [ 1771.707530][T21995] F2FS-fs (loop0): invalid crc value [ 1771.756781][T21983] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 1771.764520][T21995] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1771.789836][T21983] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 1771.817982][T21983] F2FS-fs (loop4): invalid crc value [ 1771.865005][T21995] F2FS-fs (loop0): Start checkpoint disabled! [ 1771.881336][T21983] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 1771.894418][T21995] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 1774.610208][T22017] attempt to access beyond end of device [ 1774.610208][T22017] loop0: rw=2049, want=77960, limit=40427 [ 1774.668355][T22017] attempt to access beyond end of device [ 1774.668355][T22017] loop0: rw=2049, want=77952, limit=40427 [ 1774.809335][T21983] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 1774.963062][T21983] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1775.024049][ T431] attempt to access beyond end of device [ 1775.024049][ T431] loop0: rw=2049, want=40976, limit=40427 [ 1776.301568][T22036] loop4: detected capacity change from 0 to 16 [ 1776.952598][T22040] loop0: detected capacity change from 0 to 128 [ 1777.048108][T22040] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 1777.057585][T22036] erofs: (device loop4): mounted with root inode @ nid 36. [ 1777.071478][T22040] System zones: 1-3, 19-19, 35-36 [ 1777.084030][T22040] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,debug,,errors=continue. Quota mode: writeback. [ 1777.096625][T22040] ext4 filesystem being mounted at /154/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1777.361812][T22044] netlink: 532 bytes leftover after parsing attributes in process `syz.4.6501'. [ 1778.143369][ T428] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1778.413244][T22052] loop4: detected capacity change from 0 to 40427 [ 1778.428963][T22052] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 1778.435404][T22052] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 1778.477764][T22052] F2FS-fs (loop4): invalid crc value [ 1778.858359][ T428] usb 2-1: unable to read config index 0 descriptor/all [ 1778.904119][ T428] usb 2-1: can't read configurations, error -71 [ 1778.959296][T22052] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 1779.448248][T22052] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 1779.475759][T22052] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1779.536527][T22052] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 1779.621499][T22062] loop1: detected capacity change from 0 to 40427 [ 1779.639072][T22062] F2FS-fs (loop1): invalid crc value [ 1779.656913][T22054] loop0: detected capacity change from 0 to 40427 [ 1779.665228][T22062] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1779.682413][T22054] F2FS-fs (loop0): invalid crc value [ 1779.692861][T22054] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1779.702095][T22074] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6516'. [ 1779.736680][T22062] F2FS-fs (loop1): Start checkpoint disabled! [ 1779.759482][T22062] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 1779.772647][T22079] loop5: detected capacity change from 0 to 512 [ 1779.791079][T22054] F2FS-fs (loop0): Start checkpoint disabled! [ 1779.798281][T22054] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 1779.888259][T22079] EXT4-fs error (device loop5): ext4_orphan_get:1406: inode #16: comm syz.5.6517: iget: bogus i_mode (0) [ 1779.900538][T22079] EXT4-fs (loop5): Remounting filesystem read-only [ 1779.907096][T22079] EXT4-fs error (device loop5): ext4_orphan_get:1411: comm syz.5.6517: couldn't read orphan inode 16 (err -117) [ 1779.931663][T22079] EXT4-fs (loop5): Remounting filesystem read-only [ 1779.941622][T22079] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,minixdf,. Quota mode: writeback. [ 1779.990316][T22087] attempt to access beyond end of device [ 1779.990316][T22087] loop1: rw=2049, want=77960, limit=40427 [ 1780.011992][T22087] attempt to access beyond end of device [ 1780.011992][T22087] loop1: rw=2049, want=77952, limit=40427 [ 1780.096630][T22079] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1781.284903][T15800] attempt to access beyond end of device [ 1781.284903][T15800] loop1: rw=2049, want=40976, limit=40427 [ 1781.940998][T22098] loop5: detected capacity change from 0 to 16 [ 1782.011677][T22098] erofs: (device loop5): mounted with root inode @ nid 36. [ 1782.135899][T22100] netlink: 112 bytes leftover after parsing attributes in process `syz.0.6521'. [ 1782.159025][T22104] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6524'. [ 1782.180736][T22106] loop0: detected capacity change from 0 to 256 [ 1784.692112][ T30] audit: type=1326 audit(1782840311.317:5867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22126 comm="syz.4.6529" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ed1f56e59 code=0x7ffc0000 [ 1784.784973][T22132] loop0: detected capacity change from 0 to 16 [ 1785.662522][ T30] audit: type=1326 audit(1782840311.317:5868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22126 comm="syz.4.6529" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f0ed1f56e59 code=0x7ffc0000 [ 1785.687694][ T30] audit: type=1326 audit(1782840311.317:5869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22126 comm="syz.4.6529" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ed1f56e59 code=0x7ffc0000 [ 1785.712927][ T30] audit: type=1326 audit(1782840311.317:5870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22126 comm="syz.4.6529" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f0ed1f56e59 code=0x7ffc0000 [ 1785.738098][ T30] audit: type=1326 audit(1782840311.317:5871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22126 comm="syz.4.6529" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ed1f56e59 code=0x7ffc0000 [ 1785.767523][ T30] audit: type=1326 audit(1782840311.317:5872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22126 comm="syz.4.6529" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f0ed1f56e59 code=0x7ffc0000 [ 1785.792723][ T30] audit: type=1326 audit(1782840311.317:5873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22126 comm="syz.4.6529" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ed1f56e59 code=0x7ffc0000 [ 1785.817993][ T30] audit: type=1326 audit(1782840311.317:5874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22126 comm="syz.4.6529" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f0ed1f56e59 code=0x7ffc0000 [ 1785.844827][ T30] audit: type=1326 audit(1782840311.317:5875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22126 comm="syz.4.6529" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0ed1f50bd7 code=0x7ffc0000 [ 1785.869765][ T30] audit: type=1326 audit(1782840311.317:5876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22126 comm="syz.4.6529" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0ed1ef81d9 code=0x7ffc0000 [ 1785.898855][T22132] erofs: (device loop0): mounted with root inode @ nid 36. [ 1785.938164][T22131] erofs: (device loop0): erofs_read_inode: bogus i_mode (4355) @ nid 46 [ 1786.096586][T22136] loop1: detected capacity change from 0 to 40427 [ 1786.175982][T22136] F2FS-fs (loop1): fault_injection options not supported [ 1786.419453][T22136] F2FS-fs (loop1): fault_type options not supported [ 1786.430643][T22136] F2FS-fs (loop1): invalid crc value [ 1786.475865][T22144] loop0: detected capacity change from 0 to 512 [ 1786.485892][T22136] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1786.522323][T22144] EXT4-fs (loop0): Ignoring removed oldalloc option [ 1786.546914][T22144] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1786.662518][T22144] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,oldalloc,barrier=0x0000000000000009,,errors=continue. Quota mode: writeback. [ 1786.678906][T22136] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1786.696368][T22149] loop5: detected capacity change from 0 to 4096 [ 1786.732558][T22144] ext4 filesystem being mounted at /160/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1786.889890][T22149] overlayfs: failed to resolve './bus': -2 [ 1786.994038][T22161] EXT4-fs error (device loop0): ext4_do_update_inode:5260: inode #18: comm syz.0.6534: corrupted inode contents [ 1787.006843][T22161] EXT4-fs error (device loop0): ext4_dirty_inode:6108: inode #18: comm syz.0.6534: mark_inode_dirty error [ 1787.018921][T22161] EXT4-fs error (device loop0): ext4_do_update_inode:5260: inode #18: comm syz.0.6534: corrupted inode contents [ 1787.031511][T22161] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2952: inode #18: comm syz.0.6534: mark_inode_dirty error [ 1787.044337][T22161] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2955: inode #18: comm syz.0.6534: mark inode dirty (error -117) [ 1787.058529][T22161] EXT4-fs warning (device loop0): ext4_evict_inode:305: xattr delete (err -117) [ 1787.231411][ T822] usb 6-1: new full-speed USB device number 56 using dummy_hcd [ 1787.502225][T22166] loop4: detected capacity change from 0 to 40427 [ 1787.567111][T22166] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 1787.581449][T22166] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 1787.597001][T22166] F2FS-fs (loop4): invalid crc value [ 1787.604497][T22166] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 1787.635174][T22166] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 1787.642399][T22166] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1787.701052][T22166] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 1788.357893][ T822] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1788.400572][ T822] usb 6-1: config 0 has no interfaces? [ 1788.656634][T22185] loop4: detected capacity change from 0 to 512 [ 1788.670782][T22185] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 1788.679400][T22185] EXT4-fs (loop4): invalid journal inode [ 1788.682924][ T822] usb 6-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1788.685585][T22185] EXT4-fs (loop4): can't get journal size [ 1788.700558][ T822] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1788.709049][ T822] usb 6-1: Product: syz [ 1788.713362][ T822] usb 6-1: Manufacturer: syz [ 1788.713409][T22185] EXT4-fs (loop4): 1 truncate cleaned up [ 1788.718210][ T822] usb 6-1: SerialNumber: syz [ 1788.756867][T22179] loop1: detected capacity change from 0 to 40427 [ 1788.757952][T22185] EXT4-fs (loop4): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none. [ 1788.809967][ T822] usb 6-1: config 0 descriptor?? [ 1788.814510][T22179] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 1788.823654][T22179] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 1788.851501][T22179] F2FS-fs (loop1): invalid crc value [ 1788.862241][T22179] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 1788.897118][T22179] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 1788.910394][T22179] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1788.932241][T21939] attempt to access beyond end of device [ 1788.932241][T21939] loop1: rw=2049, want=45104, limit=40427 [ 1790.364326][T22209] loop0: detected capacity change from 0 to 40427 [ 1790.452216][T22209] F2FS-fs (loop0): invalid crc value [ 1790.621267][ T6] usb 6-1: USB disconnect, device number 56 [ 1790.681399][T22209] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1790.806858][T22209] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1791.110823][T22232] loop5: detected capacity change from 0 to 512 [ 1791.124749][T22232] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 1791.133531][T22232] EXT4-fs (loop5): invalid journal inode [ 1791.139188][T22232] EXT4-fs (loop5): can't get journal size [ 1791.146684][T22232] EXT4-fs (loop5): 1 truncate cleaned up [ 1791.152371][T22232] EXT4-fs (loop5): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none. [ 1791.248925][T18989] attempt to access beyond end of device [ 1791.248925][T18989] loop0: rw=2049, want=45104, limit=40427 [ 1791.570939][T22247] loop0: detected capacity change from 0 to 256 [ 1793.644936][T22263] netlink: 44 bytes leftover after parsing attributes in process `syz.5.6567'. [ 1793.708641][T22273] loop5: detected capacity change from 0 to 512 [ 1793.784870][T22273] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 1793.797225][T22273] EXT4-fs (loop5): invalid journal inode [ 1793.803154][T22273] EXT4-fs (loop5): can't get journal size [ 1794.956451][T22273] EXT4-fs (loop5): 1 truncate cleaned up [ 1794.962424][T22273] EXT4-fs (loop5): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none. [ 1795.569281][T22285] loop1: detected capacity change from 0 to 40427 [ 1795.658629][ T6] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1795.670538][T22285] F2FS-fs (loop1): invalid crc value [ 1795.737239][T11041] bridge0: port 3(syz_tun) entered disabled state [ 1795.787358][T11041] device syz_tun left promiscuous mode [ 1795.800224][T22285] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1795.870656][T22285] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1795.942143][T11041] bridge0: port 3(syz_tun) entered disabled state [ 1795.951157][ T6] usb 1-1: Using ep0 maxpacket: 16 [ 1796.124420][ T6] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1796.148325][ T6] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1796.154975][ T6] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1796.183340][T22286] bridge0: port 1(bridge_slave_0) entered blocking state [ 1796.190524][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1796.198993][T22286] bridge0: port 1(bridge_slave_0) entered disabled state [ 1796.212709][ T6] usb 1-1: config 0 descriptor?? [ 1796.218220][T22286] device bridge_slave_0 entered promiscuous mode [ 1796.254070][T22286] bridge0: port 2(bridge_slave_1) entered blocking state [ 1796.270579][T22286] bridge0: port 2(bridge_slave_1) entered disabled state [ 1796.278691][T22286] device bridge_slave_1 entered promiscuous mode [ 1796.286330][T21939] attempt to access beyond end of device [ 1796.286330][T21939] loop1: rw=2049, want=45104, limit=40427 [ 1796.341505][T22286] bridge0: port 2(bridge_slave_1) entered blocking state [ 1796.348592][T22286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1796.355932][T22286] bridge0: port 1(bridge_slave_0) entered blocking state [ 1796.362986][T22286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1796.399919][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1796.408003][ T431] bridge0: port 1(bridge_slave_0) entered disabled state [ 1796.415630][ T431] bridge0: port 2(bridge_slave_1) entered disabled state [ 