last executing test programs: 5m16.821025034s ago: executing program 0 (id=28): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x100}, 0x18) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8004) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x8, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r3, &(0x7f00000065c0)=[{{&(0x7f0000000440)={0xa, 0x4e23, 0x1, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="12000000000000001100000067"], 0x48}}], 0x1, 0x0) r4 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0xffffffffffffffcf, &(0x7f00000000c0)={&(0x7f00000002c0)=@newqdisc={0x60, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x30, 0x2, [@TCA_CAKE_FWMARK={0x8}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0xe5}, @TCA_CAKE_DIFFSERV_MODE={0x8}, @TCA_CAKE_NAT={0x8}, @TCA_CAKE_TARGET]}}]}, 0x60}}, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8943, &(0x7f0000001980)={'macvtap0\x00', 0x0}) r8 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x101) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)) ioctl$SG_IO(r8, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x29, 0x6, @scatter={0x0, 0x3, 0x0}, &(0x7f0000000240)="ae8d7acda0", 0x0, 0x0, 0x0, 0x0, 0x0}) 5m15.877419653s ago: executing program 0 (id=31): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f00003c1000/0x1000)=nil, 0xdfc3efff, 0x67) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x8241, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x5, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x200, 0x8, 0x1, {0x22, 0x394}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x80}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x24004080) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd9, 0x72, 0xa4, 0x40, 0x20b7, 0x1540, 0xb75a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000740)={0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="2840010300000061aa"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 5m11.997465762s ago: executing program 0 (id=37): r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0x89, &(0x7f00000003c0), &(0x7f0000000080)=0x4) 5m11.411990629s ago: executing program 0 (id=40): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="700000001200230500"/56, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000efff002100010007031c000aff"], 0x70}}, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000580)={0x14, &(0x7f0000000840)={0x40, 0x4, 0xb2, {0xb2, 0x8, "baec6b77d400556c4a4a4838bdf86cccac76a986ca13535595f22a456253c23584b97309ab2c1facf48473708cf76311d183f85d1dfe92cd3d31d9a9a4d9a0a32a192179d36c755971c78b2b7bd23732bbed3bae26545687ef89f089f0d2231bb316e75c25268ed08c2b9309b839819a8633a13f2cc56be975a188d531503ed7ad170f2d3cda29325294ac854a0afe3c27ab26606d6b91811c0e8d2adb712eee1efe9e0269b2452cf3b90f73dd8993d5"}}, &(0x7f0000000500)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000b00)={0x44, &(0x7f0000000900)={0x30396b30ac994ee4, 0x16, 0xaf, "5ae0bf1d2ec22edecdeecfc9b3d8b0b037b808da0def0d43c4c04bf6913bc85eb0ab045f0e5cbe081055da5508ff142d5d681a88f4b25bb25ca6e0056f615a37e7f7386063b82a9f111524646101809b14dae13102fc9dbd23f4e81b4d4683e35729a3e5f3254d5749b2ba5c549d37461fce9752868fb6b058e07e3163eac6cef5f3dbda9a27be2cc5641dd225eda8094600da9e538bd4d18bfa6c420ca742ca291db5f45f65c5f449604b50a73b1f"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x7}, &(0x7f00000009c0)={0x20, 0x80, 0x1c, {0x3, 0x7f, 0x2, 0x8c, 0x80, 0x2, 0x0, 0x1, 0x3, 0x1, 0x6, 0xfffa}}, &(0x7f0000000a00)={0x20, 0x85, 0x4, 0xffffffff}, &(0x7f0000000a40)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000a80)={0x20, 0x87, 0x2, 0x52}, &(0x7f0000000ac0)={0x20, 0x89, 0x2, 0x1}}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000800)={0x18, &(0x7f0000000540)={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000140)='./file2\x00', 0x20800048, &(0x7f0000002540)=ANY=[@ANYRES16=0x0, @ANYRES8, @ANYRES8=0x0, @ANYBLOB="ac44e84fda50cf6fbefac5a5891d03a05027c0e6658ea94f09636160112a47b688552b72051bf0111daffbe0adef82589ee2fac726c31d20f98aa1f9761873cd604dab0d22b4b321f4c20044c5a8e018b51e52342814e4c33a7f480778b524b303c604203d95ef7097eb698f5a4f3983ca0adeae0088c2e16969e9000a6a9d85bf9d4ee333cfeb763ad6506f66797f154f0923a63f106d908d1cf2a884e57ab63950b988b5310c4e8f50bd22a3426fa97ef53c40449a94847df80ca39e9394f8de077bfd7f0c81e773fe8ad33c339a0fd81643bb576550ad7959e2be083e92997d0f42c862a0c88c9a", @ANYBLOB="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", @ANYRES32], 0xfe, 0x1518, &(0x7f0000000d80)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000c00)=@file={0x0, './file0/../file0\x00'}, 0x6e) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x21adc51, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='mountinfo\x00') symlink(0x0, 0x0) read$FUSE(r3, &(0x7f0000001e80)={0x2020}, 0x2062) r4 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x32c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x7a, 0xe0, 0x49, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x3, 0x1, 0x1, 0x7f, {0x9, 0x21, 0xde72, 0x14, 0x1, {0x22, 0x4f7}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x3, 0x7f}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x92, 0x3, 0xb}}]}}}]}}]}}, &(0x7f0000000100)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x3, 0x9, 0xd3, 0xff, 0x3}, 0x3b, &(0x7f0000000080)={0x5, 0xf, 0x3b, 0x6, [@wireless={0xb, 0x10, 0x1, 0x2, 0x8, 0x2, 0x2, 0xfffa, 0x4}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x7, 0x5, 0x3fa3}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "1e230c338f25f1abed6fe334d2e8cad3"}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0xb, 0xf, 0x1}, @ptm_cap={0x3}]}, 0x1, [{0x32, &(0x7f0000000340)=ANY=[@ANYBLOB="32035526df81f7c02da2e9e6a62d5d4526b8d6fd2b12086b54fca4e38b20a9803e033fb02026804a6c2c90f7cb528dec4f29cf85640f96270e7a"]}]}) syz_usb_control_io$hid(r4, &(0x7f00000002c0)={0x24, &(0x7f0000000140)={0x0, 0x23, 0x25, {0x25, 0x11, "c968febfcf710c263765bd4a08413ffc188e5fa385b2d58b60e7335c2e9f519c50cb2b"}}, &(0x7f0000000180)={0x0, 0x3, 0xa9, @string={0xa9, 0x3, "dabfc280bba2ecf0ce6192c532e446bd227310f93dd8290809e5e6c18823d968ae54414b60c5732dfcbf5892b1704e624dfeb4bc535f9edc40cd1d60f7e7e2518a0d3389fd618daf23e1740df2cab6aaefbe8f5cca0402cd95a9c53d472f9d0b2ce901401eee71251405d48f6ea769b0b84a9feb2dec0581ab3bf6581c28c662d90d4825dbe48d8a53c9dabe71a051cd75224ff039066655fb6c40ce371d3662d09173b17a9dc1"}}, &(0x7f0000000240)={0x0, 0x22, 0xc, {[@main=@item_012={0x2, 0x0, 0xc, "d907"}, @global=@item_012={0x2, 0x1, 0x7, "9714"}, @global=@item_4={0x3, 0x1, 0x0, "4692bf85"}, @global=@item_012={0x0, 0x1, 0x1}]}}, &(0x7f0000000280)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x2, 0x1, {0x22, 0xe77}}}}, &(0x7f00000004c0)={0x2c, &(0x7f0000000380)={0x0, 0x8, 0x99, "cff3c224ea39505ca72227282d1e73407a7b09191f8d99d2341cf9c4d74913e8dd6a82c28cb838b3aa5a6ac940c647c1c5fd9e789cf511a6b83efd05a1007baf16b53f2a0ec238471031454ff492ae03fb3bab9a31371947aea3d17f9f6606beaa0d00bd7ad41c01d643a6adb35e846f66525d68fb77c9c9a3c5cea7668a05e8bccf5fa1273afb2971b257b88ef7e89ae0b79fae4b7ec2a478"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x61}, &(0x7f0000000600)=ANY=[@ANYBLOB="2001ca0000003d601c97b96f6ebe61b94c943bc9c011d1a9cbfc12eb387fc59ace9bab7a1022b42ab986999e25f926fb3c63d013e8c47a483ecaad0cfb667e5a40f5a5460a57b16c809bf28ca3623d1559b7fc8309c9f5da76c326eb146d0e2019b5d9e549bbe452594bbd92be9ecd1fd42c568e4c008aae48d2ae5c777f2a9c2f996af9c6632ce84c51c4993ca1fb11b2c624b7853cbde3c2b204097f129cc607765cc582b2df7563c3eb01000000cdce8ab148ea1c9b922d8350c14d55978b77c53b28a10e4c7d90422021a9ab9bdb"], &(0x7f0000000480)={0x20, 0x3, 0x1, 0x2}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x14, r6, 0x303, 0x0, 0x0, {0x2a}}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') close_range(r7, 0xffffffffffffffff, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) 5m6.943075458s ago: executing program 0 (id=51): r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x7, 0x0, &(0x7f00000000c0)) 5m5.343689943s ago: executing program 0 (id=56): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x800000, &(0x7f0000000400)) chdir(&(0x7f00000000c0)='./file1\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000001c0)='./file1\x00', r1, &(0x7f0000000000)='./file1\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff29}, &(0x7f0000000000)=0x40) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f000000c380)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f00000001c0)={0x2020}, 0x2020) fchmodat(r2, &(0x7f0000000180)='./file1\x00', 0x41) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000007c0)={&(0x7f0000ffd000/0x1000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, 0x0}, &(0x7f0000000800)=0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x299e, 0x3, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r3, &(0x7f0000000700), 0x20000000, 0x2}, 0x20) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)={0x40, r6, 0x1, 0x70bd27, 0x4, {0x5}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x7ff}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) userfaultfd(0x80801) 5m2.37175461s ago: executing program 32 (id=56): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x800000, &(0x7f0000000400)) chdir(&(0x7f00000000c0)='./file1\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000001c0)='./file1\x00', r1, &(0x7f0000000000)='./file1\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff29}, &(0x7f0000000000)=0x40) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f000000c380)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f00000001c0)={0x2020}, 0x2020) fchmodat(r2, &(0x7f0000000180)='./file1\x00', 0x41) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000007c0)={&(0x7f0000ffd000/0x1000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, 0x0}, &(0x7f0000000800)=0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x299e, 0x3, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r3, &(0x7f0000000700), 0x20000000, 0x2}, 0x20) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)={0x40, r6, 0x1, 0x70bd27, 0x4, {0x5}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x7ff}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) userfaultfd(0x80801) 4m46.851100678s ago: executing program 1 (id=102): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3, 0x38, 0x0, 0x3f18, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) 4m45.681172401s ago: executing program 1 (id=106): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, r1}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) ioctl$FIBMAP(r2, 0x401870cb, 0x0) 4m44.75744376s ago: executing program 1 (id=109): syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef00090599", @ANYRES16], 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201500285d5c2086004040031960154030109021b000100031003090458080119662194090586d7"], &(0x7f00000000c0)={0x43, 0x0, 0x5c, 0x0, 0x1555555555555587, [{0x0, &(0x7f0000000040)=@string={0x0, 0x3, "eab88bbf4ae8dcdfeec9bd312a8a18eac36e93fc84ad318ca7ce6a71dff5bd181f3602338d476ffe3e2ec53ffc395c0e06e670765afe2d110fb91a30a860ee17c7cae232848bb135c38207778a36aa922d0ec0c714a8354e5c5f2610e9df60f0d95524b77091efc39bf3cd25f726cc46bbaadd0f22ec0101073df9"}}, {0x0, &(0x7f0000000140)=@string={0x0, 0x3, "e4289c7ba5e4531aecb07d0998e2977fe94b7f054d9cc822f6ce6c813a80404cfe55d10951f93bbd0012e5b519623b41caeca19a98ea098318a7830eee0c3af75e7eeb539b11d4d681d6028f532132d2cc6652c56b7449f263b703d96981497a1857ee5f6dd671de3da0c8e4ddfb35e5867f5de4d026f9720a01d363a47c50dd48b52850cc19866e999c3395626dbc7a32549a4bf4f9f1bea4b3b0d6d19e9be5c23597e09d0e4aaade918146d505f7fb49f58976dfdfa2b662680c425c3851c4887d0defe4d5ef0bce3519553a177c312a461cf4d48c5e34f6858d3415d0f7"}}, {0x0, &(0x7f0000000240)=@string={0x0, 0x3, "3b6af6aab0815165c5985a91c8e5fe91f0f664e5365743178940d6a0d9f040787a3c2cf48fbb6907ae40042b87b889babad6352b11d2caf13e143e3915f306d0c1705f2a7237025ec034bce247b3b7371a9dae61b6712ba054bf14ceb96788e6b4da594b635aa24d8eb42298bb48b881aab76ac76f6eeda787aa924f67bcd6bb820aa39d3dd64902f4fff8ca7950fed2754fb8c1bb690a271fede6375d47537a495b6d00d0ee550aea6ddc30cfd46ef5541c46f136caacd6db2c8f394707e8f82579c81971ce2e90c66c06f0e68dc7763fdc7d52a6c071e4c17a04"}}]}) (async) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201500285d5c2086004040031960154030109021b000100031003090458080119662194090586d7"], &(0x7f00000000c0)={0x43, 0x0, 0x5c, 0x0, 0x1555555555555587, [{0x0, &(0x7f0000000040)=@string={0x0, 0x3, "eab88bbf4ae8dcdfeec9bd312a8a18eac36e93fc84ad318ca7ce6a71dff5bd181f3602338d476ffe3e2ec53ffc395c0e06e670765afe2d110fb91a30a860ee17c7cae232848bb135c38207778a36aa922d0ec0c714a8354e5c5f2610e9df60f0d95524b77091efc39bf3cd25f726cc46bbaadd0f22ec0101073df9"}}, {0x0, &(0x7f0000000140)=@string={0x0, 0x3, "e4289c7ba5e4531aecb07d0998e2977fe94b7f054d9cc822f6ce6c813a80404cfe55d10951f93bbd0012e5b519623b41caeca19a98ea098318a7830eee0c3af75e7eeb539b11d4d681d6028f532132d2cc6652c56b7449f263b703d96981497a1857ee5f6dd671de3da0c8e4ddfb35e5867f5de4d026f9720a01d363a47c50dd48b52850cc19866e999c3395626dbc7a32549a4bf4f9f1bea4b3b0d6d19e9be5c23597e09d0e4aaade918146d505f7fb49f58976dfdfa2b662680c425c3851c4887d0defe4d5ef0bce3519553a177c312a461cf4d48c5e34f6858d3415d0f7"}}, {0x0, &(0x7f0000000240)=@string={0x0, 0x3, "3b6af6aab0815165c5985a91c8e5fe91f0f664e5365743178940d6a0d9f040787a3c2cf48fbb6907ae40042b87b889babad6352b11d2caf13e143e3915f306d0c1705f2a7237025ec034bce247b3b7371a9dae61b6712ba054bf14ceb96788e6b4da594b635aa24d8eb42298bb48b881aab76ac76f6eeda787aa924f67bcd6bb820aa39d3dd64902f4fff8ca7950fed2754fb8c1bb690a271fede6375d47537a495b6d00d0ee550aea6ddc30cfd46ef5541c46f136caacd6db2c8f394707e8f82579c81971ce2e90c66c06f0e68dc7763fdc7d52a6c071e4c17a04"}}]}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x2c, 0xf8, 0x4, 0x10, 0x6cd, 0x110, 0x53f0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xe9, 0xbd, 0xfa, 0x0, [], [{{0x9, 0x5, 0x7, 0xf}}]}}]}}]}}, 0x0) socket$igmp(0x2, 0x3, 0x2) syz_emit_ethernet(0x5e, &(0x7f0000000340)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @empty, @val={@val={0x88a8, 0x4, 0x0, 0x1}, {0x8100, 0x4, 0x1, 0x1}}, {@mpls_uc={0x8847, {[{0x3, 0x0, 0x1}, {0x9, 0x0, 0x1}], @generic="51e64edc864a679b77a74e3bada9eb11679d57ccf56aea0e466b0bf9ae194a5528e9a66b47d5ba1b79f7bfbb8a9847eb3d202496386b6a27c80a604954839623"}}}}, &(0x7f0000000100)={0x1, 0x4, [0xad8, 0x79e, 0x292, 0x266]}) 4m40.807467283s ago: executing program 1 (id=116): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="700000001200230500"/56, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000efff002100010007031c000aff"], 0x70}}, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000580)={0x14, &(0x7f0000000840)={0x40, 0x4, 0xb2, {0xb2, 0x8, "baec6b77d400556c4a4a4838bdf86cccac76a986ca13535595f22a456253c23584b97309ab2c1facf48473708cf76311d183f85d1dfe92cd3d31d9a9a4d9a0a32a192179d36c755971c78b2b7bd23732bbed3bae26545687ef89f089f0d2231bb316e75c25268ed08c2b9309b839819a8633a13f2cc56be975a188d531503ed7ad170f2d3cda29325294ac854a0afe3c27ab26606d6b91811c0e8d2adb712eee1efe9e0269b2452cf3b90f73dd8993d5"}}, &(0x7f0000000500)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000b00)={0x44, &(0x7f0000000900)={0x30396b30ac994ee4, 0x16, 0xaf, "5ae0bf1d2ec22edecdeecfc9b3d8b0b037b808da0def0d43c4c04bf6913bc85eb0ab045f0e5cbe081055da5508ff142d5d681a88f4b25bb25ca6e0056f615a37e7f7386063b82a9f111524646101809b14dae13102fc9dbd23f4e81b4d4683e35729a3e5f3254d5749b2ba5c549d37461fce9752868fb6b058e07e3163eac6cef5f3dbda9a27be2cc5641dd225eda8094600da9e538bd4d18bfa6c420ca742ca291db5f45f65c5f449604b50a73b1f"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x7}, &(0x7f00000009c0)={0x20, 0x80, 0x1c, {0x3, 0x7f, 0x2, 0x8c, 0x80, 0x2, 0x0, 0x1, 0x3, 0x1, 0x6, 0xfffa}}, &(0x7f0000000a00)={0x20, 0x85, 0x4, 0xffffffff}, &(0x7f0000000a40)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000a80)={0x20, 0x87, 0x2, 0x52}, &(0x7f0000000ac0)={0x20, 0x89, 0x2, 0x1}}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000800)={0x18, &(0x7f0000000540)={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000140)='./file2\x00', 0x20800048, &(0x7f0000002540)=ANY=[@ANYRES16=0x0, @ANYRES8, @ANYRES8=0x0, @ANYBLOB="ac44e84fda50cf6fbefac5a5891d03a05027c0e6658ea94f09636160112a47b688552b72051bf0111daffbe0adef82589ee2fac726c31d20f98aa1f9761873cd604dab0d22b4b321f4c20044c5a8e018b51e52342814e4c33a7f480778b524b303c604203d95ef7097eb698f5a4f3983ca0adeae0088c2e16969e9000a6a9d85bf9d4ee333cfeb763ad6506f66797f154f0923a63f106d908d1cf2a884e57ab63950b988b5310c4e8f50bd22a3426fa97ef53c40449a94847df80ca39e9394f8de077bfd7f0c81e773fe8ad33c339a0fd81643bb576550ad7959e2be083e92997d0f42c862a0c88c9a", @ANYBLOB="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", @ANYRES32], 0xfe, 0x1518, &(0x7f0000000d80)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000c00)=@file={0x0, './file0/../file0\x00'}, 0x6e) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x21adc51, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) symlink(0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001e80)={0x2020}, 0x2062) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x14, 0x0, 0x303, 0x0, 0x0, {0x2a}}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) 4m35.561185626s ago: executing program 1 (id=124): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x24044000) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) recvmmsg(r0, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)=""/165, 0xa5}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000000340)=""/196, 0xc4}], 0x3}, 0x7}, {{0x0, 0x0, 0x0}, 0x800001}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000004c40)=""/4088, 0xff8}, {&(0x7f0000000440)=""/178, 0xb2}, {&(0x7f0000000540)=""/216, 0xd8}, {&(0x7f00000007c0)=""/129, 0x81}, {&(0x7f0000003c40)=""/4092, 0xffc}, {&(0x7f0000000700)=""/161, 0xa1}], 0x6}, 0x7ffffffa}, {{0x0, 0x0, 0x0}, 0x5}], 0x5, 0x4001a122, 0x0) 4m34.607633782s ago: executing program 1 (id=127): socket$inet6_sctp(0xa, 0x5, 0x84) (async) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x1, 0x40, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x20ffff, 0x6}}]}]}, @IFLA_MTU={0x8, 0x4, 0xc8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000884}, 0x20000004) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e21, @loopback}}, [0x1000, 0x3, 0x0, 0x8823, 0x2, 0x5ded, 0x2, 0x7fffffff, 0xfffffffffffff000, 0x0, 0x9, 0x9, 0x7, 0x9, 0x8]}, &(0x7f0000000000)=0x100) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x84, &(0x7f0000000440)={r7, @in6={{0xa, 0x0, 0x6, @empty}}, 0x0, 0x80}, &(0x7f0000000500)=0x90) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x84, &(0x7f0000000440)={r7, @in6={{0xa, 0x0, 0x6, @empty}}, 0x0, 0x80}, &(0x7f0000000500)=0x90) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 4m32.116442469s ago: executing program 33 (id=127): socket$inet6_sctp(0xa, 0x5, 0x84) (async) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x1, 0x40, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x20ffff, 0x6}}]}]}, @IFLA_MTU={0x8, 0x4, 0xc8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000884}, 0x20000004) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e21, @loopback}}, [0x1000, 0x3, 0x0, 0x8823, 0x2, 0x5ded, 0x2, 0x7fffffff, 0xfffffffffffff000, 0x0, 0x9, 0x9, 0x7, 0x9, 0x8]}, &(0x7f0000000000)=0x100) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x84, &(0x7f0000000440)={r7, @in6={{0xa, 0x0, 0x6, @empty}}, 0x0, 0x80}, &(0x7f0000000500)=0x90) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x84, &(0x7f0000000440)={r7, @in6={{0xa, 0x0, 0x6, @empty}}, 0x0, 0x80}, &(0x7f0000000500)=0x90) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1m54.891512344s ago: executing program 3 (id=528): r0 = socket$netlink(0x10, 0x3, 0x15) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01a60000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 1m54.003091768s ago: executing program 3 (id=530): syz_mount_image$romfs(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00d0867e65d443152ee691a70d225b73c01164645c70ff689f607da7a169dbbfebbeb349b043f54d088bcd11a44f2074aa41532279b5718bc4d89fe5010d6bf465008743337cddaefbc0f0293d06483bec82e15366358709c5d5c0049ff9dcb7ea7e855e3c24bc3b4173720476fb379ce25c0ea42027ba6a7d"], 0x1, 0x134, &(0x7f0000000940)="$eJzs2r9Kw1AUBvCjFoQ+glMhAauQ/1oHd0Fw8gkMbZJevPGWRJB2Kr6A4nAdHV3dRDcfIbNPoC9xJW1qbe5uC/1+yz30XL7eLGc6ViZSL84tor3xw/nXZibSVic46sZeHNLUKRG1yqJQ6tEmzcVvv1BjW7tgvFdnO5FnbzHjka9nAAAAAAAAAAAAAAAAAAAAAACsCeO7Kpp9KZ5jxiPvTzcfji5DzqMsn/1iUrWjQ/tP4ri8HyzktRtE5mR/h8mT27LvLvTNWdJuX4qN+v851+nAyYcji6VhEiXRle8HHffAdQ99Z5Ll1BPN++pNVKjXgb5PZL7M94k+XX2fiJrTo7HD5N1NPX3+/SjWrFBbK/EMFKtZ1OcH9bYD46OcH3ZX8N4/zg9togEsyU8AAAD//wxqOHo=") ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) 1m52.667692731s ago: executing program 3 (id=533): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x403, 0x97c1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x9, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x4, 0x4, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x5}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x9, {[@main=@item_4={0x3, 0x0, 0x9, "044f6f8a"}, @main=@item_012={0x2, 0x0, 0xc, "b608"}, @global=@item_012={0x0, 0x1, 0x2}]}}, 0x0}, 0x0) 1m49.443033981s ago: executing program 3 (id=540): r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x141041) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000001900)=ANY=[@ANYBLOB='nonumtail=0,iocharset=cp950,umask=00000000000000000000000,uni_xlate=1,uni_xlate=1,shortname=win95,utf8=0,shortname=win95,utf8=1,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c696f636861727365743d6d616363726f617469616e2c696f636861727365743d63703433372c757365667265652c726f6469722c7569643e74353a7bd912f41b207e4bc4478b479f5a21373fd412d72f65702b57308921a665e19ef4cc41aac5e7c09d211fd4c1fbf43833c769c6b16297c14d0d92df4f0371acd1b184d6", @ANYRES16, @ANYBLOB], 0x6, 0x2aa, &(0x7f0000000500)="$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") r1 = syz_open_procfs(0x0, &(0x7f0000000380)='fd/3\x00') statx(r1, 0x0, 0x1000, 0x6000, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000040)={@val={0x1c, 0x800}, @val={0x1, 0x3, 0x0, 0x3, 0x14}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x0, 0xfffb, 0x0, 0x1c}}}}}, 0x36) capset(&(0x7f00000000c0)={0x19980330}, &(0x7f0000000040)={0x0, 