last executing test programs: 13.254801908s ago: executing program 4 (id=603): r0 = socket(0x200000000000011, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000280), 0x3, 0x4cd, &(0x7f0000002200)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r5 = io_uring_setup(0x7d1, &(0x7f0000000580)={0x0, 0xddf9, 0x2, 0xfffffffe, 0x183}) io_setup(0x1, &(0x7f00000004c0)=0x0) close_range(r5, r5, 0x0) io_getevents(r6, 0x2, 0x2, &(0x7f0000000600)=[{}, {}], 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r7}, 0x18) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000640)={r4, &(0x7f0000000540), &(0x7f0000001b80)=""/215}, 0x20) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) fdatasync(r3) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000891}, 0x0) 11.510155985s ago: executing program 1 (id=604): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x437, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x5}, @IFLA_BOND_UPDELAY={0x8, 0x4, 0xff}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x40000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x800) close(0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r1, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f00000059c0)=ANY=[@ANYRES32=0x0], 0x5, 0x5505, &(0x7f0000000340)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x348cf000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0xc) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r6, 0x0, 0x20000023896) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0xffff7fff, 0x8000000}, 0xc) unlinkat(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 8.156311082s ago: executing program 4 (id=615): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000352000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f000089c000/0x1000)=nil, &(0x7f00009be000/0x1000)=nil, &(0x7f000098a000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f000039d000/0x3000)=nil, &(0x7f00005e5000/0x2000)=nil, &(0x7f00005d2000/0x3000)=nil, &(0x7f0000a33000/0x1000)=nil, &(0x7f0000782000/0x2000)=nil, &(0x7f0000000080)="9d721cc349a4e51d9d99c1cf899334", 0xf, r1}, 0x68) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x17, 0xb0}, [@ldst={0x5}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) 7.700656172s ago: executing program 1 (id=616): socket$nl_generic(0x10, 0x3, 0x10) r0 = memfd_create(&(0x7f0000000280)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xb6\a\x17\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93', 0x6) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000003, 0x40013, r0, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00'}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) setpriority(0x0, 0x0, 0xacf0165) pread64(0xffffffffffffffff, &(0x7f0000001900)=""/4079, 0xfef, 0x66) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x70bd29, 0x0, {0xa, 0x40, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x702}]}, 0x34}}, 0x0) socket(0x10, 0x803, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 6.154015029s ago: executing program 4 (id=619): r0 = syz_open_dev$video4linux(&(0x7f0000000480), 0xf, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net\x00') getdents(r1, &(0x7f0000000440)=""/172, 0xac) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0585605, &(0x7f00000000c0)={0x0, 0x0, @raw_data=[0x80b, 0x400008, 0x1012, 0x1, 0x8, 0x7f, 0xff, 0x6, 0x7, 0x8, 0x5, 0xd60, 0x80000004, 0x4, 0x1, 0xeb]}) 5.737167328s ago: executing program 1 (id=620): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x437, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x5}, @IFLA_BOND_UPDELAY={0x8, 0x4, 0xff}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x40000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x800) close(0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0xbd, 0x0, 0xffff, 0x2, 0x2, '\x00', 0x654}) ioctl$KVM_RUN(r3, 0xae80, 0x6806) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/schedstat\x00', 0x0, 0x0) lstat(0x0, 0x0) 5.694611099s ago: executing program 4 (id=622): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$tipc(0x1e, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGLED(r1, 0x80284511, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x4) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x880}, 0x4000000) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x1) writev(r2, &(0x7f0000000780), 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000001840)={0x90000001}) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={0x6c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc814}, 0x80) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000e0a170600000000000000000a00000a0900020073797a3100000000100003800c00008005000340010000000900010073797a3100"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x54, 0x6, 0x40, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, 0x7, 0x20, 0xfff, 0xffffff81}}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x4, 0x6, &(0x7f00000005c0)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000440)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'gre0\x00'}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="3800000069001800ff030000fddbdf25000000000000000008000100010000000800040000000000080000000800010002000000d182d3315c0bb73ec6bbe011"], 0x38}}, 0x81) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x40}}, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r8, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, r9, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_MS_ADDR6={0x14, 0xc, @empty}, @GTPA_NET_NS_FD={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x48}}, 0x880) 5.289612278s ago: executing program 1 (id=625): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$kcm(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000000)=0xfffffffe, 0x4) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x7) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000000c0)=0xf9) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000001d00)=""/4080, 0xff0}, 0x0) ptrace(0x10, 0x0) 4.845468286s ago: executing program 0 (id=627): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x3, &(0x7f0000000180)=[{0x5}, {0x5}, {0x6}]}) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r1, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/71, 0x902000, 0x1000, 0x0, 0x1}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x13, r2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) syz_open_procfs(r3, &(0x7f0000000100)='net/ipv6_route\x00') r7 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r6, 0x5) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) 4.712866273s ago: executing program 4 (id=628): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@orlov}, {@debug}, {@noload}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xfa, 0x47c, &(0x7f0000000a80)="$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") r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x82200, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x80047437, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x65}, &(0x7f0000000180)=0x8) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000140)={0x0, 'veth1_to_batadv\x00', {0x7}}) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, 0x0, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120150fd89adef087c0500221fe901020301090224000108ab400509043d0802c45abe4009050800000001030909050508", @ANYRES64, @ANYRES8=0x0], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) r7 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r7, 0xc0405610, &(0x7f0000000080)={0x0, 0x2, 0x2, 0x4080}) setxattr$system_posix_acl(0x0, &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000002b40), 0x24, 0x0) 2.787042567s ago: executing program 2 (id=629): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$sysv(&(0x7f0000000200), &(0x7f00000001c0)='./file0\x00', 0xa1ccc0, &(0x7f0000000100)=ANY=[], 0x40, 0x9e9b, &(0x7f000000d000)="$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") r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x8c081, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000180)={0x18, 0x1, 0x0, {0x100000001}}, 0x18) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x0) r3 = syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r3, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x808000, 0x0, 0x0, 0x8fe0, 0x10000}) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000240)={@initdev, @private, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001c40)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={{0xfffffffffffffea3, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0xff, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff024}, {0x6}]}, 0x10) sendmmsg(r5, &(0x7f0000001c00), 0x400000000000159, 0x40840) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newneigh={0x0, 0x1c, 0x10, 0x70bd28, 0x25dfdbfc, {0x6d9b9de325eb8a66, 0x0, 0x0, r4, 0x1, 0x19, 0x4}, [@NDA_FDB_EXT_ATTRS={0x0, 0xe, 0x0, 0x1, [@NFEA_DONT_REFRESH, @NFEA_DONT_REFRESH, @NFEA_DONT_REFRESH]}, @NDA_VNI={0x0, 0x7, 0x4}, @NDA_LLADDR={0x0, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}}, @NDA_LINK_NETNSID={0x0, 0xa, 0x34b}, @NDA_LLADDR={0x0, 0x2, @multicast}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048000}, 0x4000080) 2.469436331s ago: executing program 2 (id=632): openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000080)={0xe, {0x1, 0x60, 0x1}}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) (async) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r4 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x20008800}, 0x40040c4) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0xfffffffffffffe89) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0xfffffffffffffe89) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x40) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x1fc0}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0xffff}, {0x0, 0x0, 0x0, 0x8, 0x2, 0x3}, 0xfffffffe, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}]}, 0x78}}, 0x4000080) bind$packet(r3, &(0x7f0000000040)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r3, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 2.311416878s ago: executing program 2 (id=634): socket$nl_generic(0x10, 0x3, 0x10) r0 = memfd_create(&(0x7f0000000280)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xb6\a\x17\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93', 0x6) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000003, 0x40013, r0, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x1) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r2}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r1, 0x0, 0x25, 0x8, @void}, 0x10) syz_open_procfs(0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) socket(0x1, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x70bd29, 0x0, {0xa, 0x40, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x702}]}, 0x34}}, 0x0) socket(0x10, 0x803, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 2.176674874s ago: executing program 0 (id=636): writev(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) 2.176353994s ago: executing program 2 (id=637): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000280)={0x80, 0x2, 0xc8}) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000480)=@multiplanar_overlay={0x1000, 0x9, 0x4, 0x20, 0x8, {}, {0x5, 0xc, 0x81, 0x8b, 0x5, 0xf, "035cc710"}, 0x97e1, 0x3, {0x0}, 0x8001}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000280)={0x80, 0x2, 0xc8}) (async) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000480)=@multiplanar_overlay={0x1000, 0x9, 0x4, 0x20, 0x8, {}, {0x5, 0xc, 0x81, 0x8b, 0x5, 0xf, "035cc710"}, 0x97e1, 0x3, {0x0}, 0x8001}) (async) 2.04664667s ago: executing program 2 (id=638): socket$kcm(0xa, 0x922000000003, 0x11) r0 = socket$nl_route(0x10, 0x3, 0x0) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000006900)='/proc/mdstat\x00', 0x0, 0x0) readv(r2, &(0x7f0000000180)=[{&(0x7f0000000000)=""/28, 0x1c}, {&(0x7f0000000080)=""/35, 0x23}, {&(0x7f00000000c0)=""/131, 0x83}], 0x3) setuid(r1) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x3}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x68000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000001440), r2) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x51, 0x0, &(0x7f0000000500)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0efc37e4bde497c403b450c72ff35a1e107fa5c8d3cbb1fa61229a05e2dc30be5bc23848bf148e6bc56a212d2955cb5330000000000000084"}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000780)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000480)={@fd, @flat=@weak_binder={0x77622a85, 0x1114, 0x1}, @flat=@weak_handle={0x77682a85, 0x1}}, &(0x7f0000000600)={0x0, 0x18, 0x30}}, 0x40}], 0x0, 0x0, 0x0}) write$UHID_INPUT(r3, &(0x7f0000000400)={0x8, {"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", 0x1000}}, 0x1006) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES16=r0, @ANYBLOB="0000000060000000580012f7ffffffffffffff0073196e6f8365cacb94146d8558140f395113ad3f0fa8befaffffff908d1d58979f2d0be0c35fde416e81a6f31d1c3c7ddc9f5161041cce96921764c298b6f52e7f95e62a76e23f5b7e7aedea3924f8834000000000000000a26dfea10616a809f21b2312bc94ee31f91c3b54974d6b4caeaca2afadb523e19e8f9564dfbd635991ec985fd825949a50ae578a876f7f99e2abfe336e7ab7cebd032849a3b7bab8462b592be296c154945867a63604822ae41091f1bb99a6142eb13b2cfa41e33baf219d45f9adc450d21e", @ANYRES32, @ANYBLOB="08000100", @ANYRES8=r1, @ANYBLOB="0800030002000000080007006401010108000700ac1414bb0800020003"], 0x78}}, 0x0) 2.03387696s ago: executing program 0 (id=639): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$tipc(0x1e, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGLED(r1, 0x80284511, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x4) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x880}, 0x4000000) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x1) writev(r2, &(0x7f0000000780), 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000001840)={0x90000001}) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={0x6c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc814}, 0x80) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000e0a170600000000000000000a00000a0900020073797a3100000000100003800c00008005000340010000000900010073797a3100"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x54, 0x6, 0x40, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, 0x7, 0x20, 0xfff, 0xffffff81}}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x4, 0x6, &(0x7f00000005c0)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000440)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'gre0\x00'}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="3800000069001800ff030000fddbdf25000000000000000008000100010000000800040000000000080000000800010002000000d182d3315c0bb73ec6bbe011"], 0x38}}, 0x81) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x40}}, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r8, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, r9, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_MS_ADDR6={0x14, 0xc, @empty}, @GTPA_NET_NS_FD={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x48}}, 0x880) 1.754192103s ago: executing program 3 (id=640): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) io_setup(0x3ff, &(0x7f0000000000)=0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000240), &(0x7f0000000280)=r4}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) ioctl$BTRFS_IOC_SYNC(r3, 0x9408, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_usb_connect(0x6, 0x24, &(0x7f0000001000)=ANY=[], 0x0) close_range(r5, 0xffffffffffffffff, 0x0) io_destroy(r2) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0xe) ioctl$KDSETKEYCODE(r6, 0x4b4d, &(0x7f0000000300)={0x2, 0x1}) io_cancel(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x10004, 0x2, 0xd000, 0x1000, &(0x7f0000ffa000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_SREGS2(r7, 0x8140aecc, &(0x7f0000000480)) 1.656150357s ago: executing program 1 (id=641): prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000002c0)=r2, 0x4) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000002c80)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r7, &(0x7f000001fa80)={0x0, 0x0, 0x0}, 0x10000) syz_fuse_handle_req(r3, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r5, r6, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0xc0c10, &(0x7f0000000340)={[], [{@obj_type={'obj_type', 0x3d, '])-],[$}'}}, {@euid_lt={'euid<', r0}}, {@euid_lt={'euid<', r5}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@audit}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@dont_appraise}, {@seclabel}]}, 0x0, 0x620, &(0x7f0000001680)="$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") r8 = getuid() getgroups(0x2, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff]) chown(&(0x7f0000000040)='./file1\x00', r8, r9) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) (async) setuid(0xee01) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180), 0x800) (async) socket$kcm(0x10, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000002c0)=r2, 0x4) (async) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000002c80)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r3, &(0x7f0000006300)={0x2020}, 0x2020) (async) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) (async) syz_fuse_handle_req(r3, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) recvmsg$can_j1939(r7, &(0x7f000001fa80)={0x0, 0x0, 0x0}, 0x10000) (async) syz_fuse_handle_req(r3, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r5, r6, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0xc0c10, &(0x7f0000000340)={[], [{@obj_type={'obj_type', 0x3d, '])-],[$}'}}, {@euid_lt={'euid<', r0}}, {@euid_lt={'euid<', r5}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@audit}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@dont_appraise}, {@seclabel}]}, 0x0, 0x620, &(0x7f0000001680)="$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") (async) getuid() (async) getgroups(0x2, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff]) (async) chown(&(0x7f0000000040)='./file1\x00', r8, r9) (async) 1.33820333s ago: executing program 1 (id=642): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x1c0) syz_mount_image$reiserfs(&(0x7f0000001100), &(0x7f0000000040)='./bus\x00', 0xc2, &(0x7f0000000900)={[{@acl}, {@usrjquota_file, 0x4}, {@acl}, {@balloc_hashed_reloc}, {@usrjquota, 0x3d}]}, 0x2, 0x1115, &(0x7f0000002280)="$eJzs2D9rFEEYB+Df7B0Yq5NNvwhaWEhIODurFBGutbaRkMpUuSoiiN/FjyOp7EM+gEXAUhjZTdYTCUS5CxJ4Hpjd4Z13/pXvBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK687D/bTdKOkSZJSbrubHGRpBvjj75MmpS8PlosD07mr5ZJJkN66Vs/q5+Wdu/JVjtv5+1e+2J7/2m7PH3/7u3x8dHJ9TIlXc4vN3+Rcn2eG22VzW8IAAAA90Rd2+zPJadj528q7vX3BwAAAG6z8QcFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgH9UZ6t+m+RHrTVNkpJ03dniIkn3Pw8IAAAArK2kyZvZTfEMzwArz/N1Vob42L6XPmc3n4f5D1aph00e3v3RAQAA4B6Z3ppRfqvHn2WaWuvHcexxptnZuer3v37g234yOT3I7q+a/NPwPb/8cDi2Uid3dB8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Cc7cEACAAAAIOj/63YECgAAAAAAAAAAAAAAAAAAAAAAAHwUAAD//wAQ3aw=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f0000000180)={{}, {0x1, 0x1}, [{0x2, 0x3}], {}, [], {0x10, 0x6}, {0x20, 0x5}}, 0x2c, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @aes128, 0x4, '\x00', @auto="bb98bd3fd98a0ac9f9bb9e32e70a71ff"}) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000002c0)='./bus\x00', 