1796.435711][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1796.444501][ T431] bridge0: port 1(bridge_slave_0) entered blocking state [ 1796.451629][ T431] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1796.459065][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1796.468134][ T431] bridge0: port 2(bridge_slave_1) entered blocking state [ 1796.475200][ T431] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1796.487889][T22313] loop1: detected capacity change from 0 to 256 [ 1796.496095][T22313] FAT-fs (loop1): Unrecognized mount option "shortname=mi" or missing value [ 1796.506704][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1796.518652][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1796.530036][T15800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1796.541802][T15800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1796.549703][T22313] loop1: detected capacity change from 0 to 2048 [ 1796.556863][T15800] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1796.564901][T15800] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1796.575343][T22286] device veth0_vlan entered promiscuous mode [ 1796.585818][T15800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1796.595334][T22286] device veth1_macvtap entered promiscuous mode [ 1796.605423][T15800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1796.617323][T15800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1796.638914][T22313] EXT4-fs (loop1): mounted filesystem without journal. Opts: nogrpid,noload,,errors=continue. Quota mode: none. [ 1796.663639][T22319] loop4: detected capacity change from 0 to 256 [ 1796.755335][ T6] hid-generic 0003:1E71:2009.0013: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 1796.796605][ T658] device bridge_slave_1 left promiscuous mode [ 1796.804258][ T658] bridge0: port 2(bridge_slave_1) entered disabled state [ 1796.818935][ T658] device bridge_slave_0 left promiscuous mode [ 1796.830973][ T658] bridge0: port 1(bridge_slave_0) entered disabled state [ 1796.839805][ T658] device veth1_macvtap left promiscuous mode [ 1796.845903][ T658] device veth0_vlan left promiscuous mode [ 1797.128450][T22321] loop1: detected capacity change from 0 to 40427 [ 1797.145827][T22321] F2FS-fs (loop1): invalid crc value [ 1797.155600][T22321] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 1797.181232][T22321] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 1797.188375][T22321] F2FS-fs (loop1): Start checkpoint disabled! [ 1797.193840][T22328] UDC core: couldn't find an available UDC or it's busy: -16 [ 1797.195318][T22321] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 1797.201932][T22328] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1797.243780][T15800] attempt to access beyond end of device [ 1797.243780][T15800] loop1: rw=2049, want=45104, limit=40427 [ 1797.359674][T22333] loop5: detected capacity change from 0 to 512 [ 1797.369478][T22333] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 1797.386524][T22333] EXT4-fs (loop5): invalid journal inode [ 1797.393271][T22333] EXT4-fs (loop5): can't get journal size [ 1797.479360][ T822] usb 1-1: USB disconnect, device number 48 [ 1797.717769][T22333] EXT4-fs (loop5): 1 truncate cleaned up [ 1797.733287][T22335] loop1: detected capacity change from 0 to 40427 [ 1797.733576][T22333] EXT4-fs (loop5): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none. [ 1797.775368][T22335] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 1797.798371][T22335] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 1797.814493][T22335] F2FS-fs (loop1): invalid crc value [ 1797.821385][T22335] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 1797.845342][T22335] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 1797.852536][T22335] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1798.404606][T22351] loop5: detected capacity change from 0 to 40427 [ 1798.458361][T22351] F2FS-fs (loop5): invalid crc value [ 1798.561606][T22351] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1798.638937][T22351] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1799.187178][T21257] attempt to access beyond end of device [ 1799.187178][T21257] loop5: rw=2049, want=45104, limit=40427 [ 1799.198888][T22335] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 1801.619821][T22389] loop5: detected capacity change from 0 to 256 [ 1803.439797][T22396] loop5: detected capacity change from 0 to 16 [ 1803.458077][T22396] erofs: (device loop5): mounted with root inode @ nid 36. [ 1806.778463][T22416] loop0: detected capacity change from 0 to 40427 [ 1806.874446][T22416] F2FS-fs (loop0): invalid crc value [ 1807.099925][T22416] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1807.204771][T22416] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1808.138273][T18989] attempt to access beyond end of device [ 1808.138273][T18989] loop0: rw=2049, want=45104, limit=40427 [ 1813.353965][T22477] loop0: detected capacity change from 0 to 40427 [ 1813.394906][T22477] F2FS-fs (loop0): invalid crc value [ 1813.562532][T22483] device syzkaller0 entered promiscuous mode [ 1813.573547][T22477] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1814.377976][T22477] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1814.582799][T10108] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1814.786939][T18989] attempt to access beyond end of device [ 1814.786939][T18989] loop0: rw=2049, want=45104, limit=40427 [ 1814.850133][T22505] loop4: detected capacity change from 0 to 16 [ 1814.928874][T22507] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=48 sclass=netlink_tcpdiag_socket pid=22507 comm=syz.2.6632 [ 1815.128955][T22505] erofs: (device loop4): mounted with root inode @ nid 36. [ 1816.765404][T22510] netlink: 'syz.4.6634': attribute type 72 has an invalid length. [ 1816.773399][T22510] netlink: 532 bytes leftover after parsing attributes in process `syz.4.6634'. [ 1818.388007][T22529] device syzkaller0 entered promiscuous mode [ 1820.259473][T22533] loop0: detected capacity change from 0 to 40427 [ 1820.316070][T22533] F2FS-fs (loop0): invalid crc value [ 1820.557668][T22533] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1820.707782][T22533] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1821.243545][ T2530] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1823.154439][T22557] loop1: detected capacity change from 0 to 40427 [ 1823.317659][T22557] F2FS-fs (loop1): invalid crc value [ 1823.527465][T22557] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1823.611408][T22557] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1824.238666][T21939] attempt to access beyond end of device [ 1824.238666][T21939] loop1: rw=2049, want=45104, limit=40427 [ 1826.690006][T22580] device syzkaller0 entered promiscuous mode [ 1826.803350][T22570] loop0: detected capacity change from 0 to 40427 [ 1826.905789][T22570] F2FS-fs (loop0): invalid crc value [ 1827.101931][T22570] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1827.139824][T22570] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1 [ 1827.148690][T22570] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1829.503227][T22626] device syzkaller0 entered promiscuous mode [ 1830.501293][ T1212] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1830.580561][T10108] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1831.754399][ T1212] usb 1-1: config 0 interface 0 altsetting 4 has an invalid endpoint with address 0x48, skipping [ 1831.769171][ T1212] usb 1-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1831.782914][T10108] usb 6-1: device descriptor read/all, error -71 [ 1831.789451][ T1212] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1831.796297][ T1212] usb 1-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 1831.807727][ T1212] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1831.832834][ T1212] usb 1-1: config 0 descriptor?? [ 1831.858786][ T1212] usb 1-1: can't set config #0, error -71 [ 1831.874123][ T1212] usb 1-1: USB disconnect, device number 49 [ 1831.963617][T22650] loop5: detected capacity change from 0 to 40427 [ 1832.654890][T22650] F2FS-fs (loop5): invalid crc value [ 1833.498582][T22679] loop1: detected capacity change from 0 to 16 [ 1833.517063][T22650] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1833.574074][T22650] F2FS-fs (loop5): Cannot turn on quotas: -2 on 1 [ 1833.581245][T22650] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1833.674131][T22679] erofs: (device loop1): mounted with root inode @ nid 36. [ 1834.965069][T22692] netlink: 532 bytes leftover after parsing attributes in process `syz.1.6679'. [ 1836.116059][T22695] loop4: detected capacity change from 0 to 16 [ 1836.193906][T22695] erofs: (device loop4): mounted with root inode @ nid 36. [ 1836.464841][T22699] netlink: 532 bytes leftover after parsing attributes in process `syz.4.6684'. [ 1837.613731][T22697] loop1: detected capacity change from 0 to 40427 [ 1837.842323][T22697] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 1837.902495][T22697] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 1837.940766][T22697] F2FS-fs (loop1): invalid crc value [ 1837.952467][T22709] loop0: detected capacity change from 0 to 40427 [ 1837.989649][T22697] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 1837.991809][T22709] F2FS-fs (loop0): invalid crc value [ 1838.033825][T22709] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1838.071812][T22706] loop5: detected capacity change from 0 to 40427 [ 1838.088239][T22709] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1 [ 1838.089622][T22706] F2FS-fs (loop5): invalid crc value [ 1838.104637][T22697] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 1838.112014][T22709] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1838.119698][T22697] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1838.154413][T22706] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 1838.172080][T22697] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 1838.199134][T22706] F2FS-fs (loop5): Cannot turn on quotas: -2 on 0 [ 1838.205959][T22706] F2FS-fs (loop5): Start checkpoint disabled! [ 1838.213408][T22706] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 1838.284300][ T658] attempt to access beyond end of device [ 1838.284300][ T658] loop5: rw=2049, want=45104, limit=40427 [ 1840.307993][T18989] attempt to access beyond end of device [ 1840.307993][T18989] loop0: rw=2049, want=40976, limit=40427 [ 1840.354904][T22738] attempt to access beyond end of device [ 1840.354904][T22738] loop1: rw=16812033, want=78672, limit=40427 [ 1840.491733][ T1212] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1840.610891][T18620] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1840.736434][T22747] binder: BINDER_SET_CONTEXT_MGR already set [ 1840.742711][T22747] binder: 22746:22747 ioctl 4018620d 200000000000 returned -16 [ 1840.795025][ T819] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1840.892578][ T1212] usb 3-1: config 0 interface 0 altsetting 4 has an invalid endpoint with address 0x48, skipping [ 1840.903263][ T1212] usb 3-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1840.916577][ T1212] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1840.923243][ T1212] usb 3-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 1840.932945][ T1212] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1840.941342][T21939] attempt to access beyond end of device [ 1840.941342][T21939] loop1: rw=2049, want=45104, limit=40427 [ 1840.954288][ T1212] usb 3-1: config 0 descriptor?? [ 1841.001686][ T1212] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1841.011702][T18620] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1841.021810][T18620] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1841.055113][ T819] usb 6-1: Using ep0 maxpacket: 16 [ 1841.120092][T18620] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1841.129258][T18620] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1841.137284][T18620] usb 5-1: SerialNumber: syz [ 1841.185064][ T819] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1841.196280][ T819] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1841.202894][ T819] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1841.212214][ T819] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1841.221107][ T819] usb 6-1: config 0 descriptor?? [ 1841.446047][T18620] usb 5-1: 0:2 : does not exist [ 1841.454413][T18620] usb 5-1: USB disconnect, device number 66 [ 1841.462907][T21844] udevd[21844]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1841.728027][ T819] hid-generic 0003:1E71:2009.0014: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.5-1/input0 [ 1841.786491][T22759] loop0: detected capacity change from 0 to 40427 [ 1841.837674][T22759] F2FS-fs (loop0): invalid crc value [ 1841.844567][T22759] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1841.869576][T22759] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1 [ 1841.876660][T22759] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1842.032158][T22742] UDC core: couldn't find an available UDC or it's busy: -16 [ 1842.040175][T22742] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1842.128568][T22768] loop1: detected capacity change from 0 to 40427 [ 1842.139314][T22768] F2FS-fs (loop1): invalid crc value [ 1842.163223][T22768] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 1842.193725][T22768] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 1842.200511][T22768] F2FS-fs (loop1): Start checkpoint disabled! [ 1842.207627][T22768] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 1842.236766][T15800] attempt to access beyond end of device [ 1842.236766][T15800] loop1: rw=2049, want=45104, limit=40427 [ 1842.290231][ T428] usb 6-1: USB disconnect, device number 59 [ 1842.347059][ T2530] usb 3-1: USB disconnect, device number 38 [ 1842.390016][T22781] loop1: detected capacity change from 0 to 512 [ 1842.421141][T22781] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 1842.432995][T22781] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.6706: bg 0: block 393: padding at end of block bitmap is not set [ 1842.447633][T22781] EXT4-fs (loop1): Remounting filesystem read-only [ 1842.454292][T22781] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 1842.793423][T22781] EXT4-fs (loop1): Remounting filesystem read-only [ 1842.809063][T22781] EXT4-fs (loop1): 2 truncates cleaned up [ 1842.828249][T22781] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodiscard,jqfmt=vfsv0,errors=remount-ro,noquota,. Quota mode: writeback. [ 1843.101846][T22789] EXT4-fs error (device loop1): empty_inline_dir:1887: inode #12: block 7: comm syz.1.6706: bad entry in directory: rec_len % 4 != 0 - offset=4, inode=4278190093, rec_len=255, size=60 fake=0 [ 1843.795770][T22789] EXT4-fs (loop1): Remounting filesystem read-only [ 1843.802342][T22789] EXT4-fs warning (device loop1): empty_inline_dir:1894: bad inline directory (dir #12) - inode 4278190093, rec_len 255, name_len 0inline size 60 [ 1843.893719][T22791] loop4: detected capacity change from 0 to 40427 [ 1843.903644][T22791] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 1843.931269][T22791] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 1843.947130][ T2530] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1843.956181][T22791] F2FS-fs (loop4): invalid crc value [ 1843.965960][T22791] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 1844.007984][T22791] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 1844.015257][T22791] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1844.050624][T22791] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 1844.219844][T22816] attempt to access beyond end of device [ 1844.219844][T22816] loop4: rw=16812033, want=78672, limit=40427 [ 1844.304589][T18620] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1844.347932][ T2530] usb 3-1: config 0 interface 0 altsetting 4 has an invalid endpoint with address 0x48, skipping [ 1844.358562][ T2530] usb 3-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1844.371501][ T2530] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1844.378125][ T2530] usb 3-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 1844.387218][ T2530] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1844.395742][ T2530] usb 3-1: config 0 descriptor?? [ 1844.435055][ T2530] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1844.547998][T22286] attempt to access beyond end of device [ 1844.547998][T22286] loop4: rw=2049, want=45104, limit=40427 [ 1844.564516][T18620] usb 2-1: Using ep0 maxpacket: 16 [ 1844.727089][T18620] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1844.738093][T18620] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1844.744699][T18620] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1844.753808][T18620] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1844.763291][T18620] usb 2-1: config 0 descriptor?? [ 1845.186649][T22826] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1845.195027][T22826] overlayfs: overlapping lowerdir path [ 1845.488613][T22807] UDC core: couldn't find an available UDC or it's busy: -16 [ 1845.496548][T22807] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1846.244066][ T1212] usb 3-1: USB disconnect, device number 39 [ 1846.261811][T18620] hid-generic 0003:1E71:2009.0015: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 1846.304694][T18620] usb 2-1: USB disconnect, device number 53 [ 1846.311296][T22836] fuse: Unknown parameter 'user_id00000000000000000000' [ 1846.403741][T22838] 9pnet_virtio: no channels available for device syz [ 1847.856672][T22838] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1847.865368][T22838] overlayfs: overlapping lowerdir path [ 1848.684482][T22837] fido_id[22837]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1850.581650][T22852] loop1: detected capacity change from 0 to 40427 [ 1850.617553][T22878] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6733'. [ 1850.635241][T22852] F2FS-fs (loop1): invalid crc value [ 1850.665294][T22852] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1850.708897][T22852] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1 [ 1850.715871][T22852] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1850.720849][T22880] loop4: detected capacity change from 0 to 40427 [ 1850.744384][T22880] F2FS-fs (loop4): invalid crc value [ 1851.180112][T22880] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1851.217537][T22880] F2FS-fs (loop4): Cannot turn on quotas: -2 on 1 [ 1851.224582][T22880] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1852.222330][T22901] loop5: detected capacity change from 0 to 40427 [ 1852.270758][T22901] F2FS-fs (loop5): invalid crc value [ 1852.396023][ T819] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1852.407649][T22901] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1852.534645][T22901] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1853.027406][T22913] loop1: detected capacity change from 0 to 512 [ 1853.069708][T21257] attempt to access beyond end of device [ 1853.069708][T21257] loop5: rw=2049, want=45104, limit=40427 [ 1853.093580][T22913] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 1853.107343][T22913] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.6739: bg 0: block 393: padding at end of block bitmap is not set [ 1853.122190][T22913] EXT4-fs (loop1): Remounting filesystem read-only [ 1853.129102][T22913] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 1853.138371][T22913] EXT4-fs (loop1): Remounting filesystem read-only [ 1853.145652][T22913] EXT4-fs (loop1): 2 truncates cleaned up [ 1853.151499][T22913] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodiscard,jqfmt=vfsv0,errors=remount-ro,noquota,. Quota mode: writeback. [ 1853.176010][ T819] usb 3-1: config 0 interface 0 altsetting 4 has an invalid endpoint with address 0x48, skipping [ 1853.197519][ T819] usb 3-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1853.210512][ T819] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1853.217131][ T819] usb 3-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 1853.226243][ T819] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1853.234955][ T819] usb 3-1: config 0 descriptor?? [ 1853.262581][T10108] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1853.273941][ T819] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1853.295341][T22919] loop5: detected capacity change from 0 to 128 [ 1853.381450][T22921] EXT4-fs error (device loop1): empty_inline_dir:1887: inode #12: block 7: comm syz.1.6739: bad entry in directory: rec_len % 4 != 0 - offset=4, inode=4278190093, rec_len=255, size=60 fake=0 [ 1853.401608][T22921] EXT4-fs (loop1): Remounting filesystem read-only [ 1853.408261][T22921] EXT4-fs warning (device loop1): empty_inline_dir:1894: bad inline directory (dir #12) - inode 4278190093, rec_len 255, name_len 0inline size 60 [ 1854.645057][T10108] usb 1-1: Using ep0 maxpacket: 16 [ 1854.674686][ T1212] usb 3-1: USB disconnect, device number 40 [ 1854.775819][T22286] attempt to access beyond end of device [ 1854.775819][T22286] loop4: rw=2049, want=40976, limit=40427 [ 1854.800689][T10108] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1854.817441][T10108] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1854.832274][T10108] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1854.866115][T10108] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1854.894969][T10108] usb 1-1: config 0 descriptor?? [ 1854.947903][T22932] loop5: detected capacity change from 0 to 40427 [ 1854.968434][T22932] F2FS-fs (loop5): invalid crc value [ 1854.994565][T22932] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1855.041141][T22932] F2FS-fs (loop5): Cannot turn on quotas: -2 on 1 [ 1855.071679][T22932] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1855.282793][T22947] loop1: detected capacity change from 0 to 256 [ 1855.576476][T22947] FAT-fs (loop1): Unrecognized mount option "shortname=mi" or missing value [ 1856.106025][T22911] UDC core: couldn't find an available UDC or it's busy: -16 [ 1856.120206][T22911] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1856.146783][T10108] hid-generic 0003:1E71:2009.0016: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 1856.249409][T21257] attempt to access beyond end of device [ 1856.249409][T21257] loop5: rw=2049, want=40976, limit=40427 [ 1856.263113][T22947] loop1: detected capacity change from 0 to 2048 [ 1856.328642][T22947] EXT4-fs (loop1): mounted filesystem without journal. Opts: nogrpid,noload,,errors=continue. Quota mode: none. [ 1856.427434][T10108] usb 1-1: USB disconnect, device number 50 [ 1857.028346][T22964] loop4: detected capacity change from 0 to 40427 [ 1857.102242][T22964] F2FS-fs (loop4): invalid crc value [ 1857.264553][T22964] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1857.346796][T22964] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1857.511048][T22970] loop5: detected capacity change from 0 to 256 [ 1857.550382][T22972] loop1: detected capacity change from 0 to 512 [ 1857.617183][T22972] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 1857.654395][T22286] attempt to access beyond end of device [ 1857.654395][T22286] loop4: rw=2049, want=45104, limit=40427 [ 1857.668575][T22972] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.6753: bg 0: block 393: padding at end of block bitmap is not set [ 1857.721575][T22972] EXT4-fs (loop1): Remounting filesystem read-only [ 1857.728212][T22972] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 1857.737385][T22972] EXT4-fs (loop1): Remounting filesystem read-only [ 1857.744056][T22972] EXT4-fs (loop1): 2 truncates cleaned up [ 1857.749890][T22972] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodiscard,jqfmt=vfsv0,errors=remount-ro,noquota,. Quota mode: writeback. [ 1859.139945][T22987] loop4: detected capacity change from 0 to 512 [ 1859.159495][T22987] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 1859.175899][T22991] loop1: detected capacity change from 0 to 512 [ 1859.193751][T22987] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.6754: bg 0: block 393: padding at end of block bitmap is not set [ 1859.239700][T22991] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 1859.247866][T22987] EXT4-fs (loop4): Remounting filesystem read-only [ 1859.264009][T22991] EXT4-fs (loop1): invalid journal inode [ 1859.280864][T22991] EXT4-fs (loop1): can't get journal size [ 1859.286778][T22987] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 1859.307002][T22987] EXT4-fs (loop4): Remounting filesystem read-only [ 1859.313709][T22987] EXT4-fs (loop4): 2 truncates cleaned up [ 1859.320421][T22991] EXT4-fs (loop1): 1 truncate cleaned up [ 1859.326082][T22991] EXT4-fs (loop1): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none. [ 1859.331581][T22987] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodiscard,jqfmt=vfsv0,errors=remount-ro,noquota,. Quota mode: writeback. [ 1860.468526][T22997] loop5: detected capacity change from 0 to 40427 [ 1860.498488][T22997] F2FS-fs (loop5): invalid crc value [ 1860.515021][T22997] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1860.568909][T23011] loop1: detected capacity change from 0 to 256 [ 1860.741232][T22997] F2FS-fs (loop5): Start checkpoint disabled! [ 1861.534342][T22997] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 1862.134125][T23023] loop0: detected capacity change from 0 to 128 [ 1862.270579][T23023] EXT4-fs (loop0): Unrecognized mount option "euid=00000000000000000000" or missing value [ 1862.380499][T23030] attempt to access beyond end of device [ 1862.380499][T23030] loop5: rw=2049, want=77960, limit=40427 [ 1862.402200][T23030] attempt to access beyond end of device [ 1862.402200][T23030] loop5: rw=2049, want=77952, limit=40427 [ 1862.646549][T23035] loop4: detected capacity change from 0 to 512 [ 1863.173991][T23035] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 1863.225066][T23035] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.6766: bg 0: block 393: padding at end of block bitmap is not set [ 1863.257012][T23035] EXT4-fs (loop4): Remounting filesystem read-only [ 1863.276921][T23035] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 1863.288545][T18294] attempt to access beyond end of device [ 1863.288545][T18294] loop5: rw=2049, want=40976, limit=40427 [ 1863.307820][T23035] EXT4-fs (loop4): Remounting filesystem read-only [ 1863.345287][T23035] EXT4-fs (loop4): 2 truncates cleaned up [ 1863.368102][T23035] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodiscard,jqfmt=vfsv0,errors=remount-ro,noquota,. Quota mode: writeback. [ 1863.425081][T23028] loop1: detected capacity change from 0 to 40427 [ 1863.443519][T23028] F2FS-fs (loop1): invalid crc value [ 1863.641629][T23049] loop0: detected capacity change from 0 to 16 [ 1863.660462][T23028] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1863.718357][T23049] erofs: (device loop0): mounted with root inode @ nid 36. [ 1863.747960][T23054] EXT4-fs error (device loop4): empty_inline_dir:1887: inode #12: block 7: comm syz.4.6766: bad entry in directory: rec_len % 4 != 0 - offset=4, inode=4278190093, rec_len=255, size=60 fake=0 [ 1863.767815][T23054] EXT4-fs (loop4): Remounting filesystem read-only [ 1863.774433][T23054] EXT4-fs warning (device loop4): empty_inline_dir:1894: bad inline directory (dir #12) - inode 4278190093, rec_len 255, name_len 0inline size 60 [ 1863.937478][T23028] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1 [ 1864.561212][T23028] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1864.772551][T23060] loop4: detected capacity change from 0 to 512 [ 1864.790757][T23060] EXT4-fs (loop4): Ignoring removed oldalloc option [ 1864.805619][T23060] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1865.352224][T23060] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,oldalloc,barrier=0x0000000000000009,,errors=continue. Quota mode: writeback. [ 1865.389781][T23060] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1866.878235][ T819] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1867.220065][T23080] loop4: detected capacity change from 0 to 1024 [ 1867.837783][T23080] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,i_version,i_version,nojournal_checksum,lazytime,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 1868.647494][ T819] usb 1-1: config 0 interface 0 altsetting 4 has an invalid endpoint with address 0x48, skipping [ 1868.658163][ T819] usb 1-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1868.671077][ T819] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1868.677750][ T819] usb 1-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 1868.686799][ T819] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1868.695717][ T819] usb 1-1: config 0 descriptor?? [ 1868.703512][T23108] loop4: detected capacity change from 0 to 256 [ 1868.715772][T23108] exfat: Deprecated parameter 'utf8' [ 1868.721364][T23108] exfat: Deprecated parameter 'namecase' [ 1868.727013][T23108] exfat: Deprecated parameter 'utf8' [ 1868.752733][ T819] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1868.769069][T23108] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 1868.821833][T23110] loop1: detected capacity change from 0 to 