0xfffffffc, 0xfffffffe, 0x1, 0x400}) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000340)) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000001c0)="a4c0e45d2010", 0x0, 0x15, 0x4, 0x0, 0x0}) 1m47.337373955s ago: executing program 3 (id=545): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r0, 0x15, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x2c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, r4, 0x400, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @random="37e6fc966e04", {0x0, 0x7}}, 0x4c00, 0x5d, @default, @val={0x1, 0x1, [{0x1b, 0x1}]}, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc0}, 0xd830c806d99bfd0f) 1m45.642083082s ago: executing program 3 (id=551): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x6, &(0x7f0000002000)={0x1}) (async) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@private0, @in=@empty, 0x0, 0x4000, 0x0, 0x0, 0xa, 0x0, 0x30}, {0x3, 0xfffffffffffffffe, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x6}, 0xffffffff, 0x0, 0x1}, {{@in=@private=0xa010101, 0x0, 0x6c}, 0xa, @in=@empty, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}}, 0xe8) (async) sendmmsg$inet6(r3, &(0x7f00000090c0)=[{{&(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0) (async) fcntl$lock(r2, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x300, 0x3}) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0xc2800, 0x18) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r4, 0x40186e8d, &(0x7f0000000800)={@id={0x20000000, 0x0, @auto="060000001a04b9435da0352cc7411e9e"}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r4, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000100)={@empty, @private=0xa010102, 0x13, 0x5}}) fcntl$lock(r2, 0x6, &(0x7f0000000000)) (async) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000203d7b9f8a81de178700040000ee924dd5b19fae325045d9", @ANYRES16=r0, @ANYBLOB="a1ab000000000000000067000000080001000000000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990000000000000000000800c400000000000800c30000000000"], 0x40}}, 0x0) 1m42.319771399s ago: executing program 34 (id=551): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x6, &(0x7f0000002000)={0x1}) (async) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@private0, @in=@empty, 0x0, 0x4000, 0x0, 0x0, 0xa, 0x0, 0x30}, {0x3, 0xfffffffffffffffe, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x6}, 0xffffffff, 0x0, 0x1}, {{@in=@private=0xa010101, 0x0, 0x6c}, 0xa, @in=@empty, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}}, 0xe8) (async) sendmmsg$inet6(r3, &(0x7f00000090c0)=[{{&(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0) (async) fcntl$lock(r2, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x300, 0x3}) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0xc2800, 0x18) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r4, 0x40186e8d, &(0x7f0000000800)={@id={0x20000000, 0x0, @auto="060000001a04b9435da0352cc7411e9e"}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r4, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000100)={@empty, @private=0xa010102, 0x13, 0x5}}) fcntl$lock(r2, 0x6, &(0x7f0000000000)) (async) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000203d7b9f8a81de178700040000ee924dd5b19fae325045d9", @ANYRES16=r0, @ANYBLOB="a1ab000000000000000067000000080001000000000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990000000000000000000800c400000000000800c30000000000"], 0x40}}, 0x0) 40.506948012s ago: executing program 6 (id=688): syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x10108d1, &(0x7f0000003280)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000005240)="$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") openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0xa4a43c, &(0x7f0000001700)=ANY=[], 0x1, 0x0, &(0x7f0000000000)) r0 = syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2, &(0x7f0000000440)={{}, 0x2c, {}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@allow_other}, {@blksize={'blksize', 0x3d, 0x1400}}, {@allow_other}, {@default_permissions}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0xfff}}, {@blksize={'blksize', 0x3d, 0xa00}}, {@max_read={'max_read', 0x3d, 0x800}}], [{@dont_appraise}, {@fsuuid={'fsuuid', 0x3d, {[0x30, 0xd0092575c73737e5, 0x32, 0x66, 0x31, 0x32, 0x5f, 0x63], 0x2d, [0x31, 0x39, 0x64, 0x31], 0x2d, [0x64, 0x64, 0x6ace6dbf0b60f468, 0x34], 0x2d, [0x5c, 0x31, 0x63, 0x5a82528bf8ea6dc7], 0x2d, [0x66, 0x32, 0x34, 0x31, 0x61, 0x31, 0x32, 0x61]}}}, {@smackfsdef={'smackfsdef', 0x3d, 'nilfs2\x00'}}]}}, 0x1, 0x0, &(0x7f0000000e00)="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") mknodat(r0, &(0x7f0000000080)='./file0\x00', 0xc000, 0x8) 36.509476493s ago: executing program 6 (id=695): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa0000", @ANYRES32=r1], 0x68}}, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) open(&(0x7f0000000000)='./file1\x00', 0x1090c0, 0x0) 34.843124024s ago: executing program 6 (id=698): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200"/48, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000004000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000440005"], 0xfc}, 0x1, 0x0, 0x0, 0xc000000}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000000)='./file1\x00', 0xa18c14, &(0x7f00000000c0)={[{@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@shortname_winnt}, {@fat=@codepage={'codepage', 0x3d, '1255'}}, {@utf8no}, {@uni_xlateno}, {@shortname_mixed}, {@numtail}, {@shortname_lower}, {@utf8}, {@uni_xlate}, {@rodir}, {@utf8no}]}, 0x81, 0x29b, &(0x7f0000000580)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6}]}) mkdir(0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000680), 0x10007fffffff, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000340)={0x0, 0x3, 0x4, {0x2, @raw_data="8593149c7966110a25ab7e03c3cd85986c40809ec6c22d6af40c4e015751da10776b90fae06c6a6ce123e34685c4fe6a97d24aafe7e989c7cdd07f4a5a9a77f29f1f8f5ce6a52fc65a5ea840adaa6bbba2cf3538a1c4ba8c2639fb4bb8592686f0acba74e1f94929ab7609264c679b508c8b17519ff6427b2b6af7ff83635378ea5ff24e79edb16a484a1e3b9ccfb7fe33b36967b09cdc56589781ff3e474ccadfaeab08fc43891cef04234e3b4078da83524b677c18dc2ea336398aa458b0582c69ff92311f4230"}}) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885, 0x80, 0x80000000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 33.78168992s ago: executing program 6 (id=702): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@local, @in=@multicast1, 0x4e24, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {}, {0x0, 0x1}}}, 0xb8}}, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f00000000c0)="240000001e005f3814fffffffffffff8070000000000090000000000060005000d101000", 0x24) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x14, r4, 0x313, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8005}, 0x40080) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@nojournal_checksum}, {@nombcache}, {@mblk_io_submit}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000001c40)="$eJzs3d9vU1UcAPDv7Tp+KyMhJPpgFnkQg3Rs8wcmPuCjUSKJvmOzXRaylpK1I2ySCA/y4oshJsZIYvwDfPeR+A/4V5AoCTFk0Qdfam53ywprt9EVNuznk9xyzj23nHt67vdwbs8lDWBojWcvhYhXIuLbJOJwR1kx8sLx1eNWHl6fybYkms3P/koiyfe1j0/yPw+2M8WI376OOFl4rMqx7KW+tDxfrlTShXznRKN6ZaK+tHzqUrU8l86ll6emp8+8Mz31/nvvDqytb57/54dP73505pvjK9//cv/I7STOxqG8rLMd23CjMzMe4/lnMhpnnzhwcgCV7SbJTp8AfRnJ43w0sjHgcIzkUQ/8/30VEU1gSCXiH4ZUex7Qvrcf0H3wC+PBh6s3QOvbX1z9biT2te6NDqwkj90ZJe0vMrYpq+PXP+/czrYY3PcQAJu6cTMiTheL68e/JB//+nd6C8c8WYfxD56fu9n8561u85/Co/lPdJn/HOwSu/3YPP4L9wdQTU/Z/O+DrvPffNFqLMZG8txLrexocvFSJc3Gtpcj4kSM7s3yG63nnFm51+xV1jn/y7as/vZcMD+P+8W9j79nttwob6/Vax7cjHi16/w3edT/SZf+zz6P81us41h657VeZZu3/9lq/hzxRtf+X1vRSjZen5xoXQ8T7ativb9vHfu9V/073f6s/w9s3P6xpHO9tv70dfy079+0V1m/1/+e5PNWek++71q50ViYjNiTfLJ+/9Tae9v59vFZ+08c33j863b974+IL7bY/ltHb/U8dFv9P4BF16z9s0/V/0+fuPfxlz/23/6s/99upU7ke7Yy/m31BLfz2QEAAAAAAMBuU4iIQ5EUSo/ShUKptPp8x9E4UKjU6o2TF2uvR6us9fxDob3SfbjjeYjJ/HnYdn7qifx0RByJiO9G9rfypZlaZXanGw8AAAAAAAAAAAAAAAAAAAC7xMEe//8/88fITp8d8Mz5yW8YXpvG/yB+6QnYlfz7D8NL/MPwEv8wvMQ/DC/xD8NL/MPwEv8wvMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAADNT5c+eyrbny8PpMlp+9urQ4X7t6ajatz5eqizOlmdrCldJcrTZXSUsztepmf1+lVrsyORWL1yYaab0xUV9avlCtLV5uXLhULc+lF9LR59IqAAAAAAAAAAAAAAAAAAAAeLHUl5bny5VKuiAh0VeiuDtOQ2LAiZ0emQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgzX8BAAD//7VBN58=") r5 = open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newlink={0x40, 0x10, 0x401, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x11006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_ADDRESS={0xa, 0x1, @broadcast}]}, 0x40}}, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2041, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) mmap$KVM_VCPU(&(0x7f0000000000/0x3000)=nil, 0x0, 0x100000a, 0x12, r9, 0x100000) r10 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r10, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef9cc093fce47d85272036dc78388e3dc177e9b496", "f28359738e229a4c66810000000000d3000dd602000000005cf7ce1fc986bcdf"}) setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x2) creat(0x0, 0x28) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r11, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, r11, 0x40083, 0x602a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @sit={{0x8}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @mcast2}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) sendmsg$ETHTOOL_MSG_WOL_GET(r5, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000800)={0x110, r4, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x4000}, 0x20040000) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@getsadinfo={0x78, 0x23, 0x4, 0x70bd2b, 0x25dfdbfc, 0x0, [@algo_crypt={0x4d, 0x2, {{'lrw-camellia-aesni-avx2\x00'}, 0x28, "93ff21444f"}}, @srcaddr={0x14, 0xd, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x40) 30.658574881s ago: executing program 6 (id=706): syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f0000000340), 0x41, 0x43d, &(0x7f0000000900)="$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") chdir(&(0x7f0000000040)='./file0\x00') link(&(0x7f0000001240)='./file0\x00', 0x0) 29.268665525s ago: executing program 6 (id=708): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa00000800", @ANYRES32=r1], 0x68}}, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) open(&(0x7f0000000000)='./file1\x00', 0x1090c0, 0x0) 23.988612454s ago: executing program 35 (id=708): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa00000800", @ANYRES32=r1], 0x68}}, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) open(&(0x7f0000000000)='./file1\x00', 0x1090c0, 0x0) 18.389783071s ago: executing program 4 (id=721): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010062726964676500ef737c"], 0x44}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000030428bd7000000000004bb51587", @ANYRES32=0x0, @ANYBLOB="ef0300000000000008000500", @ANYRES32=r1, @ANYBLOB="140012800c0001006d616376746170000400028008000a00", @ANYRES32=r2, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4004850) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000108117980800000000000109022400010000000009040000020300000009210000010122290a0905"], 0x0) r3 = memfd_secret(0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000340)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x40, r5, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x6}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}]}, 0x40}, 0x4, 0x700000002000000, 0x0, 0x4008051}, 0x4) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x8011, r3, 0x6e354000) munlockall() syz_open_procfs(0x0, 0x0) 15.191506254s ago: executing program 4 (id=725): socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') renameat2(r1, &(0x7f0000000080)='./mnt\x00', r1, &(0x7f00000000c0)='./mnt\x00', 0x1) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0xb, 0x0) mmap$snddsp_status(&(0x7f0000ffc000/0x2000)=nil, 0x1000, 0x0, 0x10, r2, 0x82000000) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r2, 0xc2604110, &(0x7f0000000040)={0x0, [[0x9ef8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff], [0x10003, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x5], [0x6, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0xffffffff]], '\x00', [{}, {0xfffffffd, 0xc9}, {}, {0x5, 0x0, 0x0, 0x1, 0x1}, {0x80001001, 0x0, 0x0, 0x1, 0x1}, {0x7fff, 0xfffffffa}, {0x0, 0x800000}, {0x8000000, 0x8f96}, {0x0, 0x8000000}], '\x00', 0x1000}) getpid() syz_usb_connect$uac1(0x0, 0xb1, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000086b1d010140000102030109029f0003010070000904000000010100000a24010000000201020d2406000003080000000000000c24020201010608000010000c240200000003000000000009240600060100000009240300000000050009240605000105000009040100000102000009040101010102000009050109000040000007250100008000090402000001"], 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7a680003) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000100)={0x10, 0x8, {0x56, 0x1, 0xff, {}, {0x2, 0x3}, @const={0x8, {0xb37, 0x3, 0x918, 0x40}}}, {0x57, 0x4, 0x6, {0xf, 0x2}, {0x7, 0x924}, @cond=[{0x0, 0x0, 0x74, 0x7, 0xe}, {0x6, 0x6861, 0x9, 0x9, 0x0, 0x4}]}}) r3 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x1a) r4 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000080)={0x110000018}) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000040)=0x1) 12.423077103s ago: executing program 4 (id=729): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$qrtr(0x2a, 0x2, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000000)=0x106) r0 = socket$inet_udplite(0x2, 0x2, 0x88) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000100)={'sit0\x00', 0x0}) syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000001f80)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x553b, &(0x7f000000ac00)="$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") r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) getdents(r1, 0x0, 0x0) 10.716412215s ago: executing program 7 (id=731): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x1008008, &(0x7f00000002c0)={[{@fat=@errors_continue}, {@fat=@errors_remount}, {@nodots}, {@dots}, {@dots}, {@fat=@errors_continue}, {@fat=@nocase}, {@nodots}, {@nodots}, {@fat=@nfs_nostale_ro}, {@fat=@nocase}, {@dots}, {@dots}, {@dots}, {@fat=@nfs}, {@nodots}, {@fat=@quiet}, {@nodots}, {@dots}, {@fat=@errors_continue}, {@dots}, {@dots}]}, 0x1, 0x1ee, &(0x7f0000000700)="$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") open(&(0x7f00000001c0)='./file1\x00', 0x10b942, 0x20) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) unlink(&(0x7f0000000040)='./file1\x00') 9.394791269s ago: executing program 7 (id=733): r0 = io_uring_setup(0x6db7, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xfffffffd}) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f00000002c0)={0x48, 0x1, r2, 0x0, 0x3, 0x2}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 8.514437653s ago: executing program 7 (id=735): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000500)='./file0\x00', 0x18418, &(0x7f0000000080)=ANY=[@ANYRES8=0x0, @ANYRESOCT=0x0], 0xfe, 0x4b1, &(0x7f0000001d00)="$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") r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000b00)=0x4a83189f) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000040)='./file1\x00', 0x5010006, &(0x7f0000006680)=ANY=[@ANYBLOB="71755474612c6e6f646973636172642c6e6f646973636172642c696f636861727365743d63703836362c696f636861727365743d63703835322c6769643da237b417f3e294444e490d9923a65644e2976f27baf1da598c05643a6cbcd7c07b0074a6bd407418bd2a02d98d5d8e335eec90b09d88564fe8b9ac50c4cb24e1110bbc774a6fda0612fdfa26d7f9306b1c4cca3e86368ceb7647dc73a95e45893a3d500d1edbe68141c627b50eba9a0b7e7d1d623747818ec675e3a6d14729d702c3cc2101b43eef0120f90984cf2d7ea574b8aba683480002d3bca6aa7332839f66b9e98abe9fb489", @ANYRESHEX=0x0, @ANYBLOB=',discard=0x0000000000000005,noquota,nointegrity,\x00'], 0x24, 0x61eb, &(0x7f0000000480)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000003a80)='\t', 0x1, 0x8000c61) symlink(&(0x7f000000a900)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 7.130125927s ago: executing program 2 (id=737): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200"/48, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000004000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000440005"], 0xfc}, 0x1, 0x0, 0x0, 0xc000000}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000000)='./file1\x00', 0xa18c14, &(0x7f00000000c0)={[{@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@shortname_winnt}, {@fat=@codepage={'codepage', 0x3d, '1255'}}, {@utf8no}, {@uni_xlateno}, {@shortname_mixed}, {@numtail}, {@shortname_lower}, {@utf8}, {@uni_xlate}, {@rodir}, {@utf8no}]}, 0x81, 0x29b, &(0x7f0000000580)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6}]}) mkdir(0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000680), 0x10007fffffff, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000340)={0x0, 0x3, 0x4, {0x2, @raw_data="8593149c7966110a25ab7e03c3cd85986c40809ec6c22d6af40c4e015751da10776b90fae06c6a6ce123e34685c4fe6a97d24aafe7e989c7cdd07f4a5a9a77f29f1f8f5ce6a52fc65a5ea840adaa6bbba2cf3538a1c4ba8c2639fb4bb8592686f0acba74e1f94929ab7609264c679b508c8b17519ff6427b2b6af7ff83635378ea5ff24e79edb16a484a1e3b9ccfb7fe33b36967b09cdc56589781ff3e474ccadfaeab08fc43891cef04234e3b4078da83524b677c18dc2ea336398aa458b0582c69ff92311f4230"}}) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885, 0x80, 0x80000000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 7.070356348s ago: executing program 4 (id=738): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0x20002078) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x800000, &(0x7f0000000500)=ANY=[], 0x1, 0x1f4, &(0x7f0000000b80)="$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") llistxattr(&(0x7f0000000180)='./file0\x00', 0x0, 0xffffffffffffffed) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) bind$tipc(r3, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x2, {{0x1, 0x4}, 0x1}}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') mount_setattr(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x800, &(0x7f00000001c0)={0x100080, 0x70, 0x0, {r5}}, 0x20) sendmsg$tipc(r4, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10, 0x0}, 0x20000010) connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @none}, 0x8) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r7 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r7, 0xc0184800, &(0x7f0000000100)={0x4, r6}) ioctl$DMA_BUF_IOCTL_SYNC(r8, 0x40086200, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) 6.107359133s ago: executing program 5 (id=739): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000105002, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) ioctl$PIO_SCRNMAP(r3, 0x4b41, &(0x7f0000000480)) sync_file_range(r1, 0x4, 0x1, 0x6) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r4 = socket(0x1d, 0x3, 0x1) getsockopt$nfc_llcp(r4, 0x65, 0x2, 0x0, 0x20000028) mmap(&(0x7f0000769000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x40b6d000) userfaultfd(0x80001) sendmsg$netlink(r0, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000002700010000000000000000000c00008008002300a7cac3fc344140b8dc1ab959116bba6d7fc171db4656cbb207ade140335d785aaee927454c6f95cb5c1066e08969c3060b9a59f9a0452b6cd803bbbd5422875b6439f3f3e1622d4fbf9988daae555c05bf3e950d70f44099b0a025d0b5f2c4c053cfddabfd5553eddd9164c09f620893b5ff5815e545f7b2f022bec84770bd56f5fe7ce320d44d7509342cd2a4090b64efa01dceaf39382056a9", @ANYRES32=0x0, @ANYBLOB], 0x1c}], 0x1, 0x0, 0x0, 0x2400c811}, 0x0) 5.407923212s ago: executing program 2 (id=740): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4008840) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fddbdf251200000008000300", @ANYRES32=r2, @ANYBLOB="0a00060008021100000100000c004300"], 0x34}}, 0x44) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000000)={0x0, 0x3, 0x8, 0xc, 0x200, &(0x7f0000000880)="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"}) socket$phonet_pipe(0x23, 0x5, 0x2) 5.022349279s ago: executing program 5 (id=741): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="60000000100003052bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="1564010041800400240012800b0001006d616373656300001400028005000a000000000005000c"], 0x60}, 0x1, 0x0, 0x0, 0x81}, 0x0) clock_gettime(0x0, &(0x7f0000007900)={0x0, 0x0}) recvmmsg(r1, &(0x7f00000076c0)=[{{&(0x7f00000000c0)=@l2, 0x80, &(0x7f0000000880)=[{&(0x7f0000000140)=""/147, 0x93}, {&(0x7f0000000200)=""/79, 0x4f}, {&(0x7f0000000280)=""/182, 0xb6}, {&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f0000000440)=""/179, 0xb3}, {&(0x7f0000000500)=""/227, 0xe3}, {&(0x7f0000000600)=""/186, 0xba}, {&(0x7f00000006c0)=""/80, 0x50}, {&(0x7f0000000740)=""/163, 0xa3}, {&(0x7f0000000800)=""/113, 0x71}], 0xa, &(0x7f0000000940)=""/124, 0x7c}, 0x2}, {{&(0x7f00000009c0)=@xdp, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000000a40)=""/142, 0x8e}, {&(0x7f0000000b00)=""/207, 0xcf}, {&(0x7f0000000c00)=""/62, 0x3e}, {&(0x7f0000000c40)=""/156, 0x9c}, {&(0x7f0000000d00)=""/63, 0x3f}, {&(0x7f0000000d40)=""/141, 0x8d}, {&(0x7f0000000e00)=""/4096, 0x1000}, {&(0x7f0000001e00)=""/14, 0xe}, {&(0x7f0000001e40)=""/137, 0x89}, {&(0x7f0000001f00)=""/142, 0x8e}], 0xa, &(0x7f0000002080)=""/4096, 0x1000}, 0x10}, {{&(0x7f0000003080)=@hci, 0x80, &(0x7f0000003140)=[{&(0x7f0000003100)=""/44, 0x2c}], 0x1, &(0x7f0000003180)=""/96, 0x60}, 0x9}, {{0x0, 0x0, &(0x7f0000004600)=[{&(0x7f0000003200)=""/4096, 0x1000}, {&(0x7f0000004200)=""/64, 0x40}, {&(0x7f0000004240)=""/151, 0x97}, {&(0x7f0000004300)=""/224, 0xe0}, {&(0x7f0000004400)=""/231, 0xe7}, {&(0x7f0000004500)=""/198, 0xc6}], 0x6, &(0x7f0000004680)=""/36, 0x24}, 0x8f97}, {{&(0x7f00000046c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000004980)=[{&(0x7f0000004740)=""/239, 0xef}, {&(0x7f0000004840)=""/70, 0x46}, {&(0x7f00000048c0)=""/160, 0xa0}], 0x3, &(0x7f00000049c0)=""/139, 0x8b}, 0x10000}, {{&(0x7f0000004a80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000006ec0)=[{&(0x7f0000004b00)=""/4096, 0x1000}, {&(0x7f0000005b00)=""/162, 0xa2}, {&(0x7f0000005bc0)=""/205, 