0x1800840, &(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0, @ANYBLOB=',utf8=0,shortname=win95,\x00'], 0x1, 0x362, &(0x7f0000000900)="$eJzs3U9oXFUXAPAzfUkmKfRLFh8UBeHpTtDQP7jQVUpJoTgblaHqQhxsqpKJhQwOpotO40ZcCi515UZc6MJF1yIo4s6FWytIVVxodwWLV2bmTeZNZpKmwrQWf7/FcHLuPe/eO3nJvLxkbl5eifXzs3Hhxo3rMT9fiZmV0ytxsxJLkcXAlRg3NyEHANwfbqYUf6S+A5ZUpjwlAGDKeq//rx4pZd7+ar/+yas/ANz3ip//F/brM79Xw8WpTAkAmLKx+/+PjDTPjf6qf6b0VwEAwP3quRdefPpULeLZPJ+P2HinXW/X46lh+6kL8Xo0Yy2OxWLciuhfKHQfKr3HM2drq8fyPO/Ez0tR71a06xEbnXa9f6VwKuvVV+N4LMZSUV9cbaSUsjOf11aP5z0RcaXTGz82Ku36bBwuxv/hcKzFicjj/2P1EWdrqyfy4gD1jUF9J2J7eN+iO//lWIzvXomL0YzzC+cipcFlTW318vE8P51qI/XtejXO7zwLe94BAQAAAAAAAAAAAAAAAAAAAACAf2Q537G0s/9NGu7fs7w8ob23P06/vtgfaLu/P1Cqpkjp97cer7+bxcj+QLv352nXZ+LQvV06AAAAAAAAAAAAAAAAAAAA/Gu0tuai0Wyubba2Lq2Xg85ma+tQRHQzb3zz6ZcLMd7nNsFMMUapKS9Sl9YbKRt0TtlInyLIuoMPMp9c3ZlxuU91ZxUTp1Hdu6nZPPLwTx8MMw9lgyP/NeyTxeQFZrumUQ42/tef0p08UZdOFsGJ23S+llLa6ziXXxqvikrEzJ1/4vYPUjf4+vprD5xsHX2il/ki9T362OK5a+9/9Ot6o9kduav58dxm61ZabxQfTz7Z9g6y0vlTiX5QKZ8JM/uVb49mGtn3vz3/4HvfHmz0VM68OaFP1l/OZ5utrUrxldJrmusH3dyuqoXm2Sxi13FmJ5z8UwiOfrjSuHr5x18OWlX6JmGjDgAAAAAAAAAAAAAAAAAAuCtK7xUvFG/2nd2v6slnpj8zAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALh7hv//vxRsj2UOEvzZifGm6tpmK2LuXi8TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/uL8DAAD//2Kpa7U=") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) 1.100849101s ago: executing program 0 (id=643): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$sysv(&(0x7f0000000200), &(0x7f00000001c0)='./file0\x00', 0xa1ccc0, &(0x7f0000000100)=ANY=[], 0x40, 0x9e9b, &(0x7f000000d000)="$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") 1.037200374s ago: executing program 4 (id=644): r0 = syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8c0a, &(0x7f0000000180)=ANY=[@ANYRES64=0x0, @ANYRES64, @ANYRES16=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL") writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe8090053", 0x41}], 0x1) lgetxattr(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='tr'], 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) close(r1) recvmsg(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000005c0)=""/85, 0x55}], 0x1}, 0x40002142) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)=0x8) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x20, 0x103) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r4 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000110000404c052f0400000000000109022400010000100009040000c4030002000921011000012207000905810300000d0140"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000500)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1890c307cfa3eb766db2f7591992841200221b000000a379510f1708e2"], 0x0}, 0x0) 969.261967ms ago: executing program 3 (id=645): socket$nl_generic(0x10, 0x3, 0x10) r0 = memfd_create(&(0x7f0000000280)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xb6\a\x17\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93', 0x6) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000003, 0x40013, r0, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r1}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) setpriority(0x0, 0x0, 0xacf0165) pread64(0xffffffffffffffff, &(0x7f0000001900)=""/4079, 0xfef, 0x66) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r3 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x70bd29, 0x0, {0xa, 0x40, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x702}]}, 0x34}}, 0x0) socket(0x10, 0x803, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 766.880546ms ago: executing program 2 (id=646): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, 0x0, 0x0) prlimit64(0x0, 0x8, &(0x7f0000000140)={0xe, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r2, &(0x7f00000041c0)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x1, @private1, 0x3}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000300)="14", 0x1}], 0x1}}], 0x1, 0x200040c0) shutdown(r2, 0x1) r3 = accept4(r0, &(0x7f0000000040)=@l2, &(0x7f0000000100)=0x80, 0x41000) r4 = syz_io_uring_complete(0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x70, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0xf}, @void, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4c}, @NL80211_ATTR_PID={0x8, 0x52, r1}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x28}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x5, 0x44}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x39}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x21}, @NL80211_ATTR_PID={0x8, 0x52, r1}, @NL80211_ATTR_PID={0x8, 0x52, r1}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x70}, 0x1, 0x0, 0x0, 0x88c0}, 0x820) getsockopt$bt_hci(r2, 0x84, 0x7d, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r8, &(0x7f00000000c0)={0xa, 0x4e20, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) r9 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r8, 0x5) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) 699.187369ms ago: executing program 3 (id=647): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8b, 0x5d}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44800) ftruncate(0xffffffffffffffff, 0x0) (async, rerun: 64) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) (rerun: 64) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) (async) syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000480)='./file1\x00', 0x4, &(0x7f0000000240)=ANY=[], 0xfb, 0x1a9, &(0x7f00000007c0)="$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") (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2b000000}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x1a}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) (async, rerun: 32) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xb4, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x8c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x54, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x1c, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x15, 0x1, "5acdc797b2d4246ffa1284d22b50009f6f"}]}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "8a95"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x128}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], 0x0}, 0x90) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff55, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r7}, 0x18) (async, rerun: 32) r8 = socket$kcm(0x21, 0x2, 0x2) (rerun: 32) recvmsg$kcm(r8, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000080)=0x8000, 0x4) sendto$packet(r3, &(0x7f0000000180)="0b03feff4f00020002004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) 616.462662ms ago: executing program 3 (id=648): socket$nl_generic(0x10, 0x3, 0x10) r0 = memfd_create(&(0x7f0000000280)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xb6\a\x17\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93', 0x6) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000003, 0x40013, r0, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x1) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r2}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r1, 0x0, 0x25, 0x8, @void}, 0x10) syz_open_procfs(0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) socket(0x1, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x70bd29, 0x0, {0xa, 0x40, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x702}]}, 0x34}}, 0x0) socket(0x10, 0x803, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 501.812917ms ago: executing program 0 (id=649): writev(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) 377.063033ms ago: executing program 3 (id=650): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x437, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x5}, @IFLA_BOND_UPDELAY={0x8, 0x4, 0xff}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x40000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x800) close(0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0xbd, 0x0, 0xffff, 0x2, 0x2, '\x00', 0x654}) ioctl$KVM_RUN(r3, 0xae80, 0xc90c) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/schedstat\x00', 0x0, 0x0) lstat(0x0, 0x0) 78.996166ms ago: executing program 0 (id=651): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$kcm(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000000)=0xfffffffe, 0x4) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x7) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000000c0)=0xf9) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000001d00)=""/4080, 0xff0}, 0x0) ptrace(0x10, 0x0) 0s ago: executing program 3 (id=652): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x10, 0x0, @vifc_lcl_ifindex, @remote}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000280)={@multicast1, @empty, 0x0, "614af285791a63abd0f993af8077b5cd01e03d64a831683fdc3fd440829c82ae"}, 0x3c) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000040)=0x6, 0x4) kernel console output (not intermixed with test programs): rface, different from the descriptor's value: 3 [ 111.369106][ T4977] EXT4-fs (loop3): Ignoring removed nobh option [ 111.384202][ T4210] usb 3-1: Using ep0 maxpacket: 8 [ 111.402292][ T4976] APIC base relocation is unsupported by KVM [ 111.469146][ T4977] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.169: iget: bad i_size value: 38620345925642 [ 111.523638][ T4977] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.169: couldn't read orphan inode 15 (err -117) [ 111.549224][ T4977] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobh,bsdgroups,data_err=ignore,,errors=continue. Quota mode: writeback. [ 111.586478][ T4210] usb 3-1: unable to get BOS descriptor or descriptor too short [ 111.597722][ T4250] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 111.608976][ T4250] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.617343][ T4250] usb 2-1: Product: syz [ 111.622752][ T4250] usb 2-1: Manufacturer: syz [ 111.627698][ T4250] usb 2-1: SerialNumber: syz [ 111.666394][ T4982] loop4: detected capacity change from 0 to 2048 [ 111.684939][ T4210] usb 3-1: config 8 has an invalid interface number: 61 but max is 0 [ 111.693082][ T4210] usb 3-1: config 8 has an invalid descriptor of length 255, skipping remainder of the config [ 111.695084][ T4977] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.169: bg 0: block 5: invalid block bitmap [ 111.704071][ T4210] usb 3-1: config 8 has no interface number 0 [ 111.722258][ T4210] usb 3-1: config 8 interface 61 altsetting 8 endpoint 0x8 has invalid wMaxPacketSize 0 [ 111.742055][ T4210] usb 3-1: config 8 interface 61 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 111.788605][ T4982] EXT4-fs (loop4): mounted filesystem without journal. Opts: min_batch_time=0x000000000000000d,mb_optimize_scan=0x0000000000000001,noblock_validity,,errors=continue. Quota mode: none. [ 111.844554][ T4977] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 111.877910][ T4210] usb 3-1: config 8 interface 61 has no altsetting 0 [ 111.915213][ T4977] EXT4-fs (loop3): This should not happen!! Data will be lost [ 111.915213][ T4977] [ 111.932417][ T4977] EXT4-fs (loop3): Total free blocks count 0 [ 111.939118][ T4977] EXT4-fs (loop3): Free/Dirty block details [ 111.952177][ T4977] EXT4-fs (loop3): free_blocks=0 [ 111.957640][ T4977] EXT4-fs (loop3): dirty_blocks=4 [ 111.963197][ T4977] EXT4-fs (loop3): Block reservation details [ 111.969868][ T4977] EXT4-fs (loop3): i_reserved_data_blocks=4 [ 111.988144][ T4977] device bridge0 entered promiscuous mode [ 111.996783][ T4977] bridge0: port 3(vlan2) entered blocking state [ 112.003523][ T4977] bridge0: port 3(vlan2) entered disabled state [ 112.006891][ T4991] loop0: detected capacity change from 0 to 128 [ 112.015427][ T4984] loop9: detected capacity change from 0 to 7 [ 112.018570][ T4250] usb 2-1: 0:2 : does not exist [ 112.042289][ T4982] kAFS: unable to lookup cell '/,' [ 112.049534][ T4991] FAT-fs (loop0): bogus sectors per cluster 0 [ 112.074904][ T4991] FAT-fs (loop0): Can't find a valid FAT filesystem [ 112.082265][ T4984] Dev loop9: unable to read RDB block 7 [ 112.096972][ T4250] usb 2-1: USB disconnect, device number 7 [ 112.114615][ T4210] usb 3-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice=e9.1f [ 112.127181][ T4210] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.127223][ T4984] loop9: unable to read partition table [ 112.148444][ T4984] loop9: partition table beyond EOD, truncated [ 112.162093][ T4977] device bridge0 left promiscuous mode [ 112.180434][ T4210] usb 3-1: Product: syz [ 112.190118][ T4210] usb 3-1: Manufacturer: syz [ 112.198610][ T4984] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 112.223467][ T4210] usb 3-1: SerialNumber: syz [ 112.376850][ T4400] udevd[4400]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 112.538879][ T5003] netlink: 'syz.1.176': attribute type 3 has an invalid length. [ 112.622301][ T4997] FAULT_INJECTION: forcing a failure. [ 112.622301][ T4997] name failslab, interval 1, probability 0, space 0, times 1 [ 112.691389][ T4997] CPU: 1 PID: 4997 Comm: syz.0.173 Not tainted syzkaller #0 [ 112.698731][ T4997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 112.708916][ T4997] Call Trace: [ 112.712241][ T4997] [ 112.715203][ T4997] dump_stack_lvl+0x168/0x230 [ 112.719929][ T4997] ? show_regs_print_info+0x20/0x20 [ 112.725394][ T4997] ? load_image+0x3b0/0x3b0 [ 112.729942][ T4997] ? __might_sleep+0xf0/0xf0 [ 112.734565][ T4997] ? __lock_acquire+0x7c60/0x7c60 [ 112.739638][ T4997] ? mark_lock+0x94/0x320 [ 112.744009][ T4997] should_fail+0x38c/0x4c0 [ 112.748469][ T4997] should_failslab+0x5/0x20 [ 112.753004][ T4997] slab_pre_alloc_hook+0x51/0xc0 [ 112.757982][ T4997] __kmalloc+0x6b/0x330 [ 112.762172][ T4997] ? tomoyo_realpath_from_path+0x118/0x610 [ 112.768021][ T4997] tomoyo_realpath_from_path+0x118/0x610 [ 112.773700][ T4997] tomoyo_path_number_perm+0x1d5/0x5d0 [ 112.779188][ T4997] ? verify_lock_unused+0x140/0x140 [ 112.784515][ T4997] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 112.790019][ T4997] ? ksys_write+0x1c7/0x250 [ 112.794728][ T4997] security_file_ioctl+0x6c/0xa0 [ 112.799713][ T4997] __se_sys_ioctl+0x48/0x170 [ 112.804363][ T4997] do_syscall_64+0x4c/0xa0 [ 112.808836][ T4997] ? clear_bhb_loop+0x30/0x80 [ 112.813550][ T4997] ? clear_bhb_loop+0x30/0x80 [ 112.818271][ T4997] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 112.824423][ T4997] RIP: 0033:0x7fd667a0b749 [ 112.828865][ T4997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.848606][ T4997] RSP: 002b:00007fd665c72038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 112.857147][ T4997] RAX: ffffffffffffffda RBX: 00007fd667c61fa0 RCX: 00007fd667a0b749 [ 112.865253][ T4997] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 112.873263][ T4997] RBP: 00007fd665c72090 R08: 0000000000000000 R09: 0000000000000000 [ 112.873640][ T5017] sp4: Synchronizing with TNC [ 112.881363][ T4997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.881400][ T4997] R13: 00007fd667c62038 R14: 00007fd667c61fa0 R15: 00007ffe949c6a88 [ 112.881431][ T4997] [ 112.903938][ T4997] ERROR: Out of memory at tomoyo_realpath_from_path. [ 113.007442][ T5020] loop1: detected capacity change from 0 to 256 [ 113.112511][ T5020] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x88000078, utbl_chksum : 0xe619d30d) [ 113.238195][ T5026] sp5: Synchronizing with TNC [ 113.503192][ T5037] netlink: 16 bytes leftover after parsing attributes in process `syz.1.185'. [ 113.677707][ T4210] bfusb: probe of 3-1:8.61 failed with error -5 [ 113.732488][ T4210] usb 3-1: USB disconnect, device number 6 [ 113.744231][ T5035] loop4: detected capacity change from 0 to 32768 [ 113.842830][ T5035] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.186 (5035) [ 113.868685][ T5035] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 113.878178][ T5035] BTRFS info (device loop4): turning on flush-on-commit [ 113.885942][ T5035] BTRFS error (device loop4): unrecognized mount option 'fragment=metadata' [ 113.899382][ T5035] BTRFS error (device loop4): open_ctree failed: -22 [ 113.911092][ T5048] netlink: 'syz.2.188': attribute type 3 has an invalid length. [ 114.031617][ T4400] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by udevd (4400) [ 114.264228][ T1107] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 114.465679][ T5063] FAULT_INJECTION: forcing a failure. [ 114.465679][ T5063] name failslab, interval 1, probability 0, space 0, times 0 [ 114.557614][ T5063] CPU: 0 PID: 5063 Comm: syz.4.193 Not tainted syzkaller #0 [ 114.564184][ T1107] usb 2-1: Using ep0 maxpacket: 8 [ 114.564953][ T5063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 114.564968][ T5063] Call Trace: [ 114.564976][ T5063] [ 114.564985][ T5063] dump_stack_lvl+0x168/0x230 [ 114.591017][ T5063] ? show_regs_print_info+0x20/0x20 [ 114.596253][ T5063] ? load_image+0x3b0/0x3b0 [ 114.600801][ T5063] ? __might_sleep+0xf0/0xf0 [ 114.605427][ T5063] ? __lock_acquire+0x7c60/0x7c60 [ 114.610494][ T5063] should_fail+0x38c/0x4c0 [ 114.615057][ T5063] should_failslab+0x5/0x20 [ 114.619594][ T5063] slab_pre_alloc_hook+0x51/0xc0 [ 114.624564][ T5063] __kmalloc+0x6b/0x330 [ 114.628749][ T5063] ? tomoyo_encode+0x27e/0x540 [ 114.633568][ T5063] tomoyo_encode+0x27e/0x540 [ 114.638212][ T5063] tomoyo_realpath_from_path+0x5cd/0x610 [ 114.643908][ T5063] tomoyo_path_number_perm+0x1d5/0x5d0 [ 114.649776][ T5063] ? verify_lock_unused+0x140/0x140 [ 114.655032][ T5063] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 114.660543][ T5063] ? ksys_write+0x1c7/0x250 [ 114.665138][ T5063] security_file_ioctl+0x6c/0xa0 [ 114.670121][ T5063] __se_sys_ioctl+0x48/0x170 [ 114.674750][ T5063] do_syscall_64+0x4c/0xa0 [ 114.679210][ T5063] ? clear_bhb_loop+0x30/0x80 [ 114.683933][ T5063] ? clear_bhb_loop+0x30/0x80 [ 114.688654][ T5063] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 114.694580][ T5063] RIP: 0033:0x7fe8a1432749 [ 114.699032][ T5063] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.719076][ T5063] RSP: 002b:00007fe89f699038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 114.727529][ T5063] RAX: ffffffffffffffda RBX: 00007fe8a1688fa0 RCX: 00007fe8a1432749 [ 114.735541][ T5063] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 114.743544][ T5063] RBP: 00007fe89f699090 R08: 0000000000000000 R09: 0000000000000000 [ 114.751683][ T5063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.759686][ T5063] R13: 00007fe8a1689038 R14: 00007fe8a1688fa0 R15: 00007ffdf4413a98 [ 114.767796][ T5063] [ 114.907929][ T5087] netlink: 160 bytes leftover after parsing attributes in process `syz.0.198'. [ 114.937376][ T5063] ERROR: Out of memory at tomoyo_realpath_from_path. [ 115.017908][ T1107] usb 2-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 115.023811][ T5094] loop2: detected capacity change from 0 to 512 [ 115.048522][ T1107] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 115.069851][ T1107] usb 2-1: Product: syz [ 115.074073][ T1107] usb 2-1: Manufacturer: syz [ 115.090672][ T1107] usb 2-1: SerialNumber: syz [ 115.116430][ T5094] EXT4-fs (loop2): Ignoring removed orlov option [ 115.133906][ T5094] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 115.143560][ T1107] usb 2-1: config 0 descriptor?? [ 115.206109][ T5094] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 115.275169][ T5100] loop4: detected capacity change from 0 to 128 [ 115.291060][ T5094] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2229: inode #15: comm syz.2.199: corrupted in-inode xattr [ 115.331375][ T5100] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 115.346142][ T5094] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.199: couldn't read orphan inode 15 (err -117) [ 115.359675][ T5100] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 115.380934][ T5100] netlink: 100 bytes leftover after parsing attributes in process `syz.4.201'. [ 115.400207][ T5094] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,orlov,debug,noload,nombcache,noblock_validity,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none. [ 115.458517][ T5100] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #11: comm syz.4.201: No space for directory leaf checksum. Please run e2fsck -D. [ 115.478214][ T5100] EXT4-fs error (device loop4): __ext4_find_entry:1696: inode #11: comm syz.4.201: checksumming directory block 0 [ 116.543225][ T1107] usb 2-1: USB disconnect, device number 8 [ 116.572703][ T5127] netlink: 'syz.4.202': attribute type 3 has an invalid length. [ 116.699452][ T4393] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 116.833497][ T5136] loop1: detected capacity change from 0 to 256 [ 116.859681][ T4186] udevd[4186]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 116.897763][ T5133] sp4: Synchronizing with TNC [ 116.985003][ T5136] exfat: Deprecated parameter 'namecase' [ 117.090119][ T4393] usb 3-1: Using ep0 maxpacket: 8 [ 117.131144][ T5143] loop0: detected capacity change from 0 to 2048 [ 117.238377][ T5136] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 117.327161][ T5143] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=4096, location=4096 [ 117.369477][ T4393] usb 3-1: unable to get BOS descriptor or descriptor too short [ 117.370905][ T5136] fuse: Bad value for 'fd' [ 117.422473][ T5143] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 117.508689][ T5143] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 117.514409][ T4393] usb 3-1: config 8 has an invalid interface number: 61 but max is 0 [ 117.550644][ T4393] usb 3-1: config 8 has no interface number 0 [ 117.574243][ T4393] usb 3-1: config 8 interface 61 altsetting 8 endpoint 0x8 has invalid wMaxPacketSize 0 [ 117.612165][ T5143] UDF-fs: Scanning with blocksize 512 failed [ 117.638187][ T4393] usb 3-1: config 8 interface 61 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 117.723009][ T4393] usb 3-1: config 8 interface 61 has no altsetting 0 [ 117.743358][ T5143] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 117.788562][ T5143] UDF-fs: Scanning with blocksize 1024 failed [ 117.864769][ T5143] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 117.980328][ T4393] usb 3-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice=e9.1f [ 118.051389][ T4393] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.081020][ T4393] usb 3-1: Product: syz [ 118.100363][ T4393] usb 3-1: Manufacturer: syz [ 118.119677][ T4393] usb 3-1: SerialNumber: syz [ 118.239519][ T4393] usb 3-1: can't set config #8, error -71 [ 118.271022][ T5143] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 118.271108][ T4393] usb 3-1: USB disconnect, device number 7 [ 118.304442][ T5143] UDF-fs: Scanning with blocksize 2048 failed [ 118.386160][ T5143] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 118.459589][ T5143] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 118.489887][ T5173] FAULT_INJECTION: forcing a failure. [ 118.489887][ T5173] name failslab, interval 1, probability 0, space 0, times 0 [ 118.499434][ T5143] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 118.526898][ T5143] UDF-fs: Scanning with blocksize 4096 failed [ 118.543031][ T5143] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1) [ 118.551770][ T5173] CPU: 0 PID: 5173 Comm: syz.4.212 Not tainted syzkaller #0 [ 118.559096][ T5173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 118.569189][ T5173] Call Trace: [ 118.572586][ T5173] [ 118.575546][ T5173] dump_stack_lvl+0x168/0x230 [ 118.580389][ T5173] ? show_regs_print_info+0x20/0x20 [ 118.585606][ T5173] ? load_image+0x3b0/0x3b0 [ 118.590121][ T5173] ? __might_sleep+0xf0/0xf0 [ 118.594731][ T5173] ? __lock_acquire+0x7c60/0x7c60 [ 118.599794][ T5173] should_fail+0x38c/0x4c0 [ 118.604232][ T5173] should_failslab+0x5/0x20 [ 118.608746][ T5173] slab_pre_alloc_hook+0x51/0xc0 [ 118.613695][ T5173] ? kvm_mmu_topup_memory_cache+0xde/0x200 [ 118.619624][ T5173] kmem_cache_alloc+0x3d/0x290 [ 118.624396][ T5173] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 118.630393][ T5173] kvm_mmu_topup_memory_cache+0xde/0x200 [ 118.636037][ T5173] kvm_mmu_load+0x88/0x1b90 [ 118.640548][ T5173] ? kvm_apic_accept_events+0x53a/0x550 [ 118.646192][ T5173] ? lock_chain_count+0x20/0x20 [ 118.651243][ T5173] ? kvm_apic_has_interrupt+0x729/0x740 [ 118.656813][ T5173] ? kvm_lapic_enable_pv_eoi+0x140/0x140 [ 118.662609][ T5173] vcpu_enter_guest+0x61c5/0x7110 [ 118.667680][ T5173] ? local_bh_enable+0x20/0x20 [ 118.672481][ T5173] ? is_bpf_text_address+0x254/0x270 [ 118.677873][ T5173] ? __kernel_text_address+0x9a/0x100 [ 118.683380][ T5173] ? mark_lock+0x94/0x320 [ 118.687725][ T5173] ? __lock_acquire+0x13ad/0x7c60 [ 118.692771][ T5173] ? kfree+0xef/0x2a0 [ 118.696786][ T5173] ? mark_lock+0x94/0x320 [ 118.701125][ T5173] ? __lock_acquire+0x12d9/0x7c60 [ 118.706280][ T5173] ? kasan_set_track+0x62/0x70 [ 118.711193][ T5173] ? kasan_set_track+0x4b/0x70 [ 118.715995][ T5173] ? __lock_acquire+0x12d9/0x7c60 [ 118.721045][ T5173] ? verify_lock_unused+0x140/0x140 [ 118.726262][ T5173] ? vmx_vcpu_load_vmcs+0x484/0x780 [ 118.731508][ T5173] ? mark_lock+0x94/0x320 [ 118.735853][ T5173] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 118.741950][ T5173] ? __local_bh_enable_ip+0x12a/0x1b0 [ 118.747338][ T5173] ? read_lock_is_recursive+0x10/0x10 [ 118.752719][ T5173] ? rcu_is_watching+0x11/0xa0 [ 118.757499][ T5173] kvm_arch_vcpu_ioctl_run+0xdea/0x1f40 [ 118.763081][ T5173] kvm_vcpu_ioctl+0x887/0xb80 [ 118.767819][ T5173] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0 [ 118.773483][ T5173] ? bpf_lsm_file_ioctl+0x5/0x10 [ 118.778438][ T5173] ? security_file_ioctl+0x7c/0xa0 [ 118.783561][ T5173] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0 [ 118.789202][ T5173] __se_sys_ioctl+0xfa/0x170 [ 118.793803][ T5173] do_syscall_64+0x4c/0xa0 [ 118.798228][ T5173] ? clear_bhb_loop+0x30/0x80 [ 118.802911][ T5173] ? clear_bhb_loop+0x30/0x80 [ 118.807594][ T5173] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 118.813498][ T5173] RIP: 0033:0x7fe8a1432749 [ 118.817929][ T5173] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.837536][ T5173] RSP: 002b:00007fe89f699038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 118.845967][ T5173] RAX: ffffffffffffffda RBX: 00007fe8a1688fa0 RCX: 00007fe8a1432749 [ 118.853944][ T5173] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 118.862091][ T5173] RBP: 00007fe89f699090 R08: 0000000000000000 R09: 0000000000000000 [ 118.870066][ T5173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.878039][ T5173] R13: 00007fe8a1689038 R14: 00007fe8a1688fa0 R15: 00007ffdf4413a98 [ 118.886035][ T5173] [ 119.190587][ T5187] loop3: detected capacity change from 0 to 128 [ 119.351321][ T5187] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 119.546022][ T5168] loop1: detected capacity change from 0 to 40427 [ 119.618934][ T5168] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 119.655751][ T5168] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 119.702384][ T5168] F2FS-fs (loop1): invalid crc value [ 119.773151][ T5168] F2FS-fs (loop1): Found nat_bits in checkpoint [ 119.975080][ T5205] loop2: detected capacity change from 0 to 8192 [ 119.989438][ T5168] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 120.038008][ T5168] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 120.064722][ T5205] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 120.144537][ T5205] REISERFS (device loop2): using ordered data mode [ 120.151095][ T5205] reiserfs: using flush barriers [ 120.270184][ T26] audit: type=1800 audit(1765253383.922:3): pid=5212 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.211" name="bus" dev="loop1" ino=10 res=0 errno=0 [ 120.279698][ T5212] attempt to access beyond end of device [ 120.279698][ T5212] loop1: rw=2049, want=45112, limit=40427 [ 120.313325][ T5205] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 120.411401][ T5205] REISERFS (device loop2): checking transaction log (loop2) [ 120.630449][ T5193] loop4: detected capacity change from 0 to 32768 [ 120.798443][ T5193] XFS (loop4): Mounting V5 Filesystem [ 120.804920][ T5205] REISERFS (device loop2): Using tea hash to sort names [ 120.835520][ T5205] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 120.921830][ T5193] XFS (loop4): Ending clean mount [ 121.141600][ T4183] XFS (loop4): Unmounting Filesystem [ 121.152337][ T5187] FAT-fs (loop3): FAT read failed (blocknr 128) [ 121.230085][ T5235] overlayfs: './file0' not a directory [ 121.255902][ T5210] loop0: detected capacity change from 0 to 32768 [ 121.411372][ T4482] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 121.767705][ T5248] loop3: detected capacity change from 0 to 512 [ 121.806532][ T5210] JBD2: Ignoring recovery information on journal [ 121.870166][ T5248] EXT4-fs (loop3): Ignoring removed orlov option [ 121.934302][ T5248] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 121.988910][ T26] audit: type=1326 audit(1765253385.642:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5251 comm="syz.1.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6beb38d749 code=0x7ffc0000 [ 122.067390][ T26] audit: type=1326 audit(1765253385.682:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5251 comm="syz.1.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f6beb38d749 code=0x7ffc0000 [ 122.099706][ T5248] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 122.145586][ T5254] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 122.146491][ T5257] netlink: 'syz.4.220': attribute type 3 has an invalid length. [ 122.173590][ T26] audit: type=1326 audit(1765253385.682:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5251 comm="syz.1.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6beb38d749 code=0x7ffc0000 [ 122.196438][ T26] audit: type=1326 audit(1765253385.682:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5251 comm="syz.1.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6beb38d749 code=0x7ffc0000 [ 122.227370][ T5248] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2229: inode #15: comm syz.3.223: corrupted in-inode xattr [ 122.290583][ T26] audit: type=1326 audit(1765253385.682:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5251 comm="syz.1.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6beb38d749 code=0x7ffc0000 [ 122.292139][ T5210] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 122.321901][ T5248] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.223: couldn't read orphan inode 15 (err -117) [ 122.378107][ T5248] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,orlov,debug,noload,nombcache,noblock_validity,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none. [ 122.404871][ T26] audit: type=1326 audit(1765253385.682:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5251 comm="syz.1.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6beb38d749 code=0x7ffc0000 [ 122.691119][ T5267] netlink: 16 bytes leftover after parsing attributes in process `syz.1.225'. [ 122.725117][ T26] audit: type=1326 audit(1765253385.702:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5251 comm="syz.1.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f6beb38d749 code=0x7ffc0000 [ 123.321897][ T4385] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 123.499647][ T4181] ocfs2: Unmounting device (7,0) on (node local) [ 123.522232][ T26] audit: type=1326 audit(1765253385.702:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5251 comm="syz.1.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6beb38d749 code=0x7ffc0000 [ 123.643088][ T26] audit: type=1326 audit(1765253385.702:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5251 comm="syz.1.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f6beb38be97 code=0x7ffc0000 [ 123.720679][ T5278] sp4: Synchronizing with TNC [ 123.731990][ T4385] usb 4-1: Using ep0 maxpacket: 8 [ 123.951588][ T4385] usb 4-1: unable to get BOS descriptor or descriptor too short [ 124.071341][ T4385] usb 4-1: config 8 has an invalid interface number: 61 but max is 0 [ 124.079684][ T4385] usb 4-1: config 8 has no interface number 0 [ 124.105852][ T4385] usb 4-1: config 8 interface 61 altsetting 8 endpoint 0x8 has invalid wMaxPacketSize 0 [ 124.150523][ T4385] usb 4-1: config 8 interface 61 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 124.196258][ T4385] usb 4-1: config 8 interface 61 has no altsetting 0 [ 124.444184][ T4385] usb 4-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice=e9.1f [ 124.473862][ T4385] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.514155][ T4385] usb 4-1: Product: syz [ 124.518377][ T4385] usb 4-1: Manufacturer: syz [ 124.558828][ T4385] usb 4-1: SerialNumber: syz [ 124.881543][ T5280] loop1: detected capacity change from 0 to 32768 [ 124.920491][ T4385] bfusb: probe of 4-1:8.61 failed with error -5 [ 124.935230][ T5280] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.227 (5280) [ 124.963362][ T4385] usb 4-1: USB disconnect, device number 5 [ 125.004207][ T5280] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 125.030967][ T5280] BTRFS info (device loop1): enabling disk space caching [ 125.052434][ T5280] BTRFS info (device loop1): turning on flush-on-commit [ 125.059486][ T5280] BTRFS info (device loop1): disabling tree log [ 125.073833][ T5280] BTRFS info (device loop1): use no compression [ 125.080451][ T5280] BTRFS info (device loop1): force clearing of disk cache [ 125.100509][ T5280] BTRFS info (device loop1): doing ref verification [ 125.141025][ T5280] BTRFS info (device loop1): disabling disk space caching [ 125.152984][ T4250] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 125.156837][ T5280] BTRFS info (device loop1): has skinny extents [ 125.252226][ T4393] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 125.735146][ T4393] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.746246][ T4393] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.748620][ T5332] capability: warning: `syz.4.235' uses deprecated v2 capabilities in a way that may be insecure [ 125.771467][ T4393] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 125.775919][ T4250] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 125.809616][ T4250] usb 3-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 125.853401][ T4393] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 125.881740][ T5280] BTRFS info (device loop1): enabling ssd optimizations [ 125.904386][ T4393] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.943678][ T4393] usb 1-1: config 0 descriptor?? [ 125.959389][ T5280] BTRFS info (device loop1): clearing free space tree [ 125.960363][ T5336] FAULT_INJECTION: forcing a failure. [ 125.960363][ T5336] name failslab, interval 1, probability 0, space 0, times 0 [ 125.969371][ T5280] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 126.036563][ T5280] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 126.054188][ T4250] usb 3-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 0.84 [ 126.072781][ T5336] CPU: 0 PID: 5336 Comm: syz.3.236 Not tainted syzkaller #0 [ 126.080208][ T5336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 126.083029][ T4250] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 126.090294][ T5336] Call Trace: [ 126.090306][ T5336] [ 126.090315][ T5336] dump_stack_lvl+0x168/0x230 [ 126.090345][ T5336] ? show_regs_print_info+0x20/0x20 [ 126.090367][ T5336] ? load_image+0x3b0/0x3b0 [ 126.090391][ T5336] ? __might_sleep+0xf0/0xf0 [ 126.123562][ T5336] ? __lock_acquire+0x7c60/0x7c60 [ 126.128635][ T5336] should_fail+0x38c/0x4c0 [ 126.133090][ T5336] should_failslab+0x5/0x20 [ 126.137622][ T5336] slab_pre_alloc_hook+0x51/0xc0 [ 126.142587][ T5336] ? kvm_mmu_topup_memory_cache+0xde/0x200 [ 126.143244][ T4250] usb 3-1: Product: syz [ 126.148417][ T5336] kmem_cache_alloc+0x3d/0x290 [ 126.148447][ T5336] kvm_mmu_topup_memory_cache+0xde/0x200 [ 126.163022][ T5336] kvm_mmu_load+0x88/0x1b90 [ 126.167571][ T5336] ? kvm_apic_accept_events+0x53a/0x550 [ 126.170984][ T4250] usb 3-1: SerialNumber: syz [ 126.173147][ T5336] ? lock_chain_count+0x20/0x20 [ 126.182683][ T5336] ? kvm_apic_has_interrupt+0x729/0x740 [ 126.188348][ T5336] ? kvm_lapic_enable_pv_eoi+0x140/0x140 [ 126.194033][ T5336] vcpu_enter_guest+0x61c5/0x7110 [ 126.199106][ T5336] ? local_bh_enable+0x20/0x20 [ 126.203927][ T5336] ? is_bpf_text_address+0x254/0x270 [ 126.209255][ T5336] ? __kernel_text_address+0x9a/0x100 [ 126.214673][ T5336] ? mark_lock+0x94/0x320 [ 126.219056][ T5336] ? __lock_acquire+0x13ad/0x7c60 [ 126.220914][ T5341] loop4: detected capacity change from 0 to 4096 [ 126.224132][ T5336] ? kfree+0xef/0x2a0 [ 126.224158][ T5336] ? mark_lock+0x94/0x320 [ 126.224185][ T5336] ? __lock_acquire+0x12d9/0x7c60 [ 126.224220][ T5336] ? kasan_set_track+0x62/0x70 [ 126.248783][ T5336] ? kasan_set_track+0x4b/0x70 [ 126.253583][ T5336] ? __lock_acquire+0x12d9/0x7c60 [ 126.258646][ T5336] ? verify_lock_unused+0x140/0x140 [ 126.263881][ T5336] ? vmx_vcpu_load_vmcs+0x484/0x780 [ 126.269112][ T5336] ? mark_lock+0x94/0x320 [ 126.273470][ T5336] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 126.279503][ T5336] ? __local_bh_enable_ip+0x12a/0x1b0 [ 126.284915][ T5336] ? read_lock_is_recursive+0x10/0x10 [ 126.290436][ T5336] ? rcu_is_watching+0x11/0xa0 [ 126.295339][ T5336] kvm_arch_vcpu_ioctl_run+0xdea/0x1f40 [ 126.300936][ T5336] kvm_vcpu_ioctl+0x887/0xb80 [ 126.305685][ T5336] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0 [ 126.311379][ T5336] ? bpf_lsm_file_ioctl+0x5/0x10 [ 126.316348][ T5336] ? security_file_ioctl+0x7c/0xa0 [ 126.321490][ T5336] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0 [ 126.327162][ T5336] __se_sys_ioctl+0xfa/0x170 [ 126.331883][ T5336] do_syscall_64+0x4c/0xa0 [ 126.336328][ T5336] ? clear_bhb_loop+0x30/0x80 [ 126.341035][ T5336] ? clear_bhb_loop+0x30/0x80 [ 126.345741][ T5336] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 126.351671][ T5336] RIP: 0033:0x7f9fb898e749 [ 126.356119][ T5336] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.375844][ T5336] RSP: 002b:00007f9fb6bd4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 126.384295][ T5336] RAX: ffffffffffffffda RBX: 00007f9fb8be5090 RCX: 00007f9fb898e749 [ 126.392307][ T5336] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 126.400312][ T5336] RBP: 00007f9fb6bd4090 R08: 0000000000000000 R09: 0000000000000000 [ 126.408312][ T5336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.416311][ T5336] R13: 00007f9fb8be5128 R14: 00007f9fb8be5090 R15: 00007ffcf09fbab8 [ 126.424330][ T5336] [ 126.455281][ T4250] usb 3-1: bad CDC descriptors [ 126.466883][ T4250] usb 3-1: bad CDC descriptors [ 126.487345][ T4250] option 3-1:7.0: GSM modem (1-port) converter detected [ 126.697937][ T4393] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 126.771067][ T4393] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 126.846318][ T5344] loop2: detected capacity change from 0 to 4096 [ 126.987826][ T5344] __ntfs_error: 41 callbacks suppressed [ 126.987842][ T5344] ntfs: (device