512 [ 1868.839823][T20817] usb 1-1: USB disconnect, device number 51 [ 1868.863298][T23110] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 1868.891807][T23110] EXT4-fs (loop1): invalid journal inode [ 1868.897768][T23110] EXT4-fs (loop1): can't get journal size [ 1868.915585][T23110] EXT4-fs (loop1): 1 truncate cleaned up [ 1868.924676][T23110] EXT4-fs (loop1): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none. [ 1869.014528][T23114] loop0: detected capacity change from 0 to 40427 [ 1869.076541][T23114] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 1869.083237][T23114] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 1869.094757][T23114] F2FS-fs (loop0): invalid crc value [ 1869.122557][T23114] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 1869.218653][T23124] loop1: detected capacity change from 0 to 512 [ 1869.230081][T23114] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 1869.237211][T23114] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1869.249200][T23127] device syzkaller0 entered promiscuous mode [ 1869.263071][T23114] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 1869.308372][T23124] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #16: comm syz.1.6789: iget: bogus i_mode (0) [ 1869.319894][T23124] EXT4-fs (loop1): Remounting filesystem read-only [ 1869.326739][T23124] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.6789: couldn't read orphan inode 16 (err -117) [ 1869.338972][T23124] EXT4-fs (loop1): Remounting filesystem read-only [ 1869.345545][T23124] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,minixdf,. Quota mode: writeback. [ 1869.357717][T23124] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1869.399176][T23124] fuse: Bad value for 'rootmode' [ 1869.419682][T23135] loop5: detected capacity change from 0 to 512 [ 1869.429946][T23135] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 1869.465063][T23135] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.6794: bg 0: block 393: padding at end of block bitmap is not set [ 1869.480587][T23135] EXT4-fs (loop5): Remounting filesystem read-only [ 1869.487257][T23135] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 1870.570515][T23136] attempt to access beyond end of device [ 1870.570515][T23136] loop0: rw=16812033, want=78672, limit=40427 [ 1870.604605][T23135] EXT4-fs (loop5): Remounting filesystem read-only [ 1870.619118][T23135] EXT4-fs (loop5): 2 truncates cleaned up [ 1870.631563][T23135] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodiscard,jqfmt=vfsv0,errors=remount-ro,noquota,. Quota mode: writeback. [ 1870.792819][T18989] attempt to access beyond end of device [ 1870.792819][T18989] loop0: rw=2049, want=45104, limit=40427 [ 1872.011908][T23154] EXT4-fs error (device loop5): empty_inline_dir:1887: inode #12: block 7: comm syz.5.6794: bad entry in directory: rec_len % 4 != 0 - offset=4, inode=4278190093, rec_len=255, size=60 fake=0 [ 1873.551033][T23154] EXT4-fs (loop5): Remounting filesystem read-only [ 1873.557578][T23154] EXT4-fs warning (device loop5): empty_inline_dir:1894: bad inline directory (dir #12) - inode 4278190093, rec_len 255, name_len 0inline size 60 [ 1873.832302][T20817] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1873.839978][ T556] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1874.363206][ T556] usb 5-1: config 0 interface 0 altsetting 4 has an invalid endpoint with address 0x48, skipping [ 1874.414048][ T556] usb 5-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1874.538354][ T556] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1874.601601][ T556] usb 5-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 1875.540802][T23174] loop5: detected capacity change from 0 to 512 [ 1875.544147][ T556] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1875.620456][ T556] usb 5-1: config 0 descriptor?? [ 1875.641355][ T556] usb 5-1: can't set config #0, error -71 [ 1875.641883][T23174] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 1875.663055][ T556] usb 5-1: USB disconnect, device number 67 [ 1875.674375][T23174] EXT4-fs (loop5): invalid journal inode [ 1875.680079][T23174] EXT4-fs (loop5): can't get journal size [ 1875.729334][T23174] EXT4-fs (loop5): 1 truncate cleaned up [ 1875.738745][T23174] EXT4-fs (loop5): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none. [ 1876.074180][ T30] kauditd_printk_skb: 2660 callbacks suppressed [ 1876.074224][ T30] audit: type=1326 audit(1782840395.697:8537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23190 comm="syz.0.6808" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50f0e63e59 code=0x7ffc0000 [ 1876.148029][T23193] loop5: detected capacity change from 0 to 16 [ 1876.208707][T23193] erofs: (device loop5): mounted with root inode @ nid 36. [ 1876.210500][T23195] loop0: detected capacity change from 0 to 512 [ 1876.243676][ T30] audit: type=1326 audit(1782840395.734:8538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23190 comm="syz.0.6808" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f50f0e63e59 code=0x7ffc0000 [ 1876.294960][T23195] EXT4-fs (loop0): Ignoring removed oldalloc option [ 1876.327299][T23195] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1876.336006][ T30] audit: type=1326 audit(1782840395.734:8539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23190 comm="syz.0.6808" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50f0e63e59 code=0x7ffc0000 [ 1876.390928][T23195] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,oldalloc,barrier=0x0000000000000009,,errors=continue. Quota mode: writeback. [ 1876.432927][T23195] ext4 filesystem being mounted at /206/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1878.716860][ T30] audit: type=1326 audit(1782840395.734:8540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23190 comm="syz.0.6808" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f50f0e63e59 code=0x7ffc0000 [ 1878.770402][ T30] audit: type=1326 audit(1782840395.734:8541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23190 comm="syz.0.6808" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50f0e63e59 code=0x7ffc0000 [ 1878.795563][ T30] audit: type=1326 audit(1782840395.734:8542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23190 comm="syz.0.6808" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f50f0e63e59 code=0x7ffc0000 [ 1878.834625][ T30] audit: type=1326 audit(1782840395.734:8543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23190 comm="syz.0.6808" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50f0e63e59 code=0x7ffc0000 [ 1878.875575][ T30] audit: type=1326 audit(1782840395.734:8544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23190 comm="syz.0.6808" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f50f0e63e59 code=0x7ffc0000 [ 1878.955202][ T30] audit: type=1326 audit(1782840395.744:8545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23190 comm="syz.0.6808" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50f0e63e59 code=0x7ffc0000 [ 1879.378241][T23209] loop0: detected capacity change from 0 to 128 [ 1879.575112][T23209] EXT4-fs (loop0): Unrecognized mount option "euid=00000000000000000000" or missing value [ 1880.041518][T23218] loop1: detected capacity change from 0 to 2048 [ 1880.279606][T23218] EXT4-fs (loop1): mounted filesystem without journal. Opts: nogrpid,noload,,errors=continue. Quota mode: none. [ 1880.465110][T23229] fuse: Unknown parameter '0x0000000000000003' [ 1880.497003][T23220] loop4: detected capacity change from 0 to 40427 [ 1880.517842][ T30] audit: type=1326 audit(1782840399.806:8546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23230 comm="syz.1.6819" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff10643fe59 code=0x7ffc0000 [ 1880.573953][T23220] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 1880.581827][T23236] loop0: detected capacity change from 0 to 128 [ 1880.591395][T23220] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 1880.611376][T23220] F2FS-fs (loop4): invalid crc value [ 1880.633611][T23220] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 1880.645605][T23236] EXT4-fs (loop0): Unrecognized mount option "euid=00000000000000000000" or missing value [ 1880.709184][T23220] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 1880.719777][T23220] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1880.814562][T23220] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 1881.068946][T23242] attempt to access beyond end of device [ 1881.068946][T23242] loop4: rw=16812033, want=78672, limit=40427 [ 1881.293382][T22286] attempt to access beyond end of device [ 1881.293382][T22286] loop4: rw=2049, want=45104, limit=40427 [ 1882.119569][ T30] kauditd_printk_skb: 3540 callbacks suppressed [ 1882.119586][ T30] audit: type=1326 audit(1782840401.283:12087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23230 comm="syz.1.6819" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff106439bd7 code=0x7ffc0000 [ 1882.150823][ T30] audit: type=1326 audit(1782840401.283:12088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23230 comm="syz.1.6819" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff1063e11d9 code=0x7ffc0000 [ 1882.378498][ T30] audit: type=1326 audit(1782840401.283:12089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23230 comm="syz.1.6819" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff106439bd7 code=0x7ffc0000 [ 1882.422105][ T30] audit: type=1326 audit(1782840401.283:12090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23230 comm="syz.1.6819" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff1063e11d9 code=0x7ffc0000 [ 1882.458088][ T30] audit: type=1326 audit(1782840401.283:12091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23230 comm="syz.1.6819" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff106439bd7 code=0x7ffc0000 [ 1882.495431][ T30] audit: type=1326 audit(1782840401.283:12092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23230 comm="syz.1.6819" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff1063e11d9 code=0x7ffc0000 [ 1882.524163][ T30] audit: type=1326 audit(1782840401.283:12093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23230 comm="syz.1.6819" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff106439bd7 code=0x7ffc0000 [ 1882.593502][ T30] audit: type=1326 audit(1782840401.283:12094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23230 comm="syz.1.6819" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff1063e11d9 code=0x7ffc0000 [ 1882.607567][T23263] loop0: detected capacity change from 0 to 512 [ 1882.666496][T23265] loop5: detected capacity change from 0 to 128 [ 1882.903092][ T30] audit: type=1326 audit(1782840401.283:12095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23230 comm="syz.1.6819" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff106439bd7 code=0x7ffc0000 [ 1882.950409][ T30] audit: type=1326 audit(1782840401.283:12096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23230 comm="syz.1.6819" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff1063e11d9 code=0x7ffc0000 [ 1883.007592][T23269] loop4: detected capacity change from 0 to 16 [ 1883.018513][T23265] EXT4-fs (loop5): Unrecognized mount option "euid=00000000000000000000" or missing value [ 1883.028596][T23263] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 1883.081542][T23263] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.6829: bg 0: block 393: padding at end of block bitmap is not set [ 1883.108999][T23269] erofs: (device loop4): mounted with root inode @ nid 36. [ 1883.123120][T23263] EXT4-fs (loop0): Remounting filesystem read-only [ 1883.155610][T23263] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 1883.267103][T23263] EXT4-fs (loop0): Remounting filesystem read-only [ 1883.273822][T23263] EXT4-fs (loop0): 2 truncates cleaned up [ 1883.279844][T23263] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodiscard,jqfmt=vfsv0,errors=remount-ro,noquota,. Quota mode: writeback. [ 1883.307626][T10108] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1883.405260][T23273] netlink: 532 bytes leftover after parsing attributes in process `syz.4.6823'. [ 1884.503490][T23276] EXT4-fs error (device loop0): empty_inline_dir:1887: inode #12: block 7: comm syz.0.6829: bad entry in directory: rec_len % 4 != 0 - offset=4, inode=4278190093, rec_len=255, size=60 fake=0 [ 1884.523242][T23276] EXT4-fs (loop0): Remounting filesystem read-only [ 1884.529937][T23276] EXT4-fs warning (device loop0): empty_inline_dir:1894: bad inline directory (dir #12) - inode 4278190093, rec_len 255, name_len 0inline size 60 [ 1885.407973][T23281] loop5: detected capacity change from 0 to 40427 [ 1885.460238][T23279] loop4: detected capacity change from 0 to 40427 [ 1885.480166][T23281] F2FS-fs (loop5): invalid crc value [ 1885.502386][T23281] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1885.505286][T23279] F2FS-fs (loop4): invalid crc value [ 1885.553901][T23279] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1885.563261][T10108] usb 2-1: config 0 interface 0 altsetting 4 has an invalid endpoint with address 0x48, skipping [ 1885.577505][T23281] F2FS-fs (loop5): Start checkpoint disabled! [ 1885.584898][T10108] usb 2-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1885.599540][T23281] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 1885.606531][T10108] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1885.617619][T10108] usb 2-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 1885.621621][T23279] F2FS-fs (loop4): Cannot turn on quotas: -2 on 1 [ 1885.637576][T10108] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1885.646943][T10108] usb 2-1: config 0 descriptor?? [ 1885.652430][T23279] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1885.704614][T10108] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1885.739745][T10108] usb 2-1: USB disconnect, device number 54 [ 1885.775404][T23293] attempt to access beyond end of device [ 1885.775404][T23293] loop5: rw=2049, want=77960, limit=40427 [ 1885.788338][T23293] attempt to access beyond end of device [ 1885.788338][T23293] loop5: rw=2049, want=77952, limit=40427 [ 1885.960876][T23292] loop1: detected capacity change from 0 to 40427 [ 1886.008254][T22286] attempt to access beyond end of device [ 1886.008254][T22286] loop4: rw=2049, want=40976, limit=40427 [ 1886.021926][T23292] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 1886.039377][T23292] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 1886.066661][T23292] F2FS-fs (loop1): invalid crc value [ 1886.092683][T23292] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 