0xcd}, {&(0x7f0000005cc0)=""/144, 0x90}, {&(0x7f0000005d80)=""/80, 0x50}, {&(0x7f0000005e00)=""/4096, 0x1000}, {&(0x7f0000006e00)=""/115, 0x73}, {&(0x7f0000006e80)=""/62, 0x3e}], 0x8, &(0x7f0000006f40)=""/250, 0xfa}, 0x1}, {{&(0x7f0000007040)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000007200)=[{&(0x7f00000070c0)=""/147, 0x93}, {&(0x7f0000007180)=""/91, 0x5b}], 0x2, &(0x7f0000007240)=""/252, 0xfc}, 0x4}, {{0x0, 0x0, &(0x7f0000007340)}, 0x1}, {{&(0x7f0000007380)=@caif=@dbg, 0x80, &(0x7f00000075c0)=[{&(0x7f0000007400)=""/145, 0x91}, {&(0x7f00000074c0)=""/5, 0x5}, {&(0x7f0000007500)=""/51, 0x33}, {&(0x7f0000007540)=""/45, 0x2d}, {&(0x7f0000007580)=""/3, 0x3}], 0x5, &(0x7f0000007640)=""/76, 0x4c}, 0x8}], 0x9, 0x0, &(0x7f0000007940)={r2, r3+60000000}) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000080), 0x4) ioperm(0x5, 0x7fff, 0x8) setgroups(0x0, 0x0) 4.560487422s ago: executing program 4 (id=742): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004ffffffff0000000003000000000000000000000003000000e5000000000000000000000200000000000000000000000602"], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) syz_usb_connect(0x4, 0x210, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a3d173085e040f04cee8010203010902fe0101000000020904b5000ee84ffc0009050e03100006e109072501010604000725018015070009050500400005ff0509050900000207dee107250180970900090507100002020ca3072501030bf9ff09050010ff036002030905040c08000c0a0607250102050104090506"], 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000000e1ffd018009400000000000109022400010000000009040000000300000009210000000122000009051d03"], 0x0) syz_usb_connect(0x2, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902380001000000000904000003"], 0x0) 3.506179185s ago: executing program 2 (id=743): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) syz_usb_connect(0x2, 0x0, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = syz_open_dev$media(&(0x7f0000000080), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="06010000246837f73199aee6fdb9291b3091ec1a2d41d2271b00d8ec00004000f397867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e35306221caf67b370d875eff3191932728e5ab6c9a3acf6ccee3e352c898f5744abaedfb53f92c37acb126bd143f3e9cdfcf25a8d6129fcc3a141c3f5ab6db772f87c787817a9b699dd60732d952716b103bc1e91ac5b1ed92f35389580994bb0df9bce07e7a80921888f984139f488d256a67fec0cbb5c4e93d5c151d97f676ab93b1efbd46f600dc964231e3257bf358448fddf894c0cdfa9115adbe5b19bc912fcbc8aac7719b649b1ff1267491da", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r2, &(0x7f0000003840)={0x8, {"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", 0x1000}}, 0x1059) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x7000006, 0x4010, r0, 0x1000) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x63, 0x0, 0x0, 0x2a, 0x0, 0xffffffffffffffff, 0x46, 0x0, 0x0}) 3.31395403s ago: executing program 7 (id=744): r0 = io_uring_setup(0x6db7, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xfffffffd}) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f00000002c0)={0x48, 0x1, r2, 0x0, 0x3, 0x2}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.119325582s ago: executing program 5 (id=745): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x7, 0x8, 0x1}, {0x0, 0x3, 0x4}}}]}]}]}}]}, 0x54}}, 0x44800) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4400ae8f, &(0x7f0000000140)=@arm64={0xd5, 0x9, 0x0, '\x00', 0x8}) ioctl$KVM_IRQ_LINE_STATUS(r6, 0xc008ae67, &(0x7f0000000180)={0x3, 0x4}) 2.349294774s ago: executing program 7 (id=746): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x10, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfffff611}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.968955832s ago: executing program 5 (id=747): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r1, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4100, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x1c0d0) 1.894142326s ago: executing program 2 (id=748): ioctl$SNAPSHOT_FREE_SWAP_PAGES(0xffffffffffffffff, 0x3309) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) write$binfmt_elf32(r0, &(0x7f0000000040)={{0x7f, 0x45, 0x4c, 0x46, 0xd, 0x8, 0x7, 0x53, 0x7fffffff, 0x3, 0x6, 0x0, 0x322, 0x38, 0xc8, 0x7, 0x8001, 0x20, 0x4, 0x8, 0x5, 0x7}, [{0x4, 0x7, 0xfffffffb, 0x7, 0x81, 0x5, 0x7fffffff, 0xffffff01}, {0x3, 0x0, 0x1ff, 0x6, 0x47, 0x3, 0x7}, {0x3, 0x7, 0x9, 0x86, 0x7, 0x80, 0x58, 0x1200000}, {0x6474e551, 0x0, 0x3, 0xffffffff, 0x7, 0x6, 0x2, 0xe}], "004ce2824d50c2ea7b8e8724f1b4b30bbd03821fff0289c9e09cd1127bb4b9363249d4443386cd5dd26fe27a76476358dc7ec8636f2f5058356d35ed57d58c12bcd25081826ae90a2249b453f067c21d699473d3b7131eb0c497799c27d5ffaa66b9dd03deaece0f374334e5468f4e5d2f0d5403e2752396c5fb3b5b0af810fd"}, 0x138) (async) write$binfmt_elf32(r0, &(0x7f0000000040)={{0x7f, 0x45, 0x4c, 0x46, 0xd, 0x8, 0x7, 0x53, 0x7fffffff, 0x3, 0x6, 0x0, 0x322, 0x38, 0xc8, 0x7, 0x8001, 0x20, 0x4, 0x8, 0x5, 0x7}, [{0x4, 0x7, 0xfffffffb, 0x7, 0x81, 0x5, 0x7fffffff, 0xffffff01}, {0x3, 0x0, 0x1ff, 0x6, 0x47, 0x3, 0x7}, {0x3, 0x7, 0x9, 0x86, 0x7, 0x80, 0x58, 0x1200000}, {0x6474e551, 0x0, 0x3, 0xffffffff, 0x7, 0x6, 0x2, 0xe}], "004ce2824d50c2ea7b8e8724f1b4b30bbd03821fff0289c9e09cd1127bb4b9363249d4443386cd5dd26fe27a76476358dc7ec8636f2f5058356d35ed57d58c12bcd25081826ae90a2249b453f067c21d699473d3b7131eb0c497799c27d5ffaa66b9dd03deaece0f374334e5468f4e5d2f0d5403e2752396c5fb3b5b0af810fd"}, 0x138) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000180)=""/173) (async) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000180)=""/173) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000240)) inotify_init1(0x80000) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000280)={&(0x7f0000ffb000/0x3000)=nil, 0x1, 0x3, 0x18}) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000002c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x13}}, 0x10) io_uring_enter(r0, 0x6c91, 0x79b4, 0x20, &(0x7f0000000300)={[0xd4c]}, 0x8) syz_clone3(&(0x7f0000000580)={0x800, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0), {0x20}, &(0x7f0000000400)=""/120, 0x78, &(0x7f0000000480)=""/188, &(0x7f0000000540)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r0}}, 0x58) (async) syz_clone3(&(0x7f0000000580)={0x800, &(0x7f0000000340)=0xffffffffffffffff, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x0, {0x20}, &(0x7f0000000400)=""/120, 0x78, &(0x7f0000000480)=""/188, &(0x7f0000000540)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r0}}, 0x58) ptrace$setregs(0xd, r3, 0x1ff, &(0x7f0000000600)="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") copy_file_range(r1, 0x0, r1, &(0x7f0000001600)=0x4, 0x1, 0x0) ioctl$sock_bt_bnep_BNEPCONNDEL(r0, 0x400442c9, &(0x7f0000001640)={0x6, @remote}) getpeername$packet(r0, &(0x7f0000001680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000016c0)=0x14) (async) getpeername$packet(r0, &(0x7f0000001680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000016c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001780)={'tunl0\x00', &(0x7f0000001700)={'gretap0\x00', r4, 0x8, 0x8, 0x4, 0x400, {{0xa, 0x4, 0x2, 0x5, 0x28, 0x65, 0x0, 0x1, 0x0, 0x0, @multicast2, @local, {[@rr={0x7, 0x13, 0xd4, [@private=0xa010100, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}, @noop]}}}}}) syz_open_dev$MSR(&(0x7f00000017c0), 0xab, 0x0) (async) r5 = syz_open_dev$MSR(&(0x7f00000017c0), 0xab, 0x0) read$msr(r5, &(0x7f0000001800)=""/236, 0xec) ioctl$FIOCLEX(r1, 0x5451) openat$kvm(0xffffffffffffff9c, &(0x7f0000001900), 0x10000, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000001900), 0x10000, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x2000009, 0x110, r0, 0x8000000) (async) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x2000009, 0x110, r0, 0x8000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f0000001980)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, r0, 0x0, &(0x7f0000001940)='./file0\x00', 0x180, 0x40, 0x23456, {0x0, r7}}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f00000019c0)={{0x0, 0xfffffffffffffffe, 0x400, 0x40, 0xe, 0x4, 0x0, 0x2, 0x1, 0x23d92027, 0x6, 0x5, 0x0, 0x5, 0x4}}) getpgrp(r2) mknodat(r0, &(0x7f00000029c0)='./file0\x00', 0x100, 0x5) (async) mknodat(r0, &(0x7f00000029c0)='./file0\x00', 0x100, 0x5) r8 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) sendmsg$inet(r8, &(0x7f0000002b80)={0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000002a00)="71ae36de7ca8ad682266c45c1ac062fc2c0d32a23a9df6b563013e30fb41c8f5d6b903d44c86f36d2c487e3e4f54dcb3b56c94f655a9fa7ec85b6811c569dcf648628a680942230664f48b1dc18297db7146c8c8cdee570b2c4e91f598ee7c294bce5d9fe60da8acefd3e906853d80e714abb60b84b6d581341635c4922de348d804a62e6c159cd665d0c3fdf4a719d20edf7bf16fadd24e2662880308852b7ebdf065f0eaab3f63019470d5325cafdaa277a45435afec3dea7da35fe9be13bfb1ac7b86d39f521bb8e42edf0c", 0xcd}, {&(0x7f0000002b00)="ab845e7c59c96ff67a417984da6cce8b50c9b4b311db512eb784c06b50f36ceece3ae6dc7e587710c6cb84f284435b76d524726ade", 0x35}], 0x2}, 0xc008) r9 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000002bc0)=r0, 0x4) (async) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000002bc0)=r0, 0x4) syz_open_procfs(r2, &(0x7f0000002c00)='personality\x00') 1.37441922s ago: executing program 7 (id=749): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200"/48, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000004000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000440005"], 0xfc}, 0x1, 0x0, 0x0, 0xc000000}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000000)='./file1\x00', 0xa18c14, &(0x7f00000000c0)={[{@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@shortname_winnt}, {@fat=@codepage={'codepage', 0x3d, '1255'}}, {@utf8no}, {@uni_xlateno}, {@shortname_mixed}, {@numtail}, {@shortname_lower}, {@utf8}, {@uni_xlate}, {@rodir}, {@utf8no}]}, 0x81, 0x29b, &(0x7f0000000580)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6}]}) mkdir(0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000680), 0x10007fffffff, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000340)={0x0, 0x3, 0x4, {0x2, @raw_data="8593149c7966110a25ab7e03c3cd85986c40809ec6c22d6af40c4e015751da10776b90fae06c6a6ce123e34685c4fe6a97d24aafe7e989c7cdd07f4a5a9a77f29f1f8f5ce6a52fc65a5ea840adaa6bbba2cf3538a1c4ba8c2639fb4bb8592686f0acba74e1f94929ab7609264c679b508c8b17519ff6427b2b6af7ff83635378ea5ff24e79edb16a484a1e3b9ccfb7fe33b36967b09cdc56589781ff3e474ccadfaeab08fc43891cef04234e3b4078da83524b677c18dc2ea336398aa458b0582c69ff92311f4230"}}) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885, 0x80, 0x80000000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 1.16796896s ago: executing program 5 (id=750): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000105002, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) ioctl$PIO_SCRNMAP(r3, 0x4b41, &(0x7f0000000480)) sync_file_range(r1, 0x4, 0x1, 0x6) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r4 = socket(0x1d, 0x3, 0x1) getsockopt$nfc_llcp(r4, 0x65, 0x2, 0x0, 0x20000028) mmap(&(0x7f0000769000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x40b6d000) userfaultfd(0x80001) sendmsg$netlink(r0, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000002700010000000000000000000c00008008002300a7cac3fc344140b8dc1ab959116bba6d7fc171db4656cbb207ade140335d785aaee927454c6f95cb5c1066e08969c3060b9a59f9a0452b6cd803bbbd5422875b6439f3f3e1622d4fbf9988daae555c05bf3e950d70f44099b0a025d0b5f2c4c053cfddabfd5553eddd9164c09f620893b5ff5815e545f7b2f022bec84770bd56f5fe7ce320d44d7509342cd2a4090b64efa01dceaf39382056a9", @ANYRES32=0x0, @ANYBLOB], 0x1c}], 0x1, 0x0, 0x0, 0x2400c811}, 0x0) 1.09564741s ago: executing program 2 (id=751): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x2808000, &(0x7f00000000c0)={[{@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@iocharset={'iocharset', 0x3d, 'cp1251'}}, {@shortname_lower}, {@numtail}, {@rodir}, {@fat=@codepage={'codepage', 0x3d, '861'}}, {}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp737'}}, {@utf8no}, {@rodir}, {@shortname_mixed}, {@uni_xlateno}]}, 0x1, 0x29c, &(0x7f00000003c0)="$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") (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000001980)={0x8, {"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", 0x1000}}, 0x1006) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) (async) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) 252.589866ms ago: executing program 2 (id=752): socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000c40)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}}, 0x0) sendto$packet(r0, &(0x7f0000000180)="a6bea8a120e5f8320c30ce5088a8a5e986dd", 0x12, 0x0, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) 179.009106ms ago: executing program 4 (id=753): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000500)='./file0\x00', 0x18418, &(0x7f0000000080)=ANY=[@ANYRES8=0x0, @ANYRESOCT=0x0], 0xfe, 0x4b1, &(0x7f0000001d00)="$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") r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000b00)=0x4a83189f) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000040)='./file1\x00', 0x5010006, &(0x7f0000006680)=ANY=[@ANYBLOB="71755474612c6e6f646973636172642c6e6f646973636172642c696f636861727365743d63703836362c696f636861727365743d63703835322c6769643da237b417f3e294444e490d9923a65644e2976f27baf1da598c05643a6cbcd7c07b0074a6bd407418bd2a02d98d5d8e335eec90b09d88564fe8b9ac50c4cb24e1110bbc774a6fda0612fdfa26d7f9306b1c4cca3e86368ceb7647dc73a95e45893a3d500d1edbe68141c627b50eba9a0b7e7d1d623747818ec675e3a6d14729d702c3cc2101b43eef0120f90984cf2d7ea574b8aba683480002d3bca6aa7332839f66b9e98abe9fb489", @ANYRESHEX=0x0, @ANYBLOB=',discard=0x0000000000000005,noquota,nointegrity,\x00'], 0x24, 0x61eb, &(0x7f0000000480)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000003a80)='\t', 0x1, 0x8000c61) symlink(&(0x7f000000a900)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 0s ago: executing program 5 (id=754): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@orlov}, {@abort}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x10}}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a439, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) (fail_nth: 1) syz_clone(0x40200400, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 436.037529][ T7336] netlink: 20 bytes leftover after parsing attributes in process `syz.5.380'. [ 436.766784][ T7343] netlink: 44 bytes leftover after parsing attributes in process `syz.3.382'. [ 436.897107][ T7341] loop2: detected capacity change from 0 to 512 [ 436.968760][ T7341] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 437.079864][ T7341] EXT4-fs (loop2): 1 truncate cleaned up [ 437.087725][ T7341] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 437.714802][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.003489][ T7357] loop4: detected capacity change from 0 to 512 [ 438.162163][ T7357] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.4.386: corrupted xattr block 95: invalid header [ 438.185967][ T5780] Bluetooth: hci2: command 0x0405 tx timeout [ 438.240724][ T7357] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.386: bg 0: block 7: invalid block bitmap [ 438.342249][ T7357] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 438.403124][ T7357] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2977: inode #11: comm syz.4.386: corrupted xattr block 95: invalid header [ 438.471929][ T7357] EXT4-fs warning (device loop4): ext4_evict_inode:276: xattr delete (err -117) [ 438.481654][ T7357] EXT4-fs (loop4): 1 orphan inode deleted [ 438.489774][ T7357] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 438.672037][ T5836] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 438.801502][ T5838] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 438.898811][ T5836] usb 3-1: Using ep0 maxpacket: 32 [ 438.955659][ T5836] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 438.964867][ T5836] usb 3-1: config 0 has no interface number 0 [ 438.971443][ T5836] usb 3-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 438.981805][ T5836] usb 3-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 439.054777][ T5836] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 439.063897][ T5838] usb 4-1: Using ep0 maxpacket: 32 [ 439.068847][ T5836] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.078913][ T5836] usb 3-1: Product: syz [ 439.083426][ T5836] usb 3-1: Manufacturer: syz [ 439.088267][ T5836] usb 3-1: SerialNumber: syz [ 439.138468][ T5838] usb 4-1: config 0 has an invalid interface number: 231 but max is 0 [ 439.147166][ T5838] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 439.161311][ T5838] usb 4-1: config 0 has no interface number 0 [ 439.231350][ T5794] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.235160][ T5836] usb 3-1: config 0 descriptor?? [ 439.272091][ T5838] usb 4-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=21.78 [ 439.287637][ T5838] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.298659][ T5838] usb 4-1: Product: syz [ 439.301650][ T5836] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 439.304005][ T5838] usb 4-1: Manufacturer: syz [ 439.316969][ T5838] usb 4-1: SerialNumber: syz [ 439.489225][ T5836] usb 3-1: qt2_setup_urbs - submit read urb failed -90 [ 439.497632][ T5836] quatech2 3-1:0.51: probe with driver quatech2 failed with error -90 [ 439.585311][ T5838] usb 4-1: config 0 descriptor?? [ 439.655747][ T7375] loop5: detected capacity change from 0 to 1024 [ 439.856707][ T7365] loop2: detected capacity change from 0 to 22 [ 439.865823][ T5838] asix 4-1:0.231 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 439.877509][ T5838] asix 4-1:0.231: probe with driver asix failed with error -71 [ 439.915729][ T7375] hfsplus: request for non-existent node 3 in B*Tree [ 439.924263][ T7375] hfsplus: request for non-existent node 3 in B*Tree [ 439.965046][ T7365] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 439.976583][ T5838] usb 4-1: USB disconnect, device number 9 [ 440.089021][ T5839] usb 3-1: USB disconnect, device number 16 [ 441.326158][ T7382] loop6: detected capacity change from 0 to 32768 [ 441.338189][ T5836] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 441.728946][ T7382] bcachefs (loop6): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,fsck,norecovery,nojournal_transaction_names [ 441.747803][ T7382] bcachefs (loop6): recovering from clean shutdown, journal seq 10 [ 441.757666][ T7382] bcachefs (loop6): Version upgrade required: [ 441.757666][ T7382] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 441.757666][ T7382] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.20: directory_size [ 441.757666][ T7382] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 441.828145][ C1] vkms_vblank_simulate: vblank timer overrun [ 441.854572][ T5836] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 441.863023][ T5836] usb 6-1: can't read configurations, error -22 [ 441.995797][ T7382] bcachefs (loop6): error validating btree node at btree alloc level 0/0 [ 441.995907][ T7382] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0 [ 441.996030][ T7382] node offset 8/24 bset u64s 375 bset byte offset 184: keys out of order: u64s 11 type alloc_v4 0:32:0 len 0 ver 0 > u64s 11 type alloc_v4 0:2:0 len 0 ver 0, fixing [ 442.038492][ T7382] bcachefs (loop6): btree_node_read_work: rewriting btree node at due to error [ 442.038492][ T7382] btree=alloc level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0 [ 442.067834][ T7388] loop3: detected capacity change from 0 to 32768 [ 442.099777][ T7388] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.395 (7388) [ 442.161472][ T7388] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 442.181196][ T7388] BTRFS info (device loop3): using sha256 (sha256-generic) checksum algorithm [ 442.195204][ T7388] BTRFS info (device loop3): using free-space-tree [ 442.229216][ T7382] bcachefs (loop6): accounting_read... done [ 442.238321][ T7382] bcachefs (loop6): alloc_read... done [ 442.245368][ T7382] bcachefs (loop6): stripes_read... done [ 442.251614][ T7382] bcachefs (loop6): snapshots_read... done [ 442.258584][ T7382] bcachefs (loop6): Fixed errors, running fsck a second time to verify fs is clean [ 442.260987][ T7398] loop2: detected capacity change from 0 to 256 [ 442.271252][ T7382] bcachefs (loop6): done starting filesystem [ 442.368492][ T7382] netlink: 'syz.6.393': attribute type 29 has an invalid length. [ 442.369513][ T7398] vfat: Unknown parameter 'shor _avC9tnammixed' [ 442.389072][ T5836] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 442.403489][ T7382] netlink: 'syz.6.393': attribute type 29 has an invalid length. [ 442.421426][ T7382] netlink: 'syz.6.393': attribute type 29 has an invalid length. [ 442.432512][ T7382] netlink: 'syz.6.393': attribute type 29 has an invalid length. [ 442.443193][ T7382] netlink: 'syz.6.393': attribute type 29 has an invalid length. [ 442.453686][ T7382] netlink: 'syz.6.393': attribute type 29 has an invalid length. [ 442.478312][ T7382] mmap: syz.6.393 (7382) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 442.634469][ T5836] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 442.638253][ T6426] bcachefs (loop6): shutting down [ 442.642778][ T5836] usb 6-1: can't read configurations, error -22 [ 442.665172][ T5836] usb usb6-port1: attempt power cycle [ 442.804100][ T6426] bcachefs (loop6): shutdown complete [ 442.924670][ T5789] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 443.072023][ T5836] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 443.116785][ C1] raw-gadget.0 gadget.5: ignoring, device is not running [ 443.125960][ T5836] usb 6-1: device descriptor read/8, error -32 [ 443.292288][ T2931] hfsplus: b-tree write err: -5, ino 3 [ 445.788894][ T7435] loop5: detected capacity change from 0 to 32768 [ 445.902935][ T7435] XFS (loop5): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 446.005686][ T7435] XFS (loop5): Ending clean mount [ 446.103279][ T29] audit: type=1800 audit(1738690892.363:57): pid=7435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.404" name="file1" dev="loop5" ino=1062 res=0 errno=0 [ 446.173909][ T6158] XFS (loop5): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 446.623122][ T5836] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 446.886354][ T5836] usb 3-1: Using ep0 maxpacket: 32 [ 446.973506][ T5836] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 446.981922][ T5836] usb 3-1: config 0 has no interface number 0 [ 446.989571][ T5836] usb 3-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 446.999901][ T5836] usb 3-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 447.148524][ T5836] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 447.161663][ T5836] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.174547][ T5836] usb 3-1: Product: syz [ 447.179121][ T5836] usb 3-1: Manufacturer: syz [ 447.184003][ T5836] usb 3-1: SerialNumber: syz [ 447.223327][ T5836] usb 3-1: config 0 descriptor?? [ 447.399078][ T5836] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 447.578173][ T5836] usb 3-1: qt2_setup_urbs - submit read urb failed -90 [ 447.586647][ T5836] quatech2 3-1:0.51: probe with driver quatech2 failed with error -90 [ 447.828017][ T7450] loop2: detected capacity change from 0 to 22 [ 447.894829][ T7450] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 448.027530][ T5839] usb 3-1: USB disconnect, device number 17 [ 448.708796][ T7468] TCP: TCP_TX_DELAY enabled [ 448.800440][ T7474] loop5: detected capacity change from 0 to 256 [ 448.867195][ T7474] vfat: Unknown parameter 'shor _avC9tnammixed' [ 449.372401][ T7478] loop6: detected capacity change from 0 to 128 [ 449.455960][ T7478] affs: No valid root block on device loop6 [ 451.426399][ T7494] loop2: detected capacity change from 0 to 32768 [ 451.540279][ T7494] XFS (loop2): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 451.762363][ T7494] XFS (loop2): Ending clean mount [ 451.788957][ T29] audit: type=1800 audit(1738690897.668:58): pid=7494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.417" name="file1" dev="loop2" ino=1062 res=0 errno=0 [ 451.922544][ T7516] FAULT_INJECTION: forcing a failure. [ 451.922544][ T7516] name failslab, interval 1, probability 0, space 0, times 0 [ 451.941558][ T7516] CPU: 0 UID: 0 PID: 7516 Comm: syz.4.423 Not tainted 6.14.0-rc1-syzkaller-00020-g0de63bb7d919 #0 [ 451.941695][ T7516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 451.941779][ T7516] Call Trace: [ 451.941825][ T7516] [ 451.941873][ T7516] dump_stack_lvl+0x216/0x2d0 [ 451.942028][ T7516] dump_stack+0x1e/0x24 [ 451.942149][ T7516] should_fail_ex+0x767/0x830 [ 451.942360][ T7516] should_failslab+0x17f/0x210 [ 451.942540][ T7516] kmem_cache_alloc_node_noprof+0xf4/0xe00 [ 451.942758][ T7516] ? __alloc_skb+0x1e9/0x7b0 [ 451.942898][ T7516] ? kmsan_get_metadata+0x13e/0x1c0 [ 451.943070][ T7516] __alloc_skb+0x1e9/0x7b0 [ 451.943218][ T7516] netlink_alloc_large_skb+0x1b4/0x280 [ 451.943400][ T7516] netlink_sendmsg+0xa96/0x11e0 [ 451.943616][ T7516] ? __pfx_netlink_sendmsg+0x10/0x10 [ 451.943802][ T7516] ? __pfx_netlink_sendmsg+0x10/0x10 [ 451.943989][ T7516] __sock_sendmsg+0x30f/0x380 [ 451.944178][ T7516] ____sys_sendmsg+0x877/0xb60 [ 451.944363][ T7516] ___sys_sendmsg+0x28d/0x3c0 [ 451.944541][ T7516] ? __rcu_read_unlock+0x7b/0xe0 [ 451.944733][ T7516] ? __fget_files+0x42b/0x500 [ 451.944909][ T7516] ? kmsan_get_metadata+0x13e/0x1c0 [ 451.945072][ T7516] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 451.945249][ T7516] __x64_sys_sendmsg+0x212/0x3c0 [ 451.945422][ T7516] ? kmsan_get_metadata+0x13e/0x1c0 [ 451.945597][ T7516] x64_sys_call+0x2ed6/0x3c30 [ 451.945751][ T7516] do_syscall_64+0xcd/0x1e0 [ 451.945886][ T7516] ? clear_bhb_loop+0x25/0x80 [ 451.946070][ T7516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.946261][ T7516] RIP: 0033:0x7f998bd8cda9 [ 451.946368][ T7516] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 451.946492][ T7516] RSP: 002b:00007f998cc10038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 451.946633][ T7516] RAX: ffffffffffffffda RBX: 00007f998bfa5fa0 RCX: 00007f998bd8cda9 [ 451.946734][ T7516] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 451.946820][ T7516] RBP: 00007f998cc10090 R08: 0000000000000000 R09: 0000000000000000 [ 451.946907][ T7516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 451.946989][ T7516] R13: 0000000000000000 R14: 00007f998bfa5fa0 R15: 00007ffc18c6a848 [ 451.947101][ T7516] [ 452.400172][ T7511] loop3: detected capacity change from 0 to 1024 [ 452.472257][ T7511] EXT4-fs: Ignoring removed orlov option [ 452.478901][ T7511] EXT4-fs: Ignoring removed nomblk_io_submit option [ 452.577796][ T5778] XFS (loop2): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 452.724983][ T7511] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0002] [ 452.782086][ T5839] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 452.903371][ T7511] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 453.003282][ T7511] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 453.020611][ T5839] usb 7-1: Using ep0 maxpacket: 32 [ 453.073516][ T5839] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 453.082188][ T5839] usb 7-1: config 0 has no interface number 0 [ 453.088819][ T5839] usb 7-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 453.099109][ T5839] usb 7-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 453.281718][ T5839] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 453.291568][ T5839] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.299860][ T5839] usb 7-1: Product: syz [ 453.305066][ T5839] usb 7-1: Manufacturer: syz [ 453.309925][ T5839] usb 7-1: SerialNumber: syz [ 453.445141][ T5839] usb 7-1: config 0 descriptor?? [ 453.534400][ T5839] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 453.757948][ T5839] usb 7-1: qt2_setup_urbs - submit read urb failed -90 [ 453.766334][ T5839] quatech2 7-1:0.51: probe with driver quatech2 failed with error -90 [ 454.054750][ T7519] loop6: detected capacity change from 0 to 22 [ 454.170384][ T7519] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 454.271940][ T5839] usb 7-1: USB disconnect, device number 8 [ 454.313971][ T7532] loop4: detected capacity change from 0 to 256 [ 454.425579][ T7532] vfat: Unknown parameter 'shor _avC9tnammixed' [ 456.305669][ T7543] loop2: detected capacity change from 0 to 4096 [ 456.389616][ T7543] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 457.171533][ T7562] loop4: detected capacity change from 0 to 512 [ 457.331041][ T7558] loop6: detected capacity change from 0 to 32768 [ 457.473434][ T7562] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 457.501143][ T7558] XFS (loop6): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 457.720356][ T7562] EXT4-fs (loop4): 1 truncate cleaned up [ 457.776687][ T7562] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 457.875189][ T29] audit: type=1800 audit(1738690903.269:59): pid=7562 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.437" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 458.019246][ T7558] XFS (loop6): Ending clean mount [ 458.158335][ T29] audit: type=1800 audit(1738690903.518:60): pid=7558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.435" name="file1" dev="loop6" ino=1062 res=0 errno=0 [ 458.375388][ T6426] XFS (loop6): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 458.725255][ T5794] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.099159][ T7585] loop5: detected capacity change from 0 to 1024 [ 460.018189][ T7594] loop3: detected capacity change from 0 to 256 [ 460.076215][ T5836] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 460.164409][ T7594] vfat: Unknown parameter 'shor _avC9tnammixed' [ 460.360099][ T5836] usb 3-1: Using ep0 maxpacket: 32 [ 460.421365][ T5836] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 460.429904][ T5836] usb 3-1: config 0 has no interface number 0 [ 460.436593][ T5836] usb 3-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 460.446887][ T5836] usb 3-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 460.544864][ T5836] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 460.554449][ T5836] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.562895][ T5836] usb 3-1: Product: syz [ 460.567812][ T5836] usb 3-1: Manufacturer: syz [ 460.572654][ T5836] usb 3-1: SerialNumber: syz [ 460.702966][ T5836] usb 3-1: config 0 descriptor?? [ 460.741856][ T5836] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 460.991280][ T7592] loop2: detected capacity change from 0 to 22 [ 461.100002][ T7592] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 461.214803][ T5836] usb 3-1: qt2_attach - failed to power on unit: -71 [ 461.222568][ T5836] quatech2 3-1:0.51: probe with driver quatech2 failed with error -71 [ 461.350002][ T5836] usb 3-1: USB disconnect, device number 18 [ 461.739311][ T7607] loop5: detected capacity change from 0 to 512 [ 461.929510][ T7607] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a856c198, mo2=0002] [ 461.938326][ T7607] System zones: 1-12 [ 462.037783][ T7607] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.447: corrupted in-inode xattr: invalid ea_ino [ 462.081297][ T7607] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.447: couldn't read orphan inode 15 (err -117) [ 462.135593][ T7607] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 462.675049][ T6158] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.403862][ T7621] loop4: detected capacity change from 0 to 512 [ 463.473819][ T7621] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 463.611114][ T7621] EXT4-fs (loop4): 1 truncate cleaned up [ 463.613128][ T7621] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 463.676231][ T7618] loop2: detected capacity change from 0 to 32768 [ 463.790802][ T29] audit: type=1800 audit(1738690908.732:61): pid=7621 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.452" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 464.228005][ T7618] XFS (loop2): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 464.455840][ T5794] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.507100][ T7618] XFS (loop2): Ending clean mount [ 464.570423][ T29] audit: type=1800 audit(1738690909.470:62): pid=7618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.451" name="file1" dev="loop2" ino=1062 res=0 errno=0 [ 464.834571][ T5778] XFS (loop2): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 465.057963][ T7643] loop4: detected capacity change from 0 to 64 [ 465.232976][ T7646] loop5: detected capacity change from 0 to 512 [ 465.244136][ T7646] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 465.293897][ T7647] loop6: detected capacity change from 0 to 256 [ 465.305430][ T7647] vfat: Unknown parameter 'shor _avC9tnammixed' [ 465.328233][ T7646] EXT4-fs (loop5): 1 truncate cleaned up [ 465.337743][ T7646] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 465.394867][ T7643] Trying to free block not in datazone [ 465.923064][ T5780] Bluetooth: hci1: command 0x0406 tx timeout [ 466.260604][ T6158] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.073297][ T7664] loop6: detected capacity change from 0 to 22 [ 467.170687][ T7664] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 467.541907][ T7670] overlayfs: failed to resolve './file2': -2 [ 468.063147][ T5835] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 468.074149][ T5836] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 468.263586][ T7678] loop6: detected capacity change from 0 to 512 [ 468.339241][ T7678] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 468.343210][ T5835] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 468.365127][ T5835] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 468.378097][ T5835] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 468.388500][ T5835] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 468.402151][ T5835] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 468.411985][ T5835] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.508209][ T5836] usb 4-1: New USB device found, idVendor=0681, idProduct=0010, bcdDevice=6d.59 [ 468.517622][ T5836] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.582244][ T5836] usb 4-1: config 0 descriptor?? [ 468.624136][ T7678] EXT4-fs (loop6): 1 truncate cleaned up [ 468.633736][ T7678] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 468.754987][ T7683] loop4: detected capacity change from 0 to 2048 [ 468.777160][ T5835] usb 6-1: config 0 descriptor?? [ 468.793149][ T29] audit: type=1800 audit(1738690913.354:63): pid=7678 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.465" name="bus" dev="loop6" ino=18 res=0 errno=0 [ 468.981953][ T7683] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 468.990672][ T7683] UDF-fs: Scanning with blocksize 512 failed [ 469.316677][ T5835] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 469.399959][ T7683] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 469.426464][ T5835] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 469.520735][ T5835] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 469.632601][ T7673] loop5: detected capacity change from 0 to 128 [ 469.820746][ T6426] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.015435][ T7673] FAT-fs (loop5): bogus number of reserved sectors [ 470.028924][ T7673] FAT-fs (loop5): Can't find a valid FAT filesystem [ 470.438622][ T7689] loop2: detected capacity change from 0 to 32768 [ 470.452929][ T5835] usb 6-1: USB disconnect, device number 12 [ 470.554640][ T7689] XFS (loop2): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 471.044349][ T5839] usb 4-1: USB disconnect, device number 10 [ 471.118361][ T7689] XFS (loop2): Ending clean mount [ 471.169133][ T29] audit: type=1800 audit(1738690915.541:64): pid=7689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.467" name="file1" dev="loop2" ino=1062 res=0 errno=0 [ 471.432473][ T5778] XFS (loop2): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 472.207945][ T7712] tipc: Enabling of bearer rejected, failed to enable media [ 472.374954][ T7706] loop3: detected capacity change from 0 to 2048 [ 472.617985][ T7706] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 472.760462][ T7706] EXT4-fs error (device loop3): ext4_ext_precache:648: inode #2: comm syz.3.469: pblk 31 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(4) [ 473.323224][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 473.799763][ T7726] loop2: detected capacity change from 0 to 22 [ 473.901130][ T7726] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 474.244640][ T7731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 474.254664][ T7731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 474.511759][ T5835] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 474.743628][ T5835] usb 6-1: Using ep0 maxpacket: 8 [ 474.810746][ T5835] usb 6-1: config 0 has an invalid interface number: 69 but max is 0 [ 474.819369][ T5835] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 474.830006][ T5835] usb 6-1: config 0 has no interface number 0 [ 475.027165][ T5835] usb 6-1: New USB device found, idVendor=06cd, idProduct=011c, bcdDevice=58.af [ 475.036767][ T5835] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.046129][ T5835] usb 6-1: Product: syz [ 475.050555][ T5835] usb 6-1: Manufacturer: syz [ 475.055784][ T5835] usb 6-1: SerialNumber: syz [ 475.250193][ T5835] usb 6-1: config 0 descriptor?? [ 475.309938][ T5835] keyspan 6-1:0.69: Keyspan 1 port adapter converter detected [ 475.321043][ T5835] keyspan 6-1:0.69: found no endpoint descriptor for endpoint 84 [ 475.321585][ T7741] loop2: detected capacity change from 0 to 512 [ 475.332504][ T5835] keyspan 6-1:0.69: found no endpoint descriptor for endpoint 81 [ 475.350916][ T5835] keyspan 6-1:0.69: found no endpoint descriptor for endpoint 82 [ 475.360998][ T5835] keyspan 6-1:0.69: found no endpoint descriptor for endpoint 1 [ 475.369404][ T5835] keyspan 6-1:0.69: found no endpoint descriptor for endpoint 2 [ 475.379068][ T5835] keyspan 6-1:0.69: found no endpoint descriptor for endpoint 83 [ 475.387376][ T5835] keyspan 6-1:0.69: found no endpoint descriptor for endpoint 3 [ 475.537607][ T7731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 475.549112][ T7731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 475.591384][ T7741] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 475.734269][ T7741] EXT4-fs (loop2): 1 truncate cleaned up [ 475.742465][ T7741] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 475.872242][ T5835] usb 6-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 475.976970][ T29] audit: type=1800 audit(1738690919.979:65): pid=7741 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.478" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 476.794733][ T7748] loop4: detected capacity change from 0 to 32768 [ 476.809795][ T5835] usb 6-1: USB disconnect, device number 13 [ 476.893823][ T7748] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 476.910694][ T5835] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 476.913774][ T5835] keyspan 6-1:0.69: device disconnected [ 476.953668][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.970944][ T7753] tipc: Enabling of bearer rejected, failed to enable media [ 477.476977][ T7748] XFS (loop4): Ending clean mount [ 477.503971][ T29] audit: type=1800 audit(1738690921.400:66): pid=7748 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.480" name="file1" dev="loop4" ino=1062 res=0 errno=0 [ 477.582494][ T7770] loop5: detected capacity change from 0 to 8 [ 477.654614][ T7771] netlink: 8 bytes leftover after parsing attributes in process `syz.2.484'. [ 477.768395][ T5794] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 478.087468][ T7778] cramfs: Error -3 while decompressing! [ 478.093784][ T7778] cramfs: ffffffff948db048(26)->ffff88812e814000(4096) [ 478.101565][ T7778] cramfs: Error -3 while decompressing! [ 478.107334][ T7778] cramfs: ffffffff948db062(26)->ffff888134954000(4096) [ 478.115186][ T7778] cramfs: Error -3 while decompressing! [ 478.125265][ T7778] cramfs: ffffffff948db048(26)->ffff88812e814000(4096) [ 478.813093][ T7783] loop6: detected capacity change from 0 to 22 [ 478.904390][ T7783] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 479.359584][ T5838] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 479.645802][ T5838] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 479.656501][ T5838] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 479.666210][ T5838] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 479.681356][ T5838] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.846693][ T5838] usb 3-1: config 0 descriptor?? [ 480.369519][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 480.376416][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 480.773435][ T7800] loop5: detected capacity change from 0 to 512 [ 480.865064][ T7800] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 481.015096][ T7800] EXT4-fs (loop5): 1 truncate cleaned up [ 481.022756][ T7800] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 481.046702][ T5836] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 481.202395][ T29] audit: type=1800 audit(1738690924.814:67): pid=7800 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.494" name="bus" dev="loop5" ino=18 res=0 errno=0 [ 481.282206][ T7811] netlink: 8 bytes leftover after parsing attributes in process `syz.6.496'. [ 481.322476][ T5836] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 481.334068][ T5836] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 481.347778][ T5836] usb 4-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 481.358686][ T5836] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.622784][ T5836] usb 4-1: config 0 descriptor?? [ 481.919018][ T7805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 481.931310][ T7805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 482.002943][ T6158] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 483.431332][ T7805] loop3: detected capacity change from 0 to 32768 [ 483.511664][ T7805] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 483.619843][ T7805] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 484.030106][ T5836] hid-led 0003:0FC5:B080.0006: unknown main item tag 0x0 [ 484.037579][ T5836] hid-led 0003:0FC5:B080.0006: unknown main item tag 0x0 [ 484.050778][ T5836] hid-led 0003:0FC5:B080.0006: unknown main item tag 0x0 [ 484.512913][ T5838] usb 3-1: USB disconnect, device number 19 [ 484.699182][ T5839] usb 4-1: USB disconnect, device number 11 [ 484.959509][ T7844] FAULT_INJECTION: forcing a failure. [ 484.959509][ T7844] name fail_futex, interval 1, probability 0, space 0, times 1 [ 484.959653][ T7844] CPU: 1 UID: 0 PID: 7844 Comm: syz.2.501 Not tainted 6.14.0-rc1-syzkaller-00020-g0de63bb7d919 #0 [ 484.959790][ T7844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 484.959874][ T7844] Call Trace: [ 484.959923][ T7844] [ 484.959972][ T7844] dump_stack_lvl+0x216/0x2d0 [ 484.960126][ T7844] dump_stack+0x1e/0x24 [ 484.960246][ T7844] should_fail_ex+0x767/0x830 [ 484.960453][ T7844] should_fail+0x2a/0x40 [ 484.960637][ T7844] get_futex_key+0xcf3/0x12e0 [ 484.960792][ T7844] futex_wake+0xfe/0x8f0 [ 484.960962][ T7844] ? kmsan_get_metadata+0x13e/0x1c0 [ 484.961129][ T7844] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 484.961305][ T7844] do_futex+0x380/0x4a0 [ 484.961450][ T7844] __se_sys_futex+0x22c/0x6f0 [ 484.961606][ T7844] ? kmsan_get_metadata+0x13e/0x1c0 [ 484.961766][ T7844] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 484.961938][ T7844] __x64_sys_futex+0x11f/0x1a0 [ 484.962099][ T7844] x64_sys_call+0x3ba2/0x3c30 [ 484.962259][ T7844] do_syscall_64+0xcd/0x1e0 [ 484.962389][ T7844] ? clear_bhb_loop+0x25/0x80 [ 484.962567][ T7844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.962742][ T7844] RIP: 0033:0x7f2ca718cda9 [ 484.962841][ T7844] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 484.962959][ T7844] RSP: 002b:00007f2ca7f6d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 484.963089][ T7844] RAX: ffffffffffffffda RBX: 00007f2ca73a5fa0 RCX: 00007f2ca718cda9 [ 484.963184][ T7844] RDX: 0000000000000000 RSI: 000000000000000a RDI: 000000002000cffc [ 484.963266][ T7844] RBP: 00007f2ca7f6d090 