loop2): parse_options(): Unrecognized mount option freezer.state. [ 127.603327][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 127.603444][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #288!!! [ 127.612514][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 127.621907][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 127.630470][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 127.639788][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 127.648347][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 127.657713][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 127.666282][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 127.675683][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 127.684310][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 127.963455][ T4727] usb 3-1: USB disconnect, device number 8 [ 127.978746][ T4727] option 3-1:7.0: device disconnected [ 128.076565][ C0] plantronics 0003:047F:FFFF.0001: usb_submit_urb(ctrl) failed: -1 [ 128.148204][ T5360] netlink: 'syz.1.238': attribute type 3 has an invalid length. [ 129.164709][ T1107] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 129.180331][ T4347] usb 1-1: USB disconnect, device number 6 [ 130.022742][ T5382] sp4: Synchronizing with TNC [ 130.091852][ T5384] program syz.0.247 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 130.184149][ T1107] usb 2-1: Using ep0 maxpacket: 8 [ 130.446275][ T1107] usb 2-1: unable to get BOS descriptor or descriptor too short [ 130.562259][ T1107] usb 2-1: config 8 has an invalid interface number: 61 but max is 0 [ 130.598335][ T1107] usb 2-1: config 8 has no interface number 0 [ 130.616080][ T1107] usb 2-1: config 8 interface 61 altsetting 8 endpoint 0x8 has invalid wMaxPacketSize 0 [ 130.628925][ T5393] FAULT_INJECTION: forcing a failure. [ 130.628925][ T5393] name failslab, interval 1, probability 0, space 0, times 0 [ 130.672795][ T1107] usb 2-1: config 8 interface 61 has no altsetting 0 [ 130.687507][ T5393] CPU: 0 PID: 5393 Comm: syz.3.249 Not tainted syzkaller #0 [ 130.694857][ T5393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 130.704947][ T5393] Call Trace: [ 130.708341][ T5393] [ 130.711378][ T5393] dump_stack_lvl+0x168/0x230 [ 130.716097][ T5393] ? show_regs_print_info+0x20/0x20 [ 130.721330][ T5393] ? load_image+0x3b0/0x3b0 [ 130.725872][ T5393] ? __might_sleep+0xf0/0xf0 [ 130.730499][ T5393] ? __lock_acquire+0x7c60/0x7c60 [ 130.735559][ T5393] should_fail+0x38c/0x4c0 [ 130.740011][ T5393] should_failslab+0x5/0x20 [ 130.744534][ T5393] slab_pre_alloc_hook+0x51/0xc0 [ 130.749498][ T5393] ? kvm_mmu_topup_memory_cache+0xde/0x200 [ 130.755334][ T5393] kmem_cache_alloc+0x3d/0x290 [ 130.760138][ T5393] kvm_mmu_topup_memory_cache+0xde/0x200 [ 130.765806][ T5393] kvm_mmu_load+0x88/0x1b90 [ 130.770342][ T5393] ? kvm_apic_accept_events+0x53a/0x550 [ 130.775922][ T5393] ? lock_chain_count+0x20/0x20 [ 130.780810][ T5393] ? kvm_apic_has_interrupt+0x729/0x740 [ 130.786381][ T5393] ? kvm_lapic_enable_pv_eoi+0x140/0x140 [ 130.792054][ T5393] vcpu_enter_guest+0x61c5/0x7110 [ 130.797214][ T5393] ? local_bh_enable+0x20/0x20 [ 130.802020][ T5393] ? 0xffffffffa00143a8 [ 130.806199][ T5393] ? is_bpf_text_address+0x254/0x270 [ 130.811519][ T5393] ? __kernel_text_address+0x9a/0x100 [ 130.816925][ T5393] ? mark_lock+0x94/0x320 [ 130.821288][ T5393] ? __lock_acquire+0x13ad/0x7c60 [ 130.826337][ T5393] ? kfree+0xef/0x2a0 [ 130.830348][ T5393] ? mark_lock+0x94/0x320 [ 130.834813][ T5393] ? __lock_acquire+0x12d9/0x7c60 [ 130.839867][ T5393] ? kasan_set_track+0x62/0x70 [ 130.844679][ T5393] ? kasan_set_track+0x4b/0x70 [ 130.849486][ T5393] ? __lock_acquire+0x12d9/0x7c60 [ 130.854549][ T5393] ? verify_lock_unused+0x140/0x140 [ 130.859782][ T5393] ? vmx_vcpu_load_vmcs+0x484/0x780 [ 130.865013][ T5393] ? mark_lock+0x94/0x320 [ 130.869381][ T5393] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 130.875408][ T5393] ? __local_bh_enable_ip+0x12a/0x1b0 [ 130.880901][ T5393] ? read_lock_is_recursive+0x10/0x10 [ 130.886305][ T5393] ? rcu_is_watching+0x11/0xa0 [ 130.891106][ T5393] kvm_arch_vcpu_ioctl_run+0xdea/0x1f40 [ 130.896759][ T5393] kvm_vcpu_ioctl+0x887/0xb80 [ 130.901471][ T5393] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0 [ 130.907248][ T5393] ? bpf_lsm_file_ioctl+0x5/0x10 [ 130.912310][ T5393] ? security_file_ioctl+0x7c/0xa0 [ 130.917448][ T5393] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0 [ 130.923121][ T5393] __se_sys_ioctl+0xfa/0x170 [ 130.927745][ T5393] do_syscall_64+0x4c/0xa0 [ 130.932195][ T5393] ? clear_bhb_loop+0x30/0x80 [ 130.936897][ T5393] ? clear_bhb_loop+0x30/0x80 [ 130.941607][ T5393] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 130.947528][ T5393] RIP: 0033:0x7f9fb898e749 [ 130.951972][ T5393] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.971610][ T5393] RSP: 002b:00007f9fb6bd4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 130.980080][ T5393] RAX: ffffffffffffffda RBX: 00007f9fb8be5090 RCX: 00007f9fb898e749 [ 130.988084][ T5393] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 130.996087][ T5393] RBP: 00007f9fb6bd4090 R08: 0000000000000000 R09: 0000000000000000 [ 131.004079][ T5393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.012108][ T5393] R13: 00007f9fb8be5128 R14: 00007f9fb8be5090 R15: 00007ffcf09fbab8 [ 131.020306][ T5393] [ 131.061467][ T1107] usb 2-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice=e9.1f [ 131.076384][ T1107] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.132921][ T1107] usb 2-1: Product: syz [ 131.137322][ T1107] usb 2-1: Manufacturer: syz [ 131.141949][ T1107] usb 2-1: SerialNumber: syz [ 131.470107][ T5370] input: syz1 as /devices/virtual/input/input7 [ 131.490381][ T5370] input: failed to attach handler leds to device input7, error: -6 [ 131.656852][ T5396] loop0: detected capacity change from 0 to 32768 [ 131.697105][ T1107] bfusb: probe of 2-1:8.61 failed with error -5 [ 131.751431][ T1107] usb 2-1: USB disconnect, device number 9 [ 131.937728][ T5396] XFS (loop0): Mounting V5 Filesystem [ 132.217419][ T5417] loop4: detected capacity change from 0 to 64 [ 132.234752][ T5415] netlink: 'syz.3.253': attribute type 3 has an invalid length. [ 132.897031][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.903753][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.665129][ T4347] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 134.153316][ T4347] usb 2-1: config 0 has an invalid interface number: 7 but max is 0 [ 134.180903][ T4347] usb 2-1: config 0 has no interface number 0 [ 134.221655][ T4347] usb 2-1: too many endpoints for config 0 interface 7 altsetting 207: 187, using maximum allowed: 30 [ 134.315750][ T4347] usb 2-1: config 0 interface 7 altsetting 207 has 0 endpoint descriptors, different from the interface descriptor's value: 187 [ 134.394139][ T4347] usb 2-1: config 0 interface 7 has no altsetting 0 [ 134.620687][ T4347] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 134.639166][ T4347] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.684149][ T4347] usb 2-1: Product: syz [ 134.688380][ T4347] usb 2-1: Manufacturer: syz [ 134.693010][ T4347] usb 2-1: SerialNumber: syz [ 134.726836][ T4347] usb 2-1: config 0 descriptor?? [ 135.009730][ T4347] i2c-tiny-usb 2-1:0.7: version 6d.cc found at bus 002 address 010 [ 135.054741][ T4347] (null): failure setting delay to 10us [ 135.060851][ T4347] i2c-tiny-usb: probe of 2-1:0.7 failed with error -5 [ 135.125023][ T5457] loop4: detected capacity change from 0 to 256 [ 135.231104][ T4347] usb 2-1: USB disconnect, device number 10 [ 135.399086][ T5456] sp4: Synchronizing with TNC [ 136.110637][ T5442] loop2: detected capacity change from 0 to 40427 [ 137.752469][ T5396] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 138.212260][ T5396] XFS (loop0): Starting recovery (logdev: internal) [ 138.360417][ T5396] XFS (loop0): Ending recovery (logdev: internal) [ 138.375095][ T5472] netlink: 'syz.4.271': attribute type 3 has an invalid length. [ 138.414159][ T5396] XFS (loop0): AG 0: Corrupt btree 5 pointer at level 1 index 0. [ 138.432592][ T5396] XFS (loop0): Failed to initialize disk quotas. [ 138.467569][ T5469] netlink: 28 bytes leftover after parsing attributes in process `syz.1.269'. [ 138.487598][ T4181] XFS (loop0): Unmounting Filesystem [ 138.548225][ T5473] device macvlan2 entered promiscuous mode [ 140.316693][ T13] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 140.374332][ T5492] loop4: detected capacity change from 0 to 4096 [ 140.528809][ T5492] ntfs: (device loop4): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 140.539609][ T5492] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 140.552673][ T5492] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 140.593724][ T5492] ntfs: volume version 3.1. [ 140.780055][ T13] usb 3-1: config 0 has an invalid interface number: 56 but max is 0 [ 140.813120][ T13] usb 3-1: config 0 has no interface number 0 [ 140.849510][ T5492] ntfs: (device loop4): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -28). [ 140.865416][ T5492] ntfs: (device loop4): ntfs_attr_extend_allocation(): Cannot extend allocation of inode 0x43, attribute type 0x80, because the allocation of clusters failed with error code -28. [ 140.887096][ T5492] ntfs: (device loop4): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 141.022698][ T5487] loop1: detected capacity change from 0 to 32768 [ 141.067843][ T5496] 8021q: adding VLAN 0 to HW filter on device bond1 [ 141.132090][ T5498] loop3: detected capacity change from 0 to 1024 [ 141.215205][ T13] usb 3-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 141.231267][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.355085][ T5487] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 141.363294][ T5487] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 141.364227][ T1172] ntfs: (device loop4): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 141.372758][ T13] usb 3-1: Product: syz [ 141.441077][ T4183] ntfs: (device loop4): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 141.446971][ T13] usb 3-1: Manufacturer: syz [ 141.479252][ T5498] hfsplus: failed to load root directory [ 141.488771][ T13] usb 3-1: SerialNumber: syz [ 141.514441][ T13] usb 3-1: config 0 descriptor?? [ 141.573463][ T13] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 141.593676][ T5498] loop3: detected capacity change from 0 to 1024 [ 141.599474][ T13] pctv452e: pctv452e_power_ctrl: 1 [ 141.599474][ T13] [ 141.606299][ T5498] hfsplus: unable to parse mount options [ 141.621831][ T13] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 141.621831][ T13] [ 141.654806][ T13] dvb-usb: bulk message failed: -22 (5/0) [ 141.671063][ T13] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 141.702159][ T13] dvb-usb: Technotrend TT Connect S2-3600 error while loading driver (-19) [ 141.796820][ T13] usb 3-1: USB disconnect, device number 9 [ 141.818365][ T4250] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 142.120545][ T5506] sp4: Synchronizing with TNC [ 142.349527][ T4250] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 142.386415][ T4250] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 142.458994][ T4250] usb 1-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 142.486033][ T4250] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.555504][ T4250] usb 1-1: config 0 descriptor?? [ 142.581709][ T5487] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 142.629341][ T4251] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 142.639339][ T4251] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 142.655141][ T5501] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 142.824433][ T4251] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 185ms [ 142.833545][ T4251] gfs2: fsid=syz:syz.0: jid=0: Done [ 142.869739][ T5487] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 142.880973][ T5501] udc-core: couldn't find an available UDC or it's busy [ 142.905951][ T5501] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 142.969924][ T5487] gfs2: fsid=syz:syz.0: can't start logd thread: -4 [ 143.077239][ T4250] usbhid 1-1:0.0: can't add hid device: -71 [ 143.083366][ T4250] usbhid: probe of 1-1:0.0 failed with error -71 [ 143.149904][ T4250] usb 1-1: USB disconnect, device number 7 [ 143.254711][ T5516] raw_sendmsg: syz.2.285 forgot to set AF_INET. Fix it! [ 143.277360][ T5504] loop4: detected capacity change from 0 to 32768 [ 143.333693][ T5517] loop2: detected capacity change from 0 to 512 [ 143.728344][ T4250] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 143.781413][ T5521] netlink: 'syz.1.286': attribute type 3 has an invalid length. [ 143.974101][ T5504] XFS (loop4): Mounting V5 Filesystem [ 144.006640][ T5532] loop1: detected capacity change from 0 to 128 [ 144.073735][ T4250] usb 1-1: Using ep0 maxpacket: 32 [ 144.424185][ T4250] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 129, changing to 11 [ 144.813071][ T5532] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 145.174409][ T4250] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 145.198916][ T4250] usb 1-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 145.224598][ T4250] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.263541][ T4250] usb 1-1: config 0 descriptor?? [ 145.278883][ T5532] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 145.291296][ T5547] netlink: 'syz.2.294': attribute type 32 has an invalid length. [ 145.689305][ T5550] loop0: detected capacity change from 0 to 8 [ 145.951898][ T13] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 146.398786][ T13] usb 4-1: device descriptor read/64, error -71 [ 146.692775][ T4393] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 146.809826][ T13] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 147.243622][ T13] usb 4-1: device descriptor read/64, error -71 [ 147.332487][ T4393] usb 2-1: Using ep0 maxpacket: 16 [ 147.374477][ T4250] usb 1-1: can't set config #0, error -71 [ 147.412815][ T13] usb usb4-port1: attempt power cycle [ 147.588603][ T4393] usb 2-1: device descriptor read/all, error -71 [ 148.008812][ T13] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 148.272448][ T4250] usb 1-1: USB disconnect, device number 8 [ 148.274775][ T13] usb 4-1: device descriptor read/8, error -71 [ 148.446126][ T5564] sp4: Synchronizing with TNC [ 148.474203][ T5566] loop2: detected capacity change from 0 to 1024 [ 148.523814][ T5566] hfsplus: unable to parse mount options [ 149.796966][ T5573] loop0: detected capacity change from 0 to 512 [ 150.027120][ T5575] netlink: 'syz.1.300': attribute type 3 has an invalid length. [ 150.204998][ T5504] XFS (loop4): Ending clean mount [ 150.523315][ T5580] loop2: detected capacity change from 0 to 32768 [ 150.589957][ T5573] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.298: iget: bad i_size value: 38620345925642 [ 150.649004][ T5573] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.298: couldn't read orphan inode 15 (err -117) [ 150.696325][ T5573] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 150.759355][ T4183] XFS (loop4): Unmounting Filesystem [ 151.219089][ T5599] loop0: detected capacity change from 0 to 128 [ 151.644183][ T5599] EXT4-fs (loop0): Ignoring removed nobh option [ 151.679199][ T5580] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 151.687475][ T5580] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 151.861246][ T5601] netlink: 'syz.1.308': attribute type 4 has an invalid length. [ 151.955537][ T5599] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobh,max_dir_size_kb=0x0000000000000004,,errors=continue. Quota mode: none. [ 152.033599][ T5599] ext4 filesystem being mounted at /43/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 152.224237][ T26] audit: type=1800 audit(1765253415.872:54): pid=5599 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.307" name="file1" dev="loop0" ino=12 res=0 errno=0 [ 152.302423][ T5607] netlink: 'syz.1.309': attribute type 3 has an invalid length. [ 152.390120][ T5580] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 152.442942][ T4393] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 152.449923][ T4393] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 152.645190][ T4393] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 195ms [ 152.663676][ T4393] gfs2: fsid=syz:syz.0: jid=0: Done [ 152.680102][ T5580] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 153.715746][ T5633] netlink: 'syz.1.314': attribute type 3 has an invalid length. [ 154.007886][ T5641] loop4: detected capacity change from 0 to 512 [ 155.007983][ T5654] sp4: Synchronizing with TNC [ 155.121923][ T5659] loop0: detected capacity change from 0 to 1024 [ 155.447437][ T5659] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 155.824709][ T5646] loop3: detected capacity change from 0 to 32768 [ 155.964135][ T13] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 156.120119][ T5646] XFS (loop3): Mounting V5 Filesystem [ 156.460084][ T13] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 156.481411][ T13] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 156.522551][ T13] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 156.701568][ T13] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 34756, setting to 1024 [ 156.747491][ T13] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 157.522868][ T5691] netlink: 'syz.4.329': attribute type 3 has an invalid length. [ 158.369650][ T5697] loop2: detected capacity change from 0 to 2048 [ 158.413539][ T13] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 158.428328][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.446960][ T13] usb 2-1: Product: syz [ 158.451182][ T13] usb 2-1: Manufacturer: syz [ 158.461908][ T13] usb 2-1: SerialNumber: syz [ 158.478223][ T5697] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 158.499337][ T13] usb 2-1: config 0 descriptor?? [ 158.569839][ T5663] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 158.617921][ T5697] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 158.657454][ T13] usb 2-1: can't set config #0, error -71 [ 158.701785][ T13] usb 2-1: USB disconnect, device number 13 [ 158.751966][ T4390] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 159.221387][ T4390] usb 1-1: Using ep0 maxpacket: 16 [ 159.618504][ T5712] loop4: detected capacity change from 0 to 512 [ 159.782306][ T5712] EXT4-fs (loop4): Ignoring removed orlov option [ 159.792481][ T5712] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 159.802588][ T4390] usb 1-1: New USB device found, idVendor=04dd, idProduct=8002, bcdDevice=fc.b6 [ 159.832906][ T4390] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.860667][ T4390] usb 1-1: Product: syz [ 159.878489][ T4390] usb 1-1: Manufacturer: syz [ 159.883146][ T4390] usb 1-1: SerialNumber: syz [ 159.905505][ T5712] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 159.959431][ T4390] usb 1-1: config 0 descriptor?? [ 159.994243][ T5712] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2229: inode #15: comm syz.4.334: corrupted in-inode xattr [ 160.076213][ T5712] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.334: couldn't read orphan inode 15 (err -117) [ 160.102091][ T4390] safe_serial 1-1:0.0: safe_serial converter detected [ 160.120886][ T4390] usb 1-1: safe_serial converter now attached to ttyUSB0 [ 160.141721][ T5712] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,orlov,debug,noload,nombcache,noblock_validity,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none. [ 160.241005][ T5726] loop1: detected capacity change from 0 to 256 [ 160.284382][ T5646] XFS (loop3): Ending clean mount [ 160.953208][ T5646] XFS (loop3): Quotacheck needed: Please wait. [ 161.140186][ T1107] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 161.391466][ T5646] XFS (loop3): Quotacheck: Done. [ 161.404802][ T4210] usb 1-1: USB disconnect, device number 9 [ 161.419849][ T4210] safe_serial ttyUSB0: safe_serial converter now disconnected from ttyUSB0 [ 161.443880][ T4210] safe_serial 1-1:0.0: device disconnected [ 161.510164][ T4197] XFS (loop3): Unmounting Filesystem [ 161.567558][ T1107] usb 5-1: Using ep0 maxpacket: 8 [ 161.616372][ T26] audit: type=1400 audit(1765253425.262:55): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name="/proc/thread-self/attr/exec" pid=5732 comm="syz.2.340" [ 161.619094][ T5735] process 'syz.2.340' launched './file0' with NULL argv: empty string added [ 161.862237][ T1107] usb 5-1: unable to get BOS descriptor or descriptor too short [ 161.991380][ T1107] usb 5-1: config 8 has an invalid interface number: 61 but max is 0 [ 162.012545][ T1107] usb 5-1: config 8 has no interface number 0 [ 162.025667][ T4210] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 162.033818][ T1107] usb 5-1: config 8 interface 61 altsetting 8 endpoint 0x8 has invalid wMaxPacketSize 0 [ 162.055068][ T1107] usb 5-1: config 8 interface 61 altsetting 8 endpoint 0x5 has an invalid bInterval 255, changing to 11 [ 162.107566][ T1107] usb 5-1: config 8 interface 61 altsetting 8 endpoint 0x5 has invalid maxpacket 59391, setting to 1024 [ 162.119447][ T1107] usb 5-1: config 8 interface 61 has no altsetting 0 [ 162.273131][ T4210] usb 1-1: device descriptor read/64, error -71 [ 162.380273][ T1107] usb 5-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice=e9.1f [ 162.418399][ T1107] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.461390][ T5742] netlink: 'syz.2.343': attribute type 3 has an invalid length. [ 162.464144][ T1107] usb 5-1: Product: syz [ 162.490139][ T1107] usb 5-1: Manufacturer: syz [ 162.504139][ T1107] usb 5-1: SerialNumber: syz [ 162.574266][ T5728] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 162.644186][ T1107] usb 5-1: can't set config #8, error -71 [ 162.667774][ T4210] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 162.695689][ T1107] usb 5-1: USB disconnect, device number 6 [ 162.709898][ T5726] FAT-fs (loop1): Directory bread(block 64) failed [ 162.721801][ T5726] FAT-fs (loop1): Directory bread(block 65) failed [ 162.774268][ T5726] FAT-fs (loop1): Directory bread(block 66) failed [ 162.780861][ T5726] FAT-fs (loop1): Directory bread(block 67) failed [ 162.830174][ T5726] FAT-fs (loop1): Directory bread(block 68) failed [ 162.868860][ T5726] FAT-fs (loop1): Directory bread(block 69) failed [ 162.892838][ T5726] FAT-fs (loop1): Directory bread(block 70) failed [ 162.920981][ T5726] FAT-fs (loop1): Directory bread(block 71) failed [ 162.947679][ T5726] FAT-fs (loop1): Directory bread(block 72) failed [ 163.005059][ T5726] FAT-fs (loop1): Directory bread(block 73) failed [ 163.014138][ T4210] usb 1-1: device descriptor read/64, error -71 [ 163.112326][ T5751] sp4: Synchronizing with TNC [ 163.159149][ T4210] usb usb1-port1: attempt power cycle [ 163.193447][ T5759] loop4: detected capacity change from 0 to 512 [ 164.355474][ T4210] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 164.462982][ T4210] usb 1-1: device descriptor read/8, error -71 [ 165.796709][ T5783] netlink: 'syz.4.355': attribute type 3 has an invalid length. [ 165.809995][ T5781] loop3: detected capacity change from 0 to 512 [ 166.014323][ T5779] loop0: detected capacity change from 0 to 32768 [ 166.169093][ T5781] EXT4-fs (loop3): Ignoring removed orlov option [ 166.176999][ T5781] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 166.273149][ T5781] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 166.304911][ T5781] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2229: inode #15: comm syz.3.356: corrupted in-inode xattr [ 166.389296][ T5781] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.356: couldn't read orphan inode 15 (err -117) [ 166.506481][ T5781] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,orlov,debug,noload,nombcache,noblock_validity,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none. [ 166.801265][ T5779] ERROR: (device loop0): dbAlloc: the hint is outside the map [ 166.801265][ T5779] [ 166.835570][ T5779] ERROR: (device loop0): remounting filesystem as read-only [ 166.845530][ T5779] attempt to access beyond end of device [ 166.845530][ T5779] loop0: rw=2049, want=44040, limit=32768 [ 166.897991][ T5810] capability: warning: `syz.4.362' uses 32-bit capabilities (legacy support in use) [ 167.560518][ T4234] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 167.861779][ T277] blkno = 1580, nblocks = 1 [ 167.866407][ T277] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map [ 167.866407][ T277] [ 167.929441][ T5814] loop4: detected capacity change from 0 to 4096 [ 167.942446][ T4234] usb 4-1: Using ep0 maxpacket: 8 [ 167.982523][ T4295] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 168.443802][ T4295] usb 5-1: Using ep0 maxpacket: 32 [ 169.033384][ T4295] usb 5-1: config index 0 descriptor too short (expected 36, got 10) [ 169.046643][ T4295] usb 5-1: config 0 descriptor has 1 excess byte, ignoring [ 169.053895][ T4295] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 169.102515][ T5828] sp4: Synchronizing with TNC [ 169.152226][ T5814] ntfs3: Unknown parameter '' [ 169.383793][ T4234] usb 4-1: unable to get BOS descriptor or descriptor too short [ 169.462027][ T4295] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 169.491377][ T4295] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.508906][ T5807] loop1: detected capacity change from 0 to 32768 [ 169.545965][ T4295] usb 5-1: config 0 descriptor?? [ 169.575346][ T4234] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 169.590406][ T4234] usb 4-1: can't read configurations, error -71 [ 169.610847][ T4295] usb 5-1: can't set config #0, error -71 [ 169.652056][ T4295] usb 5-1: USB disconnect, device number 7 [ 169.762425][ T5838] loop0: detected capacity change from 0 to 512 [ 170.078952][ T5846] netlink: 'syz.1.372': attribute type 3 has an invalid length. [ 170.300569][ T5854] loop3: detected capacity change from 0 to 256 [ 170.368894][ T5838] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 170.659513][ T5838] EXT4-fs error (device loop0): ext4_do_update_inode:5218: inode #16: comm syz.0.364: corrupted inode contents [ 170.709599][ T5854] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf4000b1f, utbl_chksum : 0xe619d30d) [ 170.740130][ T5838] EXT4-fs error (device loop0): ext4_dirty_inode:6054: inode #16: comm syz.0.364: mark_inode_dirty error [ 170.799367][ T5838] EXT4-fs error (device loop0): ext4_do_update_inode:5218: inode #16: comm syz.0.364: corrupted inode contents [ 170.879541][ T5838] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #16: comm syz.0.364: mark_inode_dirty error [ 170.982804][ T5838] EXT4-fs error (device loop0): ext4_do_update_inode:5218: inode #16: comm syz.0.364: corrupted inode contents [ 171.089876][ T5838] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem [ 171.137207][ T5838] EXT4-fs error (device loop0): ext4_do_update_inode:5218: inode #16: comm syz.0.364: corrupted inode contents [ 171.204897][ T5838] EXT4-fs error (device loop0): ext4_truncate:4279: inode #16: comm syz.0.364: mark_inode_dirty error [ 171.230693][ T5866] netlink: 20 bytes leftover after parsing attributes in process `syz.1.377'. [ 171.277835][ T5838] EXT4-fs error (device loop0) in ext4_process_orphan:343: Corrupt filesystem [ 171.481456][ T5838] EXT4-fs (loop0): 1 truncate cleaned up [ 171.487551][ T5838] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 171.514768][ T5873] loop4: detected capacity change from 0 to 512 [ 171.521434][ T5838] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.934289][ T5873] EXT4-fs (loop4): Ignoring removed orlov option [ 171.940860][ T5873] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 172.154161][ T5873] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 172.235947][ T5873] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2229: inode #15: comm syz.4.378: corrupted in-inode xattr [ 172.377083][ T5873] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.378: couldn't read orphan inode 15 (err -117) [ 172.444126][ T5873] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,orlov,debug,noload,nombcache,noblock_validity,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none. [ 173.454631][ T5869] loop1: detected capacity change from 0 to 40427 [ 173.485751][ T21] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 173.822614][ T21] usb 5-1: Using ep0 maxpacket: 8 [ 173.833362][ T5895] netlink: 'syz.2.384': attribute type 3 has an invalid length. [ 174.449109][ T5902] loop0: detected capacity change from 0 to 4096 [ 174.500699][ T5907] loop3: detected capacity change from 0 to 128 [ 174.595580][ T5910] sp4: Synchronizing with TNC [ 174.617506][ T5902] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 174.735040][ T5907] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 174.796976][ T5907] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 174.826002][ T5907] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 174.894853][ T5902] ntfs: (device loop0): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 174.930557][ T5902] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 175.004190][ T5902] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 175.087724][ T21] usb 5-1: unable to get BOS descriptor or descriptor too short [ 175.147217][ T5902] ntfs: volume version 3.1. [ 175.152010][ T5907] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 175.217651][ T5907] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 175.262951][ T21] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 175.271447][ T21] usb 5-1: can't read configurations, error -71 [ 175.330919][ T5907] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 175.372630][ T5907] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 175.407581][ T5907] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 175.619475][ T5907] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 175.694367][ T5907] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1) [ 175.867085][ T4181] ntfs: (device loop0): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 176.214192][ T5907] loop3: detected capacity change from 0 to 256 [ 176.246948][ T5913] loop1: detected capacity change from 0 to 32768 [ 176.288460][ T5927] loop0: detected capacity change from 0 to 4096 [ 176.389939][ T5927] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 176.613994][ T5913] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.390 (5913) [ 176.743061][ T5913] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 176.778176][ T5913] BTRFS info (device loop1): force zlib compression, level 3 [ 176.833816][ T5913] BTRFS info (device loop1): force clearing of disk cache [ 176.868974][ T5913] BTRFS info (device loop1): setting nodatasum [ 176.906665][ T5913] BTRFS info (device loop1): allowing degraded mounts [ 176.935157][ T5913] BTRFS info (device loop1): enabling disk space caching [ 176.972979][ T5913] BTRFS info (device loop1): disk space caching is enabled [ 176.988351][ T5913] BTRFS info (device loop1): has skinny extents [ 178.934906][ T5967] netlink: 'syz.2.400': attribute type 3 has an invalid length. [ 179.021038][ T5927] ntfs3: loop0: failed to convert "c46c" to iso8859-4 [ 179.022633][ T5913] BTRFS error (device loop1): open_ctree failed: -12 [ 179.074272][ T5969] loop3: detected capacity change from 0 to 512 [ 179.115745][ T5972] netlink: 8 bytes leftover after parsing attributes in process `syz.0.392'. [ 179.316675][ T5969] EXT4-fs (loop3): Ignoring removed orlov option [ 179.324005][ T5969] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 179.412926][ T5969] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 179.438611][ T5969] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2229: inode #15: comm syz.3.401: corrupted in-inode xattr [ 179.563575][ T5969] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.401: couldn't read orphan inode 15 (err -117) [ 179.617223][ T5969] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,orlov,debug,noload,nombcache,noblock_validity,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none. [ 179.966387][ T5985] sp4: Synchronizing with TNC [ 180.843423][ T4317] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 181.129273][ T4317] usb 4-1: Using ep0 maxpacket: 8 [ 181.371178][ T5998] loop0: detected capacity change from 0 to 4096 [ 181.415934][ T5998] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 181.551419][ T4250] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 181.570121][ T4241] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 181.575126][ T5998] ntfs: (device loop0): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 181.706159][ T5998] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 181.736039][ T5998] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 181.829728][ T5998] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 181.864935][ T5998] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 181.873685][ T4241] usb 2-1: Using ep0 maxpacket: 8 [ 181.933229][ T5998] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 181.987604][ T5998] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 182.066342][ T4241] usb 2-1: config 0 has an invalid interface number: 240 but max is 0 [ 182.074178][ T5998] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 182.079957][ T4241] usb 2-1: config 0 has no interface number 0 [ 182.113736][ T5998] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 182.117971][ T4241] usb 2-1: config 0 interface 240 altsetting 128 bulk endpoint 0x3 has invalid maxpacket 1023 [ 182.161928][ T4250] usb 5-1: config 0 has an invalid interface number: 204 but max is 0 [ 182.170301][ T4250] usb 5-1: config 0 has no interface number 0 [ 182.216414][ T4241] usb 2-1: config 0 interface 240 altsetting 128 bulk endpoint 0x82 has invalid maxpacket 8 [ 182.256549][ T5998] ntfs: volume version 3.1. [ 182.267759][ T4241] usb 2-1: config 0 interface 240 has no altsetting 0 [ 182.435798][ T4317] usb 4-1: unable to get BOS descriptor or descriptor too short [ 182.544158][ T4317] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 182.552171][ T4241] usb 2-1: New USB device found, idVendor=0451, idProduct=f430, bcdDevice=d3.7c [ 182.561368][ T4317] usb 4-1: can't read configurations, error -71 [ 182.568223][ T4241] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.588823][ T4241] usb 2-1: Product: syz [ 182.592675][ T4250] usb 5-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d [ 182.606505][ T4241] usb 2-1: Manufacturer: syz [ 182.614121][ T4250] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.622188][ T4250] usb 5-1: Product: syz [ 182.623180][ T4241] usb 2-1: SerialNumber: syz [ 182.686018][ T4241] usb 2-1: config 0 descriptor?? [ 182.729538][ T6002] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 182.780028][ T6002] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 182.824520][ T4250] usb 5-1: Manufacturer: syz [ 182.829748][ T4250] usb 5-1: SerialNumber: syz [ 182.851967][ T4250] usb 5-1: config 0 descriptor?? [ 182.871760][ T4241] ti_usb_3410_5052 2-1:0.240: TI USB 3410 1 port adapter converter detected [ 183.207181][ T4241] usb 2-1: TI USB 3410 1 port adapter converter now attached to ttyUSB0 [ 183.420913][ T4241] usb 2-1: USB disconnect, device number 14 [ 183.430763][ T4241] ti_usb_3410_5052_1 ttyUSB0: TI USB 3410 1 port adapter converter now disconnected from ttyUSB0 [ 183.522455][ T4241] ti_usb_3410_5052 2-1:0.240: device disconnected [ 183.640393][ T4250] ems_usb 5-1:0.204 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 183.724250][ T4250] ems_usb: probe of 5-1:0.204 failed with error -22 [ 183.789002][ T6017] netlink: 'syz.2.414': attribute type 3 has an invalid length. [ 183.996291][ T4210] usb 5-1: USB disconnect, device number 10 [ 184.916735][ T6043] loop4: detected capacity change from 0 to 512 [ 185.005142][ T6045] sp4: Synchronizing with TNC [ 185.737280][ T6055] loop2: detected capacity change from 0 to 128 [ 186.489476][ T4317] usb 4-1: new low-speed USB device number 14 using dummy_hcd [ 186.966860][ T6048] loop1: detected capacity change from 0 to 65536 [ 186.972842][ T4317] usb 4-1: LPM exit latency is zeroed, disabling LPM. [ 187.081549][ T4317] usb 4-1: config 1 interface 0 altsetting 2 endpoint 0x82 is Bulk; changing to Interrupt [ 187.104272][ T4317] usb 4-1: config 1 interface 0 altsetting 2 endpoint 0x3 is Bulk; changing to Interrupt [ 187.134124][ T4317] usb 4-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 187.184122][ T4317] usb 4-1: config 1 interface 0 has no altsetting 0 [ 187.443750][ T4317] usb 4-1: string descriptor 0 read error: -22 [ 187.456124][ T4317] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 187.475633][ T4317] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.518296][ T6043] EXT4-fs (loop4): Ignoring removed orlov option [ 187.554262][ T6043] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 187.566593][ T6057] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 187.578432][ T6057] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 187.607355][ T6043] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 187.642093][ T4317] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 187.702540][ T6043] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2229: inode #15: comm syz.4.421: corrupted in-inode xattr [ 187.725606][ T6048] XFS (loop1): Mounting V5 Filesystem [ 187.777876][ T6043] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.421: couldn't read orphan inode 15 (err -117) [ 187.840107][ T6043] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,orlov,debug,noload,nombcache,noblock_validity,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none. [ 187.922935][ T4241] usb 4-1: USB disconnect, device number 14 [ 188.314229][ T6071] netlink: 'syz.2.428': attribute type 3 has an invalid length. [ 188.393950][ T6073] loop4: detected capacity change from 0 to 128 [ 188.455160][ T6073] EXT4-fs (loop4): Ignoring removed orlov option [ 188.574566][ T6080] netlink: 36 bytes leftover after parsing attributes in process `syz.2.431'. [ 188.641393][ T6073] EXT4-fs (loop4): mounted filesystem without journal. Opts: orlov,nodioread_nolock,,errors=continue. Quota mode: none. [ 188.689476][ T6073] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.718899][ T6086] loop2: detected capacity change from 0 to 1024 [ 188.835136][ T6086] hfsplus: unable to parse mount options [ 189.082942][ T6096] loop3: detected capacity change from 0 to 512 [ 189.133929][ T6048] XFS (loop1): Ending clean mount [ 189.167992][ T6048] XFS (loop1): Quotacheck needed: Please wait. [ 189.288253][ T6048] XFS (loop1): Quotacheck: Done. [ 189.289474][ T4210] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 189.386350][ T4188] XFS (loop1): Unmounting Filesystem [ 189.453739][ T6096] EXT4-fs (loop3): Ignoring removed orlov option [ 189.469684][ T6096] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 189.545868][ T6099] cifs: Unknown parameter 'mode' [ 189.580754][ T6096] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 189.722945][ T6096] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2229: inode #15: comm syz.3.437: corrupted in-inode xattr [ 189.846840][ T6096] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.437: couldn't read orphan inode 15 (err -117) [ 189.902150][ T6096] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,orlov,debug,noload,nombcache,noblock_validity,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none. [ 189.927885][ T6101] sp4: Synchronizing with TNC [ 189.944774][ T4210] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 190.161800][ T4210] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 190.186359][ T6088] loop2: detected capacity change from 0 to 32768 [ 190.198591][ T4210] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 190.882775][ T4317] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 191.104245][ T4210] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 191.113340][ T4210] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 191.154707][ T4210] usb 1-1: SerialNumber: syz [ 191.224467][ T4317] usb 4-1: Using ep0 maxpacket: 8 [ 191.299731][ T1107] Bluetooth: hci2: command 0x0406 tx timeout [ 191.306101][ T1107] Bluetooth: hci3: command 0x0406 tx timeout [ 191.334122][ T1107] Bluetooth: hci1: command 0x0406 tx timeout [ 191.340293][ T1107] Bluetooth: hci0: command 0x0406 tx timeout [ 191.354170][ T1107] Bluetooth: hci4: command 0x0406 tx timeout [ 191.390758][ T6088] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 191.427676][ T6088] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 191.449630][ T4317] usb 4-1: unable to get BOS descriptor or descriptor too short [ 191.584364][ T4317] usb 4-1: config 8 has an invalid interface number: 61 but max is 0 [ 191.596032][ T4317] usb 4-1: config 8 has no interface number 0 [ 191.622230][ T4317] usb 4-1: config 8 interface 61 altsetting 8 endpoint 0x8 has invalid wMaxPacketSize 0 [ 191.624403][ T6088] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 191.677433][ T4317] usb 4-1: config 8 interface 61 altsetting 8 endpoint 0x5 has invalid maxpacket 65535, setting to 64 [ 191.739754][ T4317] usb 4-1: config 8 interface 61 has no altsetting 0 [ 191.740791][ T1107] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 191.754182][ T1107] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 191.872563][ T6092] loop0: detected capacity change from 0 to 8192 [ 191.934966][ T1107] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 180ms [ 191.945287][ T6092] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "usr" [ 191.956285][ T1107] gfs2: fsid=syz:syz.0: jid=0: Done [ 191.961548][ T6088] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 191.970722][ T4317] usb 4-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice=e9.1f [ 191.980395][ T6088] gfs2: fsid=syz:syz.0: can't get quota file inode: -2 [ 191.994320][ T4317] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.100161][ T4317] usb 4-1: Product: syz [ 192.123993][ T4317] usb 4-1: Manufacturer: syz [ 192.153087][ T4317] usb 4-1: SerialNumber: syz [ 192.253507][ T4317] usb 4-1: can't set config #8, error -71 [ 192.299500][ T4317] usb 4-1: USB disconnect, device number 15 [ 192.503837][ T4210] usb 1-1: 0:2 : does not exist [ 192.682020][ T6113] netlink: 'syz.2.441': attribute type 3 has an invalid length. [ 193.081268][ T4210] usb 1-1: USB disconnect, device number 14 [ 193.424176][ T6121] loop1: detected capacity change from 0 to 8192 [ 193.515148][ T4398] udevd[4398]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 193.618511][ T6121] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 193.634640][ T6121] REISERFS (device loop1): using writeback data mode [ 193.641369][ T6121] reiserfs: using flush barriers [ 193.710766][ T6121] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 193.777421][ T6121] REISERFS (device loop1): checking transaction log (loop1) [ 193.914834][ T6156] x_tables: duplicate underflow at hook 1 [ 193.969408][ T6121] REISERFS (device loop1): Using r5 hash to sort names [ 194.020027][ T6161] loop0: detected capacity change from 0 to 512 [ 194.035324][ T6157] overlayfs: missing 'lowerdir' [ 194.125743][ T6121] reiserfs: enabling write barrier flush mode [ 194.135185][ T6156] loop2: detected capacity change from 0 to 512 [ 194.202634][ T6161] EXT4-fs (loop0): Ignoring removed orlov option [ 194.221588][ T6161] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 194.260248][ T6156] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 194.270204][ T6161] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 194.297055][ T6169] netlink: 'syz.3.453': attribute type 3 has an invalid length. [ 194.328402][ T6161] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2229: inode #15: comm syz.0.451: corrupted in-inode xattr [ 194.340665][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.349522][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.361246][ T6156] EXT4-fs (loop2): orphan cleanup on readonly fs [ 194.406322][ T6156] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:510: comm syz.2.450: Block bitmap for bg 0 marked uninitialized [ 194.443455][ T6121] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 194.473885][ T6121] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 194.487791][ T6161] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.451: couldn't read orphan inode 15 (err -117) [ 194.545116][ T6156] EXT4-fs (loop2): Remounting filesystem read-only [ 194.582689][ T6156] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 194.593044][ T6163] loop4: detected capacity change from 0 to 4096 [ 194.619496][ T6161] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,orlov,debug,noload,nombcache,noblock_validity,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none. [ 194.626060][ T6163] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 194.670811][ T6156] EXT4-fs (loop2): Remounting filesystem read-only [ 194.679652][ T6156] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:510: comm syz.2.450: Block bitmap for bg 0 marked uninitialized [ 194.759921][ T6156] EXT4-fs (loop2): Remounting filesystem read-only [ 194.767955][ T6156] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 194.805923][ T6156] EXT4-fs (loop2): Remounting filesystem read-only [ 194.812822][ T6156] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:510: comm syz.2.450: Block bitmap for bg 0 marked uninitialized [ 194.864101][ T6156] EXT4-fs (loop2): Remounting filesystem read-only [ 194.872387][ T6156] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 194.906884][ T6156] EXT4-fs (loop2): Remounting filesystem read-only [ 194.926211][ T6156] EXT4-fs (loop2): 1 orphan inode deleted [ 194.944789][ T6156] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nolazytime,. Quota mode: none. [ 195.729275][ T4317] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 195.947121][ T6176] sp4: Synchronizing with TNC [ 196.103137][ T4317] usb 1-1: Using ep0 maxpacket: 8 [ 196.348003][ T6163] ntfs3: loop4: Failed to load $Extend. [ 196.380874][ T4317] usb 1-1: unable to get BOS descriptor or descriptor too short [ 196.534905][ T4317] usb 1-1: config 8 has an invalid interface number: 61 but max is 0 [ 196.553287][ T4317] usb 1-1: config 8 has no interface number 0 [ 196.586863][ T4317] usb 1-1: config 8 interface 61 altsetting 8 endpoint 0x8 has invalid wMaxPacketSize 0 [ 196.633447][ T4317] usb 1-1: config 8 interface 61 altsetting 8 endpoint 0x5 has invalid maxpacket 65535, setting to 64 [ 196.692605][ T4317] usb 1-1: config 8 interface 61 has no altsetting 0 [ 197.222561][ T4317] usb 1-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice=e9.1f [ 197.235114][ T26] kauditd_printk_skb: 27 callbacks suppressed [ 197.235130][ T26] audit: type=1326 audit(1765253460.562:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6178 comm="syz.1.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6beb38d749 code=0x7ffc0000 [ 197.291182][ T4317] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.370623][ T4317] usb 1-1: Product: syz [ 197.414390][ T26] audit: type=1326 audit(1765253460.562:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6178 comm="syz.1.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f6beb38d749 code=0x7ffc0000 [ 197.448706][ T4317] usb 1-1: can't set config #8, error -71 [ 197.497802][ T4317] usb 1-1: USB disconnect, device number 15 [ 198.195151][ T6198] loop0: detected capacity change from 0 to 764 [ 198.365884][ T6198] Symlink component flag not implemented [ 198.388276][ T6198] Symlink component flag not implemented [ 198.423473][ T6198] Symlink component flag not implemented (129) [ 198.475373][ T6209] input: syz1 as /devices/virtual/input/input9 [ 198.524963][ T6198] Symlink component flag not implemented (6) [ 198.628740][ T6214] netlink: 'syz.4.466': attribute type 3 has an invalid length. [ 199.191207][ T6225] loop0: detected capacity change from 0 to 512 [ 199.331463][ T26] audit: type=1804 audit(1765253462.982:76): pid=6230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.472" name="/newroot/106/bus/file0" dev="overlay" ino=607 res=1 errno=0 [ 199.425831][ T6225] EXT4-fs (loop0): Ignoring removed orlov option [ 199.476028][ T6225] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 199.830659][ T6225] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 200.073474][ T6225] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2229: inode #15: comm syz.0.467: corrupted in-inode xattr [ 200.101871][ T6235] loop4: detected capacity change from 0 to 16 [ 200.223524][ T6225] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.467: couldn't read orphan inode 15 (err -117) [ 200.273021][ T6235] erofs: (device loop4): mounted with root inode @ nid 36. [ 200.291362][ T6225] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,orlov,debug,noload,nombcache,noblock_validity,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none. [ 201.327635][ T4234] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 201.732699][ T4234] usb 1-1: Using ep0 maxpacket: 8 [ 202.004124][ T4234] usb 1-1: unable to get BOS descriptor or descriptor too short [ 202.099963][ T4234] usb 1-1: config 8 has an invalid interface number: 61 but max is 0 [ 202.116754][ T4234] usb 1-1: config 8 has no interface number 0 [ 202.122954][ T4234] usb 1-1: config 8 interface 61 altsetting 8 endpoint 0x8 has invalid wMaxPacketSize 0 [ 202.256083][ T4234] usb 1-1: config 8 interface 61 altsetting 8 endpoint 0x5 has invalid maxpacket 65535, setting to 64 [ 202.321804][ T4234] usb 1-1: config 8 interface 61 has no altsetting 0 [ 202.472901][ T4234] usb 1-1: string descriptor 0 read error: -71 [ 202.480705][ T4234] usb 1-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice=e9.1f [ 202.524106][ T4234] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.594225][ T4234] usb 1-1: can't set config #8, error -71 [ 202.628753][ T4234] usb 1-1: USB disconnect, device number 16 [ 202.643763][ T6253] netlink: 76 bytes leftover after parsing attributes in process `syz.0.479'. [ 202.659649][ T6244] loop3: detected capacity change from 0 to 32768 [ 203.090855][ T6256] loop0: detected capacity change from 0 to 4096 [ 203.191006][ T6256] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 203.287742][ T6263] sp4: Synchronizing with TNC [ 203.722686][ T6269] netlink: 'syz.2.484': attribute type 3 has an invalid length. [ 203.976192][ T6244] XFS (loop3): Mounting V5 Filesystem [ 204.895344][ T6297] loop1: detected capacity change from 0 to 512 [ 204.952045][ T6297] EXT4-fs (loop1): Ignoring removed orlov option [ 204.964231][ T6297] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 205.044142][ T6297] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 205.064172][ T6297] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2229: inode #15: comm syz.1.490: corrupted in-inode xattr [ 205.159840][ T6297] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.490: couldn't read orphan inode 15 (err -117) [ 205.208422][ T6297] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,orlov,debug,noload,nombcache,noblock_validity,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none. [ 205.621865][ T4210] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 205.643703][ T6295] loop0: detected capacity change from 0 to 512 [ 206.139654][ T4210] usb 3-1: Using ep0 maxpacket: 32 [ 206.230815][ T4234] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 206.316935][ T6303] tipc: Started in network mode [ 206.344620][ T6303] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711 [ 206.370129][ T6303] tipc: Enabling of bearer rejected, failed to enable media [ 206.457160][ T4210] usb 3-1: unable to get BOS descriptor or descriptor too short [ 206.586082][ T4210] usb 3-1: config 2 has an invalid interface number: 147 but max is 0 [ 206.600906][ T4210] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 206.603993][ T6295] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,bsddf,. Quota mode: writeback. [ 206.633360][ T4210] usb 3-1: config 2 has no interface number 0 [ 206.649975][ T4234] usb 2-1: Using ep0 maxpacket: 8 [ 206.655951][ T6295] ext4 filesystem being mounted at /71/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 206.674125][ T4210] usb 3-1: config 2 interface 147 has no altsetting 0 [ 206.767843][ T6295] EXT4-fs error (device loop0): ext4_empty_dir:3136: inode #12: comm syz.0.489: invalid size [ 206.803069][ T6295] EXT4-fs (loop0): Remounting filesystem read-only [ 206.907975][ T4234] usb 2-1: unable to get BOS descriptor or descriptor too short [ 206.990619][ T4210] usb 3-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=c8.8e [ 207.004236][ T4210] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.041500][ T4234] usb 2-1: config 8 has an invalid interface number: 61 but max is 0 [ 207.049727][ T4210] usb 3-1: Product: syz [ 207.053917][ T4210] usb 3-1: Manufacturer: syz [ 207.059023][ T4234] usb 2-1: config 8 has no interface number 0 [ 207.071421][ T4234] usb 2-1: config 8 interface 61 altsetting 8 endpoint 0x8 has invalid wMaxPacketSize 0 [ 207.081495][ T4210] usb 3-1: SerialNumber: syz [ 207.139395][ T4234] usb 2-1: config 8 interface 61 altsetting 8 endpoint 0x5 has invalid maxpacket 65535, setting to 64 [ 207.162681][ T4234] usb 2-1: config 8 interface 61 has no altsetting 0 [ 207.217652][ T6244] XFS (loop3): Ending clean mount [ 207.284318][ T4197] XFS (loop3): Unmounting Filesystem [ 207.422720][ T4234] usb 2-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice=e9.1f [ 207.465764][ T4210] ims_pcu 3-1:2.147: Missing CDC union descriptor [ 207.472264][ T4210] ims_pcu: probe of 3-1:2.147 failed with error -22 [ 207.480280][ T4234] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.507159][ T4234] usb 2-1: Product: syz [ 207.511377][ T4234] usb 2-1: Manufacturer: syz [ 207.548928][ T4234] usb 2-1: SerialNumber: syz [ 207.573633][ T4210] usb 3-1: USB disconnect, device number 10 [ 208.296992][ T4234] bfusb: probe of 2-1:8.61 failed with error -5 [ 208.337635][ T4234] usb 2-1: USB disconnect, device number 15 [ 208.481883][ T6308] loop4: detected capacity change from 0 to 32768 [ 208.596770][ T6322] netlink: 'syz.1.498': attribute type 3 has an invalid length. [ 208.720903][ T6308] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 208.740347][ T6308] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 208.864922][ T6328] loop2: detected capacity change from 0 to 512 [ 208.954164][ T6330] sp4: Synchronizing with TNC [ 208.978153][ T6308] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 208.978153][ T6308] inode = 1 34 [ 208.978153][ T6308] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 465 [ 209.031995][ T6308] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 209.052127][ T6308] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 209.121373][ T6308] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 209.142579][ T6308] gfs2: fsid=syz:syz.0: File system withdrawn [ 209.161486][ T6308] CPU: 1 PID: 6308 Comm: syz.4.492 Not tainted syzkaller #0 [ 209.168834][ T6308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 209.178933][ T6308] Call Trace: [ 209.182232][ T6308] [ 209.185172][ T6308] dump_stack_lvl+0x168/0x230 [ 209.189897][ T6308] ? kobject_uevent_env+0x371/0x890 [ 209.195111][ T6308] ? show_regs_print_info+0x20/0x20 [ 209.200320][ T6308] ? load_image+0x3b0/0x3b0 [ 209.204917][ T6308] ? kobject_uevent_env+0x371/0x890 [ 209.210331][ T6308] ? lockref_put_or_lock+0x6e/0xb0 [ 209.215453][ T6308] gfs2_withdraw+0x111b/0x1460 [ 209.220237][ T6308] ? gfs2_lm+0x220/0x220 [ 209.224496][ T6308] ? make_kgid+0x1aa/0x640 [ 209.228928][ T6308] ? gfs2_consist_inode_i+0xc0/0xe0 [ 209.234134][ T6308] gfs2_inode_refresh+0xb5e/0xfe0 [ 209.239168][ T6308] ? gfs2_inode_metasync+0xf0/0xf0 [ 209.244295][ T6308] ? __lock_acquire+0x7c60/0x7c60 [ 209.249350][ T6308] inode_go_lock+0x127/0x470 [ 209.253956][ T6308] do_promote+0x741/0xab0 [ 209.258305][ T6308] finish_xmote+0x514/0xb70 [ 209.262820][ T6308] do_xmote+0x7b6/0x1120 [ 209.267252][ T6308] gfs2_glock_nq+0xc7a/0x1550 [ 209.271953][ T6308] init_journal+0xc42/0x2220 [ 209.276569][ T6308] ? end_bio_io_page+0x100/0x100 [ 209.281617][ T6308] ? vsnprintf+0x1905/0x1a00 [ 209.286225][ T6308] ? snprintf+0xd7/0x120 [ 209.290475][ T6308] ? init_journal+0x710/0x2220 [ 209.295260][ T6308] ? vscnprintf+0x80/0x80 [ 209.299602][ T6308] ? gfs2_glock_nq_num+0x17a/0x1b0 [ 209.304815][ T6308] init_inodes+0xdb/0x320 [ 209.309245][ T6308] gfs2_fill_super+0x1701/0x1f50 [ 209.314208][ T6308] ? gfs2_reconfigure+0xcd0/0xcd0 [ 209.319240][ T6308] ? gfs2_glock_nq_num+0x82/0x1b0 [ 209.324272][ T6308] ? preempt_count_add+0x8d/0x190 [ 209.329316][ T6308] ? sb_set_blocksize+0xa5/0xe0 [ 209.334202][ T6308] get_tree_bdev+0x3f1/0x610 [ 209.338797][ T6308] ? gfs2_reconfigure+0xcd0/0xcd0 [ 209.343837][ T6308] gfs2_get_tree+0x4d/0x1e0 [ 209.348346][ T6308] vfs_get_tree+0x88/0x270 [ 209.352777][ T6308] do_new_mount+0x24a/0xa40 [ 209.357380][ T6308] __se_sys_mount+0x2d6/0x3c0 [ 209.362152][ T6308] ? __x64_sys_mount+0xc0/0xc0 [ 209.366925][ T6308] ? lockdep_hardirqs_on+0x94/0x140 [ 209.372214][ T6308] ? __x64_sys_mount+0x1c/0xc0 [ 209.376991][ T6308] do_syscall_64+0x4c/0xa0 [ 209.381408][ T6308] ? clear_bhb_loop+0x30/0x80 [ 209.386123][ T6308] ? clear_bhb_loop+0x30/0x80 [ 209.390804][ T6308] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 209.396705][ T6308] RIP: 0033:0x7fe8a1433eea [ 209.401128][ T6308] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 209.420737][ T6308] RSP: 002b:00007fe89f698e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 209.429249][ T6308] RAX: ffffffffffffffda RBX: 00007fe89f698ef0 RCX: 00007fe8a1433eea [ 209.437235][ T6308] RDX: 000020000001f680 RSI: 0000200000000040 RDI: 00007fe89f698eb0 [ 209.445226][ T6308] RBP: 000020000001f680 R08: 00007fe89f698ef0 R09: 0000000000800894 [ 209.453209][ T6308] R10: 0000000000800894 R11: 0000000000000246 R12: 0000200000000040 [ 209.461192][ T6308] R13: 00007fe89f698eb0 R14: 000000000001f7c8 R15: 00002000000001c0 [ 209.469188][ T6308] [ 209.874917][ T6308] gfs2: fsid=syz:syz.0: can't acquire journal inode glock: -5 [ 210.059691][ T6328] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 210.098187][ T6328] EXT4-fs (loop2): invalid journal inode [ 