1886.129960][T23292] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 1886.185662][T23292] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1886.235818][T18294] attempt to access beyond end of device [ 1886.235818][T18294] loop5: rw=2049, want=40976, limit=40427 [ 1886.335142][T23292] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 1888.361938][T23307] loop4: detected capacity change from 0 to 1024 [ 1888.783535][T23309] attempt to access beyond end of device [ 1888.783535][T23309] loop1: rw=16812033, want=78672, limit=40427 [ 1889.029696][ T30] kauditd_printk_skb: 1321 callbacks suppressed [ 1889.029711][ T30] audit: type=1326 audit(1782840405.225:13418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23299 comm="syz.2.6835" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb9a5320bd7 code=0x7ffc0000 [ 1889.105071][T21939] attempt to access beyond end of device [ 1889.105071][T21939] loop1: rw=2049, want=45104, limit=40427 [ 1889.145751][T23307] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,i_version,i_version,nojournal_checksum,lazytime,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 1889.490462][T23317] loop5: detected capacity change from 0 to 4096 [ 1889.636818][T23323] loop4: detected capacity change from 0 to 512 [ 1889.680044][T23323] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 1889.693572][T23321] loop0: detected capacity change from 0 to 40427 [ 1889.706870][T23317] overlayfs: failed to resolve './bus': -2 [ 1889.714014][T23323] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.6842: bg 0: block 393: padding at end of block bitmap is not set [ 1889.728758][T23323] EXT4-fs (loop4): Remounting filesystem read-only [ 1889.735546][T23323] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 1889.745095][T23323] EXT4-fs (loop4): Remounting filesystem read-only [ 1889.751770][T23323] EXT4-fs (loop4): 2 truncates cleaned up [ 1889.757838][T23323] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodiscard,jqfmt=vfsv0,errors=remount-ro,noquota,. Quota mode: writeback. [ 1889.816305][T23321] F2FS-fs (loop0): invalid crc value [ 1889.849435][T23334] loop1: detected capacity change from 0 to 4096 [ 1889.865431][T23321] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1889.888186][T23321] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1 [ 1889.895192][T23321] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1890.023240][T23338] EXT4-fs error (device loop4): empty_inline_dir:1887: inode #12: block 7: comm syz.4.6842: bad entry in directory: rec_len % 4 != 0 - offset=4, inode=4278190093, rec_len=255, size=60 fake=0 [ 1890.168588][ T428] usb 6-1: new full-speed USB device number 60 using dummy_hcd [ 1890.176435][T23338] EXT4-fs (loop4): Remounting filesystem read-only [ 1890.183380][T23338] EXT4-fs warning (device loop4): empty_inline_dir:1894: bad inline directory (dir #12) - inode 4278190093, rec_len 255, name_len 0inline size 60 [ 1890.232119][T23334] overlayfs: failed to resolve './bus': -2 [ 1892.821317][T18989] attempt to access beyond end of device [ 1892.821317][T18989] loop0: rw=2049, want=40976, limit=40427 [ 1893.009180][T23347] loop5: detected capacity change from 0 to 40427 [ 1893.026707][T23347] F2FS-fs (loop5): fault_injection options not supported [ 1893.039845][T23347] F2FS-fs (loop5): fault_type options not supported [ 1893.059182][T23347] F2FS-fs (loop5): invalid crc value [ 1893.135405][ T30] audit: type=1326 audit(1782840411.457:13419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23356 comm="syz.1.6850" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff10643fe59 code=0x7ffc0000 [ 1893.144182][T23347] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1893.160541][ T30] audit: type=1326 audit(1782840411.457:13420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23356 comm="syz.1.6850" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff10643fe59 code=0x7ffc0000 [ 1893.160573][ T30] audit: type=1326 audit(1782840411.457:13421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23356 comm="syz.1.6850" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7ff10643fe59 code=0x7ffc0000 [ 1893.160596][ T30] audit: type=1326 audit(1782840411.457:13422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23356 comm="syz.1.6850" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff10643fe59 code=0x7ffc0000 [ 1893.160616][ T30] audit: type=1326 audit(1782840411.457:13423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23356 comm="syz.1.6850" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff10643fe59 code=0x7ffc0000 [ 1893.160637][ T30] audit: type=1326 audit(1782840411.457:13424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23356 comm="syz.1.6850" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7ff10643fe59 code=0x7ffc0000 [ 1893.254901][T23353] loop4: detected capacity change from 0 to 40427 [ 1893.267240][T10108] usb 2-1: new full-speed USB device number 55 using dummy_hcd [ 1893.343096][T23347] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1893.528380][T23353] F2FS-fs (loop4): invalid crc value [ 1893.533388][ T30] audit: type=1326 audit(1782840411.457:13425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23356 comm="syz.1.6850" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff10643fe59 code=0x7ffc0000 [ 1893.549919][T23353] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1893.579629][ T30] audit: type=1326 audit(1782840411.457:13426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23356 comm="syz.1.6850" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff10643fe59 code=0x7ffc0000 [ 1893.605267][ T30] audit: type=1326 audit(1782840411.457:13427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23356 comm="syz.1.6850" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7ff10643fe59 code=0x7ffc0000 [ 1893.617938][T23353] F2FS-fs (loop4): Start checkpoint disabled! [ 1893.637595][T23353] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 1893.770272][T23365] attempt to access beyond end of device [ 1893.770272][T23365] loop4: rw=2049, want=77960, limit=40427 [ 1893.782713][T23365] attempt to access beyond end of device [ 1893.782713][T23365] loop4: rw=2049, want=77952, limit=40427 [ 1894.312778][T18294] attempt to access beyond end of device [ 1894.312778][T18294] loop4: rw=2049, want=40976, limit=40427 [ 1894.346388][T23376] loop1: detected capacity change from 0 to 16 [ 1894.371399][T23376] erofs: (device loop1): mounted with root inode @ nid 36. [ 1894.455996][T23371] loop0: detected capacity change from 0 to 40427 [ 1894.597642][T23371] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 1894.604128][T23371] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 1894.613384][T23371] F2FS-fs (loop0): invalid crc value [ 1895.474015][T23384] netlink: 532 bytes leftover after parsing attributes in process `syz.1.6855'. [ 1896.625461][T23389] loop4: detected capacity change from 0 to 40427 [ 1896.645797][T23371] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 1896.691987][T23389] F2FS-fs (loop4): invalid crc value [ 1896.899334][T23389] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1896.993583][T23389] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1897.359164][ T428] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1897.545753][T22286] attempt to access beyond end of device [ 1897.545753][T22286] loop4: rw=2049, want=45104, limit=40427 [ 1897.555524][T23393] loop5: detected capacity change from 0 to 40427 [ 1897.587374][T23400] loop1: detected capacity change from 0 to 16 [ 1897.622776][T23400] erofs: (device loop1): mounted with root inode @ nid 36. [ 1897.622803][T23393] F2FS-fs (loop5): Invalid SB checksum offset: 0 [ 1897.638440][T23400] erofs: (device loop1): erofs_read_inode: bogus i_mode (4355) @ nid 46 [ 1897.650191][T23393] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 1897.703045][T23393] F2FS-fs (loop5): invalid crc value [ 1897.922004][T23393] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 1898.050455][T23393] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 1898.094643][T23393] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1898.139085][ T428] usb 3-1: device not accepting address 42, error -71 [ 1898.209667][T23393] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 1898.465828][T23419] attempt to access beyond end of device [ 1898.465828][T23419] loop5: rw=16812033, want=78672, limit=40427 [ 1898.758652][T23417] loop4: detected capacity change from 0 to 40427 [ 1898.781702][T23417] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 1898.788955][T21257] attempt to access beyond end of device [ 1898.788955][T21257] loop5: rw=2049, want=45104, limit=40427 [ 1898.799843][T23417] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 1898.833323][T23417] F2FS-fs (loop4): invalid crc value [ 1899.158223][T23417] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 1899.219700][T23417] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 1899.231291][T23417] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1899.301274][T23417] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 1899.449388][T23429] loop5: detected capacity change from 0 to 40427 [ 1899.557681][T23434] attempt to access beyond end of device [ 1899.557681][T23434] loop4: rw=16812033, want=78672, limit=40427 [ 1899.774304][T23429] F2FS-fs (loop5): invalid crc value [ 1899.779912][T22286] attempt to access beyond end of device [ 1899.779912][T22286] loop4: rw=2049, want=45104, limit=40427 [ 1899.803440][T23429] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1899.868933][T23429] F2FS-fs (loop5): Start checkpoint disabled! [ 1899.905256][T23429] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 1900.131950][T23445] attempt to access beyond end of device [ 1900.131950][T23445] loop5: rw=2049, want=77960, limit=40427 [ 1900.144357][T23445] attempt to access beyond end of device [ 1900.144357][T23445] loop5: rw=2049, want=77952, limit=40427 [ 1900.718416][ T1474] attempt to access beyond end of device [ 1900.718416][ T1474] loop5: rw=2049, want=40976, limit=40427 [ 1901.537709][T23456] loop0: detected capacity change from 0 to 40427 [ 1901.544995][T23440] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 1903.228790][T23460] loop4: detected capacity change from 0 to 1024 [ 1903.731265][T23456] F2FS-fs (loop0): invalid crc value [ 1903.771058][T23460] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,i_version,i_version,nojournal_checksum,lazytime,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 1903.799199][T23456] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1903.843695][T23456] F2FS-fs (loop0): Start checkpoint disabled! [ 1903.850534][T23456] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 1904.163484][T23485] attempt to access beyond end of device [ 1904.163484][T23485] loop0: rw=2049, want=77960, limit=40427 [ 1904.183330][T10108] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1904.195743][T23485] attempt to access beyond end of device [ 1904.195743][T23485] loop0: rw=2049, want=77952, limit=40427 [ 1905.656399][T10108] usb 6-1: Using ep0 maxpacket: 32 [ 1905.786417][T10108] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1905.805385][T10108] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1905.818204][T23497] loop1: detected capacity change from 0 to 40427 [ 1905.832454][T10108] usb 6-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 1905.850368][T10108] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1905.863114][T10108] usb 6-1: config 0 descriptor?? [ 1905.955784][T23497] F2FS-fs (loop1): invalid crc value [ 1905.965282][T23497] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1906.033856][T23497] F2FS-fs (loop1): Start checkpoint disabled! [ 1906.052670][T23497] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 1906.155709][T10108] usb 6-1: USB disconnect, device number 61 [ 1906.254005][T23507] attempt to access beyond end of device [ 1906.254005][T23507] loop1: rw=2049, want=77960, limit=40427 [ 1906.266442][T23507] attempt to access beyond end of device [ 1906.266442][T23507] loop1: rw=2049, want=77952, limit=40427 [ 1906.352296][T15800] attempt to access beyond end of device [ 1906.352296][T15800] loop0: rw=2049, want=40976, limit=40427 [ 1906.729137][T23514] loop0: detected capacity change from 0 to 128 [ 1906.791996][T23514] EXT4-fs (loop0): Unrecognized mount option "euid=00000000000000000000" or missing value [ 1906.816836][T15800] attempt to access beyond end of device [ 1906.816836][T15800] loop1: rw=2049, want=40976, limit=40427 [ 1906.923301][T23518] ±ÿþ€: renamed from team_slave_1 [ 1907.527671][T23533] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=48 sclass=netlink_tcpdiag_socket pid=23533 comm=syz.1.6886 [ 1908.518629][T23534] loop4: detected capacity change from 0 to 40427 [ 1908.584195][T23534] F2FS-fs (loop4): invalid crc value [ 1908.632535][T23537] loop5: detected capacity change from 0 to 512 [ 1908.672870][T23534] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1908.715973][T23534] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1908.759832][T23537] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 1908.815754][T23537] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.6889: bg 0: block 393: padding at end of block bitmap is not set [ 1908.862923][T23537] EXT4-fs (loop5): Remounting filesystem read-only [ 1908.871504][T23526] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 1908.949348][T23537] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 1908.967647][T23537] EXT4-fs (loop5): Remounting filesystem read-only [ 1908.982466][T23537] EXT4-fs (loop5): 2 truncates cleaned up [ 1908.989571][T22286] attempt to access beyond end of device [ 1908.989571][T22286] loop4: rw=2049, want=45104, limit=40427 [ 1908.998096][T23537] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodiscard,jqfmt=vfsv0,errors=remount-ro,noquota,. Quota mode: writeback. [ 1910.059692][T23554] EXT4-fs error (device loop5): empty_inline_dir:1887: inode #12: block 7: comm syz.5.6889: bad entry in directory: rec_len % 4 != 0 - offset=4, inode=4278190093, rec_len=255, size=60 fake=0 [ 1910.161808][T23554] EXT4-fs (loop5): Remounting filesystem read-only [ 1910.168630][T23554] EXT4-fs warning (device loop5): empty_inline_dir:1894: bad inline directory (dir #12) - inode 4278190093, rec_len 255, name_len 0inline size 60 [ 1910.541646][T20817] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1910.844887][T20817] usb 3-1: Using ep0 maxpacket: 32 [ 1910.975103][T20817] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1911.018699][T20817] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1911.093113][T20817] usb 