R08: 0000000000000000 R09: 0000000000000001 [ 484.963344][ T7844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 484.963413][ T7844] R13: 0000000000000000 R14: 00007f2ca73a5fa0 R15: 00007ffc759bcc38 [ 484.963529][ T7844] [ 485.207846][ T7849] loop5: detected capacity change from 0 to 22 [ 485.248275][ T7849] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 485.848389][ T5789] ocfs2: Unmounting device (7,3) on (node local) [ 485.897987][ T7854] netlink: 104 bytes leftover after parsing attributes in process `syz.6.505'. [ 486.124862][ T7857] FAULT_INJECTION: forcing a failure. [ 486.124862][ T7857] name failslab, interval 1, probability 0, space 0, times 0 [ 486.125008][ T7857] CPU: 1 UID: 0 PID: 7857 Comm: syz.5.507 Not tainted 6.14.0-rc1-syzkaller-00020-g0de63bb7d919 #0 [ 486.125155][ T7857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 486.125235][ T7857] Call Trace: [ 486.125282][ T7857] [ 486.125328][ T7857] dump_stack_lvl+0x216/0x2d0 [ 486.125492][ T7857] dump_stack+0x1e/0x24 [ 486.125617][ T7857] should_fail_ex+0x767/0x830 [ 486.125831][ T7857] should_failslab+0x17f/0x210 [ 486.125998][ T7857] kmem_cache_alloc_noprof+0xee/0xe10 [ 486.126203][ T7857] ? alloc_empty_file+0x1e9/0x530 [ 486.126391][ T7857] ? kmsan_get_metadata+0x13e/0x1c0 [ 486.126557][ T7857] alloc_empty_file+0x1e9/0x530 [ 486.126756][ T7857] alloc_file_pseudo+0x1f1/0x350 [ 486.126954][ T7857] __shmem_file_setup+0x3bf/0x4d0 [ 486.127137][ T7857] shmem_file_setup+0x61/0x80 [ 486.127312][ T7857] __se_sys_memfd_create+0x80a/0x1210 [ 486.127518][ T7857] __x64_sys_memfd_create+0x6c/0xa0 [ 486.127716][ T7857] x64_sys_call+0x3b63/0x3c30 [ 486.127869][ T7857] do_syscall_64+0xcd/0x1e0 [ 486.128008][ T7857] ? clear_bhb_loop+0x25/0x80 [ 486.128191][ T7857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.128375][ T7857] RIP: 0033:0x7f5a7658cda9 [ 486.128480][ T7857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 486.128603][ T7857] RSP: 002b:00007f5a773a4e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 486.128741][ T7857] RAX: ffffffffffffffda RBX: 00000000000055ae RCX: 00007f5a7658cda9 [ 486.128840][ T7857] RDX: 00007f5a773a4ef0 RSI: 0000000000000000 RDI: 00007f5a7660ec51 [ 486.128936][ T7857] RBP: 000000002000ac40 R08: 00007f5a773a4bb7 R09: 00007f5a773a4e40 [ 486.129033][ T7857] R10: 000000000000000a R11: 0000000000000202 R12: 0000000020000380 [ 486.129120][ T7857] R13: 00007f5a773a4ef0 R14: 00007f5a773a4eb0 R15: 0000000020000180 [ 486.129238][ T7857] [ 486.703041][ T7862] loop5: detected capacity change from 0 to 512 [ 486.726050][ T7862] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 486.729110][ T7863] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 486.862293][ T7862] EXT4-fs (loop5): 1 truncate cleaned up [ 486.864135][ T7862] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 487.328740][ T7871] loop2: detected capacity change from 0 to 512 [ 487.395178][ T7871] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 487.402491][ T6158] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.533329][ T7871] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 487.533818][ T7871] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 488.453176][ T5839] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 488.566198][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 488.624875][ T5839] usb 7-1: too many configurations: 116, using maximum allowed: 8 [ 488.646480][ T5839] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 488.646659][ T5839] usb 7-1: can't read configurations, error -61 [ 488.797176][ T5839] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 489.013128][ T5839] usb 7-1: too many configurations: 116, using maximum allowed: 8 [ 489.048945][ T5839] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 489.049148][ T5839] usb 7-1: can't read configurations, error -61 [ 489.050375][ T5839] usb usb7-port1: attempt power cycle [ 489.122618][ T7888] loop5: detected capacity change from 0 to 256 [ 489.207847][ T29] audit: type=1326 audit(1738690932.187:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7887 comm="syz.5.514" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5a7658cda9 code=0x0 [ 489.779547][ T5839] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 489.820278][ T5839] usb 7-1: too many configurations: 116, using maximum allowed: 8 [ 489.823322][ T7896] fuse: Unknown parameter 'use00000000000000000000' [ 489.847652][ T5839] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 489.847829][ T5839] usb 7-1: can't read configurations, error -61 [ 489.976543][ T7898] loop2: detected capacity change from 0 to 22 [ 490.008136][ T5839] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 490.039202][ T5839] usb 7-1: too many configurations: 116, using maximum allowed: 8 [ 490.062839][ T5839] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 490.063013][ T5839] usb 7-1: can't read configurations, error -61 [ 490.064070][ T5839] usb usb7-port1: unable to enumerate USB device [ 490.085697][ T7898] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 490.844856][ T5836] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 490.940482][ T7904] loop5: detected capacity change from 0 to 512 [ 491.091000][ T5836] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 491.102700][ T5836] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 491.116618][ T5836] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 491.129109][ T5836] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.189412][ T7904] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 491.593677][ T5836] usb 4-1: config 0 descriptor?? [ 491.779377][ T5839] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 491.913336][ T7904] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 492.050189][ T5839] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 492.060900][ T5839] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 492.070093][ T5839] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 492.080654][ T5839] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 492.082472][ T7903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 492.089734][ T5839] usb 5-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 492.113945][ T7903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.360799][ T5839] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 492.370664][ T5839] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.379204][ T5839] usb 5-1: Product: syz [ 492.383983][ T5839] usb 5-1: Manufacturer: syz [ 492.388886][ T5839] usb 5-1: SerialNumber: syz [ 492.411105][ T5836] isku 0003:1E7D:319C.0007: unbalanced collection at end of report description [ 492.500918][ T5836] isku 0003:1E7D:319C.0007: parse failed [ 492.507393][ T5836] isku 0003:1E7D:319C.0007: probe with driver isku failed with error -22 [ 492.634774][ T7919] loop2: detected capacity change from 0 to 512 [ 492.656422][ T7919] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 492.737401][ T7919] EXT4-fs (loop2): 1 truncate cleaned up [ 492.747132][ T7919] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 492.912879][ T5839] usb 5-1: 0:2 : does not exist [ 493.038637][ T5839] usb 5-1: USB disconnect, device number 8 [ 493.279353][ T6158] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 493.459632][ T7037] udevd[7037]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 493.577834][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 494.131197][ T7931] loop5: detected capacity change from 0 to 1024 [ 494.182897][ T5839] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 494.195143][ T5836] usb 4-1: USB disconnect, device number 12 [ 494.378430][ T5839] usb 7-1: device descriptor read/64, error -71 [ 494.535470][ T7931] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 494.637517][ T5839] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 494.843765][ T5839] usb 7-1: device descriptor read/64, error -71 [ 494.924937][ T7946] fuse: Unknown parameter 'use00000000000000000000' [ 494.986455][ T5839] usb usb7-port1: attempt power cycle [ 495.430292][ T5839] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 495.532351][ T5839] usb 7-1: device descriptor read/8, error -71 [ 495.572971][ T7952] loop3: detected capacity change from 0 to 22 [ 495.627626][ T7952] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 496.569395][ T7955] loop4: detected capacity change from 0 to 32768 [ 496.578639][ T7955] btrfs: Deprecated parameter 'usebackuproot' [ 496.585011][ T7955] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 496.598385][ T7955] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.531 (7955) [ 496.637449][ T7955] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 496.648455][ T7955] BTRFS info (device loop4): using sha256 (sha256-generic) checksum algorithm [ 496.666942][ T7955] BTRFS info (device loop4): using free-space-tree [ 496.686951][ T5839] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 496.721268][ T5839] usb 7-1: device descriptor read/8, error -71 [ 496.881238][ T5839] usb usb7-port1: unable to enumerate USB device [ 497.159981][ T7955] BTRFS info (device loop4): rebuilding free space tree [ 497.352297][ T2906] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 497.376832][ T5836] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 497.447939][ T5794] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 497.505438][ T2906] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 497.518266][ T2906] EXT4-fs (loop5): This should not happen!! Data will be lost [ 497.518266][ T2906] [ 497.528372][ T2906] EXT4-fs (loop5): Total free blocks count 0 [ 497.534849][ T2906] EXT4-fs (loop5): Free/Dirty block details [ 497.545155][ T2906] EXT4-fs (loop5): free_blocks=68451041280 [ 497.551217][ T2906] EXT4-fs (loop5): dirty_blocks=16 [ 497.558466][ T2906] EXT4-fs (loop5): Block reservation details [ 497.564822][ T2906] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 497.639429][ T5835] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 497.696598][ T5836] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 497.708321][ T5836] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 497.719628][ T5836] usb 4-1: config 0 interface 0 has no altsetting 0 [ 497.726793][ T5836] usb 4-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 497.736163][ T5836] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.753682][ T6158] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 497.777343][ T5836] usb 4-1: config 0 descriptor?? [ 497.795835][ T7975] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 497.882064][ T5835] usb 3-1: Using ep0 maxpacket: 16 [ 497.946395][ T5835] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 497.958313][ T5835] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 497.968465][ T5835] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.192629][ T5835] usb 3-1: config 0 descriptor?? [ 498.366753][ T5836] hid-retrode 0003:0403:97C1.0008: item fetching failed at offset 5/7 [ 498.443938][ T5836] hid-retrode 0003:0403:97C1.0008: probe with driver hid-retrode failed with error -22 [ 498.601778][ T5839] usb 4-1: USB disconnect, device number 13 [ 498.794936][ T5868] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 498.818461][ T5835] mcp2221 0003:04D8:00DD.0009: item fetching failed at offset 0/5 [ 498.869226][ T5835] mcp2221 0003:04D8:00DD.0009: can't parse reports [ 498.882673][ T5835] mcp2221 0003:04D8:00DD.0009: probe with driver mcp2221 failed with error -22 [ 499.021930][ T5835] usb 3-1: USB disconnect, device number 20 [ 499.032035][ T5868] usb 5-1: Using ep0 maxpacket: 8 [ 499.163966][ T5868] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 499.173698][ T5868] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.182288][ T5868] usb 5-1: Product: syz [ 499.186717][ T5868] usb 5-1: Manufacturer: syz [ 499.191828][ T5868] usb 5-1: SerialNumber: syz [ 499.398387][ T5868] usb 5-1: config 0 descriptor?? [ 499.774534][ T5839] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 499.807863][ T5868] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 500.013352][ T5839] usb 7-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 500.026690][ T5839] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 500.037489][ T5839] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 500.050994][ T5839] usb 7-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 500.060554][ T5839] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.324736][ T8002] loop3: detected capacity change from 0 to 256 [ 500.388668][ T5839] usb 7-1: config 0 descriptor?? [ 500.439850][ T5839] usb-storage 7-1:0.0: USB Mass Storage device detected [ 500.589184][ T5839] usb-storage 7-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 500.836703][ T5839] usb 7-1: USB disconnect, device number 17 [ 501.580565][ T8014] fuse: Unknown parameter 'user_i00000000000000000000' [ 501.651648][ T5868] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 501.747233][ T5868] usb 5-1: USB disconnect, device number 9 [ 501.880163][ T5789] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 501.889530][ T5789] FAT-fs (loop3): Filesystem has been set read-only [ 501.940224][ T5789] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 502.009586][ T8016] loop2: detected capacity change from 0 to 22 [ 502.069850][ T8016] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 503.489670][ T60] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.787421][ T60] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.034274][ T60] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.227585][ T60] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.407177][ T8032] loop6: detected capacity change from 0 to 1024 [ 504.514103][ T8032] hfsplus: Bad value for 'nls' [ 504.689968][ T8036] block nbd5: shutting down sockets [ 505.023339][ T60] bridge_slave_1: left allmulticast mode [ 505.029269][ T60] bridge_slave_1: left promiscuous mode [ 505.036386][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.158792][ T60] bridge_slave_0: left allmulticast mode [ 505.165351][ T60] bridge_slave_0: left promiscuous mode [ 505.166365][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.246236][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 506.281731][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 506.318894][ T60] bond0 (unregistering): Released all slaves [ 506.959941][ T60] hsr_slave_0: left promiscuous mode [ 506.980330][ T60] hsr_slave_1: left promiscuous mode [ 506.988616][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 506.998152][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 507.018695][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 507.026989][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 507.133783][ T60] veth1_macvtap: left promiscuous mode [ 507.139582][ T60] veth0_macvtap: left promiscuous mode [ 507.145702][ T60] veth1_vlan: left promiscuous mode [ 507.151338][ T60] veth0_vlan: left promiscuous mode [ 507.286157][ T8055] fuse: Unknown parameter 'user_i00000000000000000000' [ 508.103302][ T8065] loop4: detected capacity change from 0 to 22 [ 508.207792][ T8065] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 508.402405][ T5780] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 508.412433][ T5780] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 508.427316][ T5780] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 508.442677][ T5780] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 508.454773][ T5780] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 508.576682][ T5780] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 508.662265][ T60] team0 (unregistering): Port device team_slave_1 removed [ 508.730304][ T60] team0 (unregistering): Port device team_slave_0 removed [ 509.244259][ T8066] lo speed is unknown, defaulting to 1000 [ 510.355468][ T8081] loop6: detected capacity change from 0 to 128 [ 510.488449][ T8079] loop2: detected capacity change from 0 to 512 [ 510.509425][ T8081] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 510.657916][ T8079] EXT4-fs (loop2): orphan cleanup on readonly fs [ 510.703298][ T8079] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.559: bg 0: block 248: padding at end of block bitmap is not set [ 510.829195][ T5780] Bluetooth: hci3: command tx timeout [ 510.868786][ T8079] Quota error (device loop2): write_blk: dquota write failed [ 510.877697][ T8079] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 510.890045][ T8079] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.559: Failed to acquire dquot type 1 [ 511.481171][ T8079] EXT4-fs (loop2): 1 truncate cleaned up [ 511.613269][ T8079] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 511.863791][ T8079] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 511.898531][ T8066] chnl_net:caif_netlink_parms(): no params data found [ 512.554836][ T8101] FAULT_INJECTION: forcing a failure. [ 512.554836][ T8101] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 512.568762][ T8101] CPU: 0 UID: 0 PID: 8101 Comm: syz.5.564 Not tainted 6.14.0-rc1-syzkaller-00020-g0de63bb7d919 #0 [ 512.568906][ T8101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 512.568987][ T8101] Call Trace: [ 512.569037][ T8101] [ 512.569084][ T8101] dump_stack_lvl+0x216/0x2d0 [ 512.569246][ T8101] dump_stack+0x1e/0x24 [ 512.569372][ T8101] should_fail_ex+0x767/0x830 [ 512.569583][ T8101] should_fail+0x2a/0x40 [ 512.569763][ T8101] should_fail_usercopy+0x2e/0x40 [ 512.569962][ T8101] _copy_from_user+0x35/0x110 [ 512.570195][ T8101] do_sys_poll+0x270/0x2090 [ 512.570377][ T8101] ? kernel_text_address+0x129/0x1b0 [ 512.570555][ T8101] ? kmsan_get_metadata+0x13e/0x1c0 [ 512.570718][ T8101] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 512.570885][ T8101] ? do_syscall_64+0xcd/0x1e0 [ 512.571030][ T8101] ? kmsan_get_metadata+0x13e/0x1c0 [ 512.571188][ T8101] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 512.571364][ T8101] ? kstrtoull+0xbf/0x3b0 [ 512.571525][ T8101] ? filter_irq_stacks+0x60/0x1a0 [ 512.571685][ T8101] ? kmsan_get_metadata+0x13e/0x1c0 [ 512.571841][ T8101] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 512.572010][ T8101] ? _parse_integer_limit+0x387/0x3e0 [ 512.572170][ T8101] ? kmsan_get_metadata+0x13e/0x1c0 [ 512.572331][ T8101] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 512.572500][ T8101] ? kmsan_get_metadata+0x13e/0x1c0 [ 512.572653][ T8101] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 512.572818][ T8101] ? set_user_sigmask+0x3d/0x320 [ 512.573011][ T8101] ? filter_irq_stacks+0x60/0x1a0 [ 512.573181][ T8101] ? stack_depot_save_flags+0x2c/0x750 [ 512.573402][ T8101] ? __se_sys_ppoll+0x62/0x530 [ 512.573539][ T8101] ? __x64_sys_ppoll+0xe4/0x150 [ 512.573687][ T8101] __se_sys_ppoll+0x452/0x530 [ 512.573837][ T8101] ? kmsan_get_metadata+0x13e/0x1c0 [ 512.573998][ T8101] __x64_sys_ppoll+0xe4/0x150 [ 512.574158][ T8101] x64_sys_call+0x3623/0x3c30 [ 512.574336][ T8101] do_syscall_64+0xcd/0x1e0 [ 512.574476][ T8101] ? clear_bhb_loop+0x25/0x80 [ 512.574646][ T8101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.574825][ T8101] RIP: 0033:0x7f5a7658cda9 [ 512.574923][ T8101] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 512.575044][ T8101] RSP: 002b:00007f5a773a5038 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 512.575169][ T8101] RAX: ffffffffffffffda RBX: 00007f5a767a5fa0 RCX: 00007f5a7658cda9 [ 512.575307][ T8101] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 00000000200000c0 [ 512.575401][ T8101] RBP: 00007f5a773a5090 R08: 0000000000000000 R09: 0000000000000000 [ 512.575489][ T8101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 512.575574][ T8101] R13: 0000000000000000 R14: 00007f5a767a5fa0 R15: 00007ffca2c08b58 [ 512.575688][ T8101] [ 512.994737][ T5836] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 513.084577][ T5780] Bluetooth: hci3: command tx timeout [ 513.322580][ T5836] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 513.331973][ T5836] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.476397][ T5836] usb 7-1: config 0 descriptor?? [ 513.526706][ T5836] cp210x 7-1:0.0: cp210x converter detected [ 513.893945][ T8112] fuse: Unknown parameter 'user_i00000000000000000000' [ 514.183990][ T5836] cp210x 7-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 514.197415][ T5836] cp210x 7-1:0.0: querying part number failed [ 514.369629][ T5836] usb 7-1: cp210x converter now attached to ttyUSB0 [ 514.482255][ T5836] usb 7-1: USB disconnect, device number 18 [ 514.558253][ T5836] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 514.570278][ T5836] cp210x 7-1:0.0: device disconnected [ 514.699894][ T29] audit: type=1326 audit(1738690955.734:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8121 comm="syz.4.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f998bd8cda9 code=0x7ffc0000 [ 514.809570][ T29] audit: type=1326 audit(1738690955.771:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8121 comm="syz.4.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f998bd8cda9 code=0x7ffc0000 [ 514.833032][ T29] audit: type=1326 audit(1738690955.771:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8121 comm="syz.4.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f998bd8cda9 code=0x7ffc0000 [ 514.860749][ T29] audit: type=1326 audit(1738690955.771:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8121 comm="syz.4.