210.103938][ T6328] EXT4-fs (loop2): can't get journal size [ 210.133024][ T6328] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c118, mo2=0002] [ 210.146765][ T6328] System zones: 1-12, 13-13 [ 210.158696][ T6328] EXT4-fs (loop2): 1 truncate cleaned up [ 210.173964][ T6328] EXT4-fs (loop2): mounted filesystem without journal. Opts: norecovery,grpquota,debug,discard,,errors=continue. Quota mode: writeback. [ 210.547104][ T4250] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 210.621365][ T6350] netlink: 76 bytes leftover after parsing attributes in process `syz.2.505'. [ 210.877991][ T6359] loop3: detected capacity change from 0 to 512 [ 211.014345][ T6363] netlink: 'syz.4.510': attribute type 3 has an invalid length. [ 211.756245][ T6369] loop1: detected capacity change from 0 to 32768 [ 211.943493][ T4210] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 212.029719][ T6369] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 212.038629][ T6369] BTRFS info (device loop1): enabling ssd optimizations [ 212.045676][ T6369] BTRFS info (device loop1): using free space tree [ 212.052214][ T6369] BTRFS info (device loop1): has skinny extents [ 212.146674][ T6359] EXT4-fs (loop3): Ignoring removed orlov option [ 212.153178][ T6359] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 212.334191][ T6359] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 212.366660][ T6359] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2229: inode #15: comm syz.3.508: corrupted in-inode xattr [ 212.465506][ T6359] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.508: couldn't read orphan inode 15 (err -117) [ 212.504555][ T4210] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.530712][ T4210] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 212.569809][ T6359] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,orlov,debug,noload,nombcache,noblock_validity,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none. [ 212.650234][ T6369] BTRFS error (device loop1): subvol '.' does not match subvolid 7 [ 212.814329][ T4210] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 212.835101][ T4210] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.924113][ T4210] usb 1-1: Product: syz [ 212.963356][ T4210] usb 1-1: Manufacturer: syz [ 212.995216][ T4210] usb 1-1: SerialNumber: syz [ 213.467913][ T4210] cdc_ncm 1-1:1.0: skipping garbage [ 213.549414][ T4210] cdc_ncm 1-1:1.0: NCM or ECM functional descriptors missing [ 213.771916][ T4210] cdc_ncm 1-1:1.0: bind() failure [ 213.824916][ T4210] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 213.853049][ T4210] cdc_ncm 1-1:1.1: bind() failure [ 214.287062][ T4234] usb 1-1: USB disconnect, device number 17 [ 214.919095][ T6422] loop0: detected capacity change from 0 to 128 [ 215.000819][ T6422] EXT4-fs (loop0): Test dummy encryption mode enabled [ 215.082987][ T6424] sp4: Synchronizing with TNC [ 215.143409][ T6422] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption=v1,bsdgroups,,errors=continue. Quota mode: none. [ 215.177545][ T6422] ext4 filesystem being mounted at /78/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 215.341986][ T6410] loop4: detected capacity change from 0 to 40427 [ 215.457477][ T6410] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 215.502980][ T6410] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 215.578345][ T6410] F2FS-fs (loop4): invalid crc_offset: 33558524 [ 215.674992][ T6410] F2FS-fs (loop4): Found nat_bits in checkpoint [ 215.682458][ T4396] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 215.908570][ T6410] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 215.921629][ T6410] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 216.004081][ T6434] netlink: 'syz.2.524': attribute type 3 has an invalid length. [ 216.069773][ T4396] usb 1-1: Using ep0 maxpacket: 8 [ 216.350859][ T4396] usb 1-1: unable to get BOS descriptor or descriptor too short [ 216.474307][ T4396] usb 1-1: config 239 has an invalid interface number: 255 but max is 0 [ 216.482696][ T4396] usb 1-1: config 239 has no interface number 0 [ 216.535122][ T4396] usb 1-1: config 239 interface 255 altsetting 99 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 216.593494][ T4396] usb 1-1: config 239 interface 255 has no altsetting 0 [ 216.803223][ T4396] usb 1-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=ba.f6 [ 216.835078][ T4396] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.887656][ T4396] usb 1-1: Product: syz [ 216.891932][ T4396] usb 1-1: Manufacturer: syz [ 216.905660][ T6447] loop4: detected capacity change from 0 to 8 [ 216.906889][ T4396] usb 1-1: SerialNumber: syz [ 216.983414][ T6451] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 217.134531][ T4234] Bluetooth: hci4: command 0x0405 tx timeout [ 217.184843][ T6454] loop1: detected capacity change from 0 to 47 [ 217.522426][ T6466] loop4: detected capacity change from 0 to 512 [ 217.698418][ T6422] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 217.746391][ T6422] EXT4-fs error (device loop0): ext4_validate_block_bitmap:420: comm syz.0.523: bg 0: bad block bitmap checksum [ 217.785261][ T6466] EXT4-fs (loop4): Ignoring removed orlov option [ 217.792924][ T6466] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 217.931685][ T6466] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 217.966822][ T6466] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2229: inode #15: comm syz.4.531: corrupted in-inode xattr [ 218.066200][ T4396] visor 1-1:239.255: Sony Clie 3.5 converter detected [ 218.069569][ T6466] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.531: couldn't read orphan inode 15 (err -117) [ 218.573471][ T4396] usb 1-1: clie_3_5_startup: get config number failed: -71 [ 218.581090][ T4396] visor: probe of 1-1:239.255 failed with error -71 [ 218.596076][ T6466] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,orlov,debug,noload,nombcache,noblock_validity,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none. [ 218.735272][ T4396] usb 1-1: USB disconnect, device number 18 [ 219.232425][ T4241] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 219.695448][ T4241] usb 3-1: Using ep0 maxpacket: 32 [ 219.810817][ T4317] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 219.860165][ T6483] loop3: detected capacity change from 0 to 4096 [ 219.921662][ T4241] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 219.945305][ T4241] usb 3-1: config 0 has no interface number 0 [ 220.261281][ T4317] usb 5-1: Using ep0 maxpacket: 8 [ 220.282307][ T6490] netlink: 27 bytes leftover after parsing attributes in process `syz.0.533'. [ 220.299499][ T4241] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 220.308788][ T4241] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.328975][ T4241] usb 3-1: Product: syz [ 220.349277][ T4241] usb 3-1: Manufacturer: syz [ 220.353933][ T4241] usb 3-1: SerialNumber: syz [ 220.376859][ T4241] usb 3-1: config 0 descriptor?? [ 220.395519][ T6492] netlink: 'syz.1.537': attribute type 3 has an invalid length. [ 220.426393][ T4241] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 220.461777][ T4317] usb 5-1: unable to get BOS descriptor or descriptor too short [ 220.555501][ T6483] ntfs: (device loop3): parse_options(): Unrecognized mount option 1844674407370955161518446744073709551615. [ 220.599508][ T4317] usb 5-1: config 8 has an invalid interface number: 61 but max is 0 [ 220.610163][ T4317] usb 5-1: config 8 has no interface number 0 [ 220.632195][ T4241] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 220.649912][ T4317] usb 5-1: config 8 interface 61 altsetting 8 endpoint 0x8 has invalid wMaxPacketSize 0 [ 220.676740][ T4241] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 220.714366][ T4317] usb 5-1: config 8 interface 61 altsetting 8 endpoint 0x5 has invalid maxpacket 65535, setting to 64 [ 220.876562][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - port change to invalid port: 43 [ 220.924102][ T4317] usb 5-1: config 8 interface 61 has no altsetting 0 [ 221.026763][ T4317] usb 5-1: string descriptor 0 read error: -71 [ 221.033851][ T4317] usb 5-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice=e9.1f [ 221.052845][ T6494] loop1: detected capacity change from 0 to 8192 [ 221.078223][ T4317] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.104600][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 221.158734][ T4396] usb 3-1: USB disconnect, device number 11 [ 221.171190][ T6506] loop0: detected capacity change from 0 to 64 [ 221.176649][ T4317] usb 5-1: can't set config #8, error -71 [ 221.185532][ T4396] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 221.213484][ T4317] usb 5-1: USB disconnect, device number 11 [ 221.253640][ T4396] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 221.283538][ T4396] quatech2 3-1:0.51: device disconnected [ 221.521832][ T6494] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 221.543220][ T6494] REISERFS (device loop1): using ordered data mode [ 221.557186][ T6494] reiserfs: using flush barriers [ 221.650963][ T6494] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 221.749397][ T6494] REISERFS (device loop1): checking transaction log (loop1) [ 221.806538][ T6513] loop3: detected capacity change from 0 to 512 [ 221.898874][ T6518] sp4: Synchronizing with TNC [ 221.965765][ T6494] REISERFS (device loop1): Using rupasov hash to sort names [ 221.975392][ T6494] REISERFS (device loop1): using 3.5.x disk format [ 222.004263][ T6494] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 222.046789][ T6494] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 222.075890][ T6494] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 222.099671][ T6494] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 222.736957][ T6528] netlink: 'syz.4.549': attribute type 3 has an invalid length. [ 222.747792][ T6530] loop1: detected capacity change from 0 to 256 [ 223.015859][ T6533] loop3: detected capacity change from 0 to 2048 [ 223.102069][ T6530] exfat: Unknown parameter 'JPn2PAy*P*Ae]PPp/Ԅ ԃ>< h14G/@WxAwH^^@_/Cx0`x0ހa0F0Fhca`a [ 223.102069][ T6530] Li0f0flx0|X' [ 223.612877][ T6545] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 223.721440][ T6545] loop4: detected capacity change from 0 to 512 [ 223.774204][ T4234] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 223.916697][ T6545] EXT4-fs (loop4): Ignoring removed nobh option [ 224.013910][ T6545] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.554: iget: bad i_size value: 38620345925642 [ 224.103902][ T6545] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.554: couldn't read orphan inode 15 (err -117) [ 224.216617][ T6545] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,bsdgroups,data_err=ignore,,errors=continue. Quota mode: writeback. [ 224.391934][ T6545] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.554: bg 0: block 5: invalid block bitmap [ 224.429809][ T4234] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.434494][ T6545] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 224.451069][ T4234] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.490585][ T4234] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 224.497289][ T6545] EXT4-fs (loop4): This should not happen!! Data will be lost [ 224.497289][ T6545] [ 224.544106][ T4234] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 224.545903][ T6545] EXT4-fs (loop4): Total free blocks count 0 [ 224.574093][ T4234] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.586537][ T6545] EXT4-fs (loop4): Free/Dirty block details [ 224.592493][ T6545] EXT4-fs (loop4): free_blocks=0 [ 224.620732][ T4234] usb 2-1: config 0 descriptor?? [ 224.626152][ T6545] EXT4-fs (loop4): dirty_blocks=4 [ 224.684990][ T6545] EXT4-fs (loop4): Block reservation details [ 224.691034][ T6545] EXT4-fs (loop4): i_reserved_data_blocks=4 [ 224.753880][ T6549] loop9: detected capacity change from 0 to 7 [ 224.797627][ T4398] Dev loop9: unable to read RDB block 7 [ 224.803257][ T4398] loop9: unable to read partition table [ 224.816946][ T4398] loop9: partition table beyond EOD, truncated [ 224.852033][ T6549] Dev loop9: unable to read RDB block 7 [ 224.861163][ T6549] loop9: unable to read partition table [ 224.912269][ T6549] loop9: partition table beyond EOD, truncated [ 224.931430][ T6549] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 225.014243][ T4250] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 225.142179][ T4234] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 225.199432][ T4234] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 225.343248][ T4250] usb 1-1: device descriptor read/64, error -71 [ 225.637457][ T6569] fuse: Unknown parameter 'rootmd&`0000000000000040000' [ 225.703717][ T4250] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 225.973524][ T4250] usb 1-1: device descriptor read/64, error -71 [ 226.035731][ T6574] loop4: detected capacity change from 0 to 512 [ 226.141030][ T4250] usb usb1-port1: attempt power cycle [ 226.483194][ C0] plantronics 0003:047F:FFFF.0002: usb_submit_urb(ctrl) failed: -1 [ 226.646513][ T6588] netlink: 'syz.4.565': attribute type 3 has an invalid length. [ 226.690198][ T4250] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 226.865714][ T4250] usb 1-1: device descriptor read/8, error -71 [ 227.026467][ T6594] sp4: Synchronizing with TNC [ 227.248374][ T4250] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 227.379179][ T4250] usb 1-1: device descriptor read/8, error -71 [ 227.545294][ T4250] usb usb1-port1: unable to enumerate USB device [ 227.691860][ T6602] loop0: detected capacity change from 0 to 512 [ 227.779147][ T4317] usb 2-1: reset high-speed USB device number 17 using dummy_hcd [ 227.896439][ T4317] usb 2-1: device reset changed ep0 maxpacket size! [ 227.960510][ T4396] usb 2-1: USB disconnect, device number 17 [ 228.142120][ T6602] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 228.159039][ T6602] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 228.189984][ T4396] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 228.254143][ T6602] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 1 not in group (block 0)! [ 228.273442][ T6602] EXT4-fs (loop0): group descriptors corrupted! [ 228.289201][ T6613] loop4: detected capacity change from 0 to 256 [ 228.599303][ T4396] usb 2-1: Using ep0 maxpacket: 16 [ 228.804270][ T4396] usb 2-1: config index 0 descriptor too short (expected 65, got 36) [ 228.812423][ T4396] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.860926][ T4396] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 228.914121][ T4396] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 228.958056][ T4396] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.006226][ T4396] usb 2-1: config 0 descriptor?? [ 229.076048][ T4396] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input10 [ 229.315207][ T6597] loop1: detected capacity change from 0 to 512 [ 229.440551][ T6613] FAT-fs (loop4): Directory bread(block 64) failed [ 229.447630][ T6613] FAT-fs (loop4): Directory bread(block 65) failed [ 229.473561][ T6613] FAT-fs (loop4): Directory bread(block 66) failed [ 229.497911][ T6613] FAT-fs (loop4): Directory bread(block 67) failed [ 229.525109][ T6613] FAT-fs (loop4): Directory bread(block 68) failed [ 229.531699][ T6613] FAT-fs (loop4): Directory bread(block 69) failed [ 229.619652][ T6613] FAT-fs (loop4): Directory bread(block 70) failed [ 229.673761][ T6613] FAT-fs (loop4): Directory bread(block 71) failed [ 229.712398][ T6613] FAT-fs (loop4): Directory bread(block 72) failed [ 229.719298][ T6613] FAT-fs (loop4): Directory bread(block 73) failed [ 229.755103][ T6637] netlink: 'syz.2.584': attribute type 3 has an invalid length. [ 229.908417][ T6642] loop2: detected capacity change from 0 to 128 [ 230.089580][ T6597] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 230.177063][ T6597] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2826: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 230.240503][ T6647] netlink: 'syz.2.587': attribute type 1 has an invalid length. [ 230.255897][ T6597] EXT4-fs (loop1): 1 truncate cleaned up [ 230.281647][ T6647] netlink: 4 bytes leftover after parsing attributes in process `syz.2.587'. [ 230.303119][ T6597] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,usrquota,abort,debug_want_extra_isize=0x0000000000000080,noload,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 230.322696][ T6647] loop2: detected capacity change from 0 to 512 [ 230.430665][ T1107] usb 2-1: USB disconnect, device number 18 [ 230.576120][ T6630] loop0: detected capacity change from 0 to 32768 [ 230.987116][ T6661] sp4: Synchronizing with TNC [ 231.004657][ T6659] loop4: detected capacity change from 0 to 4096 [ 231.106007][ T6630] XFS (loop0): Mounting V5 Filesystem [ 231.327940][ T6659] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 231.586335][ T6683] netlink: 'syz.2.597': attribute type 3 has an invalid length. [ 231.619436][ T1107] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 232.290532][ T1107] usb 2-1: unable to get BOS descriptor or descriptor too short [ 232.408906][ T1107] usb 2-1: not running at top speed; connect to a high speed hub [ 232.554028][ T1107] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 232.570232][ T1107] usb 2-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 232.649061][ T1107] usb 2-1: config 1 interface 0 has no altsetting 0 [ 232.761495][ T6709] loop2: detected capacity change from 0 to 64 [ 233.051908][ T1107] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 233.078774][ T1107] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.129697][ T1107] usb 2-1: Product: syz [ 233.149578][ T1107] usb 2-1: Manufacturer: syz [ 233.178913][ T1107] usb 2-1: SerialNumber: syz [ 233.537469][ T6676] udc-core: couldn't find an available UDC or it's busy [ 233.568766][ T6676] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 233.650874][ T6676] udc-core: couldn't find an available UDC or it's busy [ 233.703722][ T6676] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 233.808724][ T6676] udc-core: couldn't find an available UDC or it's busy [ 233.864798][ T6676] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 233.962098][ T6676] udc-core: couldn't find an available UDC or it's busy [ 234.068218][ T6676] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 234.161306][ T6676] udc-core: couldn't find an available UDC or it's busy [ 234.228704][ T6676] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 234.823195][ T1107] usb 2-1: bad CDC descriptors [ 234.888658][ T1107] usb 2-1: USB disconnect, device number 19 [ 235.098201][ T6630] XFS (loop0): Ending clean mount [ 235.242176][ T6630] XFS (loop0): Quotacheck needed: Please wait. [ 235.584390][ T6630] XFS (loop0): Quotacheck: Done. [ 235.771493][ T4181] XFS (loop0): Unmounting Filesystem [ 236.257237][ T6721] loop4: detected capacity change from 0 to 512 [ 236.465334][ T6721] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.603: iget: bad i_size value: 38620345925642 [ 236.532256][ T6714] loop1: detected capacity change from 0 to 40427 [ 236.564143][ T6721] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.603: couldn't read orphan inode 15 (err -117) [ 236.612204][ T6721] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 237.110530][ T6731] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.603: bg 0: block 5: invalid block