3-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 1911.167680][T20817] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1911.292324][T20817] usb 3-1: config 0 descriptor?? [ 1911.376239][T23572] loop4: detected capacity change from 0 to 16 [ 1911.496221][T23572] erofs: (device loop4): mounted with root inode @ nid 36. [ 1911.571240][T20817] usb 3-1: USB disconnect, device number 44 [ 1912.018033][T23574] loop0: detected capacity change from 0 to 40427 [ 1912.036682][T23574] F2FS-fs (loop0): invalid crc value [ 1912.071914][T23574] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1912.135898][T23574] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1 [ 1912.157875][T23574] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1913.524962][T18989] attempt to access beyond end of device [ 1913.524962][T18989] loop0: rw=2049, want=40976, limit=40427 [ 1914.065327][T23612] loop1: detected capacity change from 0 to 512 [ 1914.254970][T23612] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 1914.909466][T23612] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.6906: bg 0: block 393: padding at end of block bitmap is not set [ 1914.928734][T23612] EXT4-fs (loop1): Remounting filesystem read-only [ 1914.936439][T23612] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 1914.949825][T23612] EXT4-fs (loop1): Remounting filesystem read-only [ 1914.959902][T23612] EXT4-fs (loop1): 2 truncates cleaned up [ 1914.972397][T23612] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodiscard,jqfmt=vfsv0,errors=remount-ro,noquota,. Quota mode: writeback. [ 1914.993505][ T819] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1915.203276][T23621] EXT4-fs error (device loop1): empty_inline_dir:1887: inode #12: block 7: comm syz.1.6906: bad entry in directory: rec_len % 4 != 0 - offset=4, inode=4278190093, rec_len=255, size=60 fake=0 [ 1915.223040][T23621] EXT4-fs (loop1): Remounting filesystem read-only [ 1915.229807][T23621] EXT4-fs warning (device loop1): empty_inline_dir:1894: bad inline directory (dir #12) - inode 4278190093, rec_len 255, name_len 0inline size 60 [ 1915.459885][ T311] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1915.536180][T23607] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 1915.730058][ T311] usb 1-1: Using ep0 maxpacket: 32 [ 1915.860095][ T311] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1915.905251][ T311] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1915.970065][ T311] usb 1-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 1915.979413][ T311] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1915.991185][ T311] usb 1-1: config 0 descriptor?? [ 1917.176991][ T39] usb 1-1: USB disconnect, device number 52 [ 1917.252066][ T1212] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1917.300791][ T819] usb 6-1: unable to read config index 0 descriptor/all [ 1917.308017][ T819] usb 6-1: can't read configurations, error -71 [ 1919.383512][T23646] 9pnet_virtio: no channels available for device syz [ 1919.410233][T23646] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1919.418767][T23646] overlayfs: overlapping lowerdir path [ 1919.517640][ T2530] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1919.592332][T23653] loop4: detected capacity change from 0 to 512 [ 1919.621998][T23653] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 1919.632829][T23653] EXT4-fs (loop4): invalid journal inode [ 1919.638577][T23653] EXT4-fs (loop4): can't get journal size [ 1920.172979][T23658] loop0: detected capacity change from 0 to 128 [ 1920.189609][T23653] EXT4-fs (loop4): 1 truncate cleaned up [ 1920.197798][T23653] EXT4-fs (loop4): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none. [ 1920.228573][T23658] EXT4-fs (loop0): Unrecognized mount option "euid=00000000000000000000" or missing value [ 1920.236126][ T2530] usb 2-1: Using ep0 maxpacket: 32 [ 1920.366137][ T2530] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1920.376378][ T2530] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1920.385429][ T2530] usb 2-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 1920.394775][ T2530] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1920.408128][ T2530] usb 2-1: config 0 descriptor?? [ 1920.498849][ T2530] usb 2-1: can't set config #0, error -71 [ 1920.505546][ T2530] usb 2-1: USB disconnect, device number 56 [ 1920.736398][T23671] loop4: detected capacity change from 0 to 40427 [ 1920.808519][T10108] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 1920.854740][T23671] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 1920.882874][T23675] loop5: detected capacity change from 0 to 40427 [ 1920.890768][T23671] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 1920.900207][T23671] F2FS-fs (loop4): invalid crc value [ 1920.906951][T23671] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 1920.936674][T23675] F2FS-fs (loop5): invalid crc value [ 1920.937336][T23671] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 1920.945379][T23675] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1920.949250][T23671] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1920.982084][T23671] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 1921.028176][T23675] F2FS-fs (loop5): Start checkpoint disabled! [ 1921.505953][T23675] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 1921.599484][T23675] attempt to access beyond end of device [ 1921.599484][T23675] loop5: rw=2049, want=77960, limit=40427 [ 1921.611962][T23675] attempt to access beyond end of device [ 1921.611962][T23675] loop5: rw=2049, want=77952, limit=40427 [ 1921.861284][ T431] attempt to access beyond end of device [ 1921.861284][ T431] loop5: rw=2049, want=40976, limit=40427 [ 1921.875227][T23699] attempt to access beyond end of device [ 1921.875227][T23699] loop4: rw=16812033, want=78672, limit=40427 [ 1921.888417][T23698] loop1: detected capacity change from 0 to 4096 [ 1921.905836][T23698] overlayfs: failed to resolve './bus': -2 [ 1922.263305][ T39] usb 2-1: new full-speed USB device number 57 using dummy_hcd [ 1922.315993][T22286] attempt to access beyond end of device [ 1922.315993][T22286] loop4: rw=2049, want=45104, limit=40427 [ 1922.467500][ T321] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1922.554202][T10108] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1922.563450][T10108] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1922.575623][T10108] usb 3-1: Product: syz [ 1922.579974][T10108] usb 3-1: Manufacturer: syz [ 1922.584619][T10108] usb 3-1: SerialNumber: syz [ 1922.857484][ T321] usb 1-1: config 0 interface 0 altsetting 4 has an invalid endpoint with address 0x48, skipping [ 1922.868194][ T321] usb 1-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1922.882214][ T321] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1922.888865][ T321] usb 1-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 1922.898276][ T321] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1922.907513][ T321] usb 1-1: config 0 descriptor?? [ 1922.955809][ T321] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1923.107862][T10108] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 45 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 1924.353102][T23716] 9pnet_virtio: no channels available for device syz [ 1924.360890][T23716] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1924.369138][T23716] overlayfs: overlapping lowerdir path [ 1924.444868][T23712] UDC core: couldn't find an available UDC or it's busy: -16 [ 1924.456309][T23712] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1924.772047][ T2530] usb 1-1: USB disconnect, device number 53 [ 1924.980563][ T39] usb 2-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1924.989722][ T39] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1924.997971][ T39] usb 2-1: Product: syz [ 1925.002372][ T39] usb 2-1: Manufacturer: syz [ 1925.006969][ T39] usb 2-1: SerialNumber: syz [ 1925.133119][ T39] usblp 2-1:1.0: usblp1: USB Unidirectional printer dev 57 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 1925.164706][ T39] usb 2-1: USB disconnect, device number 57 [ 1925.175640][ T39] usblp1: removed [ 1925.218784][ T2530] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1925.262231][ T4523] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 1925.478720][ T2530] usb 1-1: Using ep0 maxpacket: 32 [ 1925.522190][ T4523] usb 6-1: Using ep0 maxpacket: 16 [ 1925.577578][T10108] usb 3-1: USB disconnect, device number 45 [ 1925.596784][T10108] usblp0: removed [ 1925.608792][ T2530] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1925.628464][ T2530] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1925.652121][ T4523] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1925.662661][ T2530] usb 1-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 1925.678449][ T4523] usb 6-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1925.698044][ T2530] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1925.717027][ T4523] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1925.723678][ T4523] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1925.739244][ T2530] usb 1-1: config 0 descriptor?? [ 1925.760434][ T4523] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1925.771749][ T4523] usb 6-1: config 0 descriptor?? [ 1925.815128][ T4523] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1926.030830][ T4523] usb 1-1: USB disconnect, device number 54 [ 1926.109038][T23744] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6938'. [ 1926.264758][T23746] loop1: detected capacity change from 0 to 40427 [ 1926.327527][T23746] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 1926.350592][T23746] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 1926.367802][T23746] F2FS-fs (loop1): invalid crc value [ 1926.374897][T23746] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 1926.406806][T23746] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 1926.414060][T23746] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1926.454752][T23746] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 1926.872583][T23762] UDC core: couldn't find an available UDC or it's busy: -16 [ 1926.897760][T23762] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1926.931948][T23765] loop4: detected capacity change from 0 to 4096 [ 1927.218490][T23765] overlayfs: failed to resolve './bus': -2 [ 1927.567046][T23756] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 1927.672926][ T4523] usb 5-1: new full-speed USB device number 69 using dummy_hcd [ 1928.178031][T23773] loop1: detected capacity change from 0 to 256 [ 1928.234499][T10108] usb 6-1: USB disconnect, device number 64 [ 1928.772022][ T4523] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1928.787810][ T4523] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1928.812494][ T4523] usb 5-1: Product: syz [ 1928.823379][ T4523] usb 5-1: Manufacturer: syz [ 1928.836872][ T4523] usb 5-1: SerialNumber: syz [ 1929.206411][T23797] loop0: detected capacity change from 0 to 512 [ 1929.287771][T23797] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 1929.307227][T23797] EXT4-fs (loop0): invalid journal inode [ 1929.312933][T23797] EXT4-fs (loop0): can't get journal size [ 1929.344225][T23797] EXT4-fs (loop0): 1 truncate cleaned up [ 1929.354450][T23797] EXT4-fs (loop0): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none. [ 1929.403948][T23797] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6952'. [ 1929.508720][T23805] loop5: detected capacity change from 0 to 512 [ 1929.538821][T23805] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 1929.556134][T23805] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.6955: bg 0: block 393: padding at end of block bitmap is not set [ 1929.570701][T23805] EXT4-fs (loop5): Remounting filesystem read-only [ 1929.577728][T23805] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 1929.586689][T23805] EXT4-fs (loop5): Remounting filesystem read-only [ 1929.593390][T23805] EXT4-fs (loop5): 2 truncates cleaned up [ 1929.599411][T23805] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodiscard,jqfmt=vfsv0,errors=remount-ro,noquota,. Quota mode: writeback. [ 1929.668733][T23809] loop0: detected capacity change from 0 to 40427 [ 1929.676104][T23768] UDC core: couldn't find an available UDC or it's busy: -16 [ 1929.683572][T23768] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1929.852486][T23812] EXT4-fs error (device loop5): empty_inline_dir:1887: inode #12: block 7: comm syz.5.6955: bad entry in directory: rec_len % 4 != 0 - offset=4, inode=4278190093, rec_len=255, size=60 fake=0 [ 1929.873513][T23812] EXT4-fs (loop5): Remounting filesystem read-only [ 1929.880110][T23812] EXT4-fs warning (device loop5): empty_inline_dir:1894: bad inline directory (dir #12) - inode 4278190093, rec_len 255, name_len 0inline size 60 [ 1930.007516][T23809] F2FS-fs (loop0): invalid crc value [ 1930.705662][T23809] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1930.710634][ T321] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1930.732228][T23809] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1 [ 1930.739356][T23809] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1930.865906][ T4523] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 69 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 1930.886936][ T4523] usb 5-1: USB disconnect, device number 69 [ 1930.896334][ T4523] usblp0: removed [ 1931.249642][T23832] ±ÿþ€: renamed from team_slave_1 [ 1931.717916][ T321] usb 3-1: Using ep0 maxpacket: 32 [ 1931.956269][ T321] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1931.966391][ T321] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1932.214401][ T321] usb 3-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 1932.253455][ T321] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1932.291350][ T321] usb 3-1: config 0 descriptor?? [ 1932.573099][ T321] usb 3-1: USB disconnect, device number 46 [ 1932.595290][ T819] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 1933.006973][ T819] usb 6-1: config 0 interface 0 altsetting 4 has an invalid endpoint with address 0x48, skipping [ 1933.025390][ T819] usb 6-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1933.060487][ T819] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1933.071314][ T819] usb 6-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 1933.091583][ T819] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1933.103760][ T819] usb 6-1: config 0 descriptor?? [ 1933.213173][ T819] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1933.479375][T23855] loop4: detected capacity change from 0 to 40427 [ 