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f998bd8cda9 code=0x7ffc0000 [ 514.887326][ T8115] orangefs_mount: mount request failed with -4 [ 515.026969][ T8066] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.034839][ T8066] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.042913][ T8066] bridge_slave_0: entered allmulticast mode [ 515.056371][ T8066] bridge_slave_0: entered promiscuous mode [ 515.180993][ T8066] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.194918][ T8066] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.202980][ T8066] bridge_slave_1: entered allmulticast mode [ 515.212652][ T8066] bridge_slave_1: entered promiscuous mode [ 515.337460][ T5780] Bluetooth: hci3: command tx timeout [ 515.949507][ T8066] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 516.113309][ T8066] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 516.223512][ T8139] netlink: 8 bytes leftover after parsing attributes in process `syz.2.573'. [ 516.233789][ T8139] netlink: 20 bytes leftover after parsing attributes in process `syz.2.573'. [ 516.527159][ T8143] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 516.527759][ T8066] team0: Port device team_slave_0 added [ 516.605060][ T8066] team0: Port device team_slave_1 added [ 516.979285][ T8066] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 516.986659][ T8066] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 517.013126][ T8066] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 517.210975][ T8066] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 517.218539][ T8066] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 517.244649][ C1] vkms_vblank_simulate: vblank timer overrun [ 517.251507][ T8066] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 517.272179][ T8151] loop2: detected capacity change from 0 to 128 [ 517.353448][ T8151] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 517.424709][ T8154] fuse: Unknown parameter 'user_id00000000000000000000' [ 517.606182][ T5780] Bluetooth: hci3: command tx timeout [ 518.304531][ T8066] hsr_slave_0: entered promiscuous mode [ 518.314945][ T8066] hsr_slave_1: entered promiscuous mode [ 518.324414][ T8066] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 518.332371][ T8066] Cannot create hsr debugfs directory [ 519.282614][ T5838] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 519.525116][ T5838] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 519.535280][ T5838] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.578517][ T5838] usb 3-1: config 0 descriptor?? [ 519.693337][ T5838] cp210x 3-1:0.0: cp210x converter detected [ 520.312201][ T5838] cp210x 3-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 520.320103][ T5838] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 520.394376][ T5838] usb 3-1: cp210x converter now attached to ttyUSB0 [ 520.528166][ T5838] usb 3-1: USB disconnect, device number 21 [ 520.584429][ T5838] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 520.595745][ T5838] cp210x 3-1:0.0: device disconnected [ 520.675780][ T8066] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 520.781069][ T8066] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 520.842511][ T8182] netlink: 8 bytes leftover after parsing attributes in process `syz.6.587'. [ 520.856240][ T8182] netlink: 20 bytes leftover after parsing attributes in process `syz.6.587'. [ 520.894468][ T8066] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 521.183911][ T8066] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 522.268464][ T8193] IPVS: Scheduler module ip_vs_sip not found [ 522.302378][ T8204] fuse: Unknown parameter 'user_id00000000000000000000' [ 522.503872][ T5836] kernel write not supported for file /input/event0 (pid: 5836 comm: kworker/1:4) [ 522.730716][ T29] audit: type=1326 audit(1738690963.125:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8192 comm="syz.2.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ca718cda9 code=0x7fc00000 [ 522.757239][ T29] audit: type=1326 audit(1738690963.125:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8192 comm="syz.2.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2ca718cda9 code=0x7fc00000 [ 522.781250][ T29] audit: type=1326 audit(1738690963.125:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8192 comm="syz.2.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ca718cda9 code=0x7fc00000 [ 522.804523][ T29] audit: type=1326 audit(1738690963.125:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8192 comm="syz.2.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ca718cda9 code=0x7fc00000 [ 522.827722][ T29] audit: type=1326 audit(1738690963.125:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8192 comm="syz.2.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ca718cda9 code=0x7fc00000 [ 523.260312][ T8066] 8021q: adding VLAN 0 to HW filter on device bond0 [ 523.573164][ T8066] 8021q: adding VLAN 0 to HW filter on device team0 [ 523.652696][ T1894] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.660623][ T1894] bridge0: port 1(bridge_slave_0) entered forwarding state [ 523.675281][ T8215] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 523.808168][ T1894] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.816010][ T1894] bridge0: port 2(bridge_slave_1) entered forwarding state [ 524.866729][ T8229] loop2: detected capacity change from 0 to 128 [ 524.943335][ T8229] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 525.733539][ T5833] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 526.105443][ T5833] usb 7-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 526.115228][ T5833] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.341658][ T5833] usb 7-1: config 0 descriptor?? [ 526.869558][ T5868] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 526.988029][ T5833] input: HID 054c:03d5 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:054C:03D5.000A/input/input12 [ 527.074124][ T8248] fuse: Unknown parameter 'user_id00000000000000000000' [ 527.109034][ T5868] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 527.119100][ T5868] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.160768][ T5833] sony 0003:054C:03D5.000A: input,hidraw0: USB HID v1.01 Joystick [HID 054c:03d5] on usb-dummy_hcd.6-1/input0 [ 527.197392][ T5868] usb 3-1: config 0 descriptor?? [ 527.266548][ T5833] usb 7-1: USB disconnect, device number 19 [ 527.296389][ T5868] cp210x 3-1:0.0: cp210x converter detected [ 527.832318][ T8066] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 527.921380][ T29] audit: type=1804 audit(1738690967.877:78): pid=8229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.598" name="/newroot/129/file0/file1" dev="loop2" ino=94 res=1 errno=0 [ 527.965850][ T8250] UDF-fs: error (device loop2): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 528.209986][ T5868] cp210x 3-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 528.218035][ T5868] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 528.244021][ T5868] usb 3-1: cp210x converter now attached to ttyUSB0 [ 528.272899][ T8254] loop5: detected capacity change from 0 to 64 [ 528.345039][ T8255] capability: warning: `syz.4.605' uses deprecated v2 capabilities in a way that may be insecure [ 528.413814][ T5868] usb 3-1: USB disconnect, device number 22 [ 528.486391][ T5868] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 528.497494][ T5868] cp210x 3-1:0.0: device disconnected [ 528.876149][ T8261] netlink: 16 bytes leftover after parsing attributes in process `syz.6.606'. [ 529.289138][ T5778] UDF-fs: warning (device loop2): udf_evict_inode: Inode 94 (mode 100755) has inode size 134220898 different from extent length 134221312. Filesystem need not be standards compliant. [ 530.727593][ T8269] loop2: detected capacity change from 0 to 32768 [ 530.925934][ T8269] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 531.152883][ T8279] FAULT_INJECTION: forcing a failure. [ 531.152883][ T8279] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 531.166961][ T8279] CPU: 0 UID: 0 PID: 8279 Comm: syz.5.611 Not tainted 6.14.0-rc1-syzkaller-00020-g0de63bb7d919 #0 [ 531.167099][ T8279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 531.167179][ T8279] Call Trace: [ 531.167224][ T8279] [ 531.167272][ T8279] dump_stack_lvl+0x216/0x2d0 [ 531.167419][ T8279] dump_stack+0x1e/0x24 [ 531.167538][ T8279] should_fail_ex+0x767/0x830 [ 531.167744][ T8279] should_fail+0x2a/0x40 [ 531.167916][ T8279] should_fail_usercopy+0x2e/0x40 [ 531.168132][ T8279] _copy_from_user+0x35/0x110 [ 531.168341][ T8279] ucma_resolve_route+0x5b/0x4c0 [ 531.168509][ T8279] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 531.168690][ T8279] ? __pfx_ucma_resolve_route+0x10/0x10 [ 531.168863][ T8279] ucma_write+0x4e3/0x5a0 [ 531.169031][ T8279] vfs_writev+0x963/0x14e0 [ 531.169212][ T8279] ? __pfx_ucma_write+0x10/0x10 [ 531.169383][ T8279] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 531.169594][ T8279] ? kmsan_get_metadata+0x13e/0x1c0 [ 531.169759][ T8279] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 531.169929][ T8279] do_writev+0x247/0x5c0 [ 531.170127][ T8279] __x64_sys_writev+0x98/0xe0 [ 531.170279][ T8279] x64_sys_call+0x24e5/0x3c30 [ 531.170429][ T8279] do_syscall_64+0xcd/0x1e0 [ 531.170561][ T8279] ? clear_bhb_loop+0x25/0x80 [ 531.170748][ T8279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.170924][ T8279] RIP: 0033:0x7f5a7658cda9 [ 531.171028][ T8279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 531.171152][ T8279] RSP: 002b:00007f5a773a5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 531.171285][ T8279] RAX: ffffffffffffffda RBX: 00007f5a767a5fa0 RCX: 00007f5a7658cda9 [ 531.171397][ T8279] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000004 [ 531.171477][ T8279] RBP: 00007f5a773a5090 R08: 0000000000000000 R09: 0000000000000000 [ 531.171562][ T8279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 531.171642][ T8279] R13: 0000000000000000 R14: 00007f5a767a5fa0 R15: 00007ffca2c08b58 [ 531.171759][ T8279] [ 531.196423][ T5778] ocfs2: Unmounting device (7,2) on (node local) [ 532.321500][ T8288] fuse: Bad value for 'fd' [ 532.593653][ T8066] veth0_vlan: entered promiscuous mode [ 532.717701][ T8066] veth1_vlan: entered promiscuous mode [ 533.154228][ T8066] veth0_macvtap: entered promiscuous mode [ 533.240971][ T8297] loop5: detected capacity change from 0 to 128 [ 533.351353][ T8066] veth1_macvtap: entered promiscuous mode [ 533.426055][ T8297] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 533.812663][ T8302] loop4: detected capacity change from 0 to 1024 [ 533.931448][ T8302] journal_path: Lookup failure for './file0' [ 533.938855][ T8302] EXT4-fs: error: could not find journal device path [ 534.641607][ T8302] netlink: 8 bytes leftover after parsing attributes in process `syz.4.617'. [ 534.644865][ T8066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 534.661766][ T8066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.671963][ T8066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 534.683516][ T8066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.693723][ T8066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 534.704627][ T8066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.714800][ T8066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 534.731032][ T8066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.748767][ T8066] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 534.903945][ T8302] vlan2: entered allmulticast mode [ 534.909393][ T8302] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 535.081536][ T8066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 535.092949][ T8066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.103465][ T8066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 535.114342][ T8066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.125024][ T8066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 535.135889][ T8066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.146283][ T8066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 535.157222][ T8066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.178972][ T8066] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 535.320916][ T8305] loop4: detected capacity change from 0 to 2048 [ 535.363001][ T8066] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.372449][ T8066] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.381724][ T8066] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.395454][ T8066] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.485024][ T8305] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 535.539113][ T5838] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 535.760679][ T5838] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 535.770442][ T5838] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.846103][ T5838] usb 6-1: config 0 descriptor?? [ 535.870210][ T5838] cp210x 6-1:0.0: cp210x converter detected [ 536.558324][ T29] audit: type=1804 audit(1738690975.895:79): pid=8297 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.616" name="/newroot/113/file0/file1" dev="loop5" ino=94 res=1 errno=0 [ 536.579526][ C1] vkms_vblank_simulate: vblank timer overrun [ 536.663120][ T8319] UDF-fs: error (device loop5): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 536.742603][ T5838] cp210x 6-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 536.750426][ T5838] cp210x 6-1:0.0: GPIO initialisation failed: -71 [ 536.874074][ T5838] usb 6-1: cp210x converter now attached to ttyUSB0 [ 536.979490][ T5838] usb 6-1: USB disconnect, device number 14 [ 537.037086][ T5838] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 537.047924][ T5838] cp210x 6-1:0.0: device disconnected [ 537.270024][ T8321] loop4: detected capacity change from 0 to 1024 [ 537.445715][ T8328] fuse: Bad value for 'fd' [ 537.475425][ T8321] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 537.489779][ T8321] ext4 filesystem being mounted at /136/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 537.650790][ T8332] netlink: 64 bytes leftover after parsing attributes in process `syz.4.623'. [ 537.683153][ T6158] UDF-fs: warning (device loop5): udf_evict_inode: Inode 94 (mode 100755) has inode size 134220898 different from extent length 134221312. Filesystem need not be standards compliant. [ 538.612696][ T5794] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 538.677608][ T8340] loop5: detected capacity change from 0 to 1024 [ 538.912062][ T8340] overlay: filesystem on ./bus not supported [ 538.940166][ T8337] loop2: detected capacity change from 0 to 4096 [ 538.954806][ T8340] hfsplus: walked past end of dir [ 539.149675][ T8345] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 539.279175][ T5838] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 539.522834][ T5838] usb 6-1: config 0 has an invalid interface number: 120 but max is 0 [ 539.533293][ T5838] usb 6-1: config 0 has no interface number 0 [ 539.542191][ T5838] usb 6-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 539.555236][ T5838] usb 6-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 539.567059][ T5838] usb 6-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 539.578914][ T5838] usb 6-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 539.588388][ T5838] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.829264][ T5838] usb 6-1: config 0 descriptor?? [ 539.837127][ T8340] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 539.900875][ T5838] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.120/input/input13 [ 539.972475][ C1] usbtouchscreen 6-1:0.120: usbtouch_irq - usb_submit_urb failed with result: -1 [ 540.142112][ T5838] usb 6-1: USB disconnect, device number 15 [ 542.449981][ T8379] loop2: detected capacity change from 0 to 128 [ 542.650737][ T8379] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 543.040415][ T8376] loop4: detected capacity change from 0 to 40427 [ 543.182325][ T8376] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 543.190562][ T8376] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 543.237632][ T8376] F2FS-fs (loop4): invalid crc value [ 543.455125][ T8376] F2FS-fs (loop4): Found nat_bits in checkpoint [ 543.892574][ T8376] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 543.900251][ T8376] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 544.168680][ T1894] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 544.387459][ T1894] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 544.775211][ T8390] fuse: Bad value for 'fd' [ 544.881272][ T5836] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 545.094493][ T5836] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 545.103972][ T5836] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.194117][ T5836] usb 3-1: config 0 descriptor?? [ 545.254361][ T5836] cp210x 3-1:0.0: cp210x converter detected [ 545.880773][ T29] audit: type=1804 audit(1738690984.494:80): pid=8379 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.635" name="/newroot/139/file0/file1" dev="loop2" ino=94 res=1 errno=0 [ 545.947346][ T8379] UDF-fs: error (device loop2): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 545.969003][ T5836] cp210x 3-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 545.976875][ T5836] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 545.992105][ T5836] usb 3-1: cp210x converter now attached to ttyUSB0 [ 546.010604][ T5836] usb 3-1: USB disconnect, device number 23 [ 546.064284][ T5836] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 546.077709][ T5836] cp210x 3-1:0.0: device disconnected [ 546.134137][ T8399] ip_vti0: entered promiscuous mode [ 546.139840][ T8399] vlan2: entered allmulticast mode [ 546.145180][ T8399] ip_vti0: entered allmulticast mode [ 546.166196][ T8399] ip_vti0: left allmulticast mode [ 546.171639][ T8399] ip_vti0: left promiscuous mode [ 546.529763][ T29] audit: type=1326 audit(1738690985.066:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8400 comm="syz.5.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7658cda9 code=0x7ffc0000 [ 546.615102][ T29] audit: type=1326 audit(1738690985.122:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8400 comm="syz.5.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f5a7658cda9 code=0x7ffc0000 [ 546.638073][ T29] audit: type=1326 audit(1738690985.122:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8400 comm="syz.5.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7658cda9 code=0x7ffc0000 [ 546.661591][ T29] audit: type=1326 audit(1738690985.122:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8400 comm="syz.5.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5a7658cda9 code=0x7ffc0000 [ 546.684310][ T29] audit: type=1326 audit(1738690985.122:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8400 comm="syz.5.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7658cda9 code=0x7ffc0000 [ 546.710937][ T29] audit: type=1326 audit(1738690985.140:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8400 comm="syz.5.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5a7658cda9 code=0x7ffc0000 [ 546.735059][ T29] audit: type=1326 audit(1738690985.140:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8400 comm="syz.5.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7658cda9 code=0x7ffc0000 [ 546.757885][ T29] audit: type=1326 audit(1738690985.159:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8400 comm="syz.5.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5a7658cda9 code=0x7ffc0000 [ 546.781053][ T29] audit: type=1326 audit(1738690985.159:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8400 comm="syz.5.