bitmap [ 237.359068][ T6737] netlink: 'syz.3.609': attribute type 3 has an invalid length. [ 237.534871][ T6731] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 268 with error 28 [ 237.665426][ T6731] EXT4-fs (loop4): This should not happen!! Data will be lost [ 237.665426][ T6731] [ 237.805093][ T6731] EXT4-fs (loop4): Total free blocks count 0 [ 237.826279][ T6731] EXT4-fs (loop4): Free/Dirty block details [ 237.846184][ T6731] EXT4-fs (loop4): free_blocks=0 [ 237.877693][ T6731] EXT4-fs (loop4): dirty_blocks=268 [ 237.888628][ T6731] EXT4-fs (loop4): Block reservation details [ 237.889149][ T6751] loop2: detected capacity change from 0 to 512 [ 237.907246][ T6731] EXT4-fs (loop4): i_reserved_data_blocks=268 [ 238.053499][ T6755] loop3: detected capacity change from 0 to 128 [ 238.096159][ T6757] loop0: detected capacity change from 0 to 128 [ 238.216618][ T6755] attempt to access beyond end of device [ 238.216618][ T6755] loop3: rw=0, want=6491538, limit=128 [ 238.233991][ T6755] Buffer I/O error on dev loop3, logical block 3245768, async page read [ 238.808199][ T6755] attempt to access beyond end of device [ 238.808199][ T6755] loop3: rw=0, want=6491538, limit=128 [ 238.833124][ T6755] Buffer I/O error on dev loop3, logical block 3245768, async page read [ 238.848581][ T6751] EXT4-fs (loop2): Ignoring removed orlov option [ 238.862122][ T6751] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 238.930513][ T6751] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 238.962060][ T4197] sysv_free_block: flc_count > flc_size [ 238.968212][ T6751] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2229: inode #15: comm syz.2.612: corrupted in-inode xattr [ 238.980202][ T4197] sysv_free_block: flc_count > flc_size [ 239.000516][ T4197] sysv_free_block: flc_count > flc_size [ 239.018649][ T4197] sysv_free_block: flc_count > flc_size [ 239.024573][ T4197] sysv_free_block: flc_count > flc_size [ 239.036182][ T6757] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 239.040675][ T6751] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.612: couldn't read orphan inode 15 (err -117) [ 239.060675][ T4197] sysv_free_block: flc_count > flc_size [ 239.094093][ T4197] sysv_free_block: flc_count > flc_size [ 239.109945][ T4197] sysv_free_block: flc_count > flc_size [ 239.124256][ T4197] sysv_free_block: flc_count > flc_size [ 239.136090][ T6751] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,orlov,debug,noload,nombcache,noblock_validity,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none. [ 239.158397][ T4197] sysv_free_block: flc_count > flc_size [ 239.176417][ T4197] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 240.645228][ T6783] netlink: 'syz.4.622': attribute type 3 has an invalid length. [ 241.171913][ T6792] sp4: Synchronizing with TNC [ 241.570584][ T6797] loop4: detected capacity change from 0 to 512 [ 241.612079][ T6797] EXT4-fs (loop4): Ignoring removed orlov option [ 241.618828][ T6797] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 241.692614][ T6797] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 241.723047][ T6797] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2229: inode #15: comm syz.4.628: corrupted in-inode xattr [ 241.785070][ T6797] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.628: couldn't read orphan inode 15 (err -117) [ 241.819010][ T6797] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,orlov,debug,noload,nombcache,noblock_validity,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none. [ 241.940921][ T6775] loop2: detected capacity change from 0 to 32768 [ 242.675521][ T4317] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 242.822218][ T26] audit: type=1326 audit(1765253506.472:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6801 comm="syz.0.627" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd667a0b749 code=0x0 [ 243.016851][ T4317] usb 5-1: Using ep0 maxpacket: 8 [ 243.189813][ T4317] usb 5-1: unable to get BOS descriptor or descriptor too short [ 243.284754][ T4317] usb 5-1: config 8 has an invalid interface number: 61 but max is 0 [ 243.293009][ T4317] usb 5-1: config 8 has no interface number 0 [ 243.307541][ T4317] usb 5-1: config 8 interface 61 altsetting 8 endpoint 0x8 has invalid wMaxPacketSize 0 [ 243.335523][ T4317] usb 5-1: config 8 interface 61 altsetting 8 endpoint 0x5 has invalid maxpacket 65535, setting to 64 [ 243.367692][ T4317] usb 5-1: config 8 interface 61 has no altsetting 0 [ 243.606929][ T4317] usb 5-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice=e9.1f [ 243.624256][ T4317] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.672989][ T4317] usb 5-1: Product: syz [ 243.677583][ T4317] usb 5-1: Manufacturer: syz [ 243.682228][ T4317] usb 5-1: SerialNumber: syz [ 244.245661][ T6838] netlink: 'syz.0.639': attribute type 3 has an invalid length. [ 244.644617][ T6845] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 244.652588][ T6845] IPv6: NLM_F_CREATE should be set when creating new route [ 244.660050][ T6845] IPv6: NLM_F_CREATE should be set when creating new route [ 244.667347][ T6845] IPv6: NLM_F_CREATE should be set when creating new route [ 244.782876][ T6846] loop1: detected capacity change from 0 to 1024 [ 245.203806][ T4317] bfusb: probe of 5-1:8.61 failed with error -5 [ 245.235277][ T4317] usb 5-1: USB disconnect, device number 12 [ 245.250518][ T6852] loop0: detected capacity change from 0 to 128 [ 245.360568][ T6854] netlink: 88 bytes leftover after parsing attributes in process `syz.2.638'. [ 245.390035][ T6850] loop1: detected capacity change from 0 to 8192 [ 245.705448][ T4181] sysv_free_block: flc_count > flc_size [ 245.711080][ T4181] sysv_free_block: flc_count > flc_size [ 245.737357][ T4181] sysv_free_block: flc_count > flc_size [ 245.753203][ T4181] sysv_free_block: flc_count > flc_size [ 245.780669][ T4181] sysv_free_block: flc_count > flc_size [ 245.802039][ T4181] sysv_free_block: flc_count > flc_size [ 245.825116][ T4181] sysv_free_block: flc_count > flc_size [ 245.830828][ T4181] sysv_free_block: flc_count > flc_size [ 245.874100][ T4181] sysv_free_block: flc_count > flc_size [ 245.879806][ T4181] sysv_free_block: flc_count > flc_size [ 245.901836][ T4181] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 246.213294][ T6874] sp4: Synchronizing with TNC [ 247.022676][ T6880] loop4: detected capacity change from 0 to 64 [ 247.155589][ T6850] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 247.186338][ T6850] REISERFS (device loop1): using ordered data mode [ 247.192908][ T6850] reiserfs: using flush barriers [ 247.237456][ T6850] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 247.317115][ T6850] REISERFS (device loop1): checking transaction log (loop1) [ 247.396279][ T6850] REISERFS (device loop1): Using r5 hash to sort names [ 247.403746][ T6850] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 247.423489][ T6850] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 247.462323][ T6850] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 247.554964][ T6850] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 247.634714][ T6850] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 247.761817][ T6883] [ 247.764216][ T6883] ====================================================== [ 247.771255][ T6883] WARNING: possible circular locking dependency detected [ 247.778403][ T6883] syzkaller #0 Not tainted [ 247.782842][ T6883] ------------------------------------------------------ [ 247.789874][ T6883] syz.1.642/6883 is trying to acquire lock: [ 247.795834][ T6883] ffff8880538e96c0 (&type->i_mutex_dir_key#21/3){+.+.}-{3:3}, at: open_xa_dir+0x11d/0x6b0 [ 247.805801][ T6883] [ 247.805801][ T6883] but task is already holding lock: [ 247.813180][ T6883] ffff88801b96d090 (&sbi->lock){+.+.}-{3:3}, at: reiserfs_write_lock_nested+0x5c/0xd0 [ 247.822790][ T6883] [ 247.822790][ T6883] which lock already depends on the new lock. [ 247.822790][ T6883] [ 247.833214][ T6883] [ 247.833214][ T6883] the existing dependency chain (in reverse order) is: [ 247.842337][ T6883] [ 247.842337][ T6883] -> #1 (&sbi->lock){+.+.}-{3:3}: [ 247.849669][ T6883] __mutex_lock_common+0x1eb/0x2390 [ 247.855426][ T6883] mutex_lock_nested+0x17/0x20 [ 247.860922][ T6883] reiserfs_write_lock+0x75/0xd0 [ 247.866385][ T6883] reiserfs_mkdir+0x30c/0x970 [ 247.871584][ T6883] open_xa_dir+0x318/0x6b0 [ 247.876520][ T6883] xattr_lookup+0x22/0x2a0 [ 247.881464][ T6883] reiserfs_xattr_set_handle+0xf4/0xf20 [ 247.887529][ T6883] __reiserfs_set_acl+0x4ec/0x680 [ 247.893093][ T6883] reiserfs_set_acl+0x447/0x5f0 [ 247.898484][ T6883] posix_acl_xattr_set+0x36f/0x3e0 [ 247.904116][ T6883] __vfs_setxattr+0x3e0/0x420 [ 247.909425][ T6883] __vfs_setxattr_noperm+0x129/0x5e0 [ 247.915249][ T6883] vfs_setxattr+0x168/0x2f0 [ 247.920363][ T6883] setxattr+0x2da/0x300 [ 247.925038][ T6883] __se_sys_fsetxattr+0x15e/0x1d0 [ 247.930586][ T6883] do_syscall_64+0x4c/0xa0 [ 247.935523][ T6883] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 247.942029][ T6883] [ 247.942029][ T6883] -> #0 (&type->i_mutex_dir_key#21/3){+.+.}-{3:3}: [ 247.950737][ T6883] __lock_acquire+0x2c33/0x7c60 [ 247.956118][ T6883] lock_acquire+0x197/0x3f0 [ 247.961147][ T6883] down_write_nested+0x3b/0x60 [ 247.966434][ T6883] open_xa_dir+0x11d/0x6b0 [ 247.971368][ T6883] reiserfs_for_each_xattr+0x174/0x7b0 [ 247.977352][ T6883] reiserfs_delete_xattrs+0x1c/0x80 [ 247.983082][ T6883] reiserfs_evict_inode+0x22e/0x490 [ 247.988809][ T6883] evict+0x485/0x870 [ 247.993228][ T6883] reiserfs_new_inode+0x5c8/0x1860 [ 247.998868][ T6883] reiserfs_create+0x3ba/0x680 [ 248.004160][ T6883] path_openat+0x11e1/0x2f30 [ 248.009278][ T6883] do_filp_open+0x1b3/0x3e0 [ 248.014310][ T6883] do_sys_openat2+0x142/0x4a0 [ 248.019509][ T6883] __x64_sys_openat+0x135/0x160 [ 248.024884][ T6883] do_syscall_64+0x4c/0xa0 [ 248.029825][ T6883] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 248.036244][ T6883] [ 248.036244][ T6883] other info that might help us debug this: [ 248.036244][ T6883] [ 248.046467][ T6883] Possible unsafe locking scenario: [ 248.046467][ T6883] [ 248.053915][ T6883] CPU0 CPU1 [ 248.059280][ T6883] ---- ---- [ 248.064646][ T6883] lock(&sbi->lock); [ 248.068632][ T6883] lock(&type->i_mutex_dir_key#21/3); [ 248.076619][ T6883] lock(&sbi->lock); [ 248.083119][ T6883] lock(&type->i_mutex_dir_key#21/3); [ 248.088588][ T6883] [ 248.088588][ T6883] *** DEADLOCK *** [ 248.088588][ T6883] [ 248.096726][ T6883] 3 locks held by syz.1.642/6883: [ 248.101749][ T6883] #0: ffff8880500b6460 (sb_writers#28){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 248.110988][ T6883] #1: ffff8880538e9020 (&type->i_mutex_dir_key#21){++++}-{3:3}, at: path_openat+0x7f3/0x2f30 [ 248.121267][ T6883] #2: ffff88801b96d090 (&sbi->lock){+.+.}-{3:3}, at: reiserfs_write_lock_nested+0x5c/0xd0 [ 248.131277][ T6883] [ 248.131277][ T6883] stack backtrace: [ 248.137250][ T6883] CPU: 1 PID: 6883 Comm: syz.1.642 Not tainted syzkaller #0 [ 248.144534][ T6883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 248.154587][ T6883] Call Trace: [ 248.157872][ T6883] [ 248.160809][ T6883] dump_stack_lvl+0x168/0x230 [ 248.165494][ T6883] ? load_image+0x3b0/0x3b0 [ 248.169999][ T6883] ? show_regs_print_info+0x20/0x20 [ 248.175211][ T6883] ? print_circular_bug+0x12b/0x1a0 [ 248.180415][ T6883] check_noncircular+0x274/0x310 [ 248.185364][ T6883] ? add_chain_block+0x940/0x940 [ 248.190309][ T6883] ? lockdep_lock+0xdc/0x1e0 [ 248.194999][ T6883] ? mark_lock+0x94/0x320 [ 248.199334][ T6883] ? mark_lock+0x94/0x320 [ 248.203669][ T6883] __lock_acquire+0x2c33/0x7c60 [ 248.208537][ T6883] ? unwind_next_frame+0x1296/0x1d90 [ 248.213836][ T6883] ? verify_lock_unused+0x140/0x140 [ 248.219040][ T6883] ? is_bpf_text_address+0x254/0x270 [ 248.224343][ T6883] ? __kernel_text_address+0x9a/0x100 [ 248.229720][ T6883] ? unwind_get_return_address+0x49/0x80 [ 248.235359][ T6883] ? stack_trace_save+0xe0/0xe0 [ 248.240208][ T6883] ? arch_stack_walk+0xf2/0x140 [ 248.245069][ T6883] lock_acquire+0x197/0x3f0 [ 248.249577][ T6883] ? open_xa_dir+0x11d/0x6b0 [ 248.254208][ T6883] ? __might_sleep+0xf0/0xf0 [ 248.258836][ T6883] ? read_lock_is_recursive+0x10/0x10 [ 248.264315][ T6883] ? mark_lock+0x94/0x320 [ 248.268666][ T6883] down_write_nested+0x3b/0x60 [ 248.273438][ T6883] ? open_xa_dir+0x11d/0x6b0 [ 248.278029][ T6883] open_xa_dir+0x11d/0x6b0 [ 248.282451][ T6883] ? listxattr_filler+0x410/0x410 [ 248.287478][ T6883] ? truncate_inode_pages_range+0x353/0xef0 [ 248.293379][ T6883] reiserfs_for_each_xattr+0x174/0x7b0 [ 248.298838][ T6883] ? invalidate_inode_page+0x360/0x360 [ 248.304304][ T6883] ? reiserfs_for_each_xattr+0x7b0/0x7b0 [ 248.309939][ T6883] ? reiserfs_delete_xattrs+0x80/0x80 [ 248.315311][ T6883] ? reiserfs_xattr_init+0x720/0x720 [ 248.320603][ T6883] ? dquot_initialize+0x20/0x20 [ 248.325470][ T6883] ? __rwlock_init+0x140/0x140 [ 248.330237][ T6883] reiserfs_delete_xattrs+0x1c/0x80 [ 248.335438][ T6883] reiserfs_evict_inode+0x22e/0x490 [ 248.340641][ T6883] ? entry_points_to_object+0x7d0/0x7d0 [ 248.346199][ T6883] ? do_raw_spin_lock+0x11d/0x280 [ 248.351231][ T6883] ? do_raw_spin_unlock+0x11d/0x230 [ 248.356432][ T6883] ? entry_points_to_object+0x7d0/0x7d0 [ 248.362331][ T6883] evict+0x485/0x870 [ 248.366233][ T6883] ? __lock_acquire+0x7c60/0x7c60 [ 248.371442][ T6883] ? proc_nr_inodes+0x320/0x320 [ 248.376297][ T6883] ? do_raw_spin_unlock+0x11d/0x230 [ 248.381516][ T6883] ? _raw_spin_unlock+0x24/0x40 [ 248.386371][ T6883] ? iput+0x706/0x8a0 [ 248.390355][ T6883] reiserfs_new_inode+0x5c8/0x1860 [ 248.395574][ T6883] ? reiserfs_write_inode+0x2a0/0x2a0 [ 248.400955][ T6883] ? do_journal_begin_r+0xdb4/0x1010 [ 248.406254][ T6883] ? security_old_inode_init_security+0xf8/0x140 [ 248.412591][ T6883] ? journal_begin+0x1f1/0x350 [ 248.417362][ T6883] reiserfs_create+0x3ba/0x680 [ 248.422163][ T6883] ? reiserfs_lookup+0x420/0x420 [ 248.427108][ T6883] ? inode_permission+0xef/0x480 [ 248.432045][ T6883] ? bpf_lsm_inode_create+0x5/0x10 [ 248.437154][ T6883] ? security_inode_create+0xb3/0x100 [ 248.442526][ T6883] ? reiserfs_lookup+0x420/0x420 [ 248.447468][ T6883] path_openat+0x11e1/0x2f30 [ 248.452268][ T6883] ? do_filp_open+0x3e0/0x3e0 [ 248.456958][ T6883] do_filp_open+0x1b3/0x3e0 [ 248.461465][ T6883] ? vfs_tmpfile+0x300/0x300 [ 248.466071][ T6883] ? _raw_spin_unlock+0x24/0x40 [ 248.470927][ T6883] ? alloc_fd+0x598/0x630 [ 248.475381][ T6883] do_sys_openat2+0x142/0x4a0 [ 248.480063][ T6883] ? __lock_acquire+0x7c60/0x7c60 [ 248.485095][ T6883] ? do_sys_open+0xe0/0xe0 [ 248.489518][ T6883] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 248.495621][ T6883] ? lock_chain_count+0x20/0x20 [ 248.500501][ T6883] ? vtime_user_exit+0x2dc/0x400 [ 248.505562][ T6883] __x64_sys_openat+0x135/0x160 [ 248.510429][ T6883] do_syscall_64+0x4c/0xa0 [ 248.514866][ T6883] ? clear_bhb_loop+0x30/0x80 [ 248.519550][ T6883] ? clear_bhb_loop+0x30/0x80 [ 248.524231][ T6883] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 248.530135][ T6883] RIP: 0033:0x7f6beb38d749 [ 248.534556][ T6883] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.554608][ T6883] RSP: 002b:00007f6be95b2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 248.563232][ T6883] RAX: ffffffffffffffda RBX: 00007f6beb5e4180 RCX: 00007f6beb38d749 [ 248.571230][ T6883] RDX: 000000000000275a RSI: 0000200000000280 RDI: ffffffffffffff9c [ 248.579217][ T6883] RBP: 00007f6beb411f91 R08: 0000000000000000 R09: 0000000000000000 [ 248.587193][ T6883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 248.595190][ T6883] R13: 00007f6beb5e4218 R14: 00007f6beb5e4180 R15: 00007ffcce247388 [ 248.603172][ T6883] [ 248.622541][ T6885] loop2: detected capacity change from 0 to 512 [ 249.404364][ T6885] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 249.472729][ T6885] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 249.495226][ T6885] EXT4-fs (loop2): orphan cleanup on readonly fs [ 249.541482][ T6885] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3871: comm syz.2.653: Allocating blocks 41-42 which overlap fs metadata [ 249.577140][ T6885] EXT4-fs (loop2): Remounting filesystem read-only [ 249.583872][ T6885] Quota error (device loop2): write_blk: dquota write failed [ 249.602983][ T6885] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 249.635659][ T6885] EXT4-fs error (device loop2): ext4_acquire_dquot:6209: comm syz.2.653: Failed to acquire dquot type 0 [ 249.674695][ T6885] EXT4-fs (loop2): Remounting filesystem read-only [ 249.681411][ T6885] EXT4-fs (loop2): ext4_process_orphan: truncating inode 12 to 4096 bytes [ 249.711180][ T6885] EXT4-fs error (device loop2): mb_free_blocks:1860: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 249.787289][ T6885] EXT4-fs (loop2): Remounting filesystem read-only [ 249.793875][ T6885] EXT4-fs error (device loop2): ext4_do_update_inode:5218: inode #12: comm syz.2.653: corrupted inode contents [ 249.860221][ T6885] EXT4-fs (loop2): Remounting filesystem read-only [ 249.905057][ T6885] EXT4-fs error (device loop2): ext4_dirty_inode:6054: inode #12: comm syz.2.653: mark_inode_dirty error [ 249.954676][ T6885] EXT4-fs (loop2): Remounting filesystem read-only [ 249.962536][ T6885] EXT4-fs error (device loop2): ext4_do_update_inode:5218: inode #12: comm syz.2.653: corrupted inode contents [ 250.032265][ T6885] EXT4-fs (loop2): Remounting filesystem read-only [ 250.039492][ T6885] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #12: comm syz.2.653: mark_inode_dirty error [ 250.105046][ T6885] EXT4-fs (loop2): Remounting filesystem read-only [ 250.111821][ T6885] EXT4-fs error (device loop2): ext4_do_update_inode:5218: inode #12: comm syz.2.653: corrupted inode contents [ 250.176535][ T6885] EXT4-fs (loop2): Remounting filesystem read-only [ 250.186539][ T6885] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 250.221029][ T6885] EXT4-fs (loop2): Remounting filesystem read-only [ 250.234118][ T6885] EXT4-fs error (device loop2): ext4_do_update_inode:5218: inode #12: comm syz.2.653: corrupted inode contents [ 250.250677][ T4317] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 250.294784][ T6885] EXT4-fs (loop2): Remounting filesystem read-only [ 250.301384][ T6885] EXT4-fs error (device loop2): ext4_truncate:4279: inode #12: comm syz.2.653: mark_inode_dirty error [ 250.368189][ T6885] EXT4-fs (loop2): Remounting filesystem read-only [ 250.374870][ T6885] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 250.405636][ T6885] EXT4-fs (loop2): Remounting filesystem read-only [ 250.434411][ T6885] EXT4-fs (loop2): 1 truncate cleaned up [ 250.440246][ T6885] EXT4-fs (loop2): pa ffff888075357e00: logic 1, phys. 41, len 23 [ 250.448207][ T6885] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4888: group 0, free 22, pa_free 23 [ 250.489358][ T4317] usb 5-1: device descriptor read/64, error -71 [ 250.542460][ T6885] EXT4-fs (loop2): Remounting filesystem read-only [ 250.553425][ T6885] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodelalloc,noblock_validity,errors=remount-ro,data_err=ignore,debug,resuid=0x0000000000000000,noinit_itable,noinit_itable,journal_dev=0x0000000000000afb2. Quota mode: writeback. [ 250.675752][ T6885] vxcan1: tx drop: invalid sa for name 0x0000000000000004 [ 250.810788][ T4317] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 255.767934][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.774477][ T1422] ieee802154 phy1 wpan1: encryption failed: -22