1933.541001][T23855] F2FS-fs (loop4): invalid crc value [ 1933.571671][T23855] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1933.635852][T23855] F2FS-fs (loop4): Cannot turn on quotas: -2 on 1 [ 1933.654489][T23855] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1935.504013][ T311] usb 6-1: USB disconnect, device number 65 [ 1935.744997][T23892] 9pnet_virtio: no channels available for device syz [ 1935.756695][T23892] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1935.765012][T23892] overlayfs: overlapping lowerdir path [ 1936.153067][T23883] loop0: detected capacity change from 0 to 40427 [ 1936.298937][T23883] F2FS-fs (loop0): invalid crc value [ 1936.820775][T23883] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1936.930605][T23883] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1 [ 1936.958674][T23883] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1937.148211][T23904] loop1: detected capacity change from 0 to 40427 [ 1937.166140][T23904] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 1937.174921][T23904] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 1937.188495][T23904] F2FS-fs (loop1): invalid crc value [ 1937.245963][T23904] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 1937.262157][T23910] loop5: detected capacity change from 0 to 40427 [ 1937.289869][T23910] F2FS-fs (loop5): invalid crc value [ 1937.327146][T23910] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1937.368002][T23904] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 1937.380308][T23920] fuse: Bad value for 'fd' [ 1937.400145][T23904] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1937.409005][T23910] F2FS-fs (loop5): Start checkpoint disabled! [ 1937.437536][T23910] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 1937.478809][T23904] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 1938.859077][T21939] attempt to access beyond end of device [ 1938.859077][T21939] loop1: rw=2049, want=45104, limit=40427 [ 1939.008517][ T1474] attempt to access beyond end of device [ 1939.008517][ T1474] loop5: rw=2049, want=40976, limit=40427 [ 1939.289406][ T556] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 1939.694432][T23933] loop5: detected capacity change from 0 to 40427 [ 1939.715950][T23933] F2FS-fs (loop5): invalid crc value [ 1939.740704][T23933] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1939.790617][T23933] F2FS-fs (loop5): Cannot turn on quotas: -2 on 1 [ 1939.815383][T23933] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1939.874461][ T556] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1939.940134][ T556] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1939.941170][T18989] attempt to access beyond end of device [ 1939.941170][T18989] loop0: rw=2049, want=40976, limit=40427 [ 1939.949254][ T556] usb 3-1: Product: syz [ 1939.963862][ T556] usb 3-1: Manufacturer: syz [ 1939.968477][ T556] usb 3-1: SerialNumber: syz [ 1940.614854][T23960] loop4: detected capacity change from 0 to 512 [ 1940.653011][T23950] loop0: detected capacity change from 0 to 40427 [ 1940.672539][T23961] UDC core: couldn't find an available UDC or it's busy: -16 [ 1940.680841][T23960] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 1940.691437][T23961] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1940.700831][T23950] F2FS-fs (loop0): invalid crc value [ 1940.720790][T23960] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.6994: bg 0: block 393: padding at end of block bitmap is not set [ 1940.735810][T23960] EXT4-fs (loop4): Remounting filesystem read-only [ 1940.742544][T23950] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1940.742949][T23960] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 1940.773365][T23960] EXT4-fs (loop4): Remounting filesystem read-only [ 1940.780411][T23960] EXT4-fs (loop4): 2 truncates cleaned up [ 1940.786408][T23960] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodiscard,jqfmt=vfsv0,errors=remount-ro,noquota,. Quota mode: writeback. [ 1940.801348][T23950] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1 [ 1940.822547][T23950] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1942.897199][T23968] EXT4-fs error (device loop4): empty_inline_dir:1887: inode #12: block 7: comm syz.4.6994: bad entry in directory: rec_len % 4 != 0 - offset=4, inode=4278190093, rec_len=255, size=60 fake=0 [ 1943.817850][ T556] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 47 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 1943.861600][ T556] usb 3-1: USB disconnect, device number 47 [ 1943.878169][ T556] usblp0: removed [ 1943.914160][T23968] EXT4-fs (loop4): Remounting filesystem read-only [ 1943.920905][T23968] EXT4-fs warning (device loop4): empty_inline_dir:1894: bad inline directory (dir #12) - inode 4278190093, rec_len 255, name_len 0inline size 60 [ 1943.984346][T18989] attempt to access beyond end of device [ 1943.984346][T18989] loop0: rw=2049, want=40976, limit=40427 [ 1947.017276][T21257] attempt to access beyond end of device [ 1947.017276][T21257] loop5: rw=2049, want=40976, limit=40427 [ 1949.394409][T24016] 9pnet_virtio: no channels available for device syz [ 1950.508169][T24016] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1950.516726][T24016] overlayfs: overlapping lowerdir path [ 1951.536079][T24040] loop4: detected capacity change from 0 to 512 [ 1951.545904][T24020] loop5: detected capacity change from 0 to 40427 [ 1951.621576][T24026] loop1: detected capacity change from 0 to 40427 [ 1951.650735][T24040] EXT4-fs (loop4): Ignoring removed oldalloc option [ 1951.658719][T24020] F2FS-fs (loop5): invalid crc value [ 1951.673128][T24026] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 1951.679667][T24040] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1951.710738][T24026] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 1951.723822][T24030] loop0: detected capacity change from 0 to 40427 [ 1951.731914][T24026] F2FS-fs (loop1): invalid crc value [ 1951.752309][T24030] F2FS-fs (loop0): invalid crc value [ 1951.758562][T24020] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1951.776695][T24026] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 1951.788658][T24040] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,oldalloc,barrier=0x0000000000000009,,errors=continue. Quota mode: writeback. [ 1951.805762][T24030] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1951.832884][T24040] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1951.899624][T24026] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 1951.907684][T24026] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1951.909761][T24020] F2FS-fs (loop5): Start checkpoint disabled! [ 1951.930025][T24030] F2FS-fs (loop0): Start checkpoint disabled! [ 1951.937093][T24020] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 1951.966956][T24030] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 1956.769029][T24055] attempt to access beyond end of device [ 1956.769029][T24055] loop1: rw=16812033, want=78672, limit=40427 [ 1956.872071][T24056] EXT4-fs error (device loop4): ext4_do_update_inode:5260: inode #18: comm syz.4.7016: corrupted inode contents [ 1956.931640][T24056] EXT4-fs error (device loop4): ext4_dirty_inode:6108: inode #18: comm syz.4.7016: mark_inode_dirty error [ 1956.945287][T24056] EXT4-fs error (device loop4): ext4_do_update_inode:5260: inode #18: comm syz.4.7016: corrupted inode contents [ 1956.958091][T24056] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2952: inode #18: comm syz.4.7016: mark_inode_dirty error [ 1956.972024][T24056] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2955: inode #18: comm syz.4.7016: mark inode dirty (error -117) [ 1956.984878][T24056] EXT4-fs warning (device loop4): ext4_evict_inode:305: xattr delete (err -117) [ 1957.053891][T21939] attempt to access beyond end of device [ 1957.053891][T21939] loop1: rw=2049, want=45104, limit=40427 [ 1957.081199][T15800] attempt to access beyond end of device [ 1957.081199][T15800] loop5: rw=2049, want=40976, limit=40427 [ 1957.245549][T15800] attempt to access beyond end of device [ 1957.245549][T15800] loop0: rw=2049, want=40976, limit=40427 [ 1957.247025][T24062] loop1: detected capacity change from 0 to 512 [ 1957.283357][T24064] loop4: detected capacity change from 0 to 512 [ 1957.308899][T24066] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7019'. [ 1957.314529][T24064] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 1957.334046][T24064] EXT4-fs (loop4): invalid journal inode [ 1957.343331][T24062] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 1957.367884][T24064] EXT4-fs (loop4): can't get journal size [ 1957.393148][T24064] EXT4-fs (loop4): 1 truncate cleaned up [ 1957.398935][T24064] EXT4-fs (loop4): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none. [ 1957.410888][T24062] EXT4-fs (loop1): invalid journal inode [ 1957.416864][T24062] EXT4-fs (loop1): can't get journal size [ 1958.444237][T24062] EXT4-fs (loop1): 1 truncate cleaned up [ 1958.556482][T24062] EXT4-fs (loop1): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none. [ 1959.149489][T24101] loop4: detected capacity change from 0 to 4096 [ 1961.716166][T24107] input: syz0 as /devices/virtual/input/input17 [ 1961.761777][T24109] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7032'. [ 1961.824381][T24101] overlayfs: failed to resolve './bus': -2 [ 1961.980196][T24111] loop1: detected capacity change from 0 to 40427 [ 1962.225461][T24111] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 1962.270397][T24111] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 1962.339944][ T2064] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1962.347177][T24111] F2FS-fs (loop1): invalid crc value [ 1962.407477][T24111] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 1962.599756][ T2064] usb 5-1: Using ep0 maxpacket: 8 [ 1962.741750][ T2064] usb 5-1: config 3 has an invalid interface number: 45 but max is 0 [ 1962.985594][ T2064] usb 5-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 1963.012461][T24111] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 1963.034521][ T2064] usb 5-1: config 3 has no interface number 0 [ 1963.040652][ T2064] usb 5-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1963.076894][T24111] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1963.384901][ T2064] usb 5-1: config 3 interface 45 has no altsetting 0 [ 1963.403768][T24146] loop0: detected capacity change from 0 to 256 [ 1963.414492][T24147] attempt to access beyond end of device [ 1963.414492][T24147] loop1: rw=16812033, want=78672, limit=40427 [ 1963.491286][ T2064] usb 5-1: string descriptor 0 read error: -71 [ 1963.600775][ T2064] usb 5-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 1963.619927][ T2064] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1963.661267][ T2064] usb 5-1: can't set config #3, error -71 [ 1963.671876][ T2064] usb 5-1: USB disconnect, device number 70 [ 1963.789286][T24136] loop4: detected capacity change from 0 to 40427 [ 1963.812481][T24139] loop5: detected capacity change from 0 to 40427 [ 1963.820784][T21939] attempt to access beyond end of device [ 1963.820784][T21939] loop1: rw=2049, want=45104, limit=40427 [ 1963.861874][T24136] F2FS-fs (loop4): fault_injection options not supported [ 1963.870290][T24139] F2FS-fs (loop5): invalid crc value [ 1963.878188][T24136] F2FS-fs (loop4): fault_type options not supported [ 1963.893921][T24136] F2FS-fs (loop4): invalid crc value [ 1963.900021][T24139] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1963.922045][T24136] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1963.974380][T24139] F2FS-fs (loop5): Cannot turn on quotas: -2 on 1 [ 1963.983260][T24136] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1963.995719][T24139] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1965.203075][T21257] attempt to access beyond end of device [ 1965.203075][T21257] loop5: rw=2049, want=40976, limit=40427 [ 1966.377309][T24187] loop1: detected capacity change from 0 to 512 [ 1966.401631][T18620] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1966.420762][T24187] EXT4-fs (loop1): Ignoring removed oldalloc option [ 1966.452946][T24187] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1966.538432][T24183] loop0: detected capacity change from 0 to 40427 [ 1966.538520][T24187] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,oldalloc,barrier=0x0000000000000009,,errors=continue. Quota mode: writeback. [ 1966.560625][T24187] ext4 filesystem being mounted at /114/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1966.589176][T24183] F2FS-fs (loop0): invalid crc value [ 1966.615775][T24183] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1966.620991][T24197] loop5: detected capacity change from 0 to 4096 [ 1966.633987][T24197] overlayfs: failed to resolve './bus': -2 [ 1966.649834][T24183] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1 [ 1966.656936][T24183] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1968.600272][ T2064] usb 6-1: new full-speed USB device number 66 using dummy_hcd [ 1971.064496][ T556] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1971.144379][T18989] attempt to access beyond end of device [ 1971.144379][T18989] loop0: rw=2049, want=40976, limit=40427 [ 1971.178514][T18620] usb 5-1: unable to read config index 0 descriptor/all [ 1971.185548][T18620] usb 5-1: can't read configurations, error -71 [ 1971.304038][T24217] loop1: detected capacity change from 0 to 512 [ 1971.498639][T24221] 9pnet_virtio: no channels available for device syz [ 1971.511838][T24221] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1971.520187][T24221] overlayfs: overlapping lowerdir path [ 1972.922138][T24224] loop5: detected capacity change from 0 to 512 [ 1972.985356][T24207] loop4: detected capacity change from 0 to 40427 [ 1972.988719][T24217] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 1973.000377][T24224] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 1973.010206][T24224] EXT4-fs (loop5): invalid journal inode [ 1973.014584][T24217] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.7061: bg 0: block 393: padding at end of block bitmap is not set [ 1973.016064][T24224] EXT4-fs (loop5): can't get journal size [ 1973.030414][T24217] EXT4-fs (loop1): Remounting filesystem read-only [ 1973.040815][T24224] EXT4-fs (loop5): 1 truncate cleaned up [ 1973.042697][T24217] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 1973.049416][T24207] F2FS-fs (loop4): fault_injection options not supported [ 1973.057402][T24224] EXT4-fs (loop5): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none. [ 