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7658cda9 code=0x7ffc0000 [ 546.896114][ T5778] UDF-fs: warning (device loop2): udf_evict_inode: Inode 94 (mode 100755) has inode size 134220898 different from extent length 134221312. Filesystem need not be standards compliant. [ 546.998606][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 547.005471][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 547.559390][ T1894] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 547.567491][ T1894] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 547.776128][ T8411] netlink: 8 bytes leftover after parsing attributes in process `syz.2.641'. [ 547.856475][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 547.865598][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 547.901144][ T8409] loop6: detected capacity change from 0 to 1024 [ 549.004878][ T8425] netlink: 4 bytes leftover after parsing attributes in process `syz.6.645'. [ 549.350042][ T5838] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 549.578953][ T5838] usb 6-1: Using ep0 maxpacket: 16 [ 549.637273][ T8436] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3692613351 (472654508928 ns) > initial count (373009599744 ns). Using initial count to start timer. [ 549.680422][ T5838] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 549.692116][ T5838] usb 6-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 549.706108][ T5838] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.783859][ T8440] syz.2.647 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 549.851314][ T5838] usb 6-1: config 0 descriptor?? [ 550.096967][ T8443] fuse: Unknown parameter '0x0000000000000003' [ 550.150713][ T5838] usbhid 6-1:0.0: can't add hid device: -71 [ 550.157625][ T5838] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 550.268987][ T5838] usb 6-1: USB disconnect, device number 16 [ 550.724442][ T8448] loop2: detected capacity change from 0 to 128 [ 550.761213][ T8448] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 550.929127][ T8456] FAULT_INJECTION: forcing a failure. [ 550.929127][ T8456] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 550.943041][ T8456] CPU: 1 UID: 0 PID: 8456 Comm: syz.5.652 Not tainted 6.14.0-rc1-syzkaller-00020-g0de63bb7d919 #0 [ 550.943192][ T8456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 550.943275][ T8456] Call Trace: [ 550.943322][ T8456] [ 550.943369][ T8456] dump_stack_lvl+0x216/0x2d0 [ 550.943519][ T8456] dump_stack+0x1e/0x24 [ 550.943639][ T8456] should_fail_ex+0x767/0x830 [ 550.943845][ T8456] should_fail+0x2a/0x40 [ 550.944037][ T8456] should_fail_usercopy+0x2e/0x40 [ 550.944247][ T8456] _copy_to_user+0x34/0x120 [ 550.944446][ T8456] simple_read_from_buffer+0x199/0x340 [ 550.944608][ T8456] proc_fail_nth_read+0x1e5/0x2c0 [ 550.944799][ T8456] vfs_read+0x29f/0xf70 [ 550.944926][ T8456] ? stack_depot_save_flags+0x2c/0x750 [ 550.945161][ T8456] ? kmsan_get_metadata+0x13e/0x1c0 [ 550.945333][ T8456] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 550.945546][ T8456] ? kmsan_get_metadata+0x13e/0x1c0 [ 550.945702][ T8456] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 550.945873][ T8456] ksys_read+0x240/0x4b0 [ 550.946004][ T8456] ? kmsan_get_metadata+0x13e/0x1c0 [ 550.946197][ T8456] __x64_sys_read+0x93/0xe0 [ 550.946349][ T8456] x64_sys_call+0x314c/0x3c30 [ 550.946495][ T8456] do_syscall_64+0xcd/0x1e0 [ 550.946623][ T8456] ? clear_bhb_loop+0x25/0x80 [ 550.946796][ T8456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.946972][ T8456] RIP: 0033:0x7f5a7658b7bc [ 550.947104][ T8456] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 550.947228][ T8456] RSP: 002b:00007f5a773a5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 550.947361][ T8456] RAX: ffffffffffffffda RBX: 00007f5a767a5fa0 RCX: 00007f5a7658b7bc [ 550.947462][ T8456] RDX: 000000000000000f RSI: 00007f5a773a50a0 RDI: 0000000000000004 [ 550.947548][ T8456] RBP: 00007f5a773a5090 R08: 0000000000000000 R09: 0000000000000000 [ 550.947636][ T8456] R10: 000000000000ffff R11: 0000000000000246 R12: 0000000000000001 [ 550.947721][ T8456] R13: 0000000000000000 R14: 00007f5a767a5fa0 R15: 00007ffca2c08b58 [ 550.947835][ T8456] [ 551.938947][ T8460] netlink: 8 bytes leftover after parsing attributes in process `syz.4.653'. [ 552.106336][ T5780] Bluetooth: hci0: command 0x0406 tx timeout [ 553.179566][ T8462] loop6: detected capacity change from 0 to 32768 [ 553.183315][ T5838] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 553.198743][ T8462] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.654 (8462) [ 553.221122][ T8462] BTRFS info (device loop6): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 553.233740][ T8462] BTRFS info (device loop6): using xxhash64 (xxhash64-generic) checksum algorithm [ 553.243565][ T8462] BTRFS info (device loop6): disk space caching is enabled [ 553.251142][ T8462] BTRFS warning (device loop6): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 553.444582][ T5838] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 553.454359][ T5838] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.492987][ T5838] usb 3-1: config 0 descriptor?? [ 553.506504][ T5838] cp210x 3-1:0.0: cp210x converter detected [ 553.574853][ T5868] IPVS: starting estimator thread 0... [ 553.690071][ T8462] BTRFS info (device loop6): rebuilding free space tree [ 553.730580][ T8462] BTRFS info (device loop6): disabling free space tree [ 553.740899][ T8462] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 553.751221][ T8462] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 553.778740][ T8482] IPVS: using max 240 ests per chain, 12000 per kthread [ 553.933470][ T8462] BTRFS error (device loop6): balance: invalid convert metadata profile single [ 553.947040][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 553.947113][ T29] audit: type=1804 audit(1738690991.941:95): pid=8448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.650" name="/newroot/143/file0/file1" dev="loop2" ino=94 res=1 errno=0 [ 553.990959][ T8478] bridge0: port 3(syz_tun) entered blocking state [ 553.999148][ T8478] bridge0: port 3(syz_tun) entered disabled state [ 554.007289][ T8478] syz_tun: entered allmulticast mode [ 554.018431][ T8478] syz_tun: entered promiscuous mode [ 554.027253][ T8478] bridge0: port 3(syz_tun) entered blocking state [ 554.034590][ T8478] bridge0: port 3(syz_tun) entered forwarding state [ 554.072566][ T8458] UDF-fs: error (device loop2): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 554.161565][ T6426] BTRFS info (device loop6): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 554.234614][ T5838] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 554.256656][ T5838] cp210x 3-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 554.264442][ T5838] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 554.291202][ T5838] usb 3-1: cp210x converter now attached to ttyUSB0 [ 554.349054][ T5838] usb 3-1: USB disconnect, device number 24 [ 554.409654][ T5838] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 554.425307][ T5838] cp210x 3-1:0.0: device disconnected [ 555.235836][ T8498] netlink: 'syz.6.659': attribute type 10 has an invalid length. [ 555.466057][ T5778] UDF-fs: warning (device loop2): udf_evict_inode: Inode 94 (mode 100755) has inode size 134220898 different from extent length 134221312. Filesystem need not be standards compliant. [ 555.660476][ T8498] lo speed is unknown, defaulting to 1000 [ 556.305388][ T8497] loop4: detected capacity change from 0 to 4096 [ 556.707500][ T8511] fuse: Unknown parameter '0x0000000000000003' [ 556.938571][ T8508] loop2: detected capacity change from 0 to 32768 [ 556.952983][ T8508] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.662 (8508) [ 557.001522][ T8508] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 557.012305][ T8508] BTRFS info (device loop2): using crc32c (crc32c-x86_64) checksum algorithm [ 557.031029][ T8508] BTRFS info (device loop2): using free-space-tree [ 559.443027][ T8546] netlink: 8 bytes leftover after parsing attributes in process `syz.4.667'. [ 559.518030][ T5778] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 560.893926][ T8558] loop4: detected capacity change from 0 to 128 [ 561.201392][ T8558] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 563.163469][ T8565] loop2: detected capacity change from 0 to 1024 [ 563.198639][ T8570] fuse: Unknown parameter '0x0000000000000003' [ 563.215762][ T8565] hfsplus: Bad value for 'nls' [ 563.294781][ T5868] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 563.405727][ T5838] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 563.529301][ T5868] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 563.540262][ T5868] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.606742][ T5868] usb 5-1: config 0 descriptor?? [ 563.634417][ T5838] usb 6-1: Using ep0 maxpacket: 8 [ 563.678351][ T5868] cp210x 5-1:0.0: cp210x converter detected [ 563.722179][ T5838] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 563.733614][ T5838] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 563.743942][ T5838] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 563.753451][ T5838] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.036083][ T5838] usb 6-1: config 0 descriptor?? [ 564.109916][ T8558] UDF-fs: error (device loop4): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 564.112852][ T29] audit: type=1804 audit(1738691001.288:96): pid=8558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.672" name="/newroot/147/file0/file1" dev="loop4" ino=94 res=1 errno=0 [ 564.185129][ T5868] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 564.247677][ T5868] cp210x 5-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 564.255886][ T5868] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 564.274183][ T8579] loop6: detected capacity change from 0 to 256 [ 564.379228][ T5868] usb 5-1: cp210x converter now attached to ttyUSB0 [ 564.500239][ T5868] usb 5-1: USB disconnect, device number 10 [ 564.583487][ T5868] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 564.594599][ T5868] cp210x 5-1:0.0: device disconnected [ 564.755463][ T5838] hid-picolcd 0003:04D8:F002.000B: No report with id 0xf3 found [ 564.764274][ T5838] hid-picolcd 0003:04D8:F002.000B: No report with id 0xf4 found [ 564.914260][ T5794] UDF-fs: warning (device loop4): udf_evict_inode: Inode 94 (mode 100755) has inode size 134220898 different from extent length 134221312. Filesystem need not be standards compliant. [ 564.977978][ T8569] netlink: 8 bytes leftover after parsing attributes in process `syz.5.674'. [ 565.206293][ T8569] netlink: 'syz.5.674': attribute type 10 has an invalid length. [ 565.372002][ T5838] usb 6-1: USB disconnect, device number 17 [ 565.542269][ T8583] xt_CT: No such helper "snmp" [ 565.774425][ T8594] netlink: 8 bytes leftover after parsing attributes in process `syz.7.682'. [ 566.233286][ T5838] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 566.539267][ T5838] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 566.550019][ T5838] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 566.560511][ T5838] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 566.770814][ T5838] usb 5-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 566.780409][ T5838] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.788906][ T5838] usb 5-1: Product: syz [ 566.797307][ T5838] usb 5-1: Manufacturer: syz [ 566.802170][ T5838] usb 5-1: SerialNumber: syz [ 566.832275][ T5838] usb 5-1: config 0 descriptor?? [ 566.862654][ T5838] usb 5-1: ucan: probing device on interface #0 [ 566.869212][ T5838] usb 5-1: ucan: invalid EP count (1) [ 566.875195][ T5838] usb 5-1: ucan: probe failed; try to update the device firmware [ 567.080357][ T8596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 567.085273][ T8611] loop6: detected capacity change from 0 to 256 [ 567.090403][ T8596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 567.109918][ T5868] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 567.252682][ T8596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 567.262966][ T8596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 567.336874][ T29] audit: type=1326 audit(1738691004.277:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8607 comm="syz.6.686" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb0d698cda9 code=0x0 [ 567.387863][ T5838] usb 5-1: USB disconnect, device number 11 [ 567.403134][ T5868] usb 6-1: Using ep0 maxpacket: 8 [ 567.521847][ T5868] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 567.531414][ T5868] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.539950][ T5868] usb 6-1: Product: syz [ 567.544456][ T5868] usb 6-1: Manufacturer: syz [ 567.549289][ T5868] usb 6-1: SerialNumber: syz [ 567.814072][ T8608] sctp: failed to load transform for md5: -2 [ 567.880218][ T8612] sctp: failed to load transform for md5: -2 [ 567.884508][ T5868] usb 6-1: config 0 descriptor?? [ 568.232689][ T5868] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 569.090535][ T8632] loop7: detected capacity change from 0 to 256 [ 569.191568][ T8632] vfat: Unknown parameter 'shor _avC9tnammixed' [ 569.230677][ T8604] loop5: detected capacity change from 0 to 256 [ 569.249125][ T8635] loop2: detected capacity change from 0 to 128 [ 569.355412][ T8635] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 569.547841][ T5838] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 569.616419][ T8604] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 569.838377][ T5838] usb 5-1: Using ep0 maxpacket: 32 [ 570.175727][ T8638] loop4: detected capacity change from 0 to 1024 [ 570.187753][ T5838] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 570.197260][ T5838] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.205710][ T5838] usb 5-1: Product: syz [ 570.210290][ T5838] usb 5-1: Manufacturer: syz [ 570.215117][ T5838] usb 5-1: SerialNumber: syz [ 570.247639][ T8633] loop6: detected capacity change from 0 to 4096 [ 570.338562][ T8638] EXT4-fs: Ignoring removed orlov option [ 570.351395][ T8638] EXT4-fs: Ignoring removed nomblk_io_submit option [ 570.532406][ T5838] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 570.752362][ T8636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 570.763575][ T8636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 571.124474][ T5838] gspca_stk1135: reg_w 0x2 err -110 [ 571.133283][ T5838] gspca_stk1135: serial bus timeout: status=0x00 [ 571.139861][ T5838] gspca_stk1135: Sensor write failed [ 571.145825][ T5838] gspca_stk1135: serial bus timeout: status=0x00 [ 571.152552][ T5838] gspca_stk1135: Sensor write failed [ 571.158129][ T5838] gspca_stk1135: serial bus timeout: status=0x00 [ 571.164896][ T5838] gspca_stk1135: Sensor read failed [ 571.170365][ T5838] gspca_stk1135: serial bus timeout: status=0x00 [ 571.178814][ T5838] gspca_stk1135: Sensor read failed [ 571.184359][ T5838] gspca_stk1135: Detected sensor type unknown (0x0) [ 571.191270][ T5838] gspca_stk1135: serial bus timeout: status=0x00 [ 571.198055][ T5838] gspca_stk1135: Sensor read failed [ 571.203527][ T5838] gspca_stk1135: serial bus timeout: status=0x00 [ 571.210282][ T5838] gspca_stk1135: Sensor read failed [ 571.215761][ T5838] gspca_stk1135: serial bus timeout: status=0x00 [ 571.222516][ T5838] gspca_stk1135: Sensor write failed [ 571.228225][ T5838] gspca_stk1135: serial bus timeout: status=0x00 [ 571.241186][ T5838] gspca_stk1135: Sensor write failed [ 571.246983][ T5838] stk1135 5-1:64.0: probe with driver stk1135 failed with error -110 [ 571.326628][ T8646] netlink: 'syz.7.692': attribute type 1 has an invalid length. [ 571.417109][ T5868] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 571.468035][ T5868] usb 6-1: USB disconnect, device number 18 [ 571.570123][ T8647] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 571.626052][ T8638] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 571.784187][ T8633] fuse: Bad value for 'fd' [ 571.819054][ T5835] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 572.037233][ T5835] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 572.047117][ T5835] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.201310][ T5835] usb 3-1: config 0 descriptor?? [ 572.294601][ T5835] cp210x 3-1:0.0: cp210x converter detected [ 572.502478][ T29] audit: type=1804 audit(1738691009.029:98): pid=8635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.690" name="/newroot/150/file0/file1" dev="loop2" ino=94 res=1 errno=0 [ 572.586183][ T8651] UDF-fs: error (device loop2): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 572.736760][ T5835] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 572.744635][ T5835] cp210x 3-1:0.0: querying part number failed [ 572.796875][ T5838] usb 5-1: USB disconnect, device number 12 [ 572.879191][ T5835] usb 3-1: cp210x converter now attached to ttyUSB0 [ 573.071536][ T5835] usb 3-1: USB disconnect, device number 25 [ 573.153497][ T5835] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 573.164487][ T5835] cp210x 3-1:0.0: device disconnected [ 573.488718][ T8657] loop5: detected capacity change from 0 to 64 [ 573.566714][ T8657] hfs: Unknown parameter '' [ 573.709688][ T8654] loop7: detected capacity change from 0 to 32768 [ 573.791413][ T8654] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.693 (8654) [ 573.811242][ T5794] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 573.842288][ T8654] BTRFS info (device loop7): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 573.853111][ T8654] BTRFS info (device loop7): using xxhash64 (xxhash64-generic) checksum algorithm [ 573.863002][ T8654] BTRFS info (device loop7): disk space caching is enabled [ 573.870453][ T8654] BTRFS warning (device loop7): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 573.956416][ T5778] UDF-fs: warning (device loop2): udf_evict_inode: Inode 94 (mode 100755) has inode size 134220898 different from extent length 134221312. Filesystem need not be standards compliant. [ 574.018159][ T8659] netlink: 8 bytes leftover after parsing attributes in process `syz.6.695'. [ 574.263845][ T8654] BTRFS info (device loop7): rebuilding free space tree [ 574.303722][ T8654] BTRFS info (device loop7): disabling free space tree [ 574.311195][ T8654] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 574.321298][ T8654] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 574.544821][ T8066] BTRFS info (device loop7): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 574.601826][ T8678] loop6: detected capacity change from 0 to 256 [ 574.829678][ T29] audit: type=1326 audit(1738691011.197:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8677 comm="syz.6.698" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb0d698cda9 code=0x0 [ 575.183853][ T5835] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 575.435252][ T5835] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 575.449441][ T5835] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 575.578518][ T5835] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 575.588486][ T5835] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.601344][ T5835] usb 5-1: Product: syz [ 575.605932][ T5835] usb 5-1: Manufacturer: syz [ 575.610777][ T5835] usb 5-1: SerialNumber: syz [ 576.326735][ T5838] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 576.470601][ T8697] loop6: detected capacity change from 0 to 1024 [ 576.585874][ T8697] EXT4-fs: Ignoring removed mblk_io_submit option [ 576.593437][ T8697] EXT4-fs: Ignoring removed bh option [ 576.635228][ T5838] usb 6-1: Using ep0 maxpacket: 16 [ 576.667544][ T8686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 576.686509][ T8686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 576.701702][ T5838] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 576.711168][ T5838] usb 6-1: New USB device found, idVendor=046d, idProduct=c211, bcdDevice= 0.00 [ 576.720920][ T5838] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.840112][ T8692] loop2: detected capacity change from 0 to 4096 [ 576.921474][ T5838] usb 6-1: config 0 descriptor?? [ 577.078698][ T8697] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 577.159985][ T8703] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 577.263077][ T8689] NILFS (loop2): the device already has a read/write mount. [ 577.304268][ T5835] cdc_ncm 5-1:1.0: bind() failure [ 577.323577][ T5835] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 577.331027][ T5835] cdc_ncm 5-1:1.1: bind() failure [ 577.636476][ T5835] usb 5-1: USB disconnect, device number 13 [ 577.733227][ T8697] loop6: detected capacity change from 1024 to 64 [ 578.020672][ T8710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 578.034978][ T8710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 578.168792][ T8710] loop5: detected capacity change from 0 to 256 [ 578.220245][ T8710] vfat: Unknown parameter 'uni_xlat' [ 578.732309][ T8713] loop4: detected capacity change from 0 to 512 [ 578.759919][ T8713] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 578.877678][ T8713] EXT4-fs (loop4): 1 truncate cleaned up [ 578.885739][ T8713] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 579.501090][ T51] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.638899][ T5835] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 579.643418][ T5794] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 579.674183][ T6426] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 579.750893][ T8699] kmmpd-loop6: attempt to access beyond end of device [ 579.750893][ T8699] loop6: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 579.765376][ T8699] Buffer I/O error on dev loop6, logical block 64, lost sync page write [ 579.834300][ T51] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.963235][ T5835] usb 3-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 579.967982][ T51] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.975318][ T5835] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 579.975475][ T5835] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 579.975689][ T5835] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 580.026375][ T5835] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.253710][ T8718] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 580.299471][ T51] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.340871][ T8722] loop4: detected capacity change from 0 to 128 [ 580.430476][ T8722] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 580.463348][ T5868] usb 6-1: USB disconnect, device number 19 [ 580.906736][ T51] bridge_slave_1: left allmulticast mode [ 580.912974][ T51] bridge_slave_1: left promiscuous mode [ 580.920285][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.056987][ T51] bridge_slave_0: left allmulticast mode [ 581.063630][ T51] bridge_slave_0: left promiscuous mode [ 581.070602][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.447056][ T5868] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 582.604172][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 582.657102][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 582.681678][ T5868] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 582.691239][ T5868] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.710017][ T51] bond0 (unregistering): Released all slaves [ 582.753438][ T5868] usb 5-1: config 0 descriptor?? [ 582.768921][ T8718] netlink: 140 bytes leftover after parsing attributes in process `syz.2.705'. [ 582.795669][ T5868] cp210x 5-1:0.0: cp210x converter detected [ 582.987321][ T29] audit: type=1804 audit(1738691018.727:100): pid=8722 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.707" name="/newroot/152/file0/file1" dev="loop4" ino=94 res=1 errno=0 [ 583.048207][ T8722] UDF-fs: error (device loop4): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 583.117917][ T5868] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 583.125936][ T5868] cp210x 5-1:0.0: querying part number failed [ 583.174793][ T5868] usb 5-1: cp210x converter now attached to ttyUSB0 [ 583.259782][ T5868] usb 5-1: USB disconnect, device number 14 [ 583.318822][ T5868] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 583.339829][ T5868] cp210x 5-1:0.0: device disconnected [ 583.450415][ T5835] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 583.462161][ T5835] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input14 [ 583.929082][ T5794] UDF-fs: warning (device loop4): udf_evict_inode: Inode 94 (mode 100755) has inode size 134220898 different from extent length 134221312. Filesystem need not be standards compliant. [ 584.125457][ C1] aiptek 3-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 584.133966][ T5835] usb 3-1: USB disconnect, device number 26 [ 584.301654][ T51] hsr_slave_0: left promiscuous mode [ 584.331293][ T51] hsr_slave_1: left promiscuous mode [ 584.339514][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 584.348997][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 584.396003][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 584.403773][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 584.603080][ T51] veth1_macvtap: left promiscuous mode [ 584.608856][ T51] veth0_macvtap: left promiscuous mode [ 584.615075][ T51] veth1_vlan: left promiscuous mode [ 584.620654][ T51] veth0_vlan: left promiscuous mode [ 585.572637][ T8744] loop7: detected capacity change from 0 to 256 [ 585.731237][ T29] audit: type=1326 audit(1738691021.273:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8741 comm="syz.7.712" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8b9a78cda9 code=0x0 [ 586.059174][ T51] team0 (unregistering): Port device team_slave_1 removed [ 586.112446][ T51] team0 (unregistering): Port device team_slave_0 removed [ 586.682517][ T5838] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 586.975179][ T5838] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 586.986754][ T5838] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 587.000928][ T5838] usb 3-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 587.012558][ T5838] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.107906][ T5780] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 587.117951][ T5780] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 587.129969][ T5780] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 587.153472][ T5780] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 587.165747][ T5780] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 587.175275][ T5780] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 587.534521][ T8758] lo speed is unknown, defaulting to 1000 [ 587.680378][ T5835] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 588.004836][ T5835] usb 5-1: Using ep0 maxpacket: 16 [ 588.125466][ T5835] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 588.131352][ T8762] loop5: detected capacity change from 0 to 32768 [ 588.137015][ T5835] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 588.151507][ T5838] usb 3-1: config 0 descriptor?? [ 588.153215][ T5835] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 588.171969][ T5835] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 588.181437][ T5835] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.356558][ T5835] usb 5-1: config 0 descriptor?? [ 588.451664][ T8762] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 588.457067][ T8756] loop7: detected capacity change from 0 to 16384 [ 588.707759][ T8779] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x8800 phys_seg 16 prio class 0 [ 588.718250][ T8779] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x8800 phys_seg 16 prio class 0 [ 588.835675][ T5835] microsoft 0003:045E:07DA.000C: report is too long [ 588.844886][ T5835] microsoft 0003:045E:07DA.000C: item 0 4 0 8 parsing failed [ 588.950887][ T5835] microsoft 0003:045E:07DA.000C: parse failed [ 588.957685][ T5835] microsoft 0003:045E:07DA.000C: probe with driver microsoft failed with error -22 [ 589.114230][ T5838] creative-sb0540 0003:041E:3100.000D: No inputs registered, leaving [ 589.154569][ T8762] XFS (loop5): Ending clean mount [ 589.173314][ T5838] creative-sb0540 0003:041E:3100.000D: hidraw0: USB HID v0.00 Device [HID 041e:3100] on usb-dummy_hcd.2-1/input0 [ 589.234503][ T5835] usb 5-1: USB disconnect, device number 15 [ 589.381458][ T5780] Bluetooth: hci1: command tx timeout [ 589.931896][ T6158] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 590.173136][ T8758] chnl_net:caif_netlink_parms(): no params data found [ 590.910159][ T5835] usb 3-1: USB disconnect, device number 27 [ 591.385435][ T8806] loop2: detected capacity change from 0 to 128 [ 591.460069][ T8808] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 591.468955][ T8808] macvtap1: entered promiscuous mode [ 591.475683][ T8808] macvtap1: entered allmulticast mode [ 591.530131][ T8806] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 591.625966][ T8808] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 591.642378][ T5780] Bluetooth: hci1: command tx timeout [ 591.747071][ T5838] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 592.014847][ T5838] usb 5-1: Using ep0 maxpacket: 16 [ 592.080731][ T5838] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 592.092703][ T5838] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 592.109859][ T5838] usb 5-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 592.120800][ T5838] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.391775][ T5838] usb 5-1: config 0 descriptor?? [ 592.533673][ T5838] pxrc 5-1:0.0: Could not find endpoint [ 592.548986][ T5838] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 592.916289][ T5838] usb 5-1: USB disconnect, device number 16 [ 593.186753][ T8758] bridge0: port 1(bridge_slave_0) entered blocking state [ 593.194718][ T8758] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.202961][ T8758] bridge_slave_0: entered allmulticast mode [ 593.218938][ T8758] bridge_slave_0: entered promiscuous mode [ 593.300852][ T8758] bridge0: port 2(bridge_slave_1) entered blocking state [ 593.309203][ T8758] bridge0: port 2(bridge_slave_1) entered disabled state [ 593.323004][ T8758] bridge_slave_1: entered allmulticast mode [ 593.332618][ T8758] bridge_slave_1: entered promiscuous mode [ 593.405257][ T29] audit: type=1804 audit(1738691028.350:102): pid=8806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.722" name="/newroot/156/file0/file1" dev="loop2" ino=94 res=1 errno=0 [ 593.505221][ T8818] UDF-fs: error (device loop2): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 593.596419][ T8758] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 593.696290][ T8758] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 593.897924][ T5780] Bluetooth: hci1: command tx timeout [ 594.055012][ T8824] loop7: detected capacity change from 0 to 256 [ 594.100936][ T5778] UDF-fs: warning (device loop2): udf_evict_inode: Inode 94 (mode 100755) has inode size 134220898 different from extent length 134221312. Filesystem need not be standards compliant. [ 594.238587][ T8758] team0: Port device team_slave_0 added [ 594.259136][ T29] audit: type=1326 audit(1738691029.098:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8822 comm="syz.7.724" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8b9a78cda9 code=0x0 [ 594.307366][ T8758] team0: Port device team_slave_1 added [ 594.681044][ T8758] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 594.681056][ T5838] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 594.696078][ T8758] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 594.722485][ T8758] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 594.866945][ T5838] usb 5-1: Using ep0 maxpacket: 8 [ 594.921820][ T5835] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 594.930343][ T5838] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 594.941492][ T5838] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 594.952904][ T5838] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 595.035800][ T8758] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 595.043422][ T8758] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 595.069931][ T8758] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 595.131212][ T5838] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 595.144051][ T5838] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.152556][ T5838] usb 5-1: Product: syz [ 595.156986][ T5838] usb 5-1: Manufacturer: syz [ 595.162134][ T5838] usb 5-1: SerialNumber: syz [ 595.192734][ T5835] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 595.210188][ T5835] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 595.224205][ T5835] usb 6-1: config 0 interface 0 has no altsetting 0 [ 595.231155][ T5835] usb 6-1: New USB device found, idVendor=056e, idProduct=00fd, bcdDevice= 0.00 [ 595.240790][ T5835] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.251280][ T8765] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 595.289034][ T5835] usb 6-1: config 0 descriptor?? [ 595.298560][ T8832] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 595.504629][ T8765] usb 3-1: Using ep0 maxpacket: 16 [ 595.549323][ T8765] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 595.561625][ T8765] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 595.665724][ T8758] hsr_slave_0: entered promiscuous mode [ 595.676350][ T8758] hsr_slave_1: entered promiscuous mode [ 595.740976][ T8765] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 595.751942][ T8765] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.765446][ T8765] usb 3-1: Product: syz [ 595.769873][ T8765] usb 3-1: Manufacturer: syz [ 595.776596][ T8765] usb 3-1: SerialNumber: syz [ 595.916361][ T5835] elecom 0003:056E:00FD.000E: collection stack underflow [ 595.923776][ T5835] elecom 0003:056E:00FD.000E: item 0 2 0 12 parsing failed [ 595.945207][ T8765] usb 3-1: config 0 descriptor?? [ 595.986174][ T8765] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 595.998240][ T8765] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 596.075724][ T8832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 596.084909][ T5838] usb 5-1: USB disconnect, device number 17 [ 596.086976][ T8832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 596.110654][ T5835] elecom 0003:056E:00FD.000E: probe with driver elecom failed with error -22 [ 596.145210][ T5780] Bluetooth: hci1: command tx timeout [ 596.242230][ T5833] usb 6-1: USB disconnect, device number 20 [ 596.639239][ T8765] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 596.671813][ T6036] udevd[6036]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 596.717720][ T8765] em28xx 3-1:0.0: Config register raw data: 0xbb [ 596.725734][ T8765] em28xx 3-1:0.0: I2S Audio (3 sample rate(s)) [ 596.732338][ T8765] em28xx 3-1:0.0: No AC97 audio processor [ 597.226483][ T8837] loop7: detected capacity change from 0 to 32768 [ 597.235939][ T8837] btrfs: Deprecated parameter 'usebackuproot' [ 597.242532][ T8837] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 597.252330][ T8837] btrfs: Deprecated parameter 'usebackuproot' [ 597.258660][ T8837] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 597.344998][ T8837] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.728 (8837) [ 597.381604][ T8837] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 597.392543][ T8837] BTRFS info (device loop7): using crc32c (crc32c-x86_64) checksum algorithm [ 597.692303][ T51] BTRFS warning (device loop7): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xb6fb6650 level 0 [ 597.706536][ T8837] BTRFS warning (device loop7): couldn't read tree root [ 597.713756][ T8837] BTRFS warning (device loop7): try to load backup roots slot 1 [ 597.725360][ T8765] usb 3-1: USB disconnect, device number 28 [ 597.786453][ T60] BTRFS warning (device loop7): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x7a216cc0 level 0 [ 597.800528][ T8837] BTRFS warning (device loop7): couldn't read tree root [ 597.807917][ T8837] BTRFS warning (device loop7): try to load backup roots slot 2 [ 597.863870][ T60] BTRFS error (device loop7): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 597.879298][ T8837] BTRFS warning (device loop7): couldn't read tree root [ 597.886540][ T8837] BTRFS warning (device loop7): try to load backup roots slot 3 [ 598.101378][ T8837] BTRFS info (device loop7): rebuilding free space tree [ 598.133139][ T8837] BTRFS info (device loop7): disabling free space tree [ 598.140557][ T8837] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 598.150860][ T8837] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 598.392623][ T8066] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 598.580827][ T8758] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 598.746763][ T8758] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 598.845148][ T8758] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 598.952091][ T8758] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 599.146229][ T8863] trusted_key: encrypted_key: insufficient parameters specified [ 600.606932][ T8758] 8021q: adding VLAN 0 to HW filter on device bond0 [ 600.915976][ T8758] 8021q: adding VLAN 0 to HW filter on device team0 [ 601.069135][ T2906] bridge0: port 1(bridge_slave_0) entered blocking state [ 601.076947][ T2906] bridge0: port 1(bridge_slave_0) entered forwarding state [ 601.283338][ T2906] bridge0: port 2(bridge_slave_1) entered blocking state [ 601.291087][ T2906] bridge0: port 2(bridge_slave_1) entered forwarding state [ 602.485288][ T8884] loop2: detected capacity change from 0 to 256 [ 602.593570][ T8886] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 602.605612][ T8886] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 602.760069][ T29] audit: type=1326 audit(1738691036.968:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8883 comm="syz.2.737" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2ca718cda9 code=0x0 [ 602.805281][ T8889] loop4: detected capacity change from 0 to 8 [ 603.354059][ T8886] tipc: Can't bind to reserved service type 1 [ 603.367228][ T8896] loop7: detected capacity change from 0 to 128 [ 603.479221][ T8896] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 604.690363][ T8758] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 605.136188][ T8904] netlink: 28 bytes leftover after parsing attributes in process `syz.5.741'. [ 605.175751][ T29] audit: type=1804 audit(1738691039.192:105): pid=8896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.735" name="/newroot/22/file0/file1" dev="loop7" ino=94 res=1 errno=0 [ 605.243625][ T8905] UDF-fs: error (device loop7): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 605.682629][ T5078] Bluetooth: hci1: command 0x0405 tx timeout [ 605.881722][ T8066] UDF-fs: warning (device loop7): udf_evict_inode: Inode 94 (mode 100755) has inode size 134220898 different from extent length 134221312. Filesystem need not be standards compliant. [ 606.051660][ T8911] trusted_key: encrypted_key: insufficient parameters specified [ 608.340771][ T8758] veth0_vlan: entered promiscuous mode [ 608.349270][ T8935] loop7: detected capacity change from 0 to 256 [ 608.523334][ T29] audit: type=1326 audit(1738691042.292:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8934 comm="syz.7.749" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8b9a78cda9 code=0x0 [ 608.545207][ C1] vkms_vblank_simulate: vblank timer overrun [ 608.680651][ T8758] veth1_vlan: entered promiscuous mode [ 609.172185][ T8758] veth0_macvtap: entered promiscuous mode [ 609.311769][ T8947] ===================================================== [ 609.319046][ T8947] BUG: KMSAN: uninit-value in ip6table_mangle_hook+0x97d/0x9c0 [ 609.327128][ T8947] ip6table_mangle_hook+0x97d/0x9c0 [ 609.332597][ T8947] nf_hook_slow+0xf4/0x400 [ 609.337382][ T8947] __ip6_local_out+0x5ac/0x640 [ 609.342390][ T8947] ip6_local_out+0x4c/0x210 [ 609.347291][ T8947] ip6tunnel_xmit+0x129/0x460 [ 609.352221][ T8947] ip6_tnl_xmit+0x345d/0x3900 [ 609.357283][ T8947] __gre6_xmit+0x14b9/0x1550 [ 609.362084][ T8947] ip6gre_tunnel_xmit+0xf5e/0x2030 [ 609.367659][ T8947] dev_hard_start_xmit+0x247/0xa20 [ 609.372972][ T8947] sch_direct_xmit+0x399/0xd40 [ 609.378092][ T8947] __dev_queue_xmit+0x30b9/0x57d0 [ 609.383320][ T8947] packet_xmit+0x9c/0x6c0 [ 609.388010][ T8947] packet_sendmsg+0x93e0/0xa7e0 [ 609.393055][ T8947] __sock_sendmsg+0x30f/0x380 [ 609.398129][ T8947] __sys_sendto+0x594/0x750 [ 609.402828][ T8947] __x64_sys_sendto+0x125/0x1d0 [ 609.407889][ T8947] x64_sys_call+0x346a/0x3c30 [ 609.413007][ T8947] do_syscall_64+0xcd/0x1e0 [ 609.417693][ T8947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.423962][ T8947] [ 609.426397][ T8947] Uninit was stored to memory at: [ 609.431902][ T8947] ip6_tnl_xmit+0x3584/0x3900 [ 609.436829][ T8947] __gre6_xmit+0x14b9/0x1550 [ 609.441761][ T8947] ip6gre_tunnel_xmit+0xf5e/0x2030 [ 609.447085][ T8947] dev_hard_start_xmit+0x247/0xa20 [ 609.452539][ T8947] sch_direct_xmit+0x399/0xd40 [ 609.457524][ T8947] __dev_queue_xmit+0x30b9/0x57d0 [ 609.462787][ T8947] packet_xmit+0x9c/0x6c0 [ 609.467505][ T8947] packet_sendmsg+0x93e0/0xa7e0 [ 609.472564][ T8947] __sock_sendmsg+0x30f/0x380 [ 609.477640][ T8947] __sys_sendto+0x594/0x750 [ 609.482354][ T8947] __x64_sys_sendto+0x125/0x1d0 [ 609.487562][ T8947] x64_sys_call+0x346a/0x3c30 [ 609.492456][ T8947] do_syscall_64+0xcd/0x1e0 [ 609.497296][ T8947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.503452][ T8947] [ 609.505922][ T8947] Uninit was created at: [ 609.510624][ T8947] kmem_cache_alloc_node_noprof+0x907/0xe00 [ 609.516820][ T8947] kmalloc_reserve+0x13d/0x4a0 [ 609.521917][ T8947] pskb_expand_head+0x226/0x1a60 [ 609.527097][ T8947] __gre6_xmit+0x7ab/0x1550 [ 609.531940][ T8947] ip6gre_tunnel_xmit+0xf5e/0x2030 [ 609.537248][ T8947] dev_hard_start_xmit+0x247/0xa20 [ 609.542735][ T8947] sch_direct_xmit+0x399/0xd40 [ 609.547706][ T8947] __dev_queue_xmit+0x30b9/0x57d0 [ 609.553070][ T8947] packet_xmit+0x9c/0x6c0 [ 609.557627][ T8947] packet_sendmsg+0x93e0/0xa7e0 [ 609.562809][ T8947] __sock_sendmsg+0x30f/0x380 [ 609.567773][ T8947] __sys_sendto+0x594/0x750 [ 609.572605][ T8947] __x64_sys_sendto+0x125/0x1d0 [ 609.577656][ T8947] x64_sys_call+0x346a/0x3c30 [ 609.582694][ T8947] do_syscall_64+0xcd/0x1e0 [ 609.587405][ T8947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.593691][ T8947] [ 609.596133][ T8947] CPU: 0 UID: 0 PID: 8947 Comm: syz.2.752 Not tainted 6.14.0-rc1-syzkaller-00020-g0de63bb7d919 #0 [ 609.607183][ T8947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 609.617587][ T8947] ===================================================== [ 609.624664][ T8947] Disabling lock debugging due to kernel taint [ 609.631087][ T8947] Kernel panic - not syncing: kmsan.panic set ... [ 609.637678][ T8947] CPU: 0 UID: 0 PID: 8947 Comm: syz.2.752 Tainted: G B 6.14.0-rc1-syzkaller-00020-g0de63bb7d919 #0 [ 609.649997][ T8947] Tainted: [B]=BAD_PAGE [ 609.654287][ T8947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 609.664616][ T8947] Call Trace: [ 609.668032][ T8947] [ 609.671098][ T8947] dump_stack_lvl+0x216/0x2d0 [ 609.675988][ T8947] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 609.682046][ T8947] dump_stack+0x1e/0x24 [ 609.686419][ T8947] panic+0x4e2/0xcf0 [ 609.690592][ T8947] ? kmsan_get_metadata+0xa1/0x1c0 [ 609.695960][ T8947] kmsan_report+0x2c7/0x2d0 [ 609.700690][ T8947] ? stack_depot_save_flags+0x2c/0x750 [ 609.706475][ T8947] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 609.713110][ T8947] ? kmsan_get_metadata+0x13e/0x1c0 [ 609.718549][ T8947] ? __msan_warning+0x95/0x120 [ 609.723527][ T8947] ? ip6table_mangle_hook+0x97d/0x9c0 [ 609.729149][ T8947] ? nf_hook_slow+0xf4/0x400 [ 609.733967][ T8947] ? __ip6_local_out+0x5ac/0x640 [ 609.739168][ T8947] ? ip6_local_out+0x4c/0x210 [ 609.744113][ T8947] ? ip6tunnel_xmit+0x129/0x460 [ 609.749221][ T8947] ? ip6_tnl_xmit+0x345d/0x3900 [ 609.754328][ T8947] ? __gre6_xmit+0x14b9/0x1550 [ 609.759296][ T8947] ? ip6gre_tunnel_xmit+0xf5e/0x2030 [ 609.764804][ T8947] ? dev_hard_start_xmit+0x247/0xa20 [ 609.770355][ T8947] ? sch_direct_xmit+0x399/0xd40 [ 609.775521][ T8947] ? __dev_queue_xmit+0x30b9/0x57d0 [ 609.780967][ T8947] ? packet_xmit+0x9c/0x6c0 [ 609.785687][ T8947] ? packet_sendmsg+0x93e0/0xa7e0 [ 609.790915][ T8947] ? __sock_sendmsg+0x30f/0x380 [ 609.796023][ T8947] ? __sys_sendto+0x594/0x750 [ 609.800910][ T8947] ? __x64_sys_sendto+0x125/0x1d0 [ 609.806153][ T8947] ? x64_sys_call+0x346a/0x3c30 [ 609.811246][ T8947] ? do_syscall_64+0xcd/0x1e0 [ 609.816134][ T8947] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.822519][ T8947] ? kmsan_get_metadata+0x13e/0x1c0 [ 609.828046][ T8947] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 609.834103][ T8947] __msan_warning+0x95/0x120 [ 609.838961][ T8947] ip6table_mangle_hook+0x97d/0x9c0 [ 609.844460][ T8947] ? __pfx_ip6table_mangle_hook+0x10/0x10 [ 609.850449][ T8947] nf_hook_slow+0xf4/0x400 [ 609.855106][ T8947] __ip6_local_out+0x5ac/0x640 [ 609.860133][ T8947] ? __pfx_dst_output+0x10/0x10 [ 609.865254][ T8947] ip6_local_out+0x4c/0x210 [ 609.870011][ T8947] ip6tunnel_xmit+0x129/0x460 [ 609.874931][ T8947] ip6_tnl_xmit+0x345d/0x3900 [ 609.879865][ T8947] __gre6_xmit+0x14b9/0x1550 [ 609.884632][ T8947] ? iptunnel_handle_offloads+0x490/0x640 [ 609.890572][ T8947] ip6gre_tunnel_xmit+0xf5e/0x2030 [ 609.895892][ T8947] ? __pfx_ip6gre_tunnel_xmit+0x10/0x10 [ 609.901615][ T8947] dev_hard_start_xmit+0x247/0xa20 [ 609.906932][ T8947] sch_direct_xmit+0x399/0xd40 [ 609.911911][ T8947] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 609.918506][ T8947] __dev_queue_xmit+0x30b9/0x57d0 [ 609.924083][ T8947] ? __dev_queue_xmit+0x3d6/0x57d0 [ 609.929408][ T8947] packet_xmit+0x9c/0x6c0 [ 609.933939][ T8947] packet_sendmsg+0x93e0/0xa7e0 [ 609.938994][ T8947] ? __schedule+0x21a9/0x6c00 [ 609.943883][ T8947] ? kmsan_get_metadata+0x13e/0x1c0 [ 609.949262][ T8947] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 609.955263][ T8947] ? aa_label_sk_perm+0x677/0x7b0 [ 609.960513][ T8947] ? filter_irq_stacks+0x60/0x1a0 [ 609.965749][ T8947] ? stack_depot_save_flags+0x2c/0x750 [ 609.971456][ T8947] ? kmsan_get_metadata+0x13e/0x1c0 [ 609.976900][ T8947] ? __pfx_packet_sendmsg+0x10/0x10 [ 609.982276][ T8947] ? __pfx_packet_sendmsg+0x10/0x10 [ 609.987665][ T8947] __sock_sendmsg+0x30f/0x380 [ 609.992583][ T8947] __sys_sendto+0x594/0x750 [ 609.997360][ T8947] ? do_futex+0x341/0x4a0 [ 610.001880][ T8947] ? kmsan_get_metadata+0x13e/0x1c0 [ 610.007304][ T8947] __x64_sys_sendto+0x125/0x1d0 [ 610.012347][ T8947] x64_sys_call+0x346a/0x3c30 [ 610.017224][ T8947] do_syscall_64+0xcd/0x1e0 [ 610.021901][ T8947] ? clear_bhb_loop+0x25/0x80 [ 610.026793][ T8947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.032919][ T8947] RIP: 0033:0x7f2ca718cda9 [ 610.037477][ T8947] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 610.057298][ T8947] RSP: 002b:00007f2ca7f6d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 610.065906][ T8947] RAX: ffffffffffffffda RBX: 00007f2ca73a5fa0 RCX: 00007f2ca718cda9 [ 610.074044][ T8947] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000004 [ 610.082211][ T8947] RBP: 00007f2ca720e2a0 R08: 0000000020000140 R09: 0000000000000014 [ 610.090437][ T8947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 610.098550][ T8947] R13: 0000000000000000 R14: 00007f2ca73a5fa0 R15: 00007ffc759bcc38 [ 610.106687][ T8947] [ 610.110210][ T8947] Kernel Offset: disabled [ 610.114672][ T8947] Rebooting in 86400 seconds..