1973.075594][T24217] EXT4-fs (loop1): Remounting filesystem read-only [ 1973.082274][T24217] EXT4-fs (loop1): 2 truncates cleaned up [ 1973.083900][T24207] F2FS-fs (loop4): fault_type options not supported [ 1973.088060][T24217] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodiscard,jqfmt=vfsv0,errors=remount-ro,noquota,. Quota mode: writeback. [ 1973.176485][T24207] F2FS-fs (loop4): invalid crc value [ 1973.199998][T24207] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1973.242282][T24207] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1973.350694][T24239] EXT4-fs error (device loop1): empty_inline_dir:1887: inode #12: block 7: comm syz.1.7061: bad entry in directory: rec_len % 4 != 0 - offset=4, inode=4278190093, rec_len=255, size=60 fake=0 [ 1973.370223][T24239] EXT4-fs (loop1): Remounting filesystem read-only [ 1973.376780][T24239] EXT4-fs warning (device loop1): empty_inline_dir:1894: bad inline directory (dir #12) - inode 4278190093, rec_len 255, name_len 0inline size 60 [ 1974.650157][T24259] 9pnet_virtio: no channels available for device syz [ 1974.695421][T24259] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1974.703744][T24259] overlayfs: overlapping lowerdir path [ 1974.727630][ T1212] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1975.807823][T24268] loop5: detected capacity change from 0 to 512 [ 1975.843952][T24268] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 1975.925886][T24270] netlink: 112 bytes leftover after parsing attributes in process `syz.2.7075'. [ 1975.963076][T24268] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.7074: bg 0: block 393: padding at end of block bitmap is not set [ 1975.977505][ T1212] usb 1-1: Using ep0 maxpacket: 16 [ 1976.005413][T24268] EXT4-fs (loop5): Remounting filesystem read-only [ 1976.029703][T24268] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 1976.057944][T24274] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7076'. [ 1976.067730][T24268] EXT4-fs (loop5): Remounting filesystem read-only [ 1976.076821][T24276] loop4: detected capacity change from 0 to 512 [ 1976.084351][T24268] EXT4-fs (loop5): 2 truncates cleaned up [ 1976.105682][T24262] loop1: detected capacity change from 0 to 40427 [ 1976.107080][ T1212] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1976.123040][T24268] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodiscard,jqfmt=vfsv0,errors=remount-ro,noquota,. Quota mode: writeback. [ 1976.123131][ T1212] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1976.150771][T24276] EXT4-fs (loop4): Ignoring removed oldalloc option [ 1976.152766][ T1212] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1976.157623][T24276] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1976.166926][ T1212] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1976.188080][ T1212] usb 1-1: config 0 descriptor?? [ 1976.198330][T24268] EXT4-fs error (device loop5): empty_inline_dir:1887: inode #12: block 7: comm syz.5.7074: bad entry in directory: rec_len % 4 != 0 - offset=4, inode=4278190093, rec_len=255, size=60 fake=0 [ 1976.204418][T24262] F2FS-fs (loop1): invalid crc value [ 1976.222358][T24268] EXT4-fs (loop5): Remounting filesystem read-only [ 1976.223483][T24276] ================================================================== [ 1976.228965][T24268] EXT4-fs warning (device loop5): empty_inline_dir:1894: bad inline directory (dir #12) - inode 4278190093, rec_len 255, name_len 0inline size 60 [ 1976.236968][T24276] BUG: KASAN: use-after-free in __ext4_iget+0x2bb/0x3e80 [ 1976.258764][T24276] Read of size 8 at addr ffff888135692968 by task syz.4.7077/24276 [ 1976.266656][T24276] [ 1976.268985][T24276] CPU: 0 PID: 24276 Comm: syz.4.7077 Not tainted syzkaller #0 [ 1976.276450][T24276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1976.278035][T24262] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1976.286524][T24276] Call Trace: [ 1976.286600][T24276] [ 1976.299017][T24276] __dump_stack+0x21/0x30 [ 1976.303494][T24276] dump_stack_lvl+0x110/0x170 [ 1976.308169][T24276] ? show_regs_print_info+0x20/0x20 [ 1976.313413][T24276] ? load_image+0x3f0/0x3f0 [ 1976.317930][T24276] ? _raw_spin_lock+0x94/0xf0 [ 1976.319975][T24262] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1 [ 1976.322700][T24276] print_address_description+0x7f/0x2c0 [ 1976.330200][T24262] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1976.334619][T24276] ? __ext4_iget+0x2bb/0x3e80 [ 1976.334644][T24276] kasan_report+0x10f/0x150 [ 1976.334695][T24276] ? __kasan_check_read+0x11/0x20 [ 1976.334762][T24276] ? __ext4_iget+0x2bb/0x3e80 [ 1976.334781][T24276] __asan_report_load8_noabort+0x14/0x20 [ 1976.334799][T24276] __ext4_iget+0x2bb/0x3e80 [ 1976.334818][T24276] ? _raw_write_lock+0x94/0xf0 [ 1976.334848][T24276] ? _raw_write_trylock+0x150/0x150 [ 1976.334869][T24276] ? __proc_create+0x581/0x8f0 [ 1976.385927][T24276] ? _raw_write_trylock+0x150/0x150 [ 1976.391167][T24276] ? ext4_get_projid+0x140/0x140 [ 1976.396122][T24276] ? _raw_write_unlock+0x2b/0x60 [ 1976.401124][T24276] ? ext4_orphan_file_block_trigger+0x460/0x460 [ 1976.407455][T24276] ext4_enable_quotas+0x338/0x6d0 [ 1976.412561][T24276] ? ext4_register_sysfs+0x299/0x2e0 [ 1976.417859][T24276] ext4_fill_super+0x831d/0x8bf0 [ 1976.422808][T24276] ? ext4_mount+0x40/0x40 [ 1976.427145][T24276] ? set_blocksize+0x1e9/0x360 [ 1976.431995][T24276] ? sb_set_blocksize+0xaa/0xf0 [ 1976.436851][T24276] ? ext4_mount+0x40/0x40 [ 1976.441194][T24276] mount_bdev+0x28d/0x3c0 [ 1976.445613][T24276] ? ext4_mount+0x40/0x40 [ 1976.449962][T24276] ext4_mount+0x34/0x40 [ 1976.454133][T24276] legacy_get_tree+0xed/0x190 [ 1976.458887][T24276] ? ext4_errno_to_code+0x160/0x160 [ 1976.464108][T24276] vfs_get_tree+0x89/0x260 [ 1976.468546][T24276] do_new_mount+0x251/0xb40 [ 1976.473069][T24276] ? security_capable+0x87/0xb0 [ 1976.477960][T24276] path_mount+0x640/0xff0 [ 1976.482285][T24276] __se_sys_mount+0x320/0x390 [ 1976.486945][T24276] ? __x64_sys_mount+0xd0/0xd0 [ 1976.491692][T24276] __x64_sys_mount+0xbf/0xd0 [ 1976.496260][T24276] x64_sys_call+0x6bf/0x9a0 [ 1976.500789][T24276] do_syscall_64+0x4c/0xa0 [ 1976.505247][T24276] ? clear_bhb_loop+0x50/0xa0 [ 1976.509928][T24276] ? clear_bhb_loop+0x50/0xa0 [ 1976.514606][T24276] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1976.520502][T24276] RIP: 0033:0x7f1df57e20ca [ 1976.524988][T24276] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1976.544704][T24276] RSP: 002b:00007f1df423ae58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1976.553210][T24276] RAX: ffffffffffffffda RBX: 00007f1df423aee0 RCX: 00007f1df57e20ca [ 1976.561198][T24276] RDX: 00002000000004c0 RSI: 0000200000000500 RDI: 00007f1df423aea0 [ 1976.569183][T24276] RBP: 00002000000004c0 R08: 00007f1df423aee0 R09: 0000000000000000 [ 1976.577160][T24276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000500 [ 1976.585135][T24276] R13: 00007f1df423aea0 R14: 00000000000004b2 R15: 0000200000000240 [ 1976.593115][T24276] [ 1976.596132][T24276] [ 1976.598448][T24276] Allocated by task 23417: [ 1976.602939][T24276] __kasan_slab_alloc+0xb7/0xe0 [ 1976.607792][T24276] slab_post_alloc_hook+0x4f/0x2b0 [ 1976.612931][T24276] kmem_cache_alloc+0xf7/0x260 [ 1976.617695][T24276] f2fs_alloc_inode+0x26/0x330 [ 1976.622545][T24276] iget_locked+0x175/0x850 [ 1976.626990][T24276] f2fs_iget+0x55/0x5020 [ 1976.631266][T24276] f2fs_fill_super+0x4af9/0x6dd0 [ 1976.636200][T24276] mount_bdev+0x28d/0x3c0 [ 1976.640528][T24276] f2fs_mount+0x34/0x40 [ 1976.644676][T24276] legacy_get_tree+0xed/0x190 [ 1976.649348][T24276] vfs_get_tree+0x89/0x260 [ 1976.653761][T24276] do_new_mount+0x251/0xb40 [ 1976.658261][T24276] path_mount+0x640/0xff0 [ 1976.662583][T24276] __se_sys_mount+0x320/0x390 [ 1976.667255][T24276] __x64_sys_mount+0xbf/0xd0 [ 1976.671838][T24276] x64_sys_call+0x6bf/0x9a0 [ 1976.676337][T24276] do_syscall_64+0x4c/0xa0 [ 1976.680750][T24276] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1976.686643][T24276] [ 1976.688959][T24276] Last potentially related work creation: [ 1976.694659][T24276] kasan_save_stack+0x3a/0x60 [ 1976.699335][T24276] __kasan_record_aux_stack+0xd2/0x100 [ 1976.704794][T24276] kasan_record_aux_stack_noalloc+0xb/0x10 [ 1976.710595][T24276] call_rcu+0x10b/0xf60 [ 1976.714835][T24276] evict+0x810/0x8b0 [ 1976.718728][T24276] evict_inodes+0x62a/0x6a0 [ 1976.723228][T24276] generic_shutdown_super+0x96/0x330 [ 1976.728513][T24276] kill_block_super+0x7f/0xf0 [ 1976.733186][T24276] kill_f2fs_super+0x30a/0x3d0 [ 1976.737947][T24276] deactivate_locked_super+0xa0/0x100 [ 1976.743442][T24276] deactivate_super+0xaf/0xe0 [ 1976.748117][T24276] cleanup_mnt+0x44f/0x500 [ 1976.752532][T24276] __cleanup_mnt+0x19/0x20 [ 1976.756946][T24276] task_work_run+0x127/0x190 [ 1976.761762][T24276] exit_to_user_mode_loop+0xd0/0xe0 [ 1976.766996][T24276] exit_to_user_mode_prepare+0x87/0xd0 [ 1976.772449][T24276] syscall_exit_to_user_mode+0x1a/0x30 [ 1976.777904][T24276] do_syscall_64+0x58/0xa0 [ 1976.782321][T24276] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1976.788207][T24276] [ 1976.790524][T24276] Second to last potentially related work creation: [ 1976.797178][T24276] kasan_save_stack+0x3a/0x60 [ 1976.801851][T24276] __kasan_record_aux_stack+0xd2/0x100 [ 1976.807303][T24276] kasan_record_aux_stack_noalloc+0xb/0x10 [ 1976.813107][T24276] call_rcu+0x10b/0xf60 [ 1976.817258][T24276] evict+0x810/0x8b0 [ 1976.821145][T24276] evict_inodes+0x62a/0x6a0 [ 1976.825641][T24276] generic_shutdown_super+0x96/0x330 [ 1976.830925][T24276] kill_block_super+0x7f/0xf0 [ 1976.835598][T24276] kill_f2fs_super+0x30a/0x3d0 [ 1976.840356][T24276] deactivate_locked_super+0xa0/0x100 [ 1976.845724][T24276] deactivate_super+0xaf/0xe0 [ 1976.850400][T24276] cleanup_mnt+0x44f/0x500 [ 1976.854811][T24276] __cleanup_mnt+0x19/0x20 [ 1976.859225][T24276] task_work_run+0x127/0x190 [ 1976.863810][T24276] exit_to_user_mode_loop+0xd0/0xe0 [ 1976.869006][T24276] exit_to_user_mode_prepare+0x87/0xd0 [ 1976.874458][T24276] syscall_exit_to_user_mode+0x1a/0x30 [ 1976.879914][T24276] do_syscall_64+0x58/0xa0 [ 1976.884331][T24276] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1976.890219][T24276] [ 1976.892529][T24276] The buggy address belongs to the object at ffff888135692460 [ 1976.892529][T24276] which belongs to the cache f2fs_inode_cache of size 1424 [ 1976.907093][T24276] The buggy address is located 1288 bytes inside of [ 1976.907093][T24276] 1424-byte region [ffff888135692460, ffff8881356929f0) [ 1976.920541][T24276] The buggy address belongs to the page: [ 1976.926174][T24276] page:ffffea0004d5a400 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888135693ca0 pfn:0x135690 [ 1976.937714][T24276] head:ffffea0004d5a400 order:3 compound_mapcount:0 compound_pincount:0 [ 1976.946028][T24276] flags: 0x4000000000010200(slab|head|zone=1) [ 1976.952102][T24276] raw: 4000000000010200 ffffea00050e5c00 0000000500000005 ffff8881003eef00 [ 1976.960678][T24276] raw: ffff888135693ca0 0000000080150014 00000001ffffffff 0000000000000000 [ 1976.969249][T24276] page dumped because: kasan: bad access detected [ 1976.975654][T24276] page_owner tracks the page as allocated [ 1976.981356][T24276] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0x1d2050(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 1820, ts 178762167073, free_ts 177391680368 [ 1977.002974][T24276] post_alloc_hook+0x192/0x1b0 [ 1977.007782][T24276] prep_new_page+0x1c/0x110 [ 1977.012280][T24276] get_page_from_freelist+0x2c3a/0x2cd0 [ 1977.017824][T24276] __alloc_pages+0x1a2/0x460 [ 1977.022408][T24276] new_slab+0xa0/0x4d0 [ 1977.026466][T24276] ___slab_alloc+0x3ac/0x840 [ 1977.031051][T24276] __slab_alloc+0x49/0x90 [ 1977.035378][T24276] kmem_cache_alloc+0x138/0x260 [ 1977.040226][T24276] f2fs_alloc_inode+0x26/0x330 [ 1977.045112][T24276] iget_locked+0x175/0x850 [ 1977.049545][T24276] f2fs_iget+0x55/0x5020 [ 1977.053791][T24276] f2fs_fill_super+0x3ccd/0x6dd0 [ 1977.058727][T24276] mount_bdev+0x28d/0x3c0 [ 1977.063058][T24276] f2fs_mount+0x34/0x40 [ 1977.067207][T24276] legacy_get_tree+0xed/0x190 [ 1977.072010][T24276] vfs_get_tree+0x89/0x260 [ 1977.076438][T24276] page last free stack trace: [ 1977.081103][T24276] free_unref_page_prepare+0x5fa/0x600 [ 1977.086565][T24276] free_unref_page+0xae/0x540 [ 1977.091239][T24276] __free_pages+0x6c/0x100 [ 1977.095653][T24276] __free_slab+0xe5/0x1e0 [ 1977.099986][T24276] discard_slab+0x29/0x40 [ 1977.104320][T24276] __slab_free+0x211/0x290 [ 1977.108849][T24276] ___cache_free+0x104/0x120 [ 1977.113440][T24276] qlink_free+0x4d/0x90 [ 1977.117590][T24276] qlist_free_all+0x5f/0xb0 [ 1977.122088][T24276] kasan_quarantine_reduce+0x14a/0x170 [ 1977.127546][T24276] __kasan_slab_alloc+0x2f/0xe0 [ 1977.132390][T24276] slab_post_alloc_hook+0x4f/0x2b0 [ 1977.137500][T24276] kmem_cache_alloc+0xf7/0x260 [ 1977.142262][T24276] __d_alloc+0x2d/0x690 [ 1977.146416][T24276] d_alloc_parallel+0xe5/0x1380 [ 1977.151262][T24276] __lookup_slow+0x14c/0x410 [ 1977.155851][T24276] [ 1977.158161][T24276] Memory state around the buggy address: [ 1977.163778][T24276] ffff888135692800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1977.171836][T24276] ffff888135692880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1977.179894][T24276] >ffff888135692900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1977.187945][T24276] ^ [ 1977.195393][T24276] ffff888135692980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc [ 1977.203443][T24276] ffff888135692a00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc 00 00 [ 1977.211492][T24276] ================================================================== [ 1977.219546][T24276] Disabling lock debugging due to kernel taint [ 1978.797491][T24276] EXT4-fs error (device loop4): ext4_quota_enable:6435: inode #3: comm syz.4.7077: unexpected EA_INODE flag [ 1978.809357][T24276] EXT4-fs error (device loop4): ext4_quota_enable:6438: comm syz.4.7077: Bad quota inode: 3, type: 0 [ 1978.821166][T24276] EXT4-fs warning (device loop4): ext4_enable_quotas:6479: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 1978.845198][T24276] EXT4-fs (loop4): mount failed [ 1978.860321][ T30] kauditd_printk_skb: 2178 callbacks suppressed [ 1978.860337][ T30] audit: type=1400 audit(1782840490.519:15606): avc: denied { search } for pid=82 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1978.888507][ T1212] usbhid 1-1:0.0: can't add hid device: -71 [ 1978.896181][T21939] attempt to access beyond end of device [ 1978.896181][T21939] loop1: rw=2049, want=40976, limit=40427 [ 1978.923320][ T1212] usbhid: probe of 1-1:0.0 failed with error -71 [ 1978.932646][ T1212] usb 